Alert! Hackers Use Fake AI Tools to Spread Noodlophile Malware for Data Theft and System Takeover

174/68 Wednesday, May 14, 2025 Cybersecurity researchers at Morphisec have issued a warning about a new cyberattack campaign that exploits the popularity of AI tools to trick users into downloading a newly discovered malware called Noodlophile Stealer. This information stealer malware is being spread under the guise of fake AI applications like “Dream Machine” or […]

ThaiCERT

May 14, 2025

CISA Revamps Cyber Threat Notification System, Emphasizes Social Media and Email Alerts

173/68 Wednesday, May 14, 2025 The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has announced a significant change in how it shares cybersecurity-related information. Starting May 12, 2025, CISA will discontinue general updates on its “Cybersecurity Alerts & Advisories” webpage and will shift to using social media and email as primary channels for disseminating cybersecurity […]

ThaiCERT

May 14, 2025

South African Airways Hit by Cyberattack, Website and Internal Systems Temporarily Affected but Operations Continue

172/68 Tuesday, May 13, 2025 South African Airways (SAA), the national carrier of South Africa, confirmed that it experienced a cyberattack on May 3, 2025, which temporarily disrupted its website, mobile app, and some internal operating systems. However, flight operations and core services remained unaffected. The airline’s IT team quickly brought the situation under control, […]

ThaiCERT

May 13, 2025

CERT-In Issues Urgent Warning as Hacktivists Launch Cyber Onslaught Against Indian Systems

171/68 Tuesday, May 13, 2025 Following the April 22, 2025, shooting incident targeting tourists in Pahalgam, Kashmir, tensions between India and Pakistan have rapidly escalated into the cyber domain. Hacktivist groups from across Asia, the Middle East, and North Africa (MENA) have united under an operation dubbed #OpIndia, targeting Indian government agencies and critical infrastructure. […]

ThaiCERT

May 13, 2025

Google Releases Patch for CVE-2025-27363 on Android After Confirmed Exploitation

170/68 Thursday, May 8, 2025 Google has released its May 2025 Android security update, addressing 46 vulnerabilities. Among them is CVE-2025-27363, a high-severity flaw (CVSS score: 8.1) that has already been exploited in the wild. While Google did not disclose specific details about the attackers or the nature of the exploitation, it confirmed that the […]

ThaiCERT

May 8, 2025

CISA Adds CVE-2025-34028 in Commvault Command Center to KEV Catalog

168/68 Wednesday, May 7, 2025 The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the vulnerability identified as CVE-2025-34028, affecting Commvault Command Center, to its Known Exploited Vulnerabilities (KEV) catalog after confirming it is being actively exploited following public disclosure. This vulnerability, which has a maximum CVSS score of 10.0, is a path traversal […]

ThaiCERT

May 7, 2025

Venom Spider Hackers Target HR Personnel With Malware-Laced Job Applications

167/68 Wednesday, May 7, 2025 Researchers at Arctic Wolf Labs have uncovered a new cyberattack campaign conducted by a threat group called Venom Spider, which is specifically targeting human resources personnel – particularly recruiters and hiring managers – with phishing emails disguised as job applications. These emails often include what appear to be resumes from […]

ThaiCERT

May 7, 2025

U.S. Authorities Charge Alleged Operator of Black Kingdom Ransomware Group

166/68 Tuesday, May 6, 2025 The U.S. Department of Justice (DoJ) has charged Rami Khaled Ahmed, a 36-year-old Yemeni national, suspected of operating the Black Kingdom ransomware campaign. Ahmed is accused of being involved in over 1,500 ransomware attacks on Microsoft Exchange servers worldwide, including targets in the United States such as schools, hospitals, and […]

ThaiCERT

May 6, 2025

Despite Arrests, Scattered Spider Hacker Group Continues Cyberattacks on Major Organizations

165/68 Tuesday, May 6, 2025 Despite law enforcement agencies in multiple countries identifying and arresting several members of the hacker group Scattered Spider, the group continues to launch cyberattacks against high-profile targets. Recent reports indicate that the group was behind an attack on the network of Marks & Spencer, a major British retailer, using the […]

ThaiCERT

May 6, 2025

SonicWall Reveals Active Exploitation of Two Security Vulnerabilities Affecting SMA100 Devices

164/68 Friday, May 2, 2025 SonicWall has disclosed that two security vulnerabilities affecting its Secure Mobile Access (SMA100) devices continue to be actively exploited in the wild, despite patches having been released. The details of the vulnerabilities are as follows: These vulnerabilities affect the SMA 100 Series, including the SMA 200, 210, 400, 410, and […]

ThaiCERT

May 2, 2025
1 7 8 9 33