Threats affecting Finland

NVIDIA Triton Bugs Let Unauthenticated Attackers Execute Code and Hijack AI Servers Source: https://thehackernews.com/2025/08/nvidia-triton-bugs-let-unauthenticated.html

News#infosecnews#redditGermany+7

LegalPwn Attack Tricks Popular GenAI Tools Into Misclassifying Malware as Safe Code Source: https://hackread.com/legalpwn-attack-genai-tools-misclassify-malware-safe-code/

Malware#infosecnews#redditGermany+6

PlayPraetor's evolving threat: How Chinese-speaking actors globally scale an Android RAT | Cleafy Source: https://www.cleafy.com/cleafy-labs/playpraetors-evolving-threat-how-chinese-speaking-actors-globally-scale-an-android-rat

News#netsec#redditGermany+9

Over 200 Malicious Open Source Packages Traced to Lazarus Campaign Source: https://www.infosecurity-magazine.com/news/200-malicious-open-source-lazarus/

Campaign#infosecnews#redditGermany+9

Chinese Firms Linked to Silk Typhoon Filed 15+ Patents for Cyber Espionage Tools Source: https://thehackernews.com/2025/07/chinese-firms-linked-to-silk-typhoon.html

News#infosecnews#redditGermany+8

Minnesota activates National Guard after St. Paul cyberattack Source: https://www.bleepingcomputer.com/news/security/minnesota-activates-national-guard-after-st-paul-cyberattack/

News#infosecnews#redditGermany+9

Wiz Uncovers Critical Access Bypass Flaw in AI-Powered Vibe Coding Platform Base44 Source: https://thehackernews.com/2025/07/wiz-uncovers-critical-access-bypass.html

News#infosecnews#redditGermany+6

Critical Flaws in Niagara Framework Threaten Smart Buildings and Industrial Systems Worldwide Source: https://thehackernews.com/2025/07/critical-flaws-in-niagara-framework.html

Tool#infosecnews#redditGermany+9

Scattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure Source: https://thehackernews.com/2025/07/scattered-spider-hijacks-vmware-esxi-to.html

Malware#infosecnews#redditGermany+9

Koske, a new AI-Generated Linux malware appears in the threat landscape Source: https://securityaffairs.com/180355/malware/koske-a-new-ai-generated-linux-malware-appears-in-the-threat-landscape.html

Malware#infosecnews#redditGermany+6

Soco404 and Koske Malware Target Cloud Services with Cross-Platform Cryptomining Attacks Source: https://thehackernews.com/2025/07/soco404-and-koske-malware-target-cloud.html

Malware#infosecnews#redditGermany+8

New Koske Linux malware hides in cute panda images Source: https://www.bleepingcomputer.com/news/security/new-koske-linux-malware-hides-in-cute-panda-images/

Malware#infosecnews#redditGermany+8

CastleLoader Malware: Fake GitHub and Phishing Attack Hits 469 Devices Source: https://catalyst.prodaft.com/public/report/understanding-current-castleloader-campaigns/overview

Malware#netsec#redditGermany+6

New Advanced Stealer (SHUYAL) Targets Credentials Across 19 Popular Browsers Source: https://hybrid-analysis.blogspot.com/2025/07/new-advanced-stealer-shuyal-targets.html

Malware#netsec#redditGermany+9

National Nuclear Security Administration Systems Breached in SharePoint Cyberattack Source: https://hackread.com/national-nuclear-security-admin-breached-sharepoint-cyberattack/

News#infosecnews#redditGermany+8

Brave blocks Windows Recall from screenshotting your browsing activity Source: https://www.bleepingcomputer.com/news/security/brave-blocks-windows-recall-from-screenshotting-your-browsing-activity/

News#infosecnews#redditGermany+8

FBI and CISA Warn of Interlock Ransomware Targeting Critical Infrastructure Source: https://hackread.com/fbi-cisa-interlock-ransomware-target-critical-infrastructure/

Malware#infosecnews#redditGermany+9

NPM package ‘is’ with 2.8M weekly downloads infected devs with malware Source: https://www.bleepingcomputer.com/news/security/npm-package-is-with-28m-weekly-downloads-infected-devs-with-malware/

Malware#infosecnews#redditGermany+7

Microsoft Sharepoint ToolShell attacks linked to Chinese hackers Source: https://www.bleepingcomputer.com/news/security/microsoft-sharepoint-toolshell-attacks-linked-to-chinese-hackers/

News#infosecnews#redditGermany+9

Inside the ChatGPT iOS app, I’m using the built-in code interpreter. Every time I ask it to scan for open ports, it shows port 8080 bound to 0.0.0.0, not localhost, like it used to. Happens across sessions, even after restarting the phone and turning off the local network feature in app settings. Same PID (3), same process (python3). Also seeing two private IPs (10.x.x.x) and localhost loopbacks, about 18 of them. As well as access to internal libraries, A LOT of them. Looks like something is preloaded inside the interpreter container. Anyone know what this is? As I’m writing this, apparently the localhost connection to 8080 is weirder than 0.0.0.0. I’m clearly clueless, but I noticed a weird change and decided to share.

News#netsec#redditGermany+9