"'Fire Ant' cyber spies compromise siloed VMware Systems."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 25 July 2025, 2052 UTC.

Content and Source:  Email subscription via https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.darkreading.com%2Frss%2Fall.xml

Please check email subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Dark Reading

141K followers33 articles per week

#security#tech

29

Today

'Fire Ant' Cyber Spies Compromise Siloed VMware Systems

by Rob Wright / 33min

Suspected China-nexus threat actors targeted virtual environments and used several tools and techniques to bypass security barriers and reach isolated portions of victims' networks.

AI-Generated Linux Miner 'Koske' Beats Human Malware

AI malware hides in panda images

•

by Nate Nelson, Contributing Writer / 1h

AI malware is becoming less of a gimmick, with features that meet or exceed what traditional human-developed malware typically can do.

North Korea's IT Worker Rampage Continues Amid DoJ Action

by Tara Seals / 2h

Arrests and indictments keep coming, but the North Korean fake IT worker scheme is only snowballing, and businesses can't afford to assume their applicant-screening processes are up to the task of weeding the imposters out.

Why Security Nudges Took Off

by Swati Babbar / 6h

Nudges can be powerful — but they are not immune to overuse or misapplication.

The Young and the Restless: Young Cybercriminals Raise Concerns

by Robert Lemos, Contributing Writer / 7h

National governments warn that many hacker groups attract young people through a sense of community, fame, or the promise of money and the perception of a lack of risk of prosecution.

Can Security Culture Be Taught? AWS Says Yes

by Rob Wright / 8h

Newly appointed Amazon Web Services CISO Amy Herzog believes security culture goes beyond frameworks and executive structures. Having the right philosophy throughout the organization is key.

Yesterday

Law Enforcement Cracks Down on XSS — but Will It Last?

by Rob Wright / 23h

The arrest of a suspected administrator for the popular cybercrime forum was one of several enforcement actions in the past week targeting malicious activity.

Ransomware Actors Pile on 'ToolShell' SharePoint Bugs

China actors exploit SharePoint vulnerabilities

•

by Alexander Culafi / 23h

Storm-2603, a China-based threat actor, is targeting SharePoint customers in an ongoing ransomware campaign.

Translating Cyber-Risk for the Boardroom

by Ashley Rose / 1d

When security leaders embrace this truth and learn to speak in the language of leadership, they don't just protect the enterprise, they help lead it forward.

What Makes Great Threat Intelligence?

by Richard Thurston / 1d

Anyone can buy or collect data, but the goal must be to realize actionable insight relevant to the organization in question.

Crash Override Turns to ERM to Combat Visibility Challenges

by Arielle Waldman / 1d

The newly launched security startup provides an engineering relationship management platform that provides enterprises with visibility across code, infrastructure, and tools.

Jul 23, 2025

Fixed Ivanti Bugs Still Haunt Japan Orgs 6 Months Later

by Nate Nelson, Contributing Writer / 1d

Chinese threat actors have been feeding off the same Ivanti RCE vulnerabilities we've known about since January, partly thanks to complications in patching.

Banking Trojan Coyote Abuses Windows UI Automation

Coyote Trojan exploits Microsoft UIA

•

by Jai Vijayan, Contributing Writer / 1d

It's the first known instance of malware that abuses the UIA framework and has enabled dozens of attacks against banks and crypto exchanges in Brazil.

Dark Web Hackers Moonlight as Travel Agents

Dark web travel scams rise

•

by Alexander Culafi / 1d

Hackers are using stolen goods such as credit cards and loyalty points to book travel for sometimes unsuspecting clients, and remote workers, SMBs, travel brands, and others are at risk.

Department of Education Site Mimicked in Phishing Scheme

2 TTPs

•

by Alexander Culafi / 2d

•

Phishing campaign targets Department of Education

An ongoing phishing campaign is using fake versions of the department's G5 grant portal, taking advantage of political turmoil associated with the DoE's 1,400 layoffs.

US Nuclear Agency Hacked in Microsoft SharePoint Frenzy

by Kristina Beek / 2d

Threat actors are piling on the zero-day vulnerabilities in SharePoint, including at least three Chinese nation-state cyber-espionage groups.

Stop AI Bot Traffic: Protecting Your Organization's Website

by Kristina Beek / 2d

As crawlers and bots bog down websites in the era of AI, some researchers say that the solution for the Internet's most vulnerable websites is already here.

Why ISO 42001 Matters for AI Governance at Scale

by Matt Hillary / 2d

How a new international standard is shaping the future of responsible AI development and deployment.

Lumma Stealer Is Back & Stealthier Than Ever

by Elizabeth Montalbano, Contributing Writer / 2d

The operators of the popular and prolific malware wasted no time in regrouping after an FBI takedown in May, and they're back to their old tricks.

Microsoft Integrates Data Lake With Sentinel SIEM

Microsoft Sentinel introduces AI-powered data lake

•

by Jeffrey Schwartz / 2d

Microsoft Sentinel Data Lake aims to provide inexpensive storage for large volumes of telemetry, while threat intelligence will be included with Defender XDR at no extra cost.

CISO Conversations: How IT and OT Security Worlds Are Converging

by Kelly Jackson Higgins / 2d

Dark Reading's Kelly Jackson Higgins interviews Carmine Valente, deputy CISO at Con Edison, about his role at the New York-based electric utility and the state of IT and OT security. Valente highlights current threats, including ransomware and supply chain attacks, as well as the impact of AI on both defense and threats.

Jul 22, 2025

China Introduces National Cyber ID Amid Privacy Concerns

by Robert Lemos, Contributing Writer / 2d

China officially rolled out a voluntary Internet identity system to protect citizens' online identities and personal information, but critics worry about privacy and surveillance.

3 China Nation-State Actors Target SharePoint Bugs

by Jai Vijayan, Contributing Writer / 2d

Hackers and cybercrime groups are part of a virtual feeding frenzy, after Microsoft's recent disclosure of new vulnerabilities in on-premises editions of SharePoint Server.

Critical Infrastructure Security Is a Critical Concern

by Amit Hammer / 3d

To be truly resilient in the ever-growing threat landscape, organizations need to balance protection with preparation.

Human Digital Twins Could Give Attackers a Dangerous Advantage

by Arielle Waldman / 3d

While this emerging technology offers many benefits, digital twins also have several drawbacks, as these convincing impersonations can be used in social engineering attacks.

Dell Breached by Extortion Group, Says Data Stolen Was 'Fake'

2 TTPs

•

by Elizabeth Montalbano, Contributing Writer / 3d

•

Dell Solution Centers breached by World Leaks

The World Leaks group accessed and released data from the company's Customer Solution Center, which is separated from customer and partner systems and stores primarily "synthetic" datasets used for demos and testing, Dell said.

Darktrace Acquires Mira Security for Network Visibility

by Dark Reading Staff / 3d

The acquisition gives the British cybersecurity solutions provider more insights into encrypted network traffic and additional decryption capabilities.

Coast Guard Issues Cybersecurity Rule for Maritime Transport Safety

by Kristina Beek / 3d

The cybersecurity requirements follow an extended timeline over the next two years, and are meant to secure US shipping ports from disruption by malicious actors.

Jul 21, 2025

China-Backed APT41 Cyberattack Surfaces in Africa

by Jai Vijayan, Contributing Writer / 3d

Up to now, the prolific China-sponsored cyber-espionage group has been mostly absent from the region, but a sophisticated and highly targeted attack on an African IT company shows Beijing is branching out.

End of feed