Malware, Vulnerability Management, AI benefits/risks, Critical Infrastructure Security

Weekly security roundup: major breaches and emerging cyber threats

Cybersecurity threats continue to evolve as researchers identify significant vulnerabilities and large-scale attacks targeting global infrastructure, as first reported by Security Affairs.

The latest security landscape is marked by a surge in sophisticated cyberattacks, including a massive $6.3 billion theft from Binance attributed to North Korean actors. Simultaneously, researchers have uncovered critical vulnerabilities in widely used software, such as the PHP2Shell exploit targeting PHP hosts and a 16-year-old flaw in UEFI firmware that threatens server security globally. The rise of artificial intelligence has further complicated the threat environment, with hackers leveraging AI for fake bank calls, automated fraud, and the development of advanced Android spyware like uCreater.

Furthermore, physical infrastructure is increasingly at risk, as evidenced by investigations into suspected cyberattacks causing freezer failures at military bases. Organizations are also grappling with data exposure, including a breach involving 40,000 Homeland Security employees and the discovery of 18 billion files in nearly 500,000 exposed cloud buckets. These incidents highlight the urgent need for robust security protocols, as authorities and security professionals work to mitigate risks from both state-sponsored groups and independent cybercriminals across the digital ecosystem.

Source: Security Affairs

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

You can skip this ad in 5 seconds