Spyware being referred to as “Landfall” has been targeting Samsung Galaxy device users and will likely target other devices as well. The spyware was focused on targeting Samsung Galaxy S22-S24 series devices, as well as Z flip and Z fold 4 devices, primarily belonging to users in North African countries.
This spyware, which began targeting Samsung devices in the middle of last year and lasted through early 2025, exploited zero-day vulnerabilities within Samsung’s Android image processing library via remote code execution. This spyware campaign was given a high severity score and may have been used by government entities and commercial surveillance buyers.
In this attack, malicious DNG format image files were sent through WhatsApp (and likely other messaging platforms), triggering a ZIP file download, running the spyware on the recipient’s device.
(–Source: Cybernews
Read More: New spyware used to target Samsung Galaxy owners | Cybernews )
The scope of the recent Washington Post data breach has been revealed as the news organization begins to notify nearly 10,000 employees and contractors that their personal information was compromised during the incident.
Compromised information may include names, financial account numbers, SSNs, tax and ID numbers.
This attack is one of the first few attacks that is known to be related to the zero-day vulnerability exploits within the Oracle E-Business Suite.
(–Source: Bleeping Computer
Read More: Washington Post data breach impacts nearly 10K employees, contractors )
Staying on the topic of news organizations, Nikkei, the largest business news outlet in the world, has fallen victim to a data breach that exposed personal customer and employee information.
This leak is the result of a malware attack. In September of this year, hackers infected an employee’s personal computer with info-stealer malware, stealing credentials and hacking into company Slack accounts.
Over 17.000 individuals had their information compromised in this attack, including names, email addresses, and customer chat history. Once Nikkei discovered the breach, all employees were mandated to reset their passwords, and immediate security measures were put in place to mitigate the attack.
(–Source: CPO Magazine
Read More: World’s Largest Business News Publisher Nikkei Suffers Data Breach after Hackers Compromise Slack Accounts – CPO Magazine )
Mt. Baker Imaging and Northwest Radiologists in Washington state are being faced with a lawsuit after notifying its patients of a data breach 10 months after the incident.
Over 348,000 Washington residents are believed to have been affected by this breach, and the victims found out about the January attack for the first time at the end of October. The breach itself was reported to the Attorney General’s office in July, nearly 6 months after it occurred.
The lawsuit filed against the healthcare provider claims that the delay of informing the victims caused “ascertainable losses in the form of the loss of benefit of their bargain and the value of their time reasonably incurred to remedy or mitigate the effects of the attack.” Mt. Baker and Northwest Radiologists also face accusations of leaving “significant vulnerabilities” in its systems, and not implementing the right cybersecurity measures to prevent future cybersecurity incidents.
(–Source: The News Tribune
Read More: Mt. Baker Imaging data breach leads to lawsuit by patients | Tacoma News Tribune )
