"Verif Fake ID Operation dismantled by law enforcement."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 29 August 2025, 1434 UTC.

Content and Source via email subscription from https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

90K followers38 articles per week

#security#tech

72

Today

VerifTools Fake ID Operation Dismantled by Law Enforcement

by Ionut Arghire / 18min

Authorities say VerifTools sold fake driver’s licenses and passports worldwide, enabling fraudsters to bypass KYC checks and access online accounts. The post appeared first on SecurityWeek .

Google Confirms Workspace Accounts Also Hit in Salesforce–Salesloft Drift Data Theft Campaign

Data theft targets Salesforce instances

•

by Ionut Arghire / 1h

Google says the same OAuth token compromise that enabled Salesforce data theft also let hackers access a small number of Workspace accounts via the Salesloft Drift integration. The post appeared first on SecurityWeek .

TransUnion Data Breach Impacts 4.4 Million

by Ionut Arghire / 1h

The credit reporting firm did not name the third-party application involved in the incident, only noting that it was used for its US consumer support operations. The post appeared first on SecurityWeek .

Nevada Confirms Ransomware Attack Behind Statewide Service Disruptions

Impact (Enterprise TA0040)

•

by Mike Lennon / 2h

•

Nevada state offices suspend services

State officials confirm ransomware forced office closures, disrupted services, and led to data theft, as Nevada works with CISA and law enforcement to restore critical systems. The post appeared first on SecurityWeek .

US Sanctions Russian National, Chinese Firm Aiding North Korean IT Workers

US sanctions North Korean fraud network

•

by Ionut Arghire / 2h

US Treasury sanctions Russian and Chinese entities tied to North Korea’s use of fake IT workers, who exploited stolen identities, AI, and malware to funnel millions back to Pyongyang. The post appeared first on SecurityWeek .

Ransomware Group Exploits Hybrid Cloud Gaps, Gains Full Azure Control in Enterprise Attacks

Storm-0501 targets cloud-based ransomware

•

by Ionut Arghire / 2h

Storm-0501 has been leveraging cloud-native capabilities for data exfiltration and deletion, without deploying file-encrypting malware. The post appeared first on SecurityWeek .

Yesterday

China’s Salt Typhoon Hacked Critical Infrastructure Globally for Years

China's Salt Typhoon hacking alert

•

by Ionut Arghire / 1d

China-linked APT ‘Salt Typhoon’ exploited known router flaws to maintain persistent access across telecom, government, and military networks, giving Beijing’s intelligence services global surveillance reach. The post appeared first on SecurityWeek .

CrowdStrike to Acquire Onum to Fuel Falcon Next-Gen SIEM With Real-Time Telemetry

CrowdStrike acquires Onum for SIEM

•

by SecurityWeek News / 1d

CrowdStrike says the acquisition will bring valuable technology to enhance its Falcon Next-Gen SIEM. The post appeared first on SecurityWeek .

Webinar Today: Ransomware Defense That Meets Evolving Compliance Mandates

by SecurityWeek News / 1d

Join this live discussion to learn how organizations can strengthen ransomware defenses while staying ahead of tightening compliance requirements. The post appeared first on SecurityWeek .

Hackers Target Popular Nx Build System in First AI-Weaponized Supply Chain Attack

2 TTPs

•

by Ionut Arghire / 1d

With more than 4 million weekly downloads, the Nx build platform became the first known supply chain breach where hackers weaponized AI assistants for data theft. The post appeared first on SecurityWeek .

Aug 27, 2025

Hackers Weaponize Trust with AI-Crafted Emails to Deploy ScreenConnect

by Kevin Townsend / 1d

AI-powered phishing attacks leverage ConnectWise ScreenConnect for remote access, underscoring their sophistication. The post appeared first on SecurityWeek .

Hundreds of Salesforce Customers Hit by Widespread Data Theft Campaign

by Ionut Arghire / 1d

Google says the hackers systematically exported corporate data, focusing on secrets such as AWS and Snowflake keys. The post appeared first on SecurityWeek .

China-Linked Hackers Hijack Web Traffic to Deliver Backdoor

3 TTPs

•

by Ionut Arghire / 1d

Google researchers say China-linked UNC6384 combined social engineering, signed malware, and adversary-in-the-middle attacks to evade detection. The post appeared first on SecurityWeek .

