November 2025
264 posts. Browse all months
- free scanner to check if you're part of a botnet
GreyNoise launches free scanner to check if you’re part of a botnet www.bleepingcomputer.com/news/secu… GreyNoise Labs has launched a free tool called GreyNoise …
- MS Teams Guest Access Can Remove Defender Protection
MS Teams Guest Access Can Remove Defender Protection When Users Join External Tenants thehackernews.com/2025/11/m… Cybersecurity researchers have shed light on …
- Evil Twin WiFi attacks
Man behind in-flight Evil Twin WiFi attacks gets 7 years in prison www.bleepingcomputer.com/news/secu… A 44-year-old man was sentenced to seven years and four …
- Now hackers start hacking US Radio Stations - Cybersecurity Insiders
Hackers are now hacking US radio stations by exploiting vulnerabilities in Barix Network devices to inject fabricated emergency alerts, causing potential …
- Coupang Data Leak Jumps to 33.7 Million From 4,500
A Coupang data leak has impacted approximately 33.7 million customer accounts, with leaked information including names, email addresses, and shipping details. …
- Microsoft to Block Unauthorized Scripts in Entra ID
Microsoft to Block Unauthorized Scripts in Entra ID Logins with 2026 CSP Update Source: thehackernews.com/2025/11/m… Microsoft plans to tighten security for …
- Asahi Confirms Nearly Two Million Individuals’ Data May Be Exposed
Asahi Confirms Nearly Two Million Individuals’ Data May Be Exposed in Ransomware Attack Source: www.theregister.com/2025/11/2… Asahi has released updated …
- Ransomware Elevates Cybersecurity to National Security Priority
Ransomware Elevates Cybersecurity to National Security Priority Source: www.databreachtoday.com/ransomwar… Relentless ransomware activity targeting the United …
- Zendesk Users Targeted as Scattered Lapsus$ Hunters Launch Fake Support Sites
Zendesk Users Targeted as Scattered Lapsus$ Hunters Launch Fake Support Sites Source: www.theregister.com/2025/11/2… ReliaQuest has uncovered an emerging …
- Akira’s SonicWall Exploits Are Disrupting Large Enterprises
Akira’s SonicWall Exploits Are Disrupting Large Enterprises Source: www.databreachtoday.com/akiras-so… The Akira ransomware group has found a path into large …
- FCC Warns Broadcasters After Emergency Tones Used in Profanity-Laced Radio Hijacks
FCC Warns Broadcasters After Emergency Tones Used in Profanity-Laced Radio Hijacks Source: www.theregister.com/2025/11/2… The US Federal Communications …
- The Mystery OAST Host Behind a Regionally Focused Exploit
The Mystery OAST Host Behind a Regionally Focused Exploit Operation Source: www.vulncheck.com/blog/myst… Out-of-band application security testing (OAST) …
- Popular Forge Library Receives Fix for Signature Verification Bypass
Popular Forge Library Receives Fix for Signature Verification Bypass Flaw Source: www.bleepingcomputer.com/news/secu… A high-severity vulnerability in the …
- Netmarble Data Breach Exposes 6.11 Million Members' Info
South Korean game developer Netmarble confirmed a data breach affecting 6.11 million members, leaking names, birthdates, and encrypted passwords, with an …
- OpenAI alerts users to data breach | Cybernews
OpenAI has confirmed a data breach involving its third-party analytics provider, Mixpanel, which exposed limited user data associated with its API platform, …
- Cyber Threat Intelligence Report – Nov. 27, 2025
Incident: OpenAI API customer data exposed in Mixpanel analytics breach Date of Incident (ET): Nov. 9, 2025 Date of Disclosure/Publication (ET): Nov. 27, 2025 …
- Old tech, new vulnerabilities: NTLM abuse, ongoing exploitation in 2025
Old tech, new vulnerabilities: NTLM abuse, ongoing exploitation in 2025 securelist.com/ntlm-abus… Flip phones were surging, Windows XP was new on the desktop, …
- Influencers in the crosshairs
Influencers in the crosshairs: How cybercriminals are targeting content creators www.welivesecurity.com/en/social… Social media influencers offer reach, …
- The Golden Scale: ’Tis the Season for Unwanted Gifts
The Golden Scale: ’Tis the Season for Unwanted Gifts unit42.paloaltonetworks.com/new-shiny… In October 2025, Unit 42 published two Insights reports examining …
- Fake LinkedIn jobs trick Mac users into downloading Flexible Ferret malware
Fake LinkedIn jobs trick Mac users into downloading Flexible Ferret malware www.malwarebytes.com/blog/news… Researchers have uncovered a new Mac-targeted attack …
- Lifetime access to AI-for-evil WormGPT 4 costs just $220
Lifetime access to AI-for-evil WormGPT 4 costs just $220 www.theregister.com/2025/11/2… WormGPT 4, marketed as “your key to an AI without boundaries,” …
