Lightnews — Scholar-powered news

TechNadu @technadu.com · 1d

⚠️ Hackers weaponize Velociraptor DFIR tool - linking to LockBit, Warlock & Babuk ransomware attacks

Researchers at Sophos & Cisco Talos traced it to Storm-2603, using SharePoint exploits and outdated Velociraptor builds for privilege escalation.

#CyberSecurity #ThreatIntel #Infosec #CyberAwareness

1

TechNadu @technadu.com · 1d

⚠️ SonicWall VPN compromise detected - impacting 100+ accounts across multiple networks.

Huntress warns attackers used valid credentials, some performing scanning & lateral movement, linked to Akira ransomware campaigns.

#CyberSecurity #VPN #Ransomware #Infosec #CyberAwarenes

1

TechNadu @technadu.com · 1d

🇦🇺 Australia’s privacy enforcement just made history.
Australian Clinical Labs (ACL) fined AU$5.8M ($3.8M USD) for a ransomware-linked data breach exposing 223K patients.
The Privacy Commissioner called it a “turning point” for the country’s digital accountability.

#CyberSecurity #DataBreach

1

TechNadu @technadu.com · 1d

🧩 Awareness is easy - resilience is hard.

This week’s cybersecurity headlines prove it:
AI misuse, cloud gaps, ransomware arrests, and data leaks dominate the landscape.

💬 How do you define resilience in your organization’s security posture?

#CyberSecurity #Infosec #AIsecurity #DataBreach

1

TechNadu @technadu.com · 1d

⚠️ Payroll Pirates on the prowl!
Storm-2657 is hijacking U.S. university payrolls via Workday accounts using phishing, MFA bypass, and stealth inbox rules.
💬 How would you secure sensitive HR SaaS accounts? Comment below & follow TechNadu for ongoing threat intelligence coverage.
#Cybersecurity

TechNadu @technadu.com · 1d

⚠️ Massive botnet alert: Over 100,000 IPs across 100+ countries are launching coordinated RDP attacks against U.S. infrastructure, per GreyNoise.

This isn’t brute-force - it’s a synchronized operation with centralized control and shared TCP fingerprints.

#Cybersecurity #Infosec #CyberAwareness

1

TechNadu @technadu.com · 1d

🚨 Record-breaking DDoS alert: Aisuru botnet just peaked at 29.6 Tbps, powered by infected IoT devices on major U.S. ISPs.

Experts say outbound DDoS traffic is now a bigger issue than inbound floods - and few providers are ready.
💬 Should ISPs be required to block outbound attack traffic?

#InfoSec

TechNadu @technadu.com · 1d

🚨 Threat update: 175 malicious npm packages (26k downloads) used to host redirect scripts on unpkg — part of Beamglea phishing campaign. Attackers automated package generation, embedding victim emails in hosted JS to increase phishing success.

#phishing #cybersecurity #infosec #ThreatIntel

TechNadu @technadu.com · 1d

🚨 Austria rules Microsoft broke EU law over student data
The DSB says Microsoft 365 Education violated GDPR by tracking students via cookies and denying access to their personal data.
💬 What’s your take - can Big Tech ever truly comply with EU privacy standards in education?

#Microsoft #Privacy

TechNadu @technadu.com · 1d

🚨 Texas Cyber Incident
Sugar Land, TX confirms a cyberattack impacting city services like bill pay and permits.
Critical systems (911, police, fire) remain functional.
Texas has seen repeated ransomware hits across multiple cities in 2025.

#CyberAttack #InfoSec #CyberThreat #CyberAlert

TechNadu @technadu.com · 2d

Top Cybersecurity Updates Today
💥 CL0P ransomware exploited Oracle E-Business Suite zero-day (CVE-2025-61882)-100+ orgs impacted.
⚖️ FBI seizes BreachForums, but ShinyHunters threaten Salesforce data leak Oct 10
🤖 Research shows LLMs can be poisoned by small data samples-redefining AI threat models.

TechNadu @technadu.com · 2d

Read more: www.technadu.com/stealit-malw...

How are you detecting or mitigating threats hidden in Node.js or SEA-based apps? Share your thoughts below.
#CyberSecurity #Malware #NodeJS #Stealit #RAT #ThreatIntel #TechNadu

Stealit Malware Abuses Node.js Single Executable Application, Disguised as Games and VPNs on File-Sharing Sites

A new Stealit malware campaign is using Node.js Single Executable Application (SEA) for distribution and advanced data theft.

www.technadu.com

TechNadu @technadu.com · 2d

Stealit malware abuses Node.js SEA to disguise RATs in games & VPNs. Steals browser & crypto data, allows remote access, and continuously evolves to evade defenses.

