Daily Cyber Brief
Chinese cyber group targets Asian telecom companies, researchers find over 400 vulnerabilities in the US defense industrial base, and Pegasus spyware persists...

Cybersecurity
A Chinese state-sponsored espionage group known as Override Panda has resurfaced in recent weeks with a new phishing attack with the goal of stealing sensitive information. "The Chinese APT used a spear-phishing email to deliver a beacon of a Red Team framework…
Israel's government on Monday ordered communications firms to step up their cyber security efforts in the wake of a rise in attempted hacking attacks. New regulations are currently being implemented in which mandatory and unified standards will have to be met, the…
The largest supermarket chain in Trinidad struggled to recover from a cyberattack that caused outages at all of its locations throughout the country this weekend. On Thursday, Massy Stores released a statement saying it was experiencing “technical challenges” with its front…
Researchers have identified a new cluster of malicious cyber activity tracked as Moshen Dragon, targeting telecommunication service providers in Central Asia. While this new threat group has some overlaps with "RedFoxtrot" and "Nomad Panda," including the use of…
Google has expanded its bug-bounty program to offer a whopping $1.5 million for a top-notch Android 13 Beta exploit – specifically, for a hack of the Titan M security chip that ships with Pixel phones. Android 13 Beta became available last week to developers and early adopters…
The U.S. government disclosed that the FBI conducted as many as 3.4 million warrantless searches of U.S. citizens’ data last year that the National Security Agency had collected. The data was collected and analyzed under the Foreign Intelligence Surveillance Act’s (FISA)…
Data was downloaded from cellphones used by the prime minister and the defense minister of Spain that were infected with powerful spyware known as Pegasus from an Israeli company, the country’s government said on Monday. The revelation that Pegasus reached the highest…
The ransom note the Rhode Island Public Transit Authority received on Aug. 5 began with a chilling statement. “All of your files are currently encrypted by Conti strain,” the cyberhackers wrote. The next day, RIPTA hired Coveware Inc., a firm that helps entities recover hacked…
After knocking out the internet service in Kherson, Ukraine, this weekend, Russian forces reinstated service but routed it through Russia’s network instead of Ukrainian telecommunications infrastructure. Ukrainian officials and internet access monitor…
A year-long bug bounty program that scrutinized a fraction of the massive U.S. defense industrial base turned up more than 400 valid vulnerabilities, the effort’s organizers announced Monday. Nearly three hundred security researchers from bug bounty vendor…