- ASUS warns of new critical auth-bypass flaw in AiCloud routers
ASUS warns of new critical auth-bypass flaw in AiCloud routers www.bleepingcomputer.com/news/secu… ASUS has issued new firmware updates to address nine security …
- Botnet takes advantage of AWS outage to hit 28 countries
Botnet takes advantage of AWS outage to hit 28 countries www.theregister.com/2025/11/2… A Mirai-based botnet known as ShadowV2 surfaced during last October’s …
- House Energy and Commerce Committee unveils new draft children’s online safety bill | The Record from Recorded Future News
The House Energy and Commerce Committee has unveiled a new draft of the Kids Online Safety Act (KOSA), which omits the previous duty of care provision that …
- Dell ControlVault, Lasso, GL.iNet vulnerabilities
Cisco Talos has disclosed five vulnerabilities in Dell ControlVault 3 firmware, four vulnerabilities in Entr’ouvert Lasso, and one vulnerability in GL.iNet …
- The Golden Scale: ‘Tis the Season for Unwanted Gifts
The Scattered LAPSUS$ Hunters (SLSH) cybercriminal alliance has resurfaced with new data theft allegations against Salesforce via Gainsight-published …
- Akira’s SonicWall Hacks Are Taking Down Large Enterprises
The Akira ransomware operation is exploiting SonicWall SSL VPN devices, often inherited through mergers and acquisitions, to target large enterprises. These …
- New ShadowV2 botnet malware used AWS outage as a test opportunity
A new Mirai-based botnet malware named ShadowV2 has been observed exploiting vulnerabilities in IoT devices from D-Link, TP-Link, and other vendors. …
- Tor switches to new Counter Galois Onion relay encryption algorithm
Tor switches to new Counter Galois Onion relay encryption algorithm Source: www.bleepingcomputer.com/news/secu… Tor has introduced a significant upgrade to its …
- Malicious LLMs
The Dual-Use Dilemma of AI: Malicious LLMs Source: unit42.paloaltonetworks.com/dilemma-o… A core challenge with large language models (LLMs) in security is the …
- Advanced Security Isn’t Stopping Ancient Phishing
Advanced Security Isn’t Stopping Ancient Phishing Tactics Source: www.darkreading.com/cyberatta… New research shows that sophisticated phishing attacks continue …
- Email Hacks Continue to Plague Healthcare Sector
Email Hacks Continue to Plague Healthcare Sector Source: www.databreachtoday.com/email-hac… Mindpath Health Settles Claim for $3.5M; Delta Dental Notifies …
- Cybercriminals stole $262M by impersonating bank support teams
FBI: Cybercriminals stole $262M by impersonating bank support teams Source: www.bleepingcomputer.com/news/secu… The FBI has issued a warning about a significant …
- CISA Warns of Active Spyware Campaigns
CISA Warns of Active Spyware Campaigns Hijacking High-Value Signal and WhatsApp Users Source: thehackernews.com/2025/11/c… The U.S. Cybersecurity and …
- Sha1-Hulud, The Second Coming
Live Updates: Sha1-Hulud, The Second Coming — Hundreds of NPM Packages Compromised Source: www.koi.ai/incident/… We are tracking a major resurgence of the …
- With Friends Like These: China Spies on Russian IT Orgs
With Friends Like These: China Spies on Russian IT Orgs Source: www.darkreading.com/cyberatta… State-linked hackers stayed under the radar by using a variety of …
- Cheap Device Bypasses AMD, Intel Memory Encryption
Researchers have developed a cheap hardware module called “Battering RAM” that can bypass AMD and Intel memory encryption and confidential computing …
- UK Parliamentary Committee Recommends Software Liability
A UK parliamentary committee is recommending new legislation that would impose software liability on publishers who fail to adhere to secure-by-design …
- Hackers Knock Out Systems at Moscow-Run Postal Operator
Hackers Knock Out Systems at Moscow-Run Postal Operator in Occupied Ukraine therecord.media/hackers-k… A Russian state-owned postal operator in occupied eastern …
- Matrix Push C2 Abuses Browser Notifications
Matrix Push C2 Abuses Browser Notifications to Deliver Phishing and Malware www.malwarebytes.com/blog/news… Cybercriminals are using browser push notifications …
- ShadowPad Malware Actively Exploits WSUS
ShadowPad Malware Actively Exploits WSUS Vulnerability for Full System Access thehackernews.com/2025/11/s… A recently patched security flaw in Microsoft Windows …
- ClickFix Gets Creative: Malware Buried in Images
ClickFix Gets Creative: Malware Buried in Images www.huntress.com/blog/clic… This analysis outlines a multi-stage malware execution chain triggered through a …
