Cyber Briefing - podcast cover

Cyber Briefing

CyberMaterialcybermaterial.com
Hello World! Welcome to Cyber Briefing by CyberMaterial, find the latest cybersecurity alerts, incidents and news. Visit https://cybermaterial.com for more headlines.
Last refreshed:
Follow this podcast in the Metacast mobile app to refresh it and see new episodes.
Download Metacast podcast app
Podcasts are better in Metacast mobile app
Don't just listen to podcasts. Learn from them with transcripts, summaries, and chapters for every episode. Skim, search, and bookmark insights. Learn more

Episodes

April 14, 2025 - Cyber Briefing

👉 What's happening in cybersecurity today? 🚨 #CyberAlerts Cybercriminals Use SEO Tricks to Push Malicious Websites in Search Results Source: Tomáš Foltýn via ESET Fortinet Alerts of Ongoing FortiGate Access After Patch via SSL-VPN Symlink Exploit Source: Fortinet Hackers Exploit Dangling DNS Records to Hijack Corporate Subdomains Source: Chris Hosking via SentinelOne Tycoon2FA Updates Enhance Phishing Kit to Bypass Detection and MFA Security Source: Phil Hay, Rodel Mendrez via Trustwave Hacker...

Apr 14, 202511 min

April 11, 2025 - Cyber Briefing

👉 What are the latest cybersecurity alerts, incidents, and news? 🚨 #CyberAlerts Researchers Bypass Windows Defender Using XOR Encryption and System Calls Source: Hackmosphere OttoKit Flaw Lets Attackers Create Admin Accounts and Take Over WordPress Sites Source: István Márton via Wordfence Malicious npm Package Hijacks Crypto Wallets Through Address Manipulation Source: Lucija Valentić via ReversingLabs Jenkins Docker Images Vulnerability Lets Hackers Intercept Network Traffic Source: Jenkins ...

Apr 11, 202510 min

April 10, 2025 - Cyber Briefing

👉 What's going on in the cyber world today? 🚨 #CyberAlerts Vulnerabilities Exploited in AWS EC2 to Extract Sensitive Metadata and IAM Credentials Source: Merlyn Albery-Speyer via F5 AkiraBot Uses AI to Spam Over 80000 Websites With Custom Messages Source: Alex Delamotte and Jim Walter via SentinelOne Gladinet CentreStack Vulnerability Exploited for Remote Code Execution Attacks Source: CISA APT32 Uses GitHub to Launch Poisoning Attack on Chinese Cybersecurity Experts Source: ThreatBook CatB Us...

Apr 10, 202510 min

April 09, 2025 - Cyber Briefing

👉 What's trending in cybersecurity today? 🚨 #CyberAlerts RansomEXX Gang Exploits Windows Zero-Day Vulnerability to Deliver Ransomware Source: Microsoft Threat Intelligence Neptune RAT Spreads via YouTube and Telegram to Steal Windows Credentials Source: Cyfirma NCSC Warns of MOONSHINE and BADBAZAAR Malware Targeting Mobile Devices Source: UK's National Cyber Security Centre (NCSC) UAC-0226 Uses Malicious Excel Files to Deploy GIFTEDCROOK Stealer in Ukraine Source: Computer Emergency Response T...

Apr 09, 202510 min

April 08, 2025 - Cyber Briefing

👉 What's the latest in the cyber world today? 🚨 #CyberAlerts Xanthorox AI Emerges as a Powerful Cybercrime Tool with Advanced Capabilities Source: Daniel Kelley via SlashNext WhatsApp Vulnerability Allows Code Execution Through Spoofed Attachments Source: Meta via Facebook Google Patches 62 Vulnerabilities Including Two Exploited Zero Days in April Update Source: Google Nine Malicious VSCode Extensions Infect Users with XMRig Cryptominer Source: Yuval Ronen via ExtensionTotal on Medium Smishin...

