IT Security Newsletter - 7/11/2025
UK Arrests Four in 'Scattered Spider' Ransom Group
Authorities in the United Kingdom this week arrested four people aged 17 to 20 in connection with recent data theft and extortion attacks against the retailers Marks & Spencer and Harrods, and the British food retailer Co-op Group. The breaches have been linked to a prolific but loosely-affiliated cybercrime group dubbed "Scattered Spider," whose other recent victims include multiple airlines. READ MORE...
Customer, Employee Data Exposed in Nippon Steel Breach
Nippon Steel Solutions, also known as NS Solutions and a subsidiary of Nippon Steel, disclosed a recent data breach after threat actors exploited a zero-day vulnerability. After launching an investigation into the breach, the Japan-based company found that hackers were able to gain access to information on its customers, partners, and employees after exploiting a flaw found in network equipment. READ MORE...
French police arrest Russian pro basketball player on behalf of US over ransomware suspicions
At the request of the United States, French police arrested a professional Russian basketball player who had a brief tenure at Penn State over accusations that he was part of a ransomware ring, according to overseas reports. News of the arrest of Daniil Kasatkin came in a court in Paris on Wednesday. His lawyer denied to foreign press that he was part of any ransomware ring. READ MORE...
Rowhammer Attack Demonstrated Against Nvidia GPU
A team of researchers from the University of Toronto has demonstrated that Rohammer attacks against GPUs are possible and practical. The attack method, dubbed GPUHammer, has been proven to work against a GPU from Nvidia, with the researchers using it to degrade the accuracy of machine learning models. The Rowhammer attack method has been known for more than a decade. READ MORE...
CISA tags Citrix Bleed 2 as exploited, gives agencies a day to patch
The U.S. Cybersecurity & Infrastructure Security Agency has confirmed active exploitation of the CitrixBleed 2 vulnerability (CVE-2025-5777) in Citrix NetScaler ADC and Gateway and is giving federal agencies one day to apply fixes. Such a short deadline for installing the patches is unprecedented since CISA released the Known Exploited Vulnerabilities (KEV) catalog, showing the severity of the attacks exploiting the security issue. READ MORE...
- ...in 1656, Ann Austin and Mary Fisher become the first Quakers to immigrate to the American colonies when the ship carrying them lands at Boston.
- ...in 1804, Treasury Secretary Alexander Hamilton is shot and killed in a duel by his long-time political adversary, Vice President Aaron Burr.
- ...in 1914, in his major league debut, George Herman "Babe" Ruth pitches seven strong innings to lead the Boston Red Sox over the Cleveland Indians, 4-3.
- ...in 1979, five years after its last manned mission, parts of the Skylab space station re-enter Earth's atmosphere, crash-landing in Australia and the Indian Ocean.