Sep 09, 2025

Today’s cybersecurity news is filled with concerning incidents that highlight the ever-present threats to digital security. From data breaches at companies like Qantas and Wealthsimple to hacks targeting Salesloft and BMZ, it’s clear that cybercriminals are continuously finding ways to exploit vulnerabilities. The supply chain attack on GitHub users and the defacement of the BMZ website by the Cyber Partisans are particularly alarming, as they demonstrate the wide-reaching impact of cyber attacks.

In terms of tech and privacy, internet outages in the Middle East, PACER’s MFA rollout issues, and Anthropic’s decision to stop selling AI tools to Chinese-owned companies are raising red flags. Google’s hefty fine for privacy violations and Microsoft’s upcoming mandatory MFA for Azure administrators indicate the growing importance of data protection. Implementing age verification for chat users on platforms like Roblox and Meta’s new mega-Threads feature highlight the ongoing efforts to enhance user privacy and security.

On the government and policy front, the nomination of Lt. Gen. William Hartman to lead Cyber Command and the NSA is a significant development. Cybersecurity organizations pushing for continued funding for state and local cybersecurity programs and Nepal’s blocking of social media sites underscore the global concerns surrounding cybersecurity. The EU’s antitrust fine on Google and Russia’s list of apps exempt from internet blackouts further emphasize the need for international cooperation in addressing cyber threats.

In the realm of cyber-espionage and threat intelligence, the impersonation of a US lawmaker by APT41 during trade talks and online influence operations targeting Moldova and India-Pakistan relations are alarming. Exploited vulnerabilities in SAP S/4HANA and Argo CD, along with a zero-day Apple vulnerability write-up, highlight the urgency of addressing security flaws promptly. These incidents require immediate attention to mitigate risks and ensure the safety of digital infrastructure and sensitive data from malicious actors.

Stay Well!