"Chinese spies impersonated US lawmaker to deliver malware to trade group."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 08 September 2025, 2135 UTC.

Content and Source provided by email subscription from https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

91K followers30 articles per week

#security#tech

7

Today

Chinese Spies Impersonated US Lawmaker to Deliver Malware to Trade Groups: Report

by Eduard Kovacs / 6h

China’s APT41 sent out malicious emails on behalf of Rep. John Moolenaar to collect information ahead of US-China trade talks. The post appeared first on SecurityWeek .

PromptLock Only PoC, but AI-Powered Ransomware Is Real

ESET reveals AI-powered ransomware PromptLock

•

by Ionut Arghire / 7h

PromptLock is only a prototype of LLM-orchestrated ransomware, but hackers already use AI in file encryption and extortion attacks. The post appeared first on SecurityWeek .

GitHub Workflows Attack Affects Hundreds of Repos, Thousands of Secrets

by Eduard Kovacs / 8h

A supply chain attack called GhostAction has enabled threat actors to steal secrets and exploit them. The post appeared first on SecurityWeek .

Salesloft GitHub Account Compromised Months Before Salesforce Attack

Valid Accounts (Enterprise T1078)

•

by Ionut Arghire / 8h

The list of impacted cybersecurity firms has been expanded to include BeyondTrust, Bugcrowd, CyberArk, Cato Networks, JFrog, and Rubrik. The post appeared first on SecurityWeek .

Over 6,700 Private Repositories Made Public in Nx Supply Chain Attack

2 TTPs

•

by Ionut Arghire / 11h

The private repositories of hundreds of organizations were published publicly in the second phase of the Nx supply chain attack. The post appeared first on SecurityWeek .

Yesterday

Fintech Firm Wealthsimple Says Supply Chain Attack Resulted in Data Breach

3 TTPs

•

by Eduard Kovacs / 12h

•

Wealthsimple reports significant data breach

Canadian firm Wealthsimple says a data breach impacts the information of some customers, but accounts and funds remain secure. The post appeared first on SecurityWeek .

Cybersecurity M&A Roundup: 27 Deals Announced in August 2025

by Eduard Kovacs / 13h

Significant cybersecurity M&A deals announced by Accenture, CrowdStrike, F5, Okta, and SentinelOne. The post appeared first on SecurityWeek .

End of feed