- Shai-Hulud 2.0 Supply Chain Attack
Shai-Hulud 2.0 Supply Chain Attack: More Than 25,000 npm Repositories Exposed www.wiz.io/blog/shai… Detect and mitigate malicious npm packages linked to the …
- Malicious Blender model files deliver StealC infostealing malware
A Russian-linked campaign is distributing the StealC V2 infostealing malware through malicious Blender model files uploaded to 3D marketplaces. These files …
- ShadowRay 2.0 Turns AI Clusters into Crypto Botnets
A threat actor known as IronErn440 is exploiting a vulnerability (CVE-2023-48022) in the Ray framework to hijack AI compute infrastructure and turn it into a …
- JPMorgan, Citi, Morgan Stanley client data may be exposed by vendor’s hack, NYT reports | Reuters
A cyberattack on technology vendor SitusAMC may have exposed client data from major banks including JPMorgan Chase, Citi, and Morgan Stanley. SitusAMC …
- I run a Red Team that routinely succeeds in compromising F500 companies. AMA. : r/cybersecurity
This Reddit Ask Me Anything (AMA) features Jason, who leads a Red Team that successfully compromises F500 companies, discussing their methods and challenges. …
- New Fluent Bit Flaws Expose Cloud to RCE and Stealthy Infrastructure Intrusions
Five critical vulnerabilities have been discovered in Fluent Bit, a widely used telemetry agent, which could allow attackers to achieve remote code execution, …
- Europe’s AI-Fuelled GLP-1 Scam
Inside Europe’s AI-Fuelled GLP-1 Scam Epidemic: How Criminal Networks Are Hijacking the Identities of the NHS, AEMPS, ANSM, BfArM and AIFA to Sell Fake …
- Cloudflare's One-Stop-Shop Convenience Takes Down Global Digital Economy
Cloudflare’s One-Stop-Shop Convenience Takes Down Global Digital Economy www.darkreading.com/cybersecu… This week, Cloudflare experienced a massive outage that …
- Analyzing the latest Sneaky2FA Browser-in-the-Browser phishing page
Analyzing the latest Sneaky2FA Browser-in-the-Browser phishing page pushsecurity.com/blog/anal… Attackers are continuously innovating their phishing techniques, …
- Cryptographers cancel election results
Oops. Cryptographers cancel election results after losing decryption key. arstechnica.com/security/… One of the world’s premier security organizations has …
- How to know if your Asus router is one of thousands hacked
How to know if your Asus router is one of thousands hacked by China-state hacker arstechnica.com/security/… Thousands of Asus routers have been hacked and are …
- Cox Enterprises discloses Oracle E-Business Suite data breach
Cox Enterprises discloses Oracle E-Business Suite data breach www.bleepingcomputer.com/news/secu… Cox Enterprises is notifying impacted individuals of a data …
- ShinyHunters 'does not like Salesforce
ShinyHunters ‘does not like Salesforce at all,’ claims the crew accessed Gainsight 3 months ago www.theregister.com/2025/11/2… EXCLUSIVE ShinyHunters has …
- Gmail can read your emails and attachments
Gmail can read your emails and attachments to train its AI, unless you opt out www.malwarebytes.com/blog/news… Under the radar, Google has added features that …
- Harvard alumni department database hacked
An unauthorized party accessed databases used by Harvard’s Alumni Affairs and Development through a phone-based phishing attack, potentially exposing alumni …
- Iberia discloses customer data leak after vendor security breach
Spanish airline Iberia has informed customers about a data security incident that occurred due to a breach at one of its suppliers. The compromised information …
- X has quietly introduced a new transparency feature
X has quietly introduced a new transparency feature that reveals how accounts were created, where they originated and how their identities have changed over …
- Budget Samsung phones shipped with unremovable spyware
Budget Samsung phones shipped with unremovable spyware, say researchers www.malwarebytes.com/blog/news… A controversy over data-gathering software secretly …
- Understanding Cloud Persistence
Understanding Cloud Persistence: How Attackers Maintain Access Using Google Cloud Functions whiteknightlabs.com/2025/11/1… In today’s cloud-driven world, …
- ToddyCat: your hidden email assistant
ToddyCat: your hidden email assistant. Part 1 securelist.com/toddycat-… The incidents reviewed in this article show that ToddyCat APT is constantly evolving its …
- GitHub - omarkurt/django-connector-CVE-2025-64459-testbed: A self-contained testbed for Django CVE-2025-64459. Demonstrates QuerySet.filter() parameter injection via dictionary expansion using Docker.
