Weekly Cybersecurity News Roundup

In the fast-paced world of cybersecurity, keeping abreast of emerging threats and developments is essential. This weekly roundup highlights significant stories that might not make it into major headlines but are critical for understanding the current landscape of cyber threats and defenses.

US Department of War Introduces New Cybersecurity Framework

The US Department of War has launched the Cybersecurity Risk Management Construct (CSRMC), aiming to modernize its cyber defenses significantly. This comprehensive framework consists of five phases and ten core tenets, transitioning from manual processes to a dynamic, automated methodology. Its primary goal is to ensure continuous monitoring and real-time defense, effectively integrating cybersecurity into all stages of system development and operations. This initiative aims to maintain the technological superiority of warfighters against ever-evolving cyber threats.

Dragos Launches Significant Platform Update

In a notable advancement for industrial cybersecurity, Dragos has rolled out Dragos Platform 3.0. This major update introduces enhanced capabilities designed to empower cybersecurity defenders by enabling faster and more confident responses to threats. Key features include a new Insights Hub that consolidates alerts, improved workflows, AI-driven vulnerability processes, and options for smaller deployment footprints, making the platform more adaptable to a variety of operational environments.

Data Breach at Lotte Card Affects Millions

In South Korea, a significant breach at Lotte Card has compromised the personal data of nearly three million individuals. The attack has revealed sensitive information, including resident registration numbers and virtual payment codes. Alarmingly, approximately 280,000 customers may have had their credit card details exposed, raising concerns about potential fraud as their financial security hangs in the balance.

LockBit Ransomware Group Unveils LockBit 5.0

After intensified law enforcement actions against it, the infamous LockBit ransomware group has introduced LockBit 5.0. Researchers from Trend Micro have examined this latest version, which includes variants for Windows, Linux, and ESXi systems. Notable changes in these variants include the use of randomized 16-character file extensions, programmed evasion of Russian-language systems, and automatic deletion of event logs post-encryption, making detection and attribution more challenging for cybersecurity experts.

Ransomware Attack on Maryland Transit Administration

The Maryland Transit Administration (MTA) has reported a cybersecurity breach involving unauthorized access to its systems. This incident led to service disruptions and confirmed the theft of specific data. The ransomware group Rhysida has claimed responsibility for the attack, emphasizing the ongoing threat of ransomware targeting public infrastructure.

Vulnerability Found in OnePlus Smartphones

Cybersecurity firm Rapid7 announced a vulnerability affecting OnePlus smartphones, allowing malicious apps to access SMS and MMS data, including metadata, without user interaction. Designated as CVE-2025-10184, the flaw could potentially expose sensitive multi-factor authentication codes. Following public disclosure of the vulnerability, OnePlus has initiated an investigation into the matter.

AI-Detected Phishing Campaign Stopped by Microsoft

Microsoft’s AI-driven security measures have successfully identified and thwarted a sophisticated phishing campaign. The campaign utilized AI to obscure its malicious payload in an attempt to bypass traditional defenses. Analysis from Microsoft’s Security Copilot described the malicious code as unusually complex, indicating that it was likely not generated by a human, underscoring the escalating sophistication of cyber threats.

Significant Data Exposure for Indian Banks

Research from UpGuard has unveiled a glaring exposure of over 270,000 financial transaction records from Indian banks. An unprotected Amazon S3 bucket was found containing sensitive details such as bank account numbers, transaction amounts, names, contact numbers, and email addresses. The source of this substantial data leak remains unidentified, raising concerns about the security practices of the banks involved.

Co-op Faces Financial Losses Due to Cyberattack

Recent evaluations reveal that the Co-op has suffered an estimated £206 million ($275 million) in lost sales due to a cyberattack that also compromised the data of around 6.5 million members. The incident has caused widespread disruption, affecting digital payments and resulting in empty store shelves. Similarly, Marks & Spencer, also targeted in the attack, anticipates losses upwards of £300 million (approximately $400 million), highlighting the far-reaching impacts of cybersecurity breaches on businesses and consumers alike.

These stories reflect the diverse and evolving challenges in the cybersecurity arena, emphasizing the need for vigilance and proactive measures to safeguard sensitive information and critical infrastructure.