Risky Bulletin Risky Bulletin: Iranian security firm behind airline hacking spree
11 snips
Jul 21, 2025 A surprising revelation surfaces: an Iranian security firm is linked to a hacking spree against airlines. Meanwhile, Chinese hackers have targeted Singapore's critical infrastructure, raising alarms about cybersecurity vulnerabilities. The discussion dives into the growing menace of ransomware, with Japan making waves by releasing free decryption tools for victims. Additionally, new zero-day exploits for SharePoint and CrushFTP are in circulation, reminding us that the cyber threat landscape is ever-evolving.
AI Snips
Chapters
Transcript
Episode notes
Iranian Firm Behind Airline Hacks
- An Iranian security firm named Amanban is linked to a global airline hacking spree.
- They also targeted freight and logistics firms, operating under the APT39 hacking group.
Chinese Hackers Breach Singapore Infrastructure
- Singapore's critical infrastructure suffered breaches from Chinese hackers identified as UNC 3886.
- UNC 3886 exploits unpatched network equipment vulnerabilities to gain access.
Dutch Office Network Disconnection
- The Dutch Public Prosecution Office disconnected its network after a likely Citrix Netscaler breach.
- This illustrates how an exploited vulnerability can force major organizations offline to contain damage.