Follow us on Blue Sky, Mastodon Twitter, Facebook and LinkedIn @Hackread

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Newark, United States, 4th August 2025, CyberNewsWire

A critical heap buffer overflow (CVE-2025-54574) in Squid allows unauthenticated RCE and information leakage when processing URN requests. Update to 6.4 now.

North Korea's Lazarus Group is waging a covert cyberespionage campaign, poisoning 234+ open-source packages on npm/PyPI to steal secrets from CI/CD pipelines and developer environments.

Cleafy uncovers PlayPraetor, a Chinese-speaking MaaS Android RAT that has infected 11,000+ devices, using real-time control via Accessibility Services to conduct on-device fraud.

Luxembourg's government is investigating a "sophisticated" cyberattack on Huawei equipment that took down the nation's 4G/5G networks for hours, disrupting emergency services and banking.

Palo Alto's Unit 42 reveals a sophisticated cyber-espionage campaign by Liminal Panda (CL-STA-0969) targeting Southeast Asian telecom infrastructure with custom backdoors.

Microsoft's Recall AI feature still captures sensitive data like passwords and bank info, despite new protections. The system's VBS encryption and PIN access may also be vulnerable to remote exploits.

A new backdoor, Plague, disguised as a Linux PAM component, evaded detection for over a year. It grants attackers persistent SSH access and leaves no forensic trail.

Mozilla has issued a warning about a new phishing campaign targeting Firefox extension developers' accounts on the AMO platform, urging them to be cautious of fake login requests.

A new AI-generated crypto-stealer disguised as an NPM utility has been found, with polished documentation and emojis giving away its artificial origin. Over 1,500 users were infected.

Flashpoint reports an 800% surge in infostealer-fueled credential theft in H1 2025, leading to a 179% rise in ransomware and a 235% spike in data breaches.

A new report exposes ShadowSyndicate, a sophisticated cybercrime group tied to top-tier RaaS affiliates, bulletproof hosting, and suspected geopolitical influence operations.

APT37's new RoKRAT malware variant uses steganography to hide encrypted payloads in JPEG images, bypassing antivirus and traditional defenses by executing entirely in memory.

BBOT is a recursive, modular OSINT automation framework written in Python. BBOT currently has over 50 modules and counting.

German firm Einhaus Group declared bankruptcy after a $230K ransomware attack by Royal. Despite paying the ransom, the company couldn't recover, underscoring the true cost of cybercrime.

Linux Kernel 6.17 is getting a major influx of Rust code for drivers and infrastructure. This marks a significant step in Rust's growing role in core kernel development.