Passwordstate, used by 29,000 orgs worldwide, just patched a critical flaw.

A crafted URL could bypass its emergency access page — exposing credentials.

Researchers also warn its browser extension was at risk of clickjacking: one bad click could leak logins, cards, even 2FA codes. #CyberAlerts https://thehackernews.com/2025/08/click-studios-patches-passwordstate.html

#ShadowSilk hackers just hit nearly 30+ gov targets across Central Asia & APAC.

The crew? A Russian-Chinese tag team using Telegram bots to hide C2 traffic + stealing Chrome passwords.

They’re still active—new victims found in July. #CyberSecurity #CyberAlerts https://thehackernews.com/2025/08/shadowsilk-hits-36-government-targets.html

New 5G attack discovered.

Researchers built #Sni5Gect, a tool that can hijack the 5G handshake, crash phones, or silently downgrade them to 4G — no fake cell tower needed. #CyberSecurity #CyberAlerts #smartphone https://thehackernews.com/2025/08/new-sni5gect-attack-crashes-phones-and.html

WARNING: Dutch cyber watchdog confirms: a Citrix zero-day (CVE-2025-6543) was exploited for months before disclosure—hitting critical orgs, leaving hidden web shells, and erasing traces.

Patches are out. If you run NetScaler, act now. #CyberSecurity #CyberAlerts https://thehackernews.com/2025/08/dutch-ncsc-confirms-active-exploitation.html

Brazil hit by two cyber threats:

1️⃣ Hackers using AI-built fake gov sites to steal IDs + cash via PIX.
2️⃣ Efimer Trojan spreading via fake legal emails, torrents & WordPress hacks — swapping crypto wallets + stealing funds. #CyberAlerts #Scam

https://thehackernews.com/2025/08/ai-tools-fuel-brazilian-phishing-scam.html

RubyGems & PyPI under attack:

🔸 60 fake RubyGems stole social media logins (275K+ downloads)
🔸 PyPI fakes hijacked crypto staking wallets

Both hide credential-stealing code in legit-looking packages. #CyberAlerts https://thehackernews.com/2025/08/rubygems-pypi-hit-by-malicious-packages.html

11 malicious Go packages just found — infecting both Windows and Linux.

They silently download payloads, hijack shells, and can steal browser data.

Worse: they look legit, preying on confused devs importing from GitHub. #CyberAlerts #Malware https://thehackernews.com/2025/08/malicious-go-npm-packages-deliver-cross.html

CAPTCHAgeddon is here. A fake CAPTCHA scam called ClickFix hijacks devices with a single paste—no download, no file, just clipboard commands.

It's smarter than ClearFake—and spreading fast. #Scam #CyberAlerts https://thehackernews.com/2025/08/clickfix-malware-campaign-exploits.html