Cybersecurity News Bytes

Salesforce Data Exposed at Multiple Security Vendors and OAuth Token Compromise Several leading cybersecurity companies suffered data breaches as attackers accessed Salesforce customer contact information and support case data via…

Salesforce Targeted in Widespread Credential Theft Campaign A recent, large-scale credential theft operation has targeted Salesforce customers, leading to systematic data exfiltration and raising concerns over supply chain vulnerability. The…

Salesforce Experiences Widespread Credential Theft Campaign Multiple Salesforce customers have come under active attack from a coordinated campaign aimed at exfiltrating sensitive credentials, with indications that a nation-state may be…

Malicious npm Package Mimics Nodemailer to Hijack Cryptocurrency Transactions Attackers have released a malicious npm package impersonating the popular Nodemailer library, resulting in widespread attempts to hijack cryptocurrency transactions from…

Malicious npm Package Mimics Nodemailer to Hijack Crypto Transactions A major supply chain attack was identified in the JavaScript ecosystem involving a malicious npm package imitating the popular Nodemailer library.…

ScarCruft’s Operation HanKook Phantom: RokRAT Malware Targets South Korean Academics A new campaign attributed to the North Korea-affiliated ScarCruft group has been identified, involving a sophisticated phishing operation—Operation HanKook Phantom—that…

DaVita Dialysis Provider Data Breach Exposes Nearly One Million Patient Records In one of the largest healthcare breaches of 2025, US-based kidney dialysis provider DaVita confirmed that a ransomware attack…

WhatsApp Bans Millions of Accounts to Combat Global Scam Surge In August 2025, WhatsApp took decisive action by banning 6.8 million user accounts connected to global scam operations. The move…

Clinical Data Breach Impacts Nearly One Million DaVita Patients in Ransomware Attack The US kidney dialysis provider DaVita has disclosed a major cybersecurity incident involving the theft of sensitive patient…

Microsoft Patches Critical Teams Vulnerability Amid Remote Code Execution Risks This month, Microsoft addressed a major security flaw in Microsoft Teams, closing a critical remote code execution (RCE) vulnerability before…