Blog – Page 129 – Cyber Mike

Mustang Panda Deploys Updated COOLCLIENT Backdoor in Government Cyber Attacks

Threat actors with ties to China have been observed using an updated version of a backdoor called COOLCLIENT in cyber espionage attacks in 2025 to facilitate comprehensive data theft from infected endpoints.
The activity has been attributed to Mustang Panda (aka Earth Preta, Fireant, HoneyMyte, Polaris, and Twill Typhoon) with the intrusions primarily directed against government entities located

Password Reuse in Disguise: An Often-Missed Risky Workaround

When security teams discuss credential-related risk, the focus typically falls on threats such as phishing, malware, or ransomware. These attack methods continue to evolve and rightly command attention. However, one of the most persistent and underestimated risks to organizational security remains far more ordinary.
Near-identical password reuse continues to slip past security controls, often

WhatsApp Boosts Account Security for At-Risk Individuals

New Strict Account Settings allow users to block attachments and media and silence calls from unknown people.

The post WhatsApp Boosts Account Security for At-Risk Individuals appeared first on SecurityWeek.

Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025-8088

Google on Tuesday revealed that multiple threat actors, including nation-state adversaries and financially motivated groups, are exploiting a now-patched critical security flaw in RARLAB WinRAR to establish initial access and deploy a diverse array of payloads.
“Discovered and patched in July 2025, government-backed threat actors linked to Russia and China as well as financially motivated

Fake Python Spellchecker Packages on PyPI Delivered Hidden Remote Access Trojan

Cybersecurity researchers have discovered two malicious packages in the Python Package Index (PyPI) repository that masquerade as spellcheckers but contain functionality to deliver a remote access trojan (RAT).
The packages, named spellcheckerpy and spellcheckpy, are no longer available for download, but not before they were collectively downloaded a little over 1,000 times.
“Hidden inside the

Cyber News

Mustang Panda Deploys Updated COOLCLIENT Backdoor in Government Cyber Attacks

Password Reuse in Disguise: An Often-Missed Risky Workaround

WhatsApp Boosts Account Security for At-Risk Individuals

Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025-8088

Fake Python Spellchecker Packages on PyPI Delivered Hidden Remote Access Trojan

US Charges 31 More Defendants in Massive ATM Hacking Probe

APTs, Cybercriminals Widely Exploiting WinRAR Vulnerability

Indurex Emerges From Stealth to Close Security Gap in Cyber-Physical Systems

Fortinet Patches Exploited FortiCloud SSO Authentication Bypass

High-Severity Remote Code Execution Vulnerability Patched in OpenSSL