Cyberscoop

DOJ charges 14 individuals for involvement in a North Korean remote work scheme that funneled funds via stolen identities and scams.

Two critical Citrix NetScaler zero-days were actively exploited, prompting emergency advisories and widespread patching urgency.

ShinyHunters claims compromise and data theft from FBI systems after defacement of the FBI jobs site; investigation ongoing.

Volexity observes UTA0565 exploiting Chrome and Microsoft defects with a shared exploit kit across China-aligned groups.

Hacktron used AI to find a widespread decoder flaw (HEIF/HEIC family) that enabled RCE affecting Meta and OpenAI repos.

Multiple zero-days in SonicWall SMA1000 appliances are being actively exploited, enabling unauthenticated RCE and potential network compromise.

Ubiquiti patched 22 vulnerabilities in UniFi products, including three rated 10.0, requiring urgent firmware updates to prevent RCE.

Investigation reveals Clop likely exploited critical PTC Windchill vulnerability in June, initiating extended extortion and data theft.

Updated FBI/CISA/HHS advisory details Medusa techniques: disabling security, exfiltrating data, and encrypting whole networks.

INC ransomware group aggressively exploits SonicWall SMA 1000 zero-days to steal and encrypt data for extortion.

China-linked actors used a Roundcube exploit chain to compromise university physics and engineering departments and harvest credentials.

VPN seizure and supply-chain risk underscore need for stronger third-party controls.

Instructure reached an extortion settlement to prevent data leaks from Canvas, affecting thousands of schools. Monitor for affected organizations and assess risk exposure.

Ransomware overlay amid 600+ manufacturing sector hits; highlights supply-chain risk and downtime impact.