Today's cybersecurity round-up highlights a significant data breach impacting millions of records from a Japanese entertainment company and a new variant of an iOS exploit kit with enhanced data theft capabilities. These incidents underscore the persistent and evolving threats faced by both large organizations and individual users.
New P7 DarkSword iOS Exploit Kit Targets Crypto WalletsThreat
Security researchers have identified a new variant of the DarkSword iOS exploit kit, named P7, which demonstrates increased stealth and new capabilities. This advanced version can steal data from on-device keychains and cryptocurrency wallets, and establish two-way communication with attacker infrastructure.
Why it matters: If your business uses iOS devices, ensure they are always updated with the latest security patches to mitigate risks from sophisticated mobile exploits.
Read more at The Hacker News ↗
Nippon Columbia Malware Incident Exposes 8.6 Million RecordsBreach
A malware infection at Nippon Columbia, a contractor for Japanese entertainment giant Daiichi Kosho, has led to the exposure of over 8.7 million customer and employee records. The compromised data includes sensitive information of karaoke fans and employees.
Why it matters: This incident highlights the critical importance of vetting third-party vendors' security practices, as supply chain compromises can directly impact your own customers' data.
Read more at BleepingComputer ↗
This round-up is compiled and summarised in our own words from public reporting; follow the links above for full details at the original sources.