Pierluigi Paganini
May 25, 2025
Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.
International Press – Newsletter
M&S hackers believed to have gained access through third party
Domestic abuse victim data stolen in Legal Aid hack
An $8.4 Billion Chinese Hub for Crypto Crime Is Incorporated in Colorado
“SKT All Subscribers’ SIM Card Information Leaked”… Malicious Codes Increase to 25 Types
Worcester College Student to Plead Guilty to Cyber Extortions
Cellcom Service Disruption Caused by Cyberattack
Justice Department Seizes Domains Behind Major Information-Stealing Malware Operation
270 arrested in global dark web crackdown targeting online drug and criminal networks
KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS
TikTok Videos Promise Pirated Apps, Deliver Vidar and StealC Infostealers Instead
Leader of Qakbot Malware Conspiracy Indicted for Involvement in Global Ransomware Scheme
Silent Ransom Group Targeting Law Firms
Operation ENDGAME strikes again: the ransomware kill chain broken at its source
Malware
Sarcoma Ransomware Unveiled: Anatomy of a Double Extortion Gang
RVTools Bumblebee Malware Attack – How a Trusted IT Tool Became a Malware Delivery Vector
RedisRaider: Weaponizing misconfigured Redis to mine cryptocurrency at scale
Hidden Threats of Dual-Function Malware Found in Chrome Extensions
Lumma Stealer: Breaking down the delivery techniques and capabilities of a prolific infostealer
A Brief History of DanaBot, Longtime Ecrime Juggernaut Disrupted by Operation Endgame
Hacking
Pwn2Own Berlin 2025: Day Three Results
Firefox Security Response to pwn2own 2025
The Legacy Loophole: How Attackers Are Exploiting Entra ID and What to Do About It
O2 VoLTE: locating any customer with a phone call
ViciousTrap – Infiltrate, Control, Lure: Turning edge devices into honeypots en masse
Advisory Update on Cyber Threat Activity Targeting Commvault’s SaaS Cloud Application (Metallic)
Intelligence and Information Warfare
Rogue communication devices found in Chinese solar power inverters
New Japan law allows preemptive defense of infrastructure cyberattack
ESET APT Activity Report Q4 2024–Q1 2025
From banks to battalions: SideWinder’s attacks on South Asia’s public sector
Russian GRU Targeting Western Logistics Entities and Technology Companies
UAT-6382 exploits Cityworks zero-day vulnerability to deliver malware
Cybersecurity
Ex-FBI boss James Comey investigated for seashell photo seen as threat to Trump
Japan passed a law allowing preemptive offensive cyber actions
We Made Luigi Mangione’s 3D-Printed Gun—and Fired It
Cyber attack threat keeps me awake at night, bank boss says
By Default, Signal Doesn’t Recall
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, newsletter)