#CyberSecurity #Malware #NodeJS #Stealit #TechNadu

1

TechNadu @technadu.com · 2d

🚨 SpainData Leak Exposed
Spanish police arrested two minors for leaking data of PM Pedro Sánchez and ministers via Telegram.
Hacker “N4t0X” allegedly built a tool exposing millions of citizens’ details.
Cyberterrorism charges have been filed in related cases.
#CyberCrime #DataLeak #Privacy

1

TechNadu @technadu.com · 2d

🌱 From soil to satellite - innovation in action.

Class 12 student Sharanya Mehta built a smart irrigation system using sensors and satellite data to help farmers in Haryana save water and fuel while improving crop yield.
When empathy meets engineering, the results are remarkable.

#AgriTech #STEM

TechNadu @technadu.com · 2d

Full article: www.technadu.com/llm-data-poi...

How can organizations secure their AI models from poisoned training data? Share your perspective below.
#AIsecurity #LLM #Anthropic #CyberSecurity #MachineLearning #DataPoisoning #TechNadu

LLM Data Poisoning Risk: LLMs Can Be Poisoned by Small Samples, Research Shows

New research from Anthropic reveals that a small number of malicious documents can create backdoor vulnerabilities in LLMs, posing significant AI security risks.

www.technadu.com

1

TechNadu @technadu.com · 2d

A small number of malicious files - just 250 - can poison large language models, introducing hidden backdoors and manipulated outputs.

Anthropic and UK AI Security Institute research warns this threat scales with model size.

#AIsecurity #LLM #Anthropic #DataPoisoning #CyberSecurity #TechNadu

1 1

TechNadu @technadu.com · 2d

Full story: www.technadu.com/fbi-seizes-b...

#CyberSecurity #DataBreach #FBI #ShinyHunters #SalesforceSecurity #InfoSec #TechNadu

FBI Seizes BreachForums as ShinyHunters Retaliate With Salesforce Extortion Threats

The FBI seized BreachForums. Its administrators, ShinyHunters, confirmed the seizure but still threaten to leak Salesforce data.

www.technadu.com

1

TechNadu @technadu.com · 2d

The FBI has seized BreachForums, but ShinyHunters claims Salesforce extortion & data leak will continue on Oct 10, 2025. All database backups since 2023 were compromised.

#CyberSecurity #DataBreach #FBI #ShinyHunters #Salesforce #InfoSec #TechNadu

1 1

TechNadu @technadu.com · 2d

Details: www.technadu.com/fake-vpn-spr...

This incident highlights the risks of unverified VPN and streaming apps. How do you verify the apps your organization or family installs on devices? Comment below.
#AndroidSecurity #CyberSecurity #Malware #BankingTrojan #VPN #MobileSecurity #TechNadu

Fake VPN and Streaming App Spreads Malware Targeting Android Banking

A fake VPN and IPTV app installs malware on Android, enabling remote access, targeting Android banking accounts.

www.technadu.com

TechNadu @technadu.com · 2d

Beware of Mobdro Pro IP TV + VPN, a fake Android app delivering the Klopatra banking Trojan. It can take full device control and steal banking credentials.

#AndroidSecurity #MobileSecurity #BankingTrojan #CyberSecurity #VPN #TechNadu

1

TechNadu @technadu.com · 2d

OpenVPN launches Access Server 3.0 with a modern React Admin Web UI, REST API support, SSO via SAML, MFA management, and enhanced admin tools.

More info: www.technadu.com/openvpn-upda...

#OpenVPN #VPN #CyberSecurity #ITAdmin #TechNadu

TechNadu @technadu.com · 2d

Details: www.technadu.com/hackers-use-...

Have you implemented cache monitoring for endpoint security in your organization? Share your strategies.
#CyberSecurity #Malware #Ransomware #Fortinet #TechNadu #SocialEngineering #EndpointSecurity

Hackers Use Fake Fortinet VPN Tool to Evade Antivirus and Install Malware

Hackers use a fake Fortinet VPN compliance tool and cache smuggling to bypass antivirus protection and deliver malware undetected.

www.technadu.com

TechNadu @technadu.com · 2d

Hackers deploy a fake Fortinet VPN Compliance Checker to bypass antivirus and install malware using cache smuggling and hidden PowerShell commands. Ransomware groups already copying the tactic.

#CyberSecurity #Fortinet #Malware #Ransomware #TechNadu

1

TechNadu @technadu.com · 2d

Details: www.technadu.com/over-100-org...

How should enterprises prepare for attacks that exploit zero-day flaws in core applications? Discuss below.
#Oracle #CL0P #CyberSecurity #Ransomware #EnterpriseSecurity #TechNadu #ZeroDay

Over 100 Organizations Affected in Oracle Hacking Campaign by CL0P Ransomware

A Google report reveals a widespread hacking campaign by the CL0P group targeting Oracle's E-Business Suite, affecting over 100 organizations.

www.technadu.com