Aggregator
CVE-2025-27562 | OpenHarmony up to 5.0.3.x memory leak
CVE-2025-27536 | OpenHarmony up to 5.0.3 type confusion
CVE-2025-26690 | OpenHarmony up to 5.0.3 null pointer dereference
CVE-2025-25212 | OpenHarmony up to 5.0.3 denial of service
CVE-2025-24925 | OpenHarmony up to 5.0.3 memory leak
CVE-2025-24844 | OpenHarmony up to 5.0.3 memory leak
CVE-2025-27577 | OpenHarmony up to 5.0.3 tcb race condition
CVE-2025-27128 | OpenHarmony up to 5.0.3 tcb use after free
CVE-2025-25278 | OpenHarmony up to 5.0.3 tcb race condition
CVE-2025-24298 | OpenHarmony up to 5.0.3 tcb use after free
读卖新闻起诉 Perplexity 侵犯著作权
Ghanaian fraudsters arrested for BEC/Sakawa
In Nigeria, scammers who specialize in Romance Scams and BEC are called "Yahoo Boys." In Ghana, the term for the same activity is "Sakawa." Several Ghanaian headlines are talking about this case with headlines such as "Multimillion dollar Sakawa" or "Sakawa Chairman Busted" or "Sakawa Kingpin Bows to Extradition!"
On 08AUG2025 the US Attorney's office in the Southern District of New York announced the extradition of four Ghanaian scammers who stole more than $100 Million via Romance Scams and Business Email Compromise.
https://www.justice.gov/usao-sdny/pr/ghanaian-nationals-extradited-roles-criminal-organization-stole-more-100-millionThe names likely are not well known in the US, but the first two are creating a stir in some parts of Ghana: Isaac Boateng, Inusah Ahmed, Derrick Van Yeboah, and Patrick Kwame Asare.
Inusah Ahmed, also known as Pascal, and "Agony" is the owner of the PAC Academy Football Club in the Ashanti region of Ghana. Ghana Soccer quotes one source as saying "Pascal was not just the owner; he was the heart and soul of PAC Academy. This is a huge blow!"
https://ghanasoccernet.com/pac-academy-fc-faces-uncertain-future-amid-owner-inusah-ahmed-pascals-arrest-over-alleged-internet-fraudIsaac Kofi Oduro Boateng, better known as "Kofi Boat," claims to be the owner of ICEFOOD, a frozen food company specializing in chicken and fish in Ghana. But he is better known as the "godfather" of singer Shatta Wale.
Kofi BoatShatta, whose real name is Charles Nii Armah, was featured on the Beyonce track "Already" on her 2019 Lion King album. Last week he had his 2019 Lamborghini Urus seized by the government of Ghana, after the FBI informed them it was purchased with stolen funds.
https://www.bbc.com/news/articles/cq687q927r7o Ghana and the City of Lexington BECThe source of those Lambo funds was Nana Kwabena Amuah, another Ghanian, who performed a $3.9 Million Business Email Compromise against the city of Lexington, Kentucky. When Amuah was arrested in 2023, he posted bail and four days later was arrested attempting to flee to Canada on an Amtrak train.
In an unusual court document, 58 victims of Amuah's BEC crimes are listed with complete street address and the amount of money stolen. Victims are identified in Alabama, Arizona, California, Colorado, Florida, Georgia, Iowa, Illinois, Michigan, Minnesota, Missouri, North Carolina, Oklahoma, Pennsylvania, Tennessee, Texas, Vermont, Wisconsin, the United Kingdom and Switzerland. Collectively they were tricked into sending $4,743,443 to Amuah and his co-conspirator, Shimea Maret McDonald. McDonald had opened a shell company, Gretson Company LLC, and had bank accounts at many major banks in that name that were used to receive the funds.
Victim Restitution Worksheet (1-20 of 58)There were others arrested in this ring, including Samuel Kwadwo Osei, who was recruited into "Sakawa" by a Nigerian computer programmer, Sapphire Egemasi, who the Nigerian media calls a "Tech Queen." Nigerian blogger Linda Ikeji (who I've followed for many years) shared this photo of Sapphire:
https://www.lindaikejisblog.com/2025/6/fbi-arrests-nigerian-tech-queen-sapphire-egemasi-over-alleged-fraud-in-us-2.htmlSamuel Kwadwo Osei ("Tuga"), Derick Nii Ashitey, Chinemezu Sapphire Egemasi, and Fred Brobbey Awuah were all charged in the same ring as McDonald and Amuah.
Osei laundered funds through his BofA account in the name "Lasko Company LLC."
Ashitey operated from the United Kingdom. Sapphire operated from Nigeria, while Awuah resided in the Netherlands.
My favorite paragraph in the Pulse story "Accra socialite Dada Joe Remix nabbed in alleged FBI sting" reads: "Since news of the arrest broke, panic has reportedly gripped Accra’s elite social circles. Several prominent figures allegedly involved in cryptocurrency, forex trading, and high-end real estate have gone underground. Phones have reportedly been switched off, luxury homes have fallen silent, flights are rumoured to be hastily booked, and inner circles – including partners, baby mamas, and close associates – are allegedly being coached on what to say should they be questioned."
The post Ghanaian fraudsters arrested for BEC/Sakawa appeared first on Security Boulevard.
CVE-2025-8854 | bulletphysics bullet3 up to 3.25 LoadOFF buffer overflow (ID 4732)
GPT-5 Jailbreaked With Echo Chamber and Storytelling Attacks
Researchers have compromised OpenAI’s latest GPT-5 model using sophisticated echo chamber and storytelling attack vectors, revealing critical vulnerabilities in the company’s most advanced AI system. The breakthrough demonstrates how adversarial prompt engineering can bypass even the most robust safety mechanisms, raising serious concerns about enterprise deployment readiness and the effectiveness of current AI alignment strategies. […]
The post GPT-5 Jailbreaked With Echo Chamber and Storytelling Attacks appeared first on Cyber Security News.