Author: Staff Writer

Fast Facts Malicious GitHub Campaign: A hacker is exploiting hackers, gamers, and researchers by distributing infected source code on GitHub, particularly using the Sakura RAT, which contains hidden backdoors for remote access. Automated Deception: The malicious repositories use automated commits to create an illusion of activity and legitimacy, with one repository showcasing nearly 60,000 commits in just a few months. Multi-Stage Infection Process: Downloading and building the compromised code initiates a multi-step infection involving VBS scripts and PowerShell, ultimately leading to the installation of various info-stealers and remote access trojans. Widespread Targeting: While primarily aimed at hackers, the campaign also…

Welcome to your Daily CyberTech Highlights! Each day, we bring you the most essential news and insightful analysis from the world of Cybersecurity, Cloud security, Data protection, Data privacy and Technology. Stay informed on the latest trends, threats, and innovations shaping the digital landscape, so you can make informed decisions and stay ahead of the curve. Let’s dive into today’s top stories! Daily CyberTech Highlights Brand Covered: Vectra AI, Zscaler Headline: Vectra AI and Zscaler Deepen Alliance for Enhanced SASE Traffic Visibility Vectra AI, Inc., the cybersecurity AI company that protects modern networks from modern attacks, announced an expanded technical integration with Zscaler, the…

Essential Insights AS-REP Roasting Threat: AS-REP roasting targets Active Directory user accounts without Kerberos pre-authentication, allowing attackers to exploit vulnerabilities by sending AS-REQ requests to extract Ticket Granting Tickets (TGTs) for offline brute-force attacks. Cybersecurity Risk: Major cybersecurity agencies highlight AS-REP roasting as a critical technique affecting Active Directory security, contributing to 44.7% of breaches linked to stolen credentials, making this a significant concern for organizations. Preventative Measures: Organizations can mitigate risks by enforcing Kerberos pre-authentication, identifying vulnerable accounts with specific scripts, and monitoring network activity through logging techniques tied to Event IDs indicating TGT requests or failed logins. Password…

Fortinet showcases free, education-focused training service that builds foundational cyber awareness among students at the 2025 AIS NSW ICT Management and Leadership Conference – Digital Directors Fortinet, the global cybersecurity leader driving the convergence of networking and security, announced the rollout of its Security Awareness and Training Service: Education Edition curriculum across all primary and secondary schools in Australia. Technology is increasingly embedded in every aspect of our daily lives. Building cyber resilience starts with early education and Fortinet is committed to equipping students and educators with the skills they need to operate safely and responsibly online. The launch of Fortinet’s curriculum in…

Fast Facts Targeted Social Engineering: The hacker group identified as UNC6040 is conducting social engineering attacks against multi-national companies, posing as IT support to manipulate employees into installing a malicious version of Salesforce’s Data Loader application. Data Exfiltration Process: Once access is granted, attackers export sensitive Salesforce data and subsequently use the access to infiltrate other platforms like Okta and Microsoft 365, leading to broader data exfiltration. Extortion Tactics: After initial intrusions, attackers may take months to extort companies, claiming affiliation with the notorious ShinyHunters group to enhance pressure on victims. Security Recommendations: Google advises organizations to restrict API permissions,…

TrustLogix, a leading provider of AI-powered security platforms, introduced advanced AI-powered data security and compliance capabilities for Snowflake, the AI Data Cloud company, at Snowflake’s annual user conference, Snowflake Summit 2025. By leveraging these AI-powered data security capabilities, joint customers can harness the power of Snowflake data and AI, and maintain access and compliance controls. “As organizations increasingly rely on the Snowflake AI Data Cloud for secure data sharing and AI workloads, managing complex access controls in highly regulated environments is paramount,” said Anoosh Saboori, Head of Product Security at Snowflake. “TrustLogix’s platform leverages and complements Snowflake’s native capabilities with complex requirements like…

Quick Takeaways Data Breach Incident: Lee Enterprises, a major U.S. newspaper publisher, is notifying nearly 40,000 individuals about the theft of their personal information during a ransomware attack in February 2025, which compromised names and Social Security numbers. Attack Details: The attack was confirmed on February 3, 2025, leading to significant disruptions in printing and delivery operations due to a systems outage caused by the ransomware, attributed to the Qilin group. Extent of the Breach: The Qilin ransomware gang claimed to have stolen 120,000 documents (350 GB) of sensitive data and threatened to release it publicly, which includes critical financial…

MIND, the upcoming leader in data loss prevention (DLP), announced $30M Series A funding, just seven months after emerging from stealth, led by Paladin Capital Group and Crosspoint Capital Partners with participation from Okta Ventures and existing investor YL Ventures. This round brings MIND’s total funding to over $40M and will fuel MIND’s strategic growth and enhance its data security platform capabilities. In the past seven months, MIND has achieved 500% customer growth, gained significant traction among Fortune 1000 companies, prevented sensitive data loss across hundreds of thousands of endpoints through its proprietary endpoint agent and delivered immediate value by protecting the sensitive data of…

Fast Facts Significant Breach Growth: The Play ransomware gang has breached approximately 900 organizations as of May 2025, tripling reported victims since October 2023, impacting businesses across multiple continents. Advanced Tactics: The gang employs recompiled malware, complicating detection efforts, and pressures victims through direct threats via phone calls to release stolen data unless ransom is paid. Exploitation of Vulnerabilities: Initial access brokers affiliated with Play are exploiting vulnerabilities in remote monitoring tools, paving the way for potential future ransomware attacks. Preventative Measures Recommended: Security agencies urge organizations to keep systems updated, implement multi-factor authentication (MFA), maintain offline backups, and develop…

Global IT services provider FPT has signed a Memorandum of Understanding (MOU) with Cymotive Technologies, an Israel-based leader in automotive cybersecurity. This agreement initiates a collaboration to introduce Cymotive’s proven cybersecurity solutions to FPT’s established automotive customer base, jointly develop and deliver next-generation cybersecurity solutions for Software-Defined Vehicles (SDVs), and advance safer, smarter, and more connected mobility. The MOU lays the groundwork for a strategic collaboration focused on the joint development and commercialization of advanced cybersecurity solutions tailored to the evolving demands of the automotive industry. The agreement focuses on leveraging and commercializing Cymotive’s pioneering cybersecurity solutions, extensive engineering experience, and…