Cybersecurity — June 4, 2025

## Daily Cybersecurity Briefing ### Major Chrome Zero-Day Vulnerability Addressed Google has released an emergency security update to fix a severe zero-day vulnerability in its Chrome browser, known as CVE-2025-5419. This vulnerability was being actively exploited in the wild and could lead to out-of-bounds read and write in the V8 JavaScript engine. All Chrome users are advised to update their browsers immediately to protect against potential threats. [Read more](https://ciso2ciso.com/google-fixed-the-second-actively-exploited-chrome-zero-day-since-the-start-of-the-year-source-securityaffairs-com/) ### Rising Threat: Crocodilus Android Trojan The Crocodilus Android banking trojan continues to spread globally, now active in eight countries and primarily targeting users in Europe and South America. This malware tricks users by adding fake contacts, appearing to be from trusted sources such as banks. Strengthened obfuscation techniques have been noted, complicating detection and analysis. [Read more](https://securityaffairs.com/178578/malware/android-banking-trojan-crocodilus-evolves-fast-and-goes-global.html) ### Interactive Brokers Phishing Scam Alert Interactive Brokers has warned its clients about recent phishing attempts where scammers impersonate company representatives using similar branding and email addresses. The brokerage firm is urging customers to verify communications and not to share sensitive information without verification. [Read more](https://www.helpnetsecurity.com/2025/06/03/ibkr-interactive-brokers-scams/) ### The North Face Hit by Credential Stuffing Attack Outdoor apparel brand The North Face experienced a credential stuffing attack compromising customer data. Attackers exploited credentials reused from previous breaches, accessing user accounts and potentially pilfering personal information. Customers are advised to change their passwords and enable multi-factor authentication. [Read more](https://www.scworld.com/brief/credential-stuffing-attack-impacts-the-north-face-client-data) ### More Businesses Transition to Zero Trust Models Zscaler has launched a new suite of zero trust solutions that extends across multi-cloud environments, reflecting a trend where more businesses shift towards zero trust architecture to modernize and secure their IT infrastructure. This move is crucial as organizations continue to deal with distributed and hybrid work environments. [Read more](https://www.helpnetsecurity.com/2025/06/04/zscaler-zero-trust/) ### Policy Change: Australia Mandates Ransomware Payment Reporting Australia has implemented new legislation requiring organizations to report ransomware and other cyber extortion payments within three days. This aims to gather valuable data to combat the growing ransomware threat and to dissuade companies from paying ransoms. [Read more](https://www.securityweek.com/australia-enforces-ransomware-payment-reporting/) ## You May Also Be Interested In... - **An Android Threat Creates Fake Contacts for Spoofing:** Learn more about this evolving threat and its implications. [Read more](https://www.forbes.com/sites/daveywinder/2025/06/03/warning-issued-as-android-attack-turns-contacts-into-hackers/) - **Victoria’s Secret Suffers a Security Breach:** Discover how a recent cyberattack disrupted operations and delayed financial reporting. [Read more](https://www.securityweek.com/victorias-secret-says-it-will-postpone-earnings-report-after-recent-security-breach/) - **Google Chrome to Drop Trust in Certain Certificates:** Security updates and changes in certificate trust as part of ongoing security enhancements. [Read more](https://ciso2ciso.com/google-chrome-to-distrust-two-certificate-authorities-over-compliance-and-conduct-issues-sourcethehackernews-com/) Stay informed and secure!

A clearer view of today.

Your briefing

A clearer view of today.

Your briefing

Make room for a smarter morning.