Cybersecurity — June 5, 2025

## Cybersecurity Daily Brief - June 5, 2025 Welcome to today’s cybersecurity briefing. Here are the most critical updates you need to know: ### Google Fixes Exploited Chrome Vulnerability Google has issued an update to patch a zero-day vulnerability actively exploited in its Chrome browser. Known as CVE-2025-5419, the flaw affects the V8 JavaScript engine, potentially allowing heap corruption through a crafted HTML page. It's crucial for users to update Chrome immediately to mitigate this risk. [Read more](https://www.helpnetsecurity.com/2025/06/04/google-fixes-chrome-zero-day-with-in-the-wild-exploit-cve-2025-5419/) ### Hackers Target Salesforce with Vishing Attacks A threat actor group, UNC6040, has been exploiting social engineering tactics to infiltrate Salesforce platforms to extract data. By impersonating IT support and convincing employees to authorize a malicious app, hackers gain unauthorized access to critical business data. Companies are urged to strengthen internal processes and employee awareness to combat such attacks. [Read more](https://cyberscoop.com/google-unc6040-salesforce-attacks/) ### Major Data Breach in Russian Defense Firm Ukraine’s military intelligence announced a successful cyberattack against Tupolev, a Russian aircraft maker. The breach resulted in the exposure of 4.4GB of highly classified internal data, highlighting geopolitical cybersecurity tensions. [Read more](https://therecord.media/ukraine-military-russia-strategic-bomber/) ### Law Enforcement Clamps Down on BidenCash Marketplace U.S. and Dutch authorities have seized 145 domains linked to BidenCash, a major online marketplace for stolen credit cards. The takedown marks a significant win against cybercrime, as the marketplace was responsible for facilitating millions in fraud. [Read more](https://www.securityweek.com/carding-marketplace-bidencash-shut-down-by-authorities/) ### Vishing Scheme Targets Salesforce Users In a detailed schema, hackers have been utilizing vishing techniques to manipulate employees into deploying a modified Salesforce Data Loader app for extracting company data. This tactic emphasizes the evolving sophistication of phishing attacks. [Read more](https://cybernews.com/security/hackers-vish-us-eu-employees-to-install-modified-salesforce-app-steal-company-data/) ### You May Also Be Interested In... - **Victories for Cyberlaw**: FTC urges Congress to bolster child data protection laws. [Read more](https://therecord.media/ftc-chair-implores-congress-to-strengthen-childrens-privacy-law) - **AI in Cybersecurity**: Microsoft launches a free EU cybersecurity program to protect governments. [Read more](https://www.bleepingcomputer.com/news/microsoft/microsoft-unveils-free-eu-cybersecurity-program-for-governments/) - **Data Leaks**: Details on hackers leaking data of 86 million AT&T customers. [Read more](https://hackread.com/hackers-leak-86m-att-records-with-decrypted-ssns/) - **Evolving Threats**: A report from SecureList outlines significant increases in mobile malware attacks in Q1 2025. [Read more](https://securelist.com/malware-report-q1-2025-mobile-statistics/116676/) Stay informed and vigilant. For more in-depth analysis, follow the links to the full articles.

A clearer view of today.

Your briefing

A clearer view of today.

Your briefing

Make room for a smarter morning.