Large Retailers Land in Scattered Spider's Ransomware Web

The threat group games IT help desks to gain entry into retailer networks, and signs show it has shifted its attention from the UK to US targets.

May 21, 2025 Signup

Daily Edition

Today’s news and insights for cybersecurity professionals

- Today's News and Features -

TOP STORY

Large Retailers Land in Scattered Spider's Ransomware Web‎‎ The threat group games IT help desks to gain entry into retailer networks, and signs show it has shifted its attention from the UK to US targets.‎‎ Keep Reading →

Bumblebee Malware Takes Flight via Trojanized VMware Utility‎‎ An employee inadvertently downloaded a malicious version of the legitimate RVTools utility, which launched an investigation into an attempted supply chain attack aimed at delivering the recently revived initial-access loader.‎‎

'Hazy Hawk' Cybercrime Gang Swoops In for Cloud Resources‎‎ Since December 2023, the threat group has preyed on domains belonging to the US Centers for Disease Control and Prevention (CDC) and numerous other reputable organizations worldwide to redirect users to malicious sites.‎‎

DR GLOBAL

Asia Produces More APT Actors, as Focus Expands Globally‎ China- and North Korea-aligned groups account for more than half of global attacks, and an increasing number of countries look to cyber to balance power in the region.‎

Novel Phishing Attack Combines AES With Poisoned npm Packages‎ Researchers discovered a phishing attack in the wild that takes multiple well-tread technologies like open source packages and AES encryption and combines them.‎

Virgin Media 02 Vuln Exposes Call Recipient Location‎‎ A hacker exploiting the security flaw in the mobile provider's network could have potentially located a call recipient with accuracy of up to 100 square meters.‎‎

Fake Kling AI Malvertisements Lure Victims With False Promises‎ Researchers noted that they found several similar websites, two of which are still operating and require the same kind of behavior on behalf of the victim.‎

THE EDGE

Regeneron Pledges Privacy Protection in $256M Bid for 23andMe‎ Regeneron's planned acquisition of 23andMe raises significant privacy concerns as experts warn about the lack of comprehensive federal regulations governing the transfer of genetic information.‎

DR TECHNOLOGY

Tenable Adds Third-Party Connectors to Exposure Management Platform‎ Tenable One now pulls in data from AWS, Microsoft, and competitors to provide a holistic security view of an organization's attack surface.‎

SPONSORED ARTICLE

Why a New Approach to Credential Security Is Vital‎‎ Credential security platforms are emerging as a unified way to detect and respond to credential risks in real time as threats evolve.‎‎

Read More →

- Commentary -

Opinions from thought leaders around the cybersecurity industry

Why Rigid Security Programs Keep Failing‎‎ Organizations that stay ahead of attacks won't be the most compliant ones — they'll be the ones most honest about what actually works.‎‎

CVE Disruption Threatens Foundations of Defensive Security‎‎ If the Common Vulnerabilities and Exposures system continues to face uncertainty, the repercussions will build slowly, and eventually the cracks will become harder to contain.‎‎

More Commentary →

- Upcoming Events -

May 29, 2025 Detecting Zero Days on the Edge

Jun 19, 2025 DevSecOps Achievement Unlocked

Aug 2, 2025 [Conference] Black Hat USA - August 2-7 - Learn More

More Events →

- More Resources -

WHITE PAPER Delivering Globally Consistent App Performance to the Hybrid Workforce

WHITE PAPER Autonomous Patch Management Strategies for Distributed Networks

WHITE PAPER Frost & Sullivan's Radar on Managed Detection and Response in 2024

REPORT Building Blocks for Next-Gen Security Operations

More Resources →

- Elsewhere in Cyber Today -

CISCO TALOS

Duping Cloud Functions: An emerging serverless attack vector

TECH TARGET SEARCH SECURITY

AI model theft: Risk and mitigation in the digital era

CYBERSECURITY DIVE

High-profile CISA departure adds to agency’s struggles

- Do You Find Today’s Newsletter Helpful? -

Yes Not sure No

You received this message because you are subscribed to Dark Reading's Daily newsletter. If a friend forwarded you this message, sign up here to get it in your inbox. Thoughts about this newsletter? Give us feedback.

Advertise With Us | Privacy Policy | Unsubscribe Copyright © 2025 TechTarget, Inc. or its subsidiaries. All rights reserved. Operated by TechTarget, Inc. and its subsidiaries, 275 Grove Street, Newton, Massachusetts, 02466 US