A TransUnion data breach exposed 4.4m US consumers' Social Security numbers via a Salesforce hack. The attack is linked to hacker groups UNC6395.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Miami, United States, 28th August 2025, CyberNewsWire

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Recorded Future links Blind Eagle to five attack clusters targeting Colombia’s government and critical sectors, exposing cyber espionage and data theft risks.

A new Group-IB report reveals ShadowSilk, a hybrid Chinese and Russian-speaking threat cluster that uses Telegram bots for cyber espionage against Central Asian governments.

A supply chain attack on the Nx build system is stealing crypto wallets and SSH keys from developers. The malware also abuses AI tools for data exfiltration.

A new Anthropic report reveals how criminals are weaponizing AI systems to automate attacks, create AI-generated ransomware, and secure fraudulent employment.

A ransomware attack on the Swedish company Miljödata has paralyzed services for 200 municipalities and regions, affecting sick leave and injury reporting systems.

A Linux kernel maintainer is using an AI assistant to more efficiently backport patches to stable releases, with the AI providing explanations for its recommendations.

A new bill would revive 'letters of marque' for cybercrime, allowing private operators to hack back at foreign scam farms and recover stolen assets under federal oversight.

Sangoma has issued an urgent advisory for an actively exploited zero-day in FreePBX. Admins with internet-exposed control panels are urged to patch immediately.

A new Microsoft report reveals that the Storm-0501 threat actor is pivoting to cloud-native ransomware, using cloud tools to exfiltrate and destroy data without malware.

The NSA, CISA, and partners have released a joint advisory exposing how Chinese APT groups are compromising telecom and government networks for global espionage.

Octosuite is an open-source lightweight yet advanced osint framework that targets GitHub users and organizations with over 20+ features

The Cloud Software Group has released urgent updates for NetScaler ADC and Gateway to patch a zero-day (CVE-2025-7775) being actively exploited in the wild.

A critical flaw in Docker Desktop for Windows allows attackers to escape containers and execute code on the host with two HTTP requests. Users should update now.

A ransomware attack on MathWorks, the developer of MATLAB, exposed the personal information of over 10,000 users. The company is now offering identity monitoring.

A new report reveals a widespread data theft campaign targeting Salesforce instances. Attackers used compromised OAuth tokens from a third-party app to steal data and credentials.