International Criminal Court (ICC) Targeted in Cyberattack, Investigation and Impact Assessment Underway

242/68 Thursday, July 3, 2025 On June 30, 2025, the International Criminal Court (ICC) issued an official statement confirming that it had been the target of a sophisticated and targeted cyberattack. The incident was promptly detected and contained through the Court’s internal security and alert mechanisms. The ICC is currently conducting a comprehensive impact assessment […]

ThaiCERT

July 3, 2025

Experts Warn of New Phishing Threats Using LLMs as Scammers Exploit AI to Deceive Users

241/68 Thursday, July 3, 2025 Cybersecurity experts from Netcraft have issued a warning about a new and emerging threat: cybercriminals are adapting techniques similar to SEO poisoning-manipulating search engine results-to deceive users into visiting phishing websites. This time, however, they’re targeting large language models (LLMs) like GPT by crafting content designed to appear trustworthy not […]

ThaiCERT

July 3, 2025

U.S. CISA Adds Citrix NetScaler Vulnerability to Known Exploited Vulnerabilities Catalog

240/68 Wednesday, July 2, 2025 The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a newly identified vulnerability in Citrix NetScaler to its Known Exploited Vulnerabilities (KEV) Catalog. The vulnerability, tracked as CVE-2025-6543, has a CVSS score of 9.2 and is classified as a memory overflow flaw. If exploited, it could lead to unintended […]

ThaiCERT

July 2, 2025

Hackers Breach Norwegian Dam, Open Water Valves for 4 Hours Due to Weak Password

239/68 Wednesday, July 2, 2025 A concerning incident occurred in April when unidentified hackers gained access to the control systems of the Lake Risevatnet dam, located near the town of Svelgen in southwestern Norway. The attackers managed to fully open the dam’s water discharge valves for a continuous period of four hours. The dam’s owner, […]

ThaiCERT

July 2, 2025

Cloudflare Launches End-to-End Encrypted Video Call Platform “Orange Meets” with Open Source Code

238/68 Tuesday, July 1, 2025 Cloudflare has launched an End-to-End Encryption (E2EE) feature for its video calling platform Orange Meets and released the source code as open source to promote transparency and allow developers, researchers, and security professionals to freely study or build upon the platform. Orange Meets was originally developed as a demo project […]

ThaiCERT

July 1, 2025

Bluetooth Chip Vulnerability Could Let Hackers Eavesdrop on Microphones and Mobile Phones

237/68 Tuesday, July 1, 2025 Cybersecurity researchers have disclosed critical vulnerabilities in Airoha Bluetooth chipsets used in over 29 popular audio devices from 10 leading manufacturers, including Beyerdynamic, Bose, Sony, Marshall, Jabra, and JBL. These vulnerabilities could allow attackers to eavesdrop on conversations or even steal sensitive user data. The affected devices include wireless speakers, […]

ThaiCERT

July 1, 2025

LapDogs: China-Linked Cyberespionage Campaign Hacks Over 1,000 SOHO Devices Worldwide

236/68 Monday, June 30, 2025 Researchers from the STRIKE team at SecurityScorecard have uncovered a cyber-espionage campaign known as “LapDogs,” which is linked to China-nexus threat actors. The operation involves the compromise of over 1,000 SOHO (Small Office/Home Office) devices, creating a covert network called the Operational Relay Box (ORB). This network is used to […]

ThaiCERT

June 30, 2025

France Arrests Senior Members of BreachForums Involved in Leaked Data Trade

235/68 Monday, June 30, 2025 France’s cybercrime unit, the Brigade de Lutte contre la Cybercriminalité (BL2C), has arrested five individuals believed to be senior members of BreachForums—a notorious dark web marketplace known for trafficking in leaked data, hacking tools, and breached databases. Among the four most recently arrested suspects are individuals known by the aliases […]

ThaiCERT

June 30, 2025

Citrix Releases Critical Patch for CVE-2025-6543 in NetScaler ADC

234/68 Friday, June 27, 2025 Citrix has released a security update addressing a critical vulnerability (CVE-2025-6543) in its NetScaler ADC product, which carries a CVSS severity score of 9.2. The flaw is categorized as a memory overflow, which may lead to unintended code execution and potentially enable Denial-of-Service (DoS) attacks. The vulnerability affects systems configured […]

ThaiCERT

June 27, 2025

Critical Vulnerability Found in Millions of Brother Printers

233/68 Friday, June 27, 2025 Researchers from Rapid7 have discovered eight security vulnerabilities affecting up to 748 models of printers, scanners, and label printers from five major manufacturers. Among these, 689 models are from Japanese manufacturer Brother, with 695 models affected by a critical vulnerability tracked as CVE-2024-51978, which cannot be patched via firmware. This […]

ThaiCERT

June 27, 2025
1 2 34