TLDR INFORMATION SECURITY 2025-06-06

GET THE GUIDE

EXCLUSIVE: HACKERS LEAK 86 MILLION AT&T RECORDS WITH DECRYPTED SSNS

Hackers leaked 86 million AT&T customer records, including full names, addresses, and decrypted Social Security Numbers. The data may be linked to a 2024 breach involving the Snowflake cloud platform, but this is not confirmed. AT&T has not yet said whether this new leak is part of a past or new breach.

RANSOMWARE GANG CLAIMS RESPONSIBILITY FOR KETTERING HEALTH HACK

Ransomware group Interlock claimed responsibility for hacking Kettering Health's Ohio hospital network, stealing 940GB of data, including patient records and employee information. Two weeks ago, the attack forced system shutdowns. Interlock's public claim suggests ransom negotiations failed.

FBI: PLAY RANSOMWARE BREACHED 900 VICTIMS, INCLUDING CRITICAL ORGS

In a joint effort with CISA and the Australian Cyber Security Centre, the FBI has stated that the Play ransomware gang has breached roughly 900 organizations as of May. The Play Ransomware-as-a-Service (RaaS) operation threatens organizations, saying that it will release stolen information on its leak site to pressure victims into paying. Play is also notable in that it negotiates with victims over email as opposed to a Tor negotiations page and each infection uses recompiled malware to complicate detection.

SECURITY ISN'T A SOLO SPORT: COMMUNITY, BURNOUT, AND IDENTITY AT BSIDES312

Over 260 professionals gathered at BSides312, a cybersecurity conference at Chicago's Irish American Heritage Center, to discuss community, burnout, and human-centered security challenges. Key speakers highlighted identity misconfigurations and privilege escalation in cloud environments as major attack vectors, advocating for active defense strategies beyond traditional firewalls and antivirus solutions. The conference emphasized that effective security relies on strong human connections, psychological safety, and communication hygiene within teams, as technical vulnerabilities often arise from human and organizational failures rather than technical issues.

ADVANCED PROTECTION: GOOGLE'S STRONGEST SECURITY FOR MOBILE DEVICES

The Advanced Protection Program provides Google's strongest protections against targeted attacks on Android devices. Advanced Protection provides a one-click toggle that allows users to enable a comprehensive security suite that cannot be disabled. Some Advanced Protection features include intrusion logging, offline and theft detection lock, inactivity report, safe browsing, insecure WiFi network protections, and spam detection and protection.

DEMYSTIFYING MYTH STEALER: AN ‘INFOSTEALER' THAT TARGETED VIDEO GAMES

Myth Stealer is a Rust-based infostealer malware marketed on Telegram since December. It targets gamers through fraudulent gaming sites, stealing passwords, cookies, and browser data. This post goes in depth on the techniques it uses, such as fake windows and advanced evasion techniques.

THREATSPIKE (PRODUCT LAUNCH)

TheatSpike provides organizations with full visibility across endpoints, network, cloud assets, email services, and applications, leveraging AI for automation and continuous threat hunting.

OFFSEC-TOOLS

This repository is intended for pentesters and red teamers using various offensive security tools during their assessments.

INTUNE RBAC

Intune RBAC provides a comprehensive PowerShell-based tool for managing and auditing Role-Based Access Control (RBAC) in Microsoft Intune.

FEDS SEIZE BIDENCASH CARDING MARKET AND ITS CRYPTO PROFITS

US and Dutch authorities seized BidenCash, a marketplace for stolen credit card data, on June 4. They took 145 domains offline, along with cryptocurrency wallets and infrastructure. Operating openly since March 2022, it had over 117,000 users and sold over 15 million payment card records, generating an estimated $17 million in illicit revenue. Authorities collaborated with cybersecurity firms to map the infrastructure, leaving victims whose data was sold or leaked vulnerable and needing to monitor their accounts closely.

CEOS NOW LEARNING SELF-DEFENCE TO PROTECT AGAINST CYBER THREATS

CEOs are now learning self-defense to stay safe from cyber threats. Cybercriminals are targeting company leaders more often. Training helps CEOs defend themselves and their businesses.

HMRC HAS LOST £47 MILLION IN BREACH OF 100,000 TAXPAYER ACCOUNTS, MPS HEAR

HMRC lost £47 million in a phishing scam that affected 100,000 taxpayers' accounts. Criminals used stolen identity data from external sources to create fake PAYE accounts and claim fraudulent repayments. HMRC emphasized this wasn't a cyber attack on its systems. Affected accounts were locked. Customers face no financial loss. Arrests have been made.

LEE ENTERPRISES SAYS 40,000 HIT BY RANSOMWARE-CAUSED DATA BREACH

Lee Enterprises has disclosed a data breach that affects almost 40,000 individuals.

GERMANY FINES VODAFONE $51 MILLION FOR PRIVACY, SECURITY BREACHES

Germany fined Vodafone $51 million due to privacy and security breaches caused by fraudulent partner actions and weak security - the company has since rectified its systems and paid the fines.