Lazarus Spends Stolen Funds While LockBit Watches Their Chats Leak

News

FBI Confirms Lazarus Group Behind Bybit’s 1.5B Crypto Heist

The FBI officially attributes the $1.5 billion Bybit heist to the North Korean Lazarus Group. This confirms the TRAITORTRADER approach is their primary play over straight technical hacking right now.

Ransomware Gang Suffers Data Breach: Jabber Logs Dumped

LockBit got hit with a dump of their own Jabber logs. If you run a threat intel team, this is your required reading for the week—it exposes their contact lists, backend infra, and internal drama.

D-Link Confirms Active Attack on Legacy RCE Vulnerability

D-Link is telling you directly that exploits are live in the wild for this one. Stop thinking of that box in the closet as harmless hardware; it’s a pivot point for attackers right now.

North Korea’s Maui Ransomware Returns with Updated Tactics

Maui is back with new code, targeting healthcare verticals again. If your disaster recovery plan is just crossing your fingers, check your backups before they do.

Poc Released for SAP NetWeaver Max-Severity Vulnerability

A max-severity CVSS 10 for SAP NetWeaver is as bad as it gets. Don't assume your WAF is catching the file upload logic here; patch the underlying application layer.

Tools

Nuclei Template: SAP NetWeaver File Upload Exploit

Old scanners don't cover this without custom work. Run this fresh template immediately if you're testing SAP estates for Unrestricted File Upload.