This GitHub post presents a testbed for Django CVE-2025-64459, a parameter injection vulnerability in QuerySet.filter() affecting Django versions prior to …
- Matrix Push C2 Uses Browser Notifications for Fileless, Cross-Platform Phishing Attacks
The new Matrix Push C2 platform uses browser notifications for fileless, cross-platform phishing attacks, tricking users into clicking malicious links via fake …
- GitHub - aliasrobotics/cai: Cybersecurity AI (CAI), the framework for AI Security
The Cybersecurity AI (CAI) framework is an open-source project designed to empower security professionals with AI-powered automation for both offensive and …
- China-Linked APT31 Launches Stealthy Cyberattacks on Russian IT Using Cloud Services
The China-linked APT31 group conducted stealthy cyberattacks on the Russian IT sector between 2024 and 2025, utilizing cloud services for command and control …
- CrowdStrike catches insider feeding information to hackers
Cybersecurity firm CrowdStrike confirmed an insider shared screenshots of internal systems with threat actors, though no systems or customer data were …
- AI Changing Entry-Level Work Can Impact Talent Pipeline
The increasing use of AI in entry-level cybersecurity roles is automating repetitive tasks, which traditionally served as a training ground for new …
- Fake calendar invites are spreading. Here’s how to remove them and prevent more | Malwarebytes
Phishing calendar invites are spreading, often disguised as payment reminders or meeting invitations, and can be removed by adjusting your calendar settings to …
- Grafana Patches CVSS 10.0 SCIM Flaw Enabling Impersonation and Privilege Escalation
Grafana has released updates to fix a critical CVSS 10.0 SCIM vulnerability (CVE-2025-41115) in versions 12.x that could lead to user impersonation and …
- Recognizing and responding to cyber threats: What differentiates NDR, EDR and XDR | CSO Online
This article distinguishes between NDR (Network Detection and Response), EDR (Endpoint Detection and Response), and XDR (Extended Detection and Response), …
- Hacking EV chargers by attacking Qualcomm modems: 41 out of 69 tested chargers are affected. 🚘⛽⚡🪤👩🏻💻
Security researchers discovered a new attack vector targeting Qualcomm HomePlug GreenPHY modems used in EV chargers, affecting 41 out of 69 tested chargers. …
- SquareX and Perplexity Quarrel Over Alleged Comet Browser Vulnerability - SecurityWeek
The browser security firm SquareX claims to have discovered a critical vulnerability in Perplexity’s Comet AI browser, which could allow attackers to execute …
- Chinese Cyberspies Deploy ‘BadAudio’ Malware via Supply Chain Attacks - SecurityWeek
Chinese cyberspies, tracked as APT24, have been observed deploying BadAudio malware through supply chain attacks over a three-year campaign. They utilize …
- Ransomware gangs seize a new hostage: your AWS S3 buckets | CSO Online
Ransomware gangs are increasingly targeting AWS S3 buckets, moving beyond on-premises systems by exploiting cloud-native encryption and key management features …
- What Did We Learn from the NCSC’s 2025 Annual Review? | Tripwire
The NCSC’s 2025 Annual Review reveals that while incident frequency has stagnated, incident severity has significantly increased, prompting a renewed focus on …
- Massive data leak hits Italian railway operator Ferrovie dello Stato via Almaviva hack
A massive data leak occurred at Ferrovie dello Stato Italiane (FS), Italy’s national railway operator, after an attack on its IT provider, Almaviva. The hacker …
- Google Brings AirDrop Compatibility to Android’s Quick Share Using Rust-Hardened Security
Google has updated Quick Share to enable AirDrop compatibility, allowing file sharing between Android and iPhone devices, with a focus on Rust-hardened …
- Sliver C2 Insecure Default Network Policy (CVE-2025-27093) | Hoang Nguyen
Article claims: The Sliver C2 framework has an insecure default network policy (CVE-2025-27093) in versions 1.5.43 and earlier, where the Wireguard netstack …
- Google begins showing ads in AI Mode (AI answers)
Google has begun displaying sponsored ads within its AI Mode (AI answers), a feature that has been available for free for a year. These ads, labeled as …
- Sneaky2FA phishing tool adds ability to insert legit-looking URLs | CSO Online
