Threats tagged 'high-priority'

Our investigation exposes DaVita’s repeated cybersecurity failures, detailing 12 cases where attackers pried open weaknesses to break into its network

Breach#netsec#redditGermany+4

Hackers breach fintech firm in attempted $130M bank heist Source: https://www.bleepingcomputer.com/news/security/hackers-breach-fintech-firm-in-attempted-130m-bank-heist/

Breach#infosecnews#redditGermany+6

Cloudflare Confirms Data Breach Linked to Salesforce and Salesloft Drift Source: https://hackread.com/cloudflare-data-breach-salesforce-and-salesloft-drift/

Breach#infosecnews#redditGermany+6

Researchers Warn of MystRodX Backdoor Using DNS and ICMP Triggers for Stealthy Control Source: https://thehackernews.com/2025/09/researchers-warn-of-mystrodx-backdoor.html

Malware#infosecnews#redditGermany+7

Lazarus Group Expands Malware Arsenal With PondRAT, ThemeForestRAT, and RemotePE Source: https://thehackernews.com/2025/09/lazarus-group-expands-malware-arsenal.html

Malware#infosecnews#redditGermany+8

Ukrainian Network FDN3 Launches Massive Brute-Force Attacks on SSL VPN and RDP Devices Source: https://thehackernews.com/2025/09/ukrainian-network-fdn3-launches-massive.html

News#infosecnews#redditGermany+9

Salesforce-Connected Third-Party Drift Application Incident Response Source: https://www.paloaltonetworks.com/blog/2025/09/salesforce-third-party-application-incident-response/

Breach#infosecnews#redditGermany+6

A critical flaw in the [Mobile Security Framework (MobSF)](https://cybersecuritynews.com/mobsf-framework-zero-day-vulnerability/) has been discovered, allowing authenticated attackers to upload and execute malicious files by exploiting improper path validation. 

Malicious npm Package nodejs-smtp Mimics Nodemailer, Targets Atomic and Exodus Wallets Source: https://thehackernews.com/2025/09/malicious-npm-package-nodejs-smtp.html

News#infosecnews#redditGermany+6

Researchers Show Hidden Commands in Images Exploit AI Chatbots and Steal Data Source: https://hackread.com/hidden-commands-images-exploit-ai-chatbots-steal-data/

Android Droppers Now Deliver SMS Stealers and Spyware, Not Just Banking Trojans Source: https://thehackernews.com/2025/09/android-droppers-now-deliver-sms.html

News#infosecnews#redditGermany+7

When Browsers Become the Attack Surface: Rethinking Security for Scattered Spider Source: https://thehackernews.com/2025/09/when-browsers-become-attack-surface.html

Campaign#infosecnews#redditGermany+9

Ransomware Attack on Pennsylvania’s AG Office Disrupts Court Cases Source: https://www.infosecurity-magazine.com/news/ransomware-pennsylvania-ag/

Malware#infosecnews#redditGermany+9

ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean Academics Source: https://thehackernews.com/2025/09/scarcruft-uses-rokrat-malware-in.html

Malware#infosecnews#redditGermany+6

Attackers Abuse Velociraptor Forensic Tool to Deploy Visual Studio Code for C2 Tunneling Source: https://thehackernews.com/2025/08/attackers-abuse-velociraptor-forensic.html

Botnet#infosecnews#redditGermany+7

Hackers Exploit CrushFTP Zero-Day to Take Over Servers - Patch NOW! Source: https://hackread.com/hackers-exploit-crushftp-zero-day-take-over-servers/

WhatsApp Issues Emergency Update for Zero-Click Exploit Targeting iOS and macOS Devices Source: https://thehackernews.com/2025/08/whatsapp-issues-emergency-update-for.html

Researchers Warn of Sitecore Exploit Chain Linking Cache Poisoning and Remote Code Execution Source: https://thehackernews.com/2025/08/researchers-warn-of-sitecore-exploit.html

New zero-click exploit allegedly used to hack WhatsApp users Source: https://securityaffairs.com/181714/intelligence/new-zero-click-exploit-allegedly-used-to-hack-whatsapp-users.html

Abandoned Sogou Zhuyin Update Server Hijacked, Weaponized in Taiwan Espionage Campaign Source: https://thehackernews.com/2025/08/abandoned-sogou-zhuyin-update-server.html

Campaign#infosecnews#redditGermany+8