Apr 08, 202510 min

April 07, 2025 - Cyber Briefing

👉 What's happening in cybersecurity today? 🚨 #CyberAlerts North Korean Hackers Use Npm Packages to Spread BeaverTail Malware Source: Kirill Boychenko via Socket PoisonSeed Campaign Targets CRM Tools and Email Providers to Steal Funds Source: Silent Push Dell Issues Critical Security Update for PowerProtect Data Domain OS Vulnerability Source: Dell Over 50000 WordPress Sites Affected by Uncanny Automator Plugin Vulnerability Source: István Márton via Wordfence Bitdefender Patches Critical Vulne...

Apr 07, 202510 min

April 04, 2025 - Cyber Briefing

👉 What are the latest cybersecurity alerts, incidents, and news? 🚨 #CyberAlerts Tax-Themed Phishing Campaigns Distribute Malware and Steal Credentials Source: Microsoft Threat Intelligence Fast Flux Evasion Technique Threatens National Security According to CISA Source: CISA Ivanti Connect Secure Flaw Exploited in Cyberattack Delivering Malware Source: Ivanti Cyberattacks Target Ukraine's Critical Infrastructure with New Wrecksteel Malware Source: Ukraine's Computer Emergency Response Team (CE...

Apr 04, 202510 min

April 03, 2025 - Cyber Briefing

👉 What's going on in the cyber world today? 🚨 #CyberAlerts New Phishing Attack Uses QR Codes to Steal Microsoft 365 Login Credentials Source: Aiden Huang, Vishwa Thothathri Palo Alto Networks, Unit 42 WinRAR Vulnerability Bypasses Windows Security Allowing Remote Code Execution Source: JPCERT Coordination Center Verizon Call Filter Flaw Exposes Customer Call Logs and Privacy Risks Source: Evan Connelly via GitHub Web Skimming Campaign Targets Stripe API and Steals Payment Data from Merchants S...

Apr 03, 202510 min

April 02, 2025 - Cyber Briefing

👉 What's trending in cybersecurity today? 🚨 #CyberAlerts Outlaw Linux Malware Uses SSH Brute-Forcing to Power Long-Term Botnet Source: Elastic Security New Wireless Attack Lets Hackers Capture Passwords Through Backdoor Signals Source: Jialin Wan, Nan Cheng, and Jinglong Shen, from IEEE via Arxiv Hijack Loader Evolved with Anti-VM Checks and Call Stack Spoofing to Avoid Detection Source: Muhammed Irfan V A via Zscaler Over 1500 PostgreSQL Servers Targeted in Fileless Cryptocurrency Mining Camp...

Apr 02, 20259 min

April 01, 2025 - Cyber Briefing

👉 What's the latest in the cyber world today? 🚨 #CyberAlerts Apple Issues Warning Over Three Active Zero-Day Vulnerabilities Affecting Devices Source: Apple Attackers Exploit WordPress mu-Plugins to Hide Malware and Maintain Persistent Access Source: Puja Srivastava via Sucuri Konni RAT Targets Windows Explorer to Deliver Stealthy Attacks and Persist in Networks Source: Cyfirma Earth Alux APT Targets Government Sectors in Asia Pacific and Latin America Source: Lenart Bermejo, Ted Lee, Theo Che...

Apr 01, 20259 min

March 31, 2025 - Cyber Briefing

👉 What's happening in cybersecurity today? 🚨 #CyberAlerts New Crocodilus Android Trojan Steals Banking and Crypto Credentials Source: ThreatFabric RESURGE Malware Exploits Ivanti Vulnerability for Remote Access and Data Theft Source: CISA Gamaredon Threat Group Use LNK Files to Distribute Remcos Backdoor Source: Guilherme Venere via Cisco Talos Ubuntu Bypass Flaws Allow Attackers to Gain Admin Access in User Namespaces Source: Ubuntu Python-Based RAT Uses Discord to Steal Credentials and Take ...

