Your Weekly Cybersecurity Digest

Welcome to the CyberDigest, your go-to source for the latest news and updates in the ever-evolving world of cybersecurity. In this fast-paced digital age, staying informed about the latest threats, technological advancements, and best practices is crucial. Our newsletter is designed to keep you ahead of the curve with timely reports on cyber attacks, data breaches, emerging security technologies, regulatory changes, and expert insights.

Whether you're a seasoned security professional or simply keen to safeguard your digital life, CyberDigest is here to equip you with the knowledge you need to navigate the complex landscape of cybersecurity. Stay vigilant, stay informed, and stay secure with us.

Following the Celebrity Tiktok Accounts that were Hacked...

With increased exposure comes increased risk, and celebrities learned this the hard way this past week! It's not just celebrities that can be affected.

Breached credentials or leaked data can destroy a brand’s, a person's, or a company's reputation in an instant.

Want to protect your Brand and VIP persons? Want to make sure your leaked data is taken down? Check out REVA, our proprietary Brand & VIP Protection solution. Click to learn more.

New Attack Technique 'Sleepy Pickle' Targets Machine Learning Models

The security risks posed by the Pickle Format have once again come to the fore with the discovery of a new "hybrid machine learning (ML) model exploitation technique" dubbed Sleepy Pickle.

The attack method, per Trail of Bits, weaponizes the ubiquitous format used to package and distribute machine learning (ML) models to corrupt the model itself, posing a severe supply chain risk to an organization's downstream customers. Read more.

Arid Viper Launches Mobile Espionage Campaign with AridSpy Malware

The threat actor known as Arid Viper has been attributed to a mobile espionage campaign that leverages trojanized Android apps to deliver a spyware strain dubbed AridSpy. Read more.

Black Basta Ransomware May Have Exploited MS Windows Zero-Day Flaw

Threat actors linked to the Black Basta ransomware may have exploited a recently disclosed privilege escalation flaw in the Microsoft Windows Error Reporting Service as a zero-day, according to new findings from Symantec.

The security flaw in question is CVE-2024-26169 (CVSS score: 7.8), an elevation of privilege bug in the Windows Error Reporting Service that could be exploited to achieve SYSTEM privileges. It was patched by Microsoft in March 2024. Read more.

Pakistan-linked Malware Campaign Evolves to Target Windows, Android, and macOS

Threat actors with ties to Pakistan have been linked to a long-running malware campaign dubbed Operation Celestial Force since at least 2018.

The activity, still ongoing, entails the use of an Android malware called GravityRAT and a Windows-based malware loader codenamed HeavyLift, according to Cisco Talos, which are administered using another standalone tool referred to as GravityAdmin. Read more.