SecurityWeek Briefing.

"FBI warns of BadBox2, NSO disputes WhatsApp fine, 1,000 leave CISA."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 08 June 2025, 0321 UTC.

Content and Source:  "SecurityWeek Briefing."

https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check email link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

88K followers39 articles per week

#security#tech

80

Yesterday

In Other News: FBI Warns of BadBox 2, NSO Disputes WhatsApp Fine, 1,000 Leave CISA

by SecurityWeek News / 1d

Noteworthy stories that might have slipped under the radar: FBI issues an alert on BadBox 2 botnet, NSO disputing the $168 million WhatsApp fine, 1,000 people left CISA since Trump took office. The post appeared first on SecurityWeek .

Cybersecurity M&A Roundup: 42 Deals Announced in May 2025

by Eduard Kovacs / 1d

The number of cybersecurity-related merger and acquisition (M&A) announcements surged in May 2025. The post appeared first on SecurityWeek .

MIND Raises $30 Million for Data Loss Prevention

MIND raises 30M$ Series A

•

by Ionut Arghire / 1d

Data security firm MIND has raised $30 million in Series A funding to expand its R&D and go-to-market teams. The post appeared first on SecurityWeek .

Destructive ‘PathWiper’ Targeting Ukraine’s Critical Infrastructure

PathWiper malware targets Ukraine infrastructure

•

by Ionut Arghire / 1d

A Russia-linked threat actor has used the destructive malware dubbed PathWiper against a critical infrastructure organization in Ukraine. The post appeared first on SecurityWeek .

Jun 5, 2025

Cisco Patches Critical ISE Vulnerability With Public PoC

13 TTPs

•

by Ionut Arghire / 1d

Cisco has released patches for a critical vulnerability impacting cloud deployments of Identity Services Engine (ISE). The post appeared first on SecurityWeek .

HPE Patches Critical Vulnerability in StoreOnce

4 TTPs

•

by Ionut Arghire / 1d

•

CVE-2025-37093

An HPE StoreOnce vulnerability allows attackers to bypass authentication, potentially leading to remote code execution. The post appeared first on SecurityWeek .

US Offering $10 Million Reward for RedLine Malware Developer

US offers 10M$ for RedLine tips

•

by Eduard Kovacs / 1d

A reward is being offered for Maxim Alexandrovich Rudometov, who is accused of developing and managing the RedLine malware. The post appeared first on SecurityWeek .

Misconfigured HMIs Expose US Water Systems to Anyone With a Browser

3 TTPs

•

by Ryan Naraine / 2d

Censys researchers follow some clues and find hundreds of control-room dashboards for US water utilities on the public internet. The post appeared first on SecurityWeek .

Backdoored Open Source Malware Repositories Target Novice Cybercriminals

IoC > 2 domains

•

by Ionut Arghire / 2d

•

3 TTPs

•

Malicious GitHub campaign spreads backdoors

A threat actor has been creating backdoored open source malware repositories to target novice cybercriminals and game cheaters. The post appeared first on SecurityWeek .

Controversial Firms Cellebrite and Corellium Announce $200 Million Acquisition Deal

Cellebrite acquires Corellium for $170M

•

by Eduard Kovacs / 2d

Cellebrite and Corellium, whose names have been mentioned in spyware stories, are joining forces to provide advanced investigative solutions. The post appeared first on SecurityWeek .

Men Who Hacked Law Enforcement Database for Doxing Sentenced to Prison

ViLE gang members sentenced for extortion

•

by Eduard Kovacs / 2d

Sagar Steven Singh and Nicholas Ceraolo, members of the Vile group, get prison sentences for identity theft and hacking. The post appeared first on SecurityWeek .

ClickFix Attack Exploits Fake Cloudflare Turnstile to Deliver Malware

9 TTPs

•

by Kevin Townsend / 2d

Researchers have discovered and analyzed a ClickFix attack that uses a fake Cloudflare ‘humanness’ check. The post appeared first on SecurityWeek .