The Sneaky2FA phishing tool has been updated with a browser-in-the-browser (BITB) capability, allowing attackers to create fake browser windows with …
- Salesforce investigates new incident echoing Salesloft Drift compromise - Help Net Security
Salesforce is investigating unusual activity involving Gainsight-published apps connected to Salesforce, which may have led to unauthorized access to customer …
- ShinyHunters Hack Salesforce Instances Via Gainsight Apps
The hacking group ShinyHunters has been identified as the perpetrator behind a recent cyberattack targeting Salesforce instances through Gainsight …
- ENISA Is Now a CVE Program Root - GovInfoSecurity
The European Union Agency for Cybersecurity (ENISA) has become a “Root” participant in the Common Vulnerabilities and Exposures (CVE) program, granting it the …
- Salesforce cuts off access to third-party app after discovering ‘unusual activity’ | The Record from Recorded Future News
Salesforce has cut off access to the third-party app Gainsight after discovering unusual activity that may have led to unauthorized access to customer data. …
- North Korean operatives running fake job portal targeting US AI firms | CNN Politics
North Korean operatives have launched a fake job portal targeting applicants for major US artificial intelligence and crypto firms to steal money and technical …
- UK drug funds flowed into bank tied to Russian spy services, military | The Record from Recorded Future News
The UK’s National Crime Agency (NCA) has uncovered a money laundering network, funded by drug sales, that funneled cash through Keremet Bank in Kyrgyzstan, a …
- DepthFirst | Esbuild’s XSS Bug that Survived 5 Billion Downloads and Bypassed HTML Sanitization
A subtle XSS bug was discovered in esbuild, a JavaScript bundler with billions of downloads, which bypassed its HTML sanitization due to a missing quote …
- New Sturnus Banking Trojan Targets WhatsApp, Telegram, Signal Messages - SecurityWeek
A new Android banking trojan named Sturnus has been identified, specifically designed to target secure messaging apps like WhatsApp, Telegram, and Signal. This …
- NSO seeks to overturn WhatsApp case, saying it is ‘catastrophic’ for the spyware maker | The Record from Recorded Future News
The NSO Group is appealing a judge’s ruling that ordered them to stop using their Pegasus spyware to target WhatsApp users, arguing the decision is …
- Pakistan Creates First Secure Mobile Phone to Block Hacking, Spying, and Data Leaks - PhoneWorld
Pakistan has developed its first secure mobile phone, featuring a closed operating system with no internet access, to prevent hacking, spying, and data leaks. …
- Hacker Selling Alleged Samsung Medison Data Stolen In 3rd Party Breach – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
A hacker known as 888 is selling alleged Samsung Medison data, including internal files and user information, claiming it was obtained through a third-party …
- Researchers claim ‘largest leak ever’ after uncovering WhatsApp enumeration flaw – DataBreaches.Net
Researchers claim to have uncovered the largest data leak ever by exploiting a WhatsApp enumeration flaw to gather personal data of over 3.5 billion users. The …
- Hacked by Trojan 1337: Indian Hacker Breaches Pakistan’s National Certainty Holdings & Bureau of Statistics
An Indian hacker known as Trojan 1337 has reportedly breached Pakistan’s National Certainty Holdings (NCH), a part of the Pakistan Bureau of Statistics, …
- New SonicWall SonicOS flaw allows hackers to crash firewalls
SonicWall has released a patch for a high-severity flaw (CVE-2025-40601) in its SonicOS SSLVPN that can cause vulnerable firewalls to crash. While there’s no …
- Iranian APT hacks helped direct missile strikes in Israel and the Red Sea | CSO Online
Amazon Threat Intel has correlated the cyber activities of two Iran-linked threat groups, Imperial Kitten and MuddyWater, with subsequent missile strikes in …
- Breaking Oracle’s Identity Manager: Pre-Auth RCE (CVE-2025-61757) › Searchlight Cyber
Searchlight Cyber’s research team discovered a pre-authentication RCE vulnerability (CVE-2025-61757) in Oracle Identity Manager by bypassing authentication …
- Hostile States Are Using Cyber Targeting
Amazon Security Chief: Hostile States Are Using Cyber Targeting to Enable Physical Military Strikes www.theregister.com/2025/11/1… Warfare is increasingly …
- