Cybersecurity — May 16, 2025

### Large-Scale Phishing Campaign Mimics Email Quarantine Notifications Researchers at Check Point have uncovered a significant phishing campaign leveraging email quarantine notifications to deceive users into surrendering their credentials. Over 32,000 emails targeted 6,358 customers, utilizing compromised accounts across three domains to enhance authenticity. This attack spotlights the ongoing evolution of phishing strategies and reinforces the need for robust multi-factor authentication systems to mitigate credential theft risks. [Read more](https://blog.checkpoint.com/securing-user-and-access/phishing-campaign-mimics-email-quarantine-notifications-32000-emails-target-6358-customers/) ### Coinbase Data Breach: Rogue Support Agents Involved in $20M Extortion Coinbase, a major cryptocurrency exchange, disclosed a data breach involving rogue support agents bribed to leak user data. The assault was not aimed at the company's core systems but involved insiders who exploited customer support tools leading to a $20M ransom demand — a demand Coinbase rejected. This breach presents a noteworthy case of insider threats in cybersecurity. [Read more](https://www.helpnetsecurity.com/2025/05/15/coinbase-suffers-data-breach-gets-extorted/) ### Russia-linked Hackers Exploit Webmail Server Vulnerabilities ESET researchers have identified RoundPress, a cyber espionage initiative tied to Russia-aligned APT28, targeting webmail servers by utilizing XSS vulnerabilities. This operation primarily affects entities linked to the Ukraine conflict, intending to extract sensitive communications. These findings highlight the persistent and sophisticated nature of state-sponsored cyber threats. [Read more](https://www.helpnetsecurity.com/2025/05/15/espionage-operation-roundpress-webmail-servers/) ### Deepfake Technology Utilized in Novel Phishing Attacks The FBI has issued a warning about a new phishing scam involving deepfake audio technology used to impersonate senior government officials. These sophisticated attacks signify the growing threat posed by AI advancements in cybersecurity and stress the importance of continuous vigilance and updating of defense mechanisms. [Read more](https://www.securityweek.com/fbi-warns-of-deepfake-messages-impersonating-senior-officials/) ### Samsung MagicINFO 9 Server Exploitation Leads to Security Patch Samsung has issued a security patch for its MagicINFO 9 Server following the discovery of a vulnerability actively exploited in the wild. This incident underscores the critical need for timely patch management in maintaining cybersecurity resilience against evolving threats. [Read more](https://www.helpnetsecurity.com/2025/05/15/samsung-patches-magicinfo-9-server-vulnerability-exploited-by-attackers/) ### You May Also Be Interested In... - **Google Fixes Chrome Vulnerability Used for Exploiting Accounts**: Security updates are essential following Google's release to patch a severe Chrome vulnerability with a public exploit available. [Read more](https://www.bleepingcomputer.com/news/security/google-fixes-high-severity-chrome-flaw-with-public-exploit/) - **Nucor Steelmaker Production Halted by Ransomware Attack**: The cyber attack on Nucor emphasizes industrial vulnerability to ransomware threats, potentially implicating broader supply chain disruptions. [Read more](https://www.securityweek.com/production-at-steelmaker-nucor-disrupted-by-cyberattack/) - **Proofpoint to Acquire Hornetsecurity**: In a significant business development, Proofpoint's acquisition of Hornetsecurity underscores strategic expansions in Microsoft 365 security solutions. [Read more](https://www.helpnetsecurity.com/2025/05/15/proofpoint-to-acquire-hornetsecurity/)

A clearer view of today.

Your briefing

A clearer view of today.

Your briefing

Make room for a smarter morning.