1/23/2025

~ The Cyber Beat
Hackers Imitate Kremlin-Linked Group to Target Russian Entities

FBI: North Korean IT Workers Steal Source Code to Extort Employers

DOJ Indicts Two Americans for Running Laptop Farm Used in North Korea IT Worker Scam

Google Is Giving IT More Control Over Your Chrome Extensions

New GhostGPT AI Chatbot Facilitates Malware Creation and Phishing

Hundreds of Fake Reddit Sites Push Lumma Stealer Malware

Bookmakers Ramp Up Efforts to Combat Arbitrage Betting Fraud

PayPal Fined by New York for Cybersecurity Failures

Texas Probes Four More Car Companies Over How They Collect and Sell Consumer Data

LinkedIn Sued for Allegedly Training AI Models With Private Messages Without Consent

Tesla EV Charger Hacked Twice on Second Day of Pwn2Own Tokyo

CISA: Hackers Still Exploiting Older Ivanti Bugs to Breach Networks

CISOs Dramatically Increase Boardroom Influence but Still Lack Soft Skills

New Android Identity Check Locks Settings Outside Trusted Locations		FortiGate Config Leaks: Victims’ Email Addresses Published Online

RansomHub Lays Claim on American Standard, Grohe Breaches

PFS Investments Inc. (GA) Files Notice of Recent Data Breach Leaking Confidential Information

Experts Find Shared Codebase Linking Morpheus and HellCat Ransomware Payloads

QakBot-Linked BC Malware Adds Enhanced Remote Access and Data Gathering Features

Subaru Security Flaws Exposed Its System for Tracking Millions of Cars

Critical Zero-Days Impact Premium WordPress Real Estate Plugins

QNAP Fixes Six Rsync Vulnerabilities in NAS Backup, Recovery App

Custom Backdoor Exploiting Magic Packet Vulnerability in Juniper Routers

Palo Alto Firewalls Found Vulnerable to Secure Boot Bypass and Firmware Exploits

SonicWall Urges Immediate Patch for Critical CVE-2025-23006 Flaw Amid Likely Exploitation

Cisco Fixes Critical 9.9-Rated, Make-Me-Admin Bug in Meeting Management

The Security Risk of Rampant Shadow AI

Published by The Cyber Beat

Leave a Reply