Hooded hacker with skull face above large screen displaying code with chains, shields, and figures

Daily Dose of Cybersecurity News - August 9, 2025

Written by:Daily Cyber Briefing TeamVerified by:Kirill Gavrilenko

August 9, 2025 12:39 PM 5 min read

WinRAR Zero-Day Vulnerability (CVE-2025-8088) Exploited to Deploy RomCom Malware

High

What happened

A zero-day vulnerability in WinRAR, identified as CVE-2025-8088, was exploited by attackers to deploy the RomCom malware through specially crafted archive files.

Who is affected

Users of WinRAR versions prior to 7.13 who have extracted malicious archive files are at risk.

Why it matters

The exploitation of this vulnerability allows attackers to execute arbitrary code on affected systems, potentially leading to unauthorized access, data theft, and further malware deployment.

How it could have been prevented

Regularly updating software to the latest versions and exercising caution when extracting files from untrusted sources can mitigate such vulnerabilities.

Relevant professional terms

Zero-Day Vulnerability: A software flaw unknown to the vendor, exploited by attackers before a fix is available.
Directory Traversal: A security vulnerability that allows attackers to access restricted directories and execute commands outside of the intended directory structure.

Recommended reading: WinRAR Version 7.13 Release Notes

Source: bleepingcomputer.com

U.S. Federal Judiciary Confirms Breach of Electronic Case Management System

Critical

What happened

The U.S. Federal Judiciary experienced a cyberattack targeting its electronic case management system, compromising sensitive court documents, including sealed filings.

Who is affected

The breach impacts the U.S. Federal Judiciary and potentially exposes confidential information related to ongoing and past court cases.

Why it matters

The exposure of sensitive court documents poses significant risks to national security, individual privacy, and the integrity of the judicial process.

How it could have been prevented

Implementing robust cybersecurity measures, including regular system audits, timely software updates, and enhanced access controls, could have mitigated the risk of such breaches.

Relevant professional terms

Sealed Filing: A court document that is not accessible to the public to protect sensitive information.
Access Controls: Security measures that regulate who or what can view or use resources in a computing environment.

Recommended reading: uscourts.gov

Source: bleepingcomputer.com

Allianz Life Data Breach Exposes Personal Information of Majority of 1.4 Million U.S. Customers

Critical

What happened

On July 16, 2025, a malicious actor exploited a third-party, cloud-based Customer Relationship Management (CRM) system used by Allianz Life Insurance Company of North America, gaining unauthorized access to personally identifiable information (PII) of customers, financial professionals, and select employees through social engineering techniques.

Who is affected

The breach impacts the majority of Allianz Life's 1.4 million U.S. customers, as well as financial professionals and certain employees associated with the company.

Why it matters

The exposure of sensitive personal data, including Social Security numbers, poses significant risks of identity theft, financial fraud, and unauthorized access to personal accounts, potentially leading to long-term consequences for the affected individuals.

How it could have been prevented

Implementing robust multi-factor authentication (MFA) protocols, conducting regular security audits of third-party vendors, and providing comprehensive employee training on recognizing and mitigating social engineering attacks could have reduced the risk of such breaches.

Relevant professional terms

Social Engineering: A manipulation technique that exploits human error to gain private information, access, or valuables.
Customer Relationship Management (CRM) System: A technology for managing a company's relationships and interactions with potential and current customers.

Recommended reading: TechRadar

Source: darkreading.com

Columbia University Data Breach Exposes 860,000 Records

High

What happened

On May 16, 2025, an unauthorized actor infiltrated Columbia University's network, exfiltrating sensitive data of approximately 860,000 individuals. The breach was discovered following a system outage on June 24, 2025.

Who is affected

Current and former students, applicants, and some employees of Columbia University are impacted by this breach.

Why it matters

The compromised data includes Social Security numbers, contact details, demographic information, academic records, financial aid information, and certain health information, posing significant risks of identity theft and financial fraud.

How it could have been prevented

Implementing robust network monitoring, timely patch management, and comprehensive access controls could have mitigated the risk of unauthorized access.

Relevant professional terms

Data Breach: Unauthorized access and retrieval of sensitive information from a system.
Exfiltration: The unauthorized transfer of data from a computer or network.

Recommended reading: Columbia University Cyber Incident Update

Source: darkreading.com

APT Data Leak Reveals Advanced Attack Tools and Tactics

High

What happened

Two unidentified hackers, known as Saber and cyb0rg, infiltrated and exfiltrated data from a nation-state Advanced Persistent Threat (APT) operator's virtual workstation and server. The stolen data includes attack logs, tools, internal documentation, and credentials.

Who is affected

The compromised APT operator, potentially linked to Chinese or North Korean state-sponsored groups, and their targets, including South Korean government entities.

Why it matters

This breach provides unprecedented insight into the tools and methodologies employed by state-sponsored cyber actors, enhancing the cybersecurity community's ability to detect and defend against similar threats.

How it could have been prevented

Implementing robust access controls, regular security audits, and network segmentation could have mitigated the risk of such a breach.

Relevant professional terms

Advanced Persistent Threat (APT): A prolonged and targeted cyberattack in which an intruder gains access to a network and remains undetected for an extended period.
Virtual Private Server (VPS): A virtualized server that mimics a dedicated server within a shared hosting environment, providing greater control and customization.

Recommended reading: darkreading.com

Source: darkreading.com

Malicious Smart Contracts Exploit Arbitrage Traders

High

What happened

Cybercriminals have developed malicious smart contracts that deceive users into executing transactions, resulting in the unauthorized transfer of cryptocurrency funds to attackers' accounts. These contracts are often promoted through tutorials claiming to offer automated trading bots for exploiting price differences in cryptocurrencies.

Who is affected

Individuals seeking to profit from cryptocurrency arbitrage opportunities are the primary targets of these scams.

Why it matters

The exploitation of smart contract vulnerabilities poses significant financial risks to users and undermines trust in decentralized finance platforms. As these attacks become more sophisticated, they highlight the need for enhanced security measures and user education in the cryptocurrency space.

How it could have been prevented

Users should conduct thorough due diligence before interacting with smart contracts, including reviewing and understanding the contract code. Utilizing reputable security tools to audit smart contracts can also help identify potential vulnerabilities.

Relevant professional terms

Smart Contract: A self-executing contract with the terms of the agreement directly written into code, running on a blockchain network.
Arbitrage: The simultaneous purchase and sale of an asset to profit from a difference in the price across different markets.

Recommended reading: Why Smart Contracts Are a Hacker’s Favorite Target

Source: darkreading.com

GPT-5 Jailbroken Within 24 Hours, Raising Enterprise Security Concerns

High

What happened

Security researchers successfully bypassed GPT-5's built-in safeguards within 24 hours of its release, enabling the model to generate harmful content and disclose restricted information.

Who is affected

Organizations and individuals utilizing GPT-5 for enterprise applications are at risk due to these vulnerabilities.

Why it matters

The ease of jailbreaking GPT-5 highlights significant security flaws, potentially leading to data breaches, compliance violations, and reputational damage for enterprises relying on this AI model.

How it could have been prevented

Implementing robust input validation, continuous monitoring for adversarial prompts, and enhancing the model's alignment during training could mitigate such vulnerabilities.

Relevant professional terms

Jailbreaking: The process of bypassing built-in restrictions or safeguards in software or devices to gain unauthorized access or functionality.
Red Teaming: A security practice where experts simulate real-world attacks to identify and address vulnerabilities in systems or organizations.

Recommended reading: msrc.microsoft.com

Source: securityweek.com