Advantest Confirms Ransomware Attack, Investigates Potential Data Breach Japanese semiconductor test equipment supplier Advantest disclosed a ransomware attack on February 15, detecting "unusual activity" within its IT environment. The company swiftly isolated affected systems and engaged third-party cybersecurity experts to contain the incident. In a press release, Advantest stated that an unauthorized third party may have accessed portions of its network and deployed ransomware. The investigation is ongoing, with no confirmation yet on whether customer or employee data was stolen. If compromised, affected individuals will be notified directly. Advantest, headquartered in Tokyo, designs and manufactures automatic test equipment (ATE) for semiconductor and electronics manufacturers. With 6,500 employees worldwide and a 2024 net operating income of ¥161.2 billion ($1.04 billion), its clients include major chipmakers in South Korea, Taiwan, and other global markets. The attack follows a rising trend of ransomware targeting the semiconductor industry, including prior incidents at Microchip (2024), Applied Materials (2023), Nexperia (2022), and Foxsemicon (2022). Advantest is working with cybersecurity experts to assess the full impact and reinforce defenses.

Samsung patched CVE-2025-21043, a critical remote code execution (RCE) vulnerability in libimagecodec.quram.so, a closed-source image parsing library by Quramsoft. The flaw, an out-of-bounds write weakness, allowed attackers to inject malicious code via specially crafted image files, compromising devices without user interaction (zero-click). Exploited in live attacks since August 2025, it posed a severe risk to Android 13–16 devices, including those using WhatsApp and other messaging apps.The vulnerability granted attackers direct access to user data, potentially enabling data theft, surveillance, or further system compromise. While Samsung’s September 2025 Security Maintenance Release addressed the issue, delayed patching left users exposed to active exploitation. Security experts emphasized the urgency of updates, warning that unpatched devices remained vulnerable to highly targeted campaigns, similar to a prior WhatsApp zero-click flaw (CVE-2025-55177) chained with an Apple zero-day.The incident underscores the criticality of third-party library risks and the need for proactive patch management to mitigate large-scale breaches. Failure to update could result in widespread data exposure, financial fraud, or further supply-chain attacks leveraging the same library.