WhatsApp discovers (and removes) 6.8 million accounts linked to global scam operations.
Posted inCybersecurity News

WhatsApp discovers (and removes) 6.8 million accounts linked to global scam operations.

In a sweeping enforcement action during the first half of 2025, WhatsApp—owned by Meta—expelled more than 6.8 million accounts linked to global scam operations. This initiative targeted criminal networks behind large-scale fraud schemes, particularly those operating so-called “scam centers” in Southeast Asia, including countries such as Cambodia and Myanmar.
New Command-and-Control (C2) method, Ghost Calls, uses Zoom and Teams TURN servers to tunnel malicious traffic undetected.
Posted inCybersecurity News

New Command-and-Control (C2) method, Ghost Calls, uses Zoom and Teams TURN servers to tunnel malicious traffic undetected.

A novel command-and-control (C2) evasion method, termed "Ghost Calls," has emerged as a significant threat in post-exploitation scenarios. This innovative technique exploits TURN (Traversal Using Relays around NAT) servers operated by leading communication platforms such as Zoom and Microsoft Teams, enabling attackers to tunnel malicious traffic through infrastructure that is inherently trusted by most organizations. The stealth and sophistication of this approach pose unique challenges to traditional security defenses.
Trend Micro confirms active exploitation of 2 critical vulnerabilities in Apex One Management Console.
Posted inCybersecurity News

Trend Micro confirms active exploitation of 2 critical vulnerabilities in Apex One Management Console.

Trend Micro has recently confirmed the discovery and active exploitation of two critical vulnerabilities in the on-premise editions of its Apex One Management Console. These vulnerabilities, catalogued as CVE-2025-54948 and CVE-2025-54987, each carry a severity score of 9.4 out of 10 on the CVSS scale, indicating a significant risk to affected organizations.
DaVita Notifies Over One Million Patients of Major Data Breach Following Ransomware Attack.
Posted inCybersecurity News

DaVita Notifies Over One Million Patients of Major Data Breach Following Ransomware Attack.

In one of the largest healthcare data breaches of 2025, DaVita—the major U.S. kidney dialysis provider—has notified more than one million individuals that their personal and health information was stolen in a sophisticated ransomware attack. The incident, which unfolded between March 24 and April 12, 2025, has raised serious concerns about cybersecurity in the healthcare sector.