Cybersecurity News | Daily Recap [02 Jun 2025]

Cybersecurity News | Daily Recap [02 Jun 2025]
Recent cybersecurity updates highlight active exploitation of Adreno GPU vulnerabilities and the critical vBulletin flaw, underscoring the urgency for patching and improved security practices. The reports also reveal threats from TrickBot, GhostSpy, and NetBird spear-phishing campaigns, as well as geopolitical influence campaigns and regional cyber incidents. #AdrenoGPU #vBulletin #TrickBot #GhostSpy #NetBird

Vulnerabilities & Exploits

  • Qualcomm urges urgent patching as hackers actively exploit three critical Adreno GPU flaws linked to commercial spyware in targeted attacks – Adreno GPU Exploits, Adreno Zero-Days Fixed
  • A critical vBulletin vulnerability is under active exploitation with remote code execution attempts detected by honeypots shortly after disclosure – vBulletin Exploited
  • Technical details reveal a critical Cisco IOS XE remote code execution vulnerability via arbitrary file upload targeting wireless controllers and switches – Cisco IOS XE Flaw
  • Microsoft releases emergency update addressing Windows 11 startup failures caused by the KB5058405 patch impacting virtual environments like Azure VMs and Hyper-V – Windows 11 Startup Fix
  • Google Chrome to distrust TLS certificates issued by Chunghwa Telecom and Netlock after July 2025 due to reliability concerns, enhancing browser security – Chrome Distrust Certificates
  • Proof-of-concept and source leaks surface for Fortinet bug, SilverRAT malware, and NodeSnake RAT targeting UK universities, exposing ongoing malware development – Malware and Vulnerability Updates

Advanced Threats & Cybercrime

  • German authorities identify Vitaly Kovalev as leader of the TrickBot malware gang responsible for global ransomware attacks and critical infrastructure targeting – TrickBot Leader Unmasked
  • Emerging hubs like the Russian Market dominate the stolen credentials trade with logs from infostealers targeting SaaS and SSO accounts after the takedown of other marketplaces – Russian Market Rise
  • Recent weekly recaps detail nation-state APT campaigns including APT41, innovative AI-driven malware like GhostSpy and Lumma Stealer, and ransomware groups such as NightSpire and Lyrix focusing on SMEs and geopolitical espionage – APT & AI Malware Update, Threat Research Recap
  • Spear-phishing campaigns targeting global financial executives use the legitimate remote access tool NetBird combined with encrypted redirects and CAPTCHA evasion for persistent access – NetBird Phishing Campaign

Cyber Espionage & Disinformation

  • Meta dismantles covert influence operations from China, Iran, and Romania leveraging fake accounts and AI personas to manipulate public opinion across regions – Meta Influence Campaigns
  • US government investigates AI-generated voice and impersonation scams targeting officials like Susie Wiles, emphasizing risks to government communication security – AI Impersonation Scams

Regional Cyber Incidents & Defense

  • Malaysia’s home minister’s WhatsApp hacked via VPN attack to spread malicious links, highlighting regional cyber threat escalation – Malaysia Minister Hack
  • The adoption of Network Detection and Response (NDR) technology is rising across critical industries to improve early threat detection, compliance, and infrastructure protection – NDR Defense Strategy

Cybersecurity News | Daily Recap – hendryadrian.com

Views: 20