Infosecurity News
SonicWall: Attacks Linked to Legacy Bug and Password Use
SonicWall has claimed an uptick in Akira ransomware intrusions is due to legacy password use
#BHUSA: Security Researchers Uncover Critical Flaws in Axis CCTV Software
Claroty researchers have uncovered four vulnerabilities in a proprietary protocol used by surveillance equipment manufacturer Axis Communications
#BHUSA: Researchers Expose Infrastructure Behind Cybercrime Network VexTrio
According to Infoblox’s new report, the VexTrio cybercrime-enabling network originates from Italy and Eastern Europe
Clinical Data Stolen in Cyber-Attack on Kidney Dialysis Provider DaVita
The incident, reported to be ransomware-related, has resulted in attackers stealing sensitive personal and clinical data, including lab test results
#BHUSA: OpenAI Launches Red Teaming Challenge for New Open-Weight LLMs
GenAI company OpenAI has launched its first-ever open-weight models alongside a red teaming challenge
US Authorities Extradite Nigerian Man Accused of Hacking and Fraud
A Nigerian man accused of hacking, fraud and identity theft has been extradited from France to the US to face charges
#BHUSA: Exploring the Top Cyber Threats Facing Agentic AI Systems
During the pre-Black Hat AI Summit, Sean Morgan, Protect AI’s Chief Architect, highlighted the three most prominent security risks of using AI agents
Attackers Are Targeting Critical Apex One Vulnerabilities, Trend Micro Warns
Trend Micro has released a temporary fix for the flaws, which enable remote code execution on on-prem Apex One machines
#BHUSA: Malware Complexity Jumps 127% in Six Months
Adversaries are prioritizing stealth over scale, according to OPSWAT’s latest Threat Landscape Report
Ransomware Actors Expand Tactics Beyond Encryption and Exfiltration
Ransomware actors deploy a range of activities to make it harder for victims to recover and increase the consequences of not paying demands
NCSC Updates Cyber Assessment Framework to Build UK CNI Resilience
The UK’s National Cyber Security Centre has released the Cyber Assessment Framework 4.0
Chanel and Pandora Breached as Salesforce Campaign Continues
Chanel and Pandora have revealed data breaches reportedly linked to attacks on their Salesforce instances
Chinese Smishing Campaigns Compromise up to 115 Million US Payment Cards
SecAlliance highlighted the evolution in smishing campaigns orchestrated by Chinese syndicates, which exploit digital wallet tokenization
#BHUSA: Experts Urge Greater AI Supply Chain Transparency as GenAI Adoption Surges
Experts, including Allan Friedman, CISA's leading voice on SBOMs until July 2025, emphasized that AI BOMs should be standardized before being implemented
Critical Vulnerabilities Found in NVIDIA's Triton Inference Server
Critical vulnerabilities in NVIDIA's Triton Inference Server, discovered by researchers, could allow unauthenticated attackers to gain full server control through remote code execution
Cybersecurity Teams Hit by Lowest Budget Growth in Five Years
IANS found that stagnant budget growth rates have significantly impacted CISOs ability to increase their teams’ headcount
Pro-Iran Hackers Aligned Cyber with Kinetic War Aims
SecurityScorecard analysis highlights wide variety of Iranian threat actors and coordination with military activity
AI Fuels Record Number of Fraud Cases
Cifas noted a record number of filings in its National Fraud Database for the first half of 2025
Ghost in the Zip Reveals Expanding Ecosystem Behind PXA Stealer
Python-based PXA Stealer has stolen data from more than 4000 victims in over 62 countries, according to SentinalLabs
#BHUSA: Microsoft and Google Among Most Affected as Zero Day Exploits Jump 46%
Forescout also observed a big rise in CVEs added to CISA’s KEV catalog, some of which impacted end-of-life products
