20/01/2025 - Page 2 of 2

Ivanti Alerts to Critical Zero-Day Vulnerability in Connect Secure Exploited in the Wild

20/01/202506/02/2025 SECITHUB

Ivanti has issued an urgent security advisory concerning a critical remote code execution (RCE) vulnerability, identified as CVE-2025-0282, in its Connect Secure product. This zero-day flaw has been actively exploited by threat actors to compromise systems, prompting immediate action from organizations utilizing this technology. Ivanti became aware of the exploitation through its Integrity Checker Tool (ICT), which detected malicious activity on customers’ appliances. Subsequent investigations confirmed that threat actors have been actively leveraging CVE-2025-0282 in zero-day attacks to install malware on vulnerable devices. Notably, the same advanced persistent threat (APT)…

New Phishing Campaigns Exploit Fake Voicemail Messages to Target Office 365 Users

20/01/202506/02/2025 SECITHUB

Cybercriminals are employing sophisticated phishing tactics by sending fake voicemail notifications to deceive Microsoft Office 365 users into revealing their login credentials. This method has been observed across various sectors, including military, healthcare, and manufacturing. Attackers dispatch emails that mimic legitimate voicemail notifications, often including an HTML attachment disguised as an audio file. When opened, this attachment redirects the recipient to a counterfeit Microsoft login page designed to harvest their Office 365 credentials. Targeted Industries Recent campaigns have specifically targeted U.S. organizations in sectors such as military, security software development,…

Malicious npm Packages Exploit Gmail SMTP to Steal Solana Wallet Keys

20/01/202506/02/2025 SECITHUB

Cybersecurity researchers have uncovered a series of malicious npm packages designed to exfiltrate Solana private keys by exploiting Gmail’s SMTP service. These packages, including @async-mutex/mutex, dexscreener, solana-transaction-toolkit, and solana-stable-web-huks, masquerade as legitimate tools but contain hidden scripts that intercept and transmit private keys to attacker-controlled Gmail accounts. Attack Methodology The attackers employ typosquatting techniques, creating packages with names similar to popular libraries to deceive developers into installing them. Once integrated, these packages capture private keys during wallet interactions and use Gmail’s SMTP server to send the stolen data to the…

Otelier Data Breach Raises Serious Concerns Over Hospitality Cybersecurity

20/01/202506/02/2025 SECITHUB

Otelier, a prominent hotel management platform, has suffered a major data breach that has exposed the personal information and booking details of millions of guests. The breach, which affected leading hotel chains such as Marriott, Hilton, and Hyatt, has sparked significant concerns regarding cybersecurity within the hospitality industry. Initial reports indicate that the breach occurred between July and October 2024, with cybercriminals gaining unauthorized access to Otelier’s Amazon S3 cloud storage. Hackers reportedly exfiltrated approximately 8 terabytes of sensitive data, including names, addresses, phone numbers, reservation details, and partial payment…

U.S. Strikes Back: Sanctions Imposed on Chinese Hackers for Treasury and Critical Infrastructure Breaches

20/01/202506/02/2025 SECITHUB

In a bold move to safeguard national cybersecurity, the U.S. Department of the Treasury has imposed sanctions on Sichuan Juxinhe Network Technology Co., a Beijing-based cybersecurity firm, and Yin Kecheng, a Shanghai-based hacker. These entities have been accused of orchestrating sophisticated cyber intrusions targeting the U.S. Treasury and critical infrastructure. The sanctions aim to curb their operations and send a strong message against state-sponsored cyberattacks. The Salt Typhoon Breach: A Nationwide Threat The cyber espionage group known as Salt Typhoon, allegedly linked to China’s Ministry of State Security (MSS), executed…

How AI is Revolutionizing the Pentagon’s Kill Chain Strategy

20/01/202506/02/2025 SECITHUB

The U.S. Department of Defense (DoD) is rapidly advancing its artificial intelligence (AI) capabilities to enhance military operations and decision-making processes. With AI integration, the Pentagon aims to speed up the “kill chain” — the process of identifying, targeting, and engaging threats in the battlefield. This development signals a significant shift in modern warfare, where speed and precision are crucial to maintaining a strategic advantage. The kill chain refers to the sequence of military actions required to identify a target, assess threats, plan responses, and execute actions effectively. Traditionally, this…