Mar 31, 202510 min

March 28, 2025 - Cyber Briefing

👉 What are the latest cybersecurity alerts, incidents, and news? 🚨 #CyberAlerts Mozilla Patches Critical Firefox Vulnerability Linked to Sandbox Escape Source: Mozilla New Morphing Meerkat Phishing Kit Impersonates 114 Brands Using DNS Records Source: Infoblox CoffeeLoader Delivers Rhadamanthys Stealer Using Advanced Evasion Techniques Source: Brett Stone-Gross via Zscaler Tor Project Releases Urgent Browser Update for Critical Security Fixes Source: Tor Project Pirated Snow White Torrent on T...

Mar 28, 202511 min

March 27, 2025 - Cyber Briefing

👉 What's going on in the cyber world today? 🚨 #CyberAlerts New ReaderUpdate Malware Targets macOS Users with Multiple Versions Source: Phil Stokes & Raffaele Sabato via SentinelOne FamousSparrow Target U.S. and Mexico with New SparrowDoor Malware Variants Source: Alexandre Côté Cyr via ESET EncryptHub Exploits Windows Zero-Day to Deploy Rhadamanthys and StealC Malware Source: Aliakbar Zahravi via Trend Micro RedCurl Shifts Focus to Ransomware with First QWCrypt Malware Deployment Source: M...

Mar 27, 202510 min

March 26, 2025 - Cyber Briefing

👉 What's trending in cybersecurity today? 🚨 #CyberAlerts New IOCONTROL Malware Targets Critical Infrastructure in US and Israel Source: Flashpoint ARACNE Autonomous Penetration Testing Agent Leverages AI to Bypass Safeguards Source: Tomas Nieponice, Veronica Valeros, and Sebastian Garcia from the Czech Technical University in Prague via arXiv Researchers Uncover 200 Unique C2 Domains Linked to Raspberry Robin Access Broker Source: Silent Push Researchers Expose Android Malware Using .NET MAUI ...

Mar 26, 202511 min

March 25, 2025 - Cyber Briefing

👉 What's the latest in the cyber world today? 🚨 #CyberAlerts Hackers Use Fake Semrush Ads to Steal Google Account Credentials from Victims Source: Jérôme Segura and Elie Berreby via Malwarebytes Rilide Malware Targets Chrome and Edge Users Stealing Login Credentials Source: Pulsedive Phishing Campaign Targets Counter-Strike 2 Players Using Fake Steam Login Pages Source: Silent Push IngressNightmare Vulnerabilities Expose Kubernetes Clusters to Remote Code Execution Source: via Wiz FogDoor Malw...

Mar 25, 202510 min

March 24, 2025 - Cyber Briefing

👉 What's happening in cybersecurity today? 🚨 #CyberAlerts Albabat Ransomware Expands to Target Linux and macOS Systems Source: Nathaniel Morales and Sarah Pearl Camiling via Trend Micro VanHelsingRaaS Emerges Targeting Windows Linux, BSD, and ESXi Systems Source: Check Point FIN7 Unleashes Anubis Python-Based Backdoor for Remote Access and Data Theft Source: G Data CyberDefense RansomHub Affiliate Deploys Betruger Backdoor in Ransomware Attacks Source: Broadcom SvcStealer 2025 Targets Sensitiv...

Mar 24, 202510 min

March 21, 2025 - Cyber Briefing

👉 What are the latest cybersecurity alerts, incidents, and news? 🚨 #CyberAlerts Cisco Smart Licensing Utility Vulnerabilities Actively Targeted by Cybercriminals Source: Johannes Ullrich via SANS Technology Institute’s Internet Storm Center Reddit Posts Spreads AMOS and Lumma Stealers Through TradingView Cracks Source: Jérôme Segura via Malwarebytes New VanHelsing Ransomware Targets Gov and Pharma Sectors in France and US Source: Cyfirma MEDUSA Ransomware Uses ABYSSWORKER Driver to Bypass EDR ...

Mar 21, 202510 min

March 20, 2025 - Cyber Briefing

👉 What's going on in the cyber world today? 🚨 #CyberAlerts Scareware Phishing Campaign Shifts Focus From Windows to macOS Targets Source: Or Eshed via LayerX ClearFake Campaign Adopts Web3 to Target Users with Advanced Malware Tactics Source: Pierre Le Bourhis, Quentin Bourgue via Sekoia DollyWay Malware Campaign Targets WordPress Sites with Redirection Methods Source: Denis Sinegubko via GoDaddy Veeam Backup Software Vulnerability Poses Critical Risk to Domain-Joined Servers Source: Veeam Sig...

