SecurityWeek\u2019s cybersecurity information roundup offers a concise compilation of noteworthy tales which may have slipped beneath the radar.<\/strong><\/p>\n

We offer a invaluable abstract of tales that won’t warrant a complete article, however are nonetheless necessary for a complete understanding of the cybersecurity panorama.<\/p>\n

Every week<\/a>, we curate and current a set of noteworthy developments, starting from the newest vulnerability discoveries and rising assault methods to vital coverage modifications and business stories.\u00a0<\/p>\n

Listed below are this week\u2019s tales:<\/strong><\/p>\n

US Division of Warfare unveils new cybersecurity framework<\/strong><\/p>\n

The Division of Warfare has introduced a brand new Cybersecurity Threat Administration Assemble (CSRMC)<\/a> to modernize its cyber defenses. The CSRMC is a five-phase, ten-tenet framework that replaces guide processes with a dynamic, automated method to make sure steady monitoring and real-time protection. The objective is to embed cybersecurity into each stage of system growth and operations for the technological superiority of warfighters towards evolving threats.<\/p>\n

Dragos unveils main platform replace<\/strong><\/p>\n

ICS\/OT cybersecurity agency Dragos has introduced Dragos Platform 3.0<\/a>, a significant replace that delivers new capabilities to empower defenders to behave sooner and extra confidently. The up to date platform brings a brand new Insights Hub for consolidating alerts, streamlined workflows, AI-enhanced vulnerability processes, and smaller footprint deployment choices.<\/p>\n

Commercial. Scroll to proceed studying.<\/span><\/div>\n
3 million impacted by hack at South Korean bank card firm<\/strong><\/p>\n
South Korean bank card firm Lotte Card was just lately focused in a hacker assault<\/a> that resulted within the data of practically three million individuals being compromised. The stolen knowledge consists of data comparable to resident registration numbers, digital fee codes and, within the case of 280,000 prospects, extremely delicate card data that can be utilized for fraud.\u00a0<\/p>\n
LockBit 5.0<\/strong><\/p>\n
Following a legislation enforcement crackdown<\/a> on the LockBit ransomware operation, cybercriminals just lately introduced the discharge of LockBit 5.0. Pattern Micro researchers have analyzed LockBit 5.0<\/a>, together with the Home windows, Linux and ESXi variants of the ransomware. The safety agency famous that the brand new variants use randomized 16-character file extensions, are configured to keep away from Russian-language programs, and clear occasion logs after encryption.\u00a0<\/p>\n
Maryland Transit Administration focused by ransomware group<\/strong><\/p>\n
The Maryland Transit Administration (MTA) has disclosed a cybersecurity incident<\/a> that concerned unauthorized entry to a few of its programs. The incident resulted in some on-line providers being disrupted and the MTA confirmed that some knowledge was stolen within the assault. The Rhysida ransomware group took credit score for the assault.<\/p>\n
Vulnerability affecting OnePlus smartphones disclosed with out patch<\/strong><\/p>\n
Rapid7 has disclosed the technical particulars of a vulnerability<\/a> affecting OnePlus smartphones after it was not capable of responsibly report its findings to the seller. The safety gap (CVE-2025-10184) impacts OxygenOS and it may enable a malicious app to learn SMS\/MMS knowledge and metadata with none consumer interplay, doubtlessly exposing MFA codes. After Rapid7 printed a weblog publish describing its findings, OnePlus advised the safety agency that it\u2019s investigating the problem.\u00a0<\/p>\n
Microsoft says AI detected AI-aided phishing marketing campaign\u00a0<\/strong><\/p>\n
Microsoft says its AI-powered safety programs had been capable of detect and block<\/a> a phishing marketing campaign that leveraged AI to obfuscate a payload in an effort to evade defenses. An evaluation of the malicious code by Microsoft\u2019s Safety Copilot revealed that the code was \u201cnot one thing a human would sometimes write from scratch as a result of its complexity, verbosity, and lack of sensible utility.\u201d<\/p>\n
Over 270,000 Indian financial institution switch information uncovered<\/strong><\/p>\n
Researchers at UpGuard found<\/a> an unprotected Amazon S3 storage bucket containing greater than 270,000 paperwork, every detailing a cash switch pertaining to one among 38 Indian banks. The uncovered data included checking account numbers, transaction quantities, names, telephone numbers, and e mail addresses. UpGuard has not been capable of decide the supply of the leak.<\/p>\n
Co-op misplaced \u00a3206 million in gross sales as a result of cyberattack<\/strong><\/p>\n
Co-op reported this week that the latest cyberattack has price it \u00a3206 million<\/a> ($275 million) in misplaced gross sales. The cyberattack resulted in a knowledge breach impacting the data of 6.5 million members. The disruptions attributable to the incident led to digital fee points and empty retailer cabinets. Marks & Spencer<\/a>, which was focused in the identical assault, estimated in Might that the incident would price it \u00a3300 million (roughly $400 million).\u00a0<\/p>\n
Associated<\/strong>: In Different Information: 600k Hit by Healthcare Breaches, Main ShinyHunters Hacks, DeepSeek\u2019s Coding Bias<\/a><\/p>\n
Associated<\/strong>: In Different Information: $900k for XSS Bugs, HybridPetya Malware, Burger King Censors Analysis<\/a>\n\t\t\t<\/p>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"
SecurityWeek\u2019s cybersecurity information roundup offers a concise compilation of noteworthy tales which may have slipped beneath the radar. We offer a invaluable abstract of tales that won’t warrant a complete article, however are nonetheless necessary for a complete understanding of the cybersecurity panorama. Every week, we curate and current a set of noteworthy developments, starting […]<\/p>\n","protected":false},"author":2,"featured_media":7134,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[58],"tags":[361,3653,635,4612,121,5598,1061,828],"class_list":["post-7132","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-cybersecurity","tag-department","tag-framework","tag-lockbit","tag-news","tag-oneplus","tag-vulnerability","tag-war"],"_links":{"self":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/7132","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7132"}],"version-history":[{"count":1,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/7132\/revisions"}],"predecessor-version":[{"id":7133,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/7132\/revisions\/7133"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/media\/7134"}],"wp:attachment":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7132"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7132"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7132"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}