Nevada State Offices Closed Following Disruptive Cyberattack

by Ionut Arghire / 2d

State websites and phone lines were taken offline, but officials say emergency services and personal data remain unaffected. The post appeared first on SecurityWeek .

Infostealers: The Silent Smash-and-Grab Driving Modern Cybercrime

by Kevin Townsend / 2d

Competition among malware-as-a-service developers has transformed infostealers into refined, accessible tools for cybercriminals worldwide. The post appeared first on SecurityWeek .

Citrix Patches Exploited NetScaler Zero-Day

Citrix patches NetScaler zero-day vulnerabilities

•

by Ionut Arghire / 2d

Zero-day exploited in the wild forces Citrix and CISA to push emergency patch deadlines for federal agencies. The post appeared first on SecurityWeek .

PromptLock: First AI-Powered Ransomware Emerges

by Ionut Arghire / 2d

Proof-of-concept ransomware uses AI models to generate attack scripts in real time. The post appeared first on SecurityWeek .

Aug 26, 2025

Beyond the Prompt: Building Trustworthy Agent Systems

by Stu Sjouwerman / 2d

Building secure AI agent systems requires a disciplined engineering approach focused on deliberate architecture and human oversight. The post appeared first on SecurityWeek .

Healthcare Services Group Data Breach Impacts 624,000

by Ionut Arghire / 3d

The personal information of many individuals was stolen from Healthcare Services Group’s computer systems in 2024. The post appeared first on SecurityWeek .

Docker Desktop Vulnerability Leads to Host Compromise

Docker essentials and development tips

•

by Ionut Arghire / 3d

A critical vulnerability in Docker Desktop allows attackers to modify the filesystem of Windows hosts to become administrators. The post appeared first on SecurityWeek .

AI Systems Vulnerable to Prompt Injection via Image Scaling Attack

by Eduard Kovacs / 3d

Researchers show how popular AI systems can be tricked into processing malicious instructions by hiding them in images. The post appeared first on SecurityWeek .

Aug 25, 2025

Hundreds of Thousands Affected by Auchan Data Breach

by Ionut Arghire / 3d

Auchan confirms that the personal information of hundreds of thousands of customers was stolen in a data breach. The post appeared first on SecurityWeek .

Organizations Warned of Exploited Git Vulnerability

2 TTPs

•

by Ionut Arghire / 3d

CISA urges federal agencies to immediately patch an exploited arbitrary file write vulnerability in Git that leads to remote code execution. The post appeared first on SecurityWeek .

FTC Calls on Tech Firms to Resist Foreign Anti-Encryption Demands

FTC warns companies against foreign pressure

•

by Eduard Kovacs / 3d

Tech giants have received a letter from the FTC urging them not to weaken security and privacy at the request of foreign governments. The post appeared first on SecurityWeek .

OneFlip: An Emerging Threat to AI that Could Make Vehicles Crash and Facial Recognition Fail

by Kevin Townsend / 3d

Researchers unveil OneFlip, a Rowhammer-based attack that flips a single bit in neural network weights to stealthily backdoor AI systems without degrading performance. The post appeared first on SecurityWeek .

Pakistani Hackers Back at Targeting Indian Government Entities

by Ionut Arghire / 4d

Pakistani state-sponsored hacking group APT36 is targeting Linux systems in a fresh campaign aimed at Indian government entities. The post appeared first on SecurityWeek .

Aspire Rural Health System Data Breach Impacts Nearly 140,000

Data breaches at Premier Health Aspire

•

by Eduard Kovacs / 4d

Aspire Rural Health System was targeted last year by the BianLian ransomware group, which claimed to have stolen sensitive data. The post appeared first on SecurityWeek .

Chip Programming Firm Data I/O Hit by Ransomware

by Eduard Kovacs / 4d

Data I/O has disclosed a ransomware attack that disrupted the company’s operations, including communications, shipping and production. The post appeared first on SecurityWeek .

Anatsa Android Banking Trojan Now Targeting 830 Financial Apps

Anatsa malware targets Android banking users

•

by Ionut Arghire / 4d

The Anatsa Android banking trojan has expanded its target list to new countries and more cryptocurrency applications. The post appeared first on SecurityWeek .

CISA Requests Public Feedback on Updated SBOM Guidance

CISA seeks comments on SBOM guide

•

by Ionut Arghire / 4d

CISA has updated the Minimum Elements for a Software Bill of Materials (SBOM) guidance and is seeking public comment. The post appeared first on SecurityWeek .