← Cybersecurity Headlines
Cybersecurity Headlines
North Korean attackers steal crypto. Who's sending UK phones to China? Avnet confirms data breach
00:07:35
Loading summary
Transcript3 lines
- [00:00]
A
From the CISO series, it's Cybersecurity Headlines.
- [00:07]
B
These are the cybersecurity headlines for Wednesday, October 8, 2025. I'm Sarah Lane. North Korean hackers steal more than 2 billion in crypto North Korean hackers stole an estimated $2 billion in cryptocurrency in 2025, the largest annual total on record. This is according to blockchain analytics firm Elliptic. The largest theft was the Bybit hack back in February. That was 1.46 billion. Elliptic also attributes 30 crypto heists this year to North Korean actors. The United nations and other government agencies say that stolen crypto funds support North Korea's weapons program. Group suspected of sending stolen UK phones to China the Metropolitan Police dismantled an international gang that allegedly smuggled up to 40,000 stolen UK phones to China over the past year. The investigation began after a victim tracked a stolen iPhone in a warehouse near Heathrow Airport, leading to raids on 28 properties and the arrest of 18 suspects, mostly women. Afghan and Indian nationals now face charges for handling stolen goods and conspiracy, police said. Stolen devices were sold overseas for up to £4,000 each. Avnet confirms breach, says stolen data Unreadable electronics components distributor Avnet confirmed a data breach affecting an internal sales tool in its EMEA region, saying that stolen data is largely unreadable without proprietary tools. Attackers claim to have taken 1.3 terabytes of compressed data, including sensitive operational and personal information, and are pressuring Avnet for ransom via a dark web leak site. The company said global operations were unaffected. Authorities have been notified and impacted customers and suppliers will be contacted. U.S. medical scanning biz gets clear image of stolen patient data Florida based Doctors Imaging Group disclosed that a November 2024 cyber attack exposed the medical and financial data of 171,862 patients, including Social Security numbers, health insurance details and treatment information. The company completed its investigation back in August and started notifying victims recently. Despite the scale of the breach, it is not offering credit monitoring, instead advising patients to use free annual credit reports and fraud alerts. No ransomware group has claimed responsibility for the attack, huge thanks to our sponsor ThreatLocker. Imagine having the power to decide exactly what runs in your IT environment and blocking everything else by default. That is what ThreatLocker delivers as a zero trust endpoint protection platform. ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats, stop them with ThreatLocker. A quick reminder for fans of the CISO series and New York City based security professionals you are all welcome to join us for a very fun networking event you in NYC on October 21, 2025 at 5:30pm it's free so head on over to the events page@cisoseries.com and register Critical flaw exposes 60,000 Redis servers A critical flaw in Redis, also known as Ready Shell, has exposed around 60,000 servers to remote code execution. The bug was hidden for 13 years in Redis LUA scripting engine and lets attackers escape the sandbox and run arbitrary code. Exploitation requires authentication, but tens of thousands of exposed instances lack protection. Redis and Wiz disclosed the issue on October 3rd and released patches for all major versions. No active exploits are confirmed. Russia blocks mobile Internet for foreign SIM cards over drone threats Russia is blocking mobile Internet for anyone entering the country with a foreign SIM card, citing drone threats. Travelers from Belarus and Kazakhstan report a 24 hour blackout on mobile data and SMS upon connecting to Russian networks, which resets when crossing regional borders. The rule isn't formally backed by law, but adds to a surge of regional Internet shutdowns since May. BK Technologies Cops do cyber break in Florida based BK Technologies, which supplies radios to US Police, firefighters and military agencies, disclosed a cyber intrusion detected around September 20. The company said an attacker accessed some employee data, but that core operations continued without major disruption. BK isolated affected systems, brought in external investigators and has notified law enforcement. It expects cleanup costs to be covered by insurance. The source of the breach remains unknown and no customers appear to have been directly affected. Qilin claims ransomware attack on Mecklenburg Schools Russian ransomware group Qilin has claimed responsibility for a September cyber attack on Mecklenburg County Public Schools in Virginia, which disrupted classes and forced teachers offline for a week. The group says it stole 305 gigabytes of data, including financial and student medical files. Superintendent Scott Warner confirmed Qilin's involvement and said the district does not plan to pay the ransom. Qilin has been active since 2022 and has claimed more than 100 ransomware attacks this year. Are you following the ciso series on YouTube? Are you? You're not? Where else are you getting access to our weekend review livestream, then demos from the vendors that you want to know about, snippets from CISO series podcasts and our new headline shorts. If you enjoy cybersecurity headlines, you need to give the CISO series a follow on YouTube and a quick shout out to Brian, who the CISO series team met at whose second who told us he shares this show with his entire team. If you have a similar story, send it our way. Feedbackisoseries.com we would love to hear from you. I am Sarah Lane, reporting for the CISO series. Thanks for listening and stay classy.
- [07:19]
A
Cybersecurity headlines are available every weekday. Head to cisoseries.com for the full stories. Behind the headlines.