FBI Aware of 900 Organizations Hit by Play Ransomware

4 TTPs

•

by Ionut Arghire / 2d

Play ransomware attacks have hit roughly 900 organizations and recently involved the exploitation of SimpleHelp vulnerabilities. The post appeared first on SecurityWeek .

Carding Marketplace BidenCash Shut Down by Authorities

by Ionut Arghire / 2d

Authorities seized 145 domains associated with BidenCash, a marketplace for stolen credit cards and personal information. The post appeared first on SecurityWeek .

Jun 4, 2025

Lee Enterprises Says 40,000 Hit by Ransomware-Caused Data Breach

4 TTPs

•

by Eduard Kovacs / 2d

•

Lee Enterprises data breach confirmed

Lee Enterprises has completed its investigation into the recent ransomware attack and confirmed that a data breach occurred. The post appeared first on SecurityWeek .

Ransomware Gang Leaks Alleged Kettering Health Data

3 TTPs

•

by Ionut Arghire / 2d

•

Kettering Health suffers ransomware attack

The Interlock ransomware group has leaked data allegedly stolen from Kettering Health in a recent cyberattack. The post appeared first on SecurityWeek .

China Issues Warrants for Alleged Taiwanese Hackers and Bans a Business for Pro-Independence Links

by Associated Press / 2d

China issued warrants for 20 Taiwanese people it said carried out hacking missions in the Chinese mainland on behalf of the island’s ruling party. The post appeared first on SecurityWeek .

Vodafone Germany Fined $51 Million Over Privacy, Security Failures

Vodafone fined 45 million euros

•

by Ionut Arghire / 2d

Germany fined Vodafone $51 million for failing to protect user data from partners and unauthorized third-parties. The post appeared first on SecurityWeek .

Google Warns of Vishing, Extortion Campaign Targeting Salesforce Customers

7 TTPs

•

by Ionut Arghire / 3d

•

Vishing attacks target Salesforce customers

A financially motivated threat actor employing vishing to compromise Salesforce customers, and extort them. The post appeared first on SecurityWeek .

Going Into the Deep End: Social Engineering and the AI Flood

by Trevin Edgeworth / 3d

AI is transforming the cybersecurity landscape—empowering attackers with powerful new tools while offering defenders a chance to fight back. But without stronger awareness and strategy, organizations risk falling behind. The post appeared first on SecurityWeek .

Compyl Raises $12 Million for GRC Platform

by Eduard Kovacs / 3d

Compyl has raised $12 million in a Series A funding round that will be invested in go-to-market initiatives, hirings, and GRC platform expansion. The post appeared first on SecurityWeek .

Ramnit Malware Infections Spike in OT as Evidence Suggests ICS Shift

by Eduard Kovacs / 3d

Industrial giant Honeywell has published its 2025 Cybersecurity Threat Report with information on the latest trends. The post appeared first on SecurityWeek .

Webinar Today: Redefining Vulnerability Management With Exposure Validation

by SecurityWeek News / 3d

Learn why your security controls matter more than theoretical risk scores and how exposure validation helps slash massive patch lists down to the few vulnerabilities that truly demand action. The post appeared first on SecurityWeek .

ThreatSpike Raises $14 Million in Series A Funding

ThreatSpike raises 14M$ funding

•

by Ionut Arghire / 3d

ThreatSpike will use the fresh funding to expand its engineering, go-to-market, and security operations teams. The post appeared first on SecurityWeek .

Victoria’s Secret Says It Will Postpone Earnings Report After Recent Security Breach

3 TTPs

•

by Associated Press / 3d

•

Victoria's Secret website down due to security

Victoria’s Secret is postponing the release of its quarterly earnings following a security breach that disrupted the popular lingerie brand’s corporate operations. The post appeared first on SecurityWeek .