Blog – Page 268 – Cyber Mike

Konni Hackers Turn Google’s Find Hub into a Remote Data-Wiping Weapon

The North Korea-affiliated threat actor known as Konni (aka Earth Imp, Opal Sleet, Osmium, TA406, and Vedalia) has been attributed to a new set of attacks targeting both Android and Windows devices for data theft and remote control.
“Attackers impersonated psychological counselors and North Korean human rights activists, distributing malware disguised as stress-relief programs,” the Genians

CISA orders feds to patch Samsung zero-day used in spyware attacks

CISA ordered U.S. federal agencies today to patch a critical Samsung vulnerability that has been exploited in zero-day attacks to deploy LandFall spyware on devices running WhatsApp. […]

Yanluowang initial access broker to plead guilty to ransomware attacks

A Russian national will plead guilty to acting as an initial access broker (IAB) for Yanluowang ransomware attacks that targeted at least eight U.S. companies between July 2021 and November 2022. […]

Popular JavaScript library expr-eval vulnerable to RCE flaw

A critical vulnerability in the popular expr-eval JavaScript library, with over 800,000 weekly downloads on NPM, can be exploited to execute code remotely through maliciously crafted input. […]

Many Forbes AI 50 Companies Leak Secrets on GitHub

Wiz found the secrets and warned that they can expose training data, organizational structures, and private models.

The post Many Forbes AI 50 Companies Leak Secrets on GitHub appeared first on SecurityWeek.

5 reasons why attackers are phishing over LinkedIn

Attackers are increasingly phishing over LinkedIn to reach executives and bypass email security tools. Push Security explains how real-time browser protection detects and blocks phishing across apps and channels as users load malicious pages. […]

Runc Vulnerabilities Can Be Exploited to Escape Containers

The flaws tracked as CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881 have been patched.

The post Runc Vulnerabilities Can Be Exploited to Escape Containers appeared first on SecurityWeek.

Two New Web Application Risk Categories Added to OWASP Top 10

OWASP has added two new categories to the revised version of its Top 10 list of the most critical risks to web applications.

The post Two New Web Application Risk Categories Added to OWASP Top 10 appeared first on SecurityWeek.

⚡ Weekly Recap: Hyper-V Malware, Malicious AI Bots, RDP Exploits, WhatsApp Lockdown and More

Cyber threats didn’t slow down last week—and attackers are getting smarter. We’re seeing malware hidden in virtual machines, side-channel leaks exposing AI chats, and spyware quietly targeting Android devices in the wild.
But that’s just the surface. From sleeper logic bombs to a fresh alliance between major threat groups, this week’s roundup highlights a clear shift: cybercrime is evolving fast

GlassWorm Malware Returns to Open VSX, Emerges on GitHub

Three more VS Code extensions were infected last week and the malware has emerged in GitHub repositories as well.

The post GlassWorm Malware Returns to Open VSX, Emerges on GitHub appeared first on SecurityWeek.

Cyber News