13-Sep-2025: Petya Bypasses UEFI, LNER Data Breach, & BlackNevas Ransomware Hits Hard

Welcome to today's episode of "Cyber War Room," where we delve into the pressing cyber threats and vulnerabilities around the globe. In our top stories today: First, we report on a major ransomware attack on MediSecure, an Australian medical data management company. This breach has potentially exposed sensitive information of thousands of patients, prompting a thorough investigation by Australian police and calls for strengthened cybersecurity measures. Next, we head to the UK where multiple councils are alerting the public about a data compromise after Nottingham Rehab Supplies, a key medical supplier, suffered a cyber intrusion. As personal information may have been accessed, authorities are cautioning individuals about the increased risk of identity theft and other social engineering exploits. Moving to corporate news, Intel has revealed a high-severity flaw in its AI model compression software, posing a risk of arbitrary code execution. An immediate update is urged to protect against potential security breaches. In other news, the Cybersecurity and Infrastructure Security Agency (CISA) in the United States warns of vulnerabilities in several D-Link router models being actively exploited. The agency and D-Link are urging users to patch their devices swiftly to safeguard against these threats. And finally, our coverage includes an update from global cybersecurity fronts where China-linked hackers have been found deploying the Deuterbear remote access trojan through a two-stage infection method. This sophisticated attack underscores the ongoing and escalating cyber threat landscape, emphasizing the critical need for enhanced protective measures. Stay tuned to "Cyber War Room" for your daily digest of cyber security updates and alerts. Stay safe and informed!

18 Touko 20242min

Welcome to today's episode of "Cyber War Room," your go-to daily podcast for the latest and most critical updates in the world of cybersecurity. In today's lineup: First up, MediSecure, a prominent electronic prescription provider in Australia, has become the latest victim of a ransomware attack linked to a third-party vendor. This serious breach compromised the personal and health information of numerous individuals. We will dive into the immediate actions taken by the company and the ongoing investigations. Next, we spotlight tech giant Intel, which has recently issued 41 security advisories covering more than 90 vulnerabilities across its product spectrum. These vulnerabilities pose significant risks, and we’ll discuss the urgent call for users to update their systems. Then, we turn our attention to the Turla Group’s latest cyber espionage maneuvers. Using sophisticated tools named LunarWeb and LunarMail, the group has been targeting European diplomatic missions, breaching sensitive communications. We’ll examine the implications of these targeted attacks. In other news, North Korean hackers are exploiting Facebook Messenger to launch malware attacks, showcasing yet another creative method of cyber intrusion through popular social platforms. And finally, we wrap up with a concerning discovery within the Linux community, where maintainers unearthed an SSH-backdoor that went unnoticed for two years, reflecting serious vulnerabilities in security practices across open-source platforms. Stay tuned as we unpack these stories, offering insights into how these developments could impact cybersecurity strategies and data protection efforts globally. Join us in the "Cyber War Room" to stay informed and prepared against the ever-evolving cyber threat landscape.

17 Touko 20242min

Today on "Cyber War Room," we delve into the latest casualties and maneuvers in the ongoing global cyber conflict. Starting off, we discuss a significant data breach at Banco Santander, where customers' sensitive information including names and financial details are at risk, prompting a thorough investigation by the bank. Next, we cover the urgent zero-day vulnerability CVE-2024-4761 discovered in Google's Chrome browser. With the exploit already in active use by cyberattackers, listeners are advised to update their browsers immediately to prevent potential compromises. Our third story showcases the FBI’s tactical victory with the takedown of BreachForums, a hub for cybercriminals to trade stolen data, demonstrating a robust effort against online black markets. In European affairs, we explore an ongoing investigation into newly discovered backdoors in a government network, believed to be placed by Russian hackers aiming to infiltrate and possibly disrupt key state functions. Finally, we delve into how APT29, a notorious cyber espionage group, has targeted German political circles using sophisticated malware known as WINELOADER, with aims to influence and spy on significant political processes. Join us daily on "Cyber War Room" for up-to-date discussions on these critical developments affecting the cybersecurity landscape worldwide. Stay informed and stay secure.

16 Touko 20242min

Welcome to today's episode of "Cyber War Room." In our top story, the Singing River Health System in Mississippi faces a serious breach from a Rhysida ransomware attack impacting nearly 900,000 individuals, disclosing sensitive personal and medical information. Moving eastward, the Hong Kong College of Technology reels under a cyberattack with over 8,000 students’ data compromised and found on the dark web, stressing the growing cyber threats in educational sectors. In more technical revelations, researchers uncover a devious social engineering campaign by attackers using Black Basta ransomware, employing spam and false IT communications to infiltrate organizations, reflecting a troubling trend in cyberattack sophistication. Elsewhere, a shift in tactics has cybercriminals using malvertising, deepfakes, and popular platforms like YouTube to perpetrate scams, marking an evolution from traditional phishing approaches to more complex digital deception. Wrapping up, cybersecurity specialists have flagged a new menace in malware with trojanized versions of the trusted software tools WinSCP and PuTTY - a reminder of the continuous need for vigilance in verifying source authenticity to prevent data theft and ransomware attacks. Stay tuned to "Cyber War Room" as we delve deeper into these issues and more to keep your data safe in the turbulent seas of cyberspace.

15 Touko 20243min