Mar 20, 202510 min

March 19, 2025 - Cyber Briefing

👉 What's trending in cybersecurity today? 🚨 #CyberAlerts Massive Ad Fraud Campaign Targets Millions with Malicious Apps on Google Play. Source: Alecsandru Cătălin Daj, Adina Mateescu, Albert Endre-Laszlo, Alex Baciu, and Elena Flondor via Bitdefender AI Code Editors Exploited in New Supply Chain Attack Using Rules File Backdoor Source: Ziv Karliner via Pillar Security Hackers Use New DLL Side-Loading Attack to Distribute Malicious Python Code Source: Xavier Mertens via Internet Storm Center at...

Mar 19, 20259 min

March 18, 2025 - Cyber Briefing

👉 What's the latest in the cyber world today? 🚨 #CyberAlerts Supply Chain Attack Targets GitHub Action Exposing Sensitive Data in CI/CD Workflows Source: Varun Sharma via StepSecurity New StilachiRAT Malware Discovered Targeting Crypto Wallets and Credentials Source: Microsoft Incident Response Apache Tomcat Flaw Triggers Active Exploitation Risking Remote Code Execution Source: Wallarm FBI Warns of Growing Threat From Malicious File Conversion Tools Spreading Malware Source: Graham Cluley via...

Mar 18, 20254 min

March 17, 2025 - Cyber Briefing

Hello World! It's March 17th, 2025. Welcome to a new edition of Cyber Briefing by Cybermaterial. Cyber Alerts brought to you by 911Cyber. OctoV2 Trojan Poses as DeepSeek AI App. Distributed through a phishing website, the OctoV2 Android banking trojan has been found disguising itself as the legitimate DeepSeek AI application. Coinbase Users Targeted in Phishing Scam. Coinbase users face a phishing scam posing as a required wallet migration, falsely claiming a platform transition to steal credent...

Mar 17, 20253 min

March 14, 2025 - Cyber Briefing

👉 What are the latest cybersecurity alerts, incidents, and news? 🚨 #CyberAlerts North Korean ScarCruft Group Targets Android Users with KoSpy Surveillance Tool Source: Alemdar Islamoglu via Lookout GitHub Identifies Ruby-SAML Flaws Exposing Accounts to Takeover Attacks Source: Peter Stöckli via GitHub Microsoft 365 Users Targeted by Phishing Campaigns Exploiting OAuth Flaws Source: Proofpoint Microsoft Uncovers ClickFix Phishing Campaign Targeting Hospitality Sector Source: Microsoft Threat In...

Mar 14, 20259 min

March 13, 2025 - Cyber Briefing

👉 What's going on in the cyber world today? 🚨 #CyberAlerts New OBSCURE#BAT Malware Campaign Uses Social Engineering to Deploy Rootkits Source: Den Iuzvyk, Tim Peck via Securonix Chinese Hackers Deploy Custom TinyShell Backdoors on Juniper Networks Routers Source: Mandiant FreeType Vulnerability Exploited in Wild Leading to Potential Code Execution Risk Source: Meta via Facebook Mozilla Urges Firefox Users to Update Before Root Certificate Expiration in March 2025 Source: Mozilla Surge in Explo...

Mar 13, 20259 min

March 12, 2025 - Cyber Briefing

👉 What's trending in cybersecurity today? 🚨 #CyberAlerts Lazarus Group Uses Fake npm Packages to Steal Crypto and Deploy Backdoors Source: Kirill Boychenko via Socket Fraudsters Evade Telecom Security Measures to Continue Growing SIM Swap Attacks Source: Nora Altriri via Group-IB Ballista Botnet Targets Vulnerable TP-Link Routers for Remote Code Execution Attacks Source: Matan Mittelman and Ofek Vardi via Cato Networks Apple Patches WebKit Zero-Day Vulnerability Exploited in Targeted Attacks S...

Mar 12, 202510 min

March 11, 2025 - Cyber Briefing

👉 What's the latest in the cyber world today? 🚨 #CyberAlerts Binance Impersonation Scam Uses Fake TRUMP Coins to Deploy ConnectWise RAT Source: Max Gannon via Cofense Intelligence CISA Adds Five Exploited Vulnerabilities to Catalog for Advantive VeraCore and Ivanti Source: CISA SideWinder APT Expands Attacks on Maritime Logistics and Nuclear Sectors Worldwide Source: Securelist Microsoft Time Travel Debugging Found to Have Bugs that Could Mask Malware Source: Dhanesh Kizhakkinan, Nino Isakovic...

Mar 11, 202510 min

March 10, 2025 - Cyber Briefing

👉 What's happening in cybersecurity today? 🚨 #CyberAlerts Microsoft WinDbg Flaw Exposes Developers to Remote Code Execution Risks Source: Microsoft via GitHub Python JSON Logger Flaw Exposes Millions to Remote Code Execution Attacks Source: Security Researcher Omnigodz via GitHub Commvault Webserver Vulnerability Grants Attackers Full Control of Servers Source: Commvault SilentCryptoMiner Malware Disguised as Bypass Tool Infects Thousands of Users Source: Securelist PrintSteal Cyber Crime Oper...

Mar 10, 202510 min

March 07, 2025 - Cyber Briefing

👉 What are the latest cybersecurity alerts, incidents, and news? 🚨 #CyberAlerts EncryptHub Expands Operations with Phishing Attacks and EncryptRAT Malware Source: KrakenLabs Akira Ransomware Uses Unsecured Webcam to Bypass EDR and Launch Attack Source: S-RM Over 1000 WordPress Sites Compromised by Malicious JavaScript Code Source: Himanshu Anand via c/side Malicious Campaign Targets Japanese Organizations with Cobalt Strike Exploits Source: Chetan Raghuprasad via Cisco Talos Elastic Fixes Crit...

Mar 07, 202510 min

March 06, 2025 - Cyber Briefing

👉 What's going on in the cyber world today? 🚨 #CyberAlerts Silk Typhoon Shifts Tactics to Target IT Supply Chains Using Remote Tools Source: Microsoft Threat Intelligence Critical GiveWP Plugin Flaw Exposes 10K WordPress Sites to Remote Code Execution Source: Wordfence BADBOX 2.0 Malware Compromises 50000 Android Devices Through Deceptive Apps Source: HUMAN Security’s Satori Threat Intelligence New Ransomware Group SecP0 Demands Ransom for Software Vulnerabilities Source: Prodaft via X New Des...

Mar 06, 202510 min

March 05, 2025 - Cyber Briefing

👉 What's trending in cybersecurity today? 🚨 #CyberAlerts Malicious Go Packages Found Targeting Linux and macOS with Loader Malware Threat Source: Kirill Boychenko via Socket Scammers Sent Fake Ransom Notes to US Companies Impersonating BianLian Group Source: Grayson North, Stephen Brzozowski, and Hermes Bojaxhi via Guidepoint Security Iran-Linked Hackers Target UAE Organizations with New Sosano Malware Campaign Source: Joshua Miller, Kyle Cucci via Proofpoint GrassCall Malware Campaign Targets...

Mar 05, 20259 min

March 04, 2025 - Cyber Briefing

👉 What's the latest in the cyber world today? 🚨 #CyberAlerts Researchers Find Surge in AES Encryption Use by Threat Actors to Evade Detection Source: Lee Wei Yeong via Palo Alto Network’s Unit 42 Phishing Campaign Uses ClickFix to Deliver Havoc C2 via SharePoint and PowerShell Source: Yurren Wan via Fortinet Internet Service Providers IPs Targeted in Brute Force Attacks to Deploy Infostealers Source: Splunk Threat Research Team Hackers Exploit AWS Misconfigurations to Launch Phishing Campaigns...

Mar 04, 20259 min
For the best experience, listen in Metacast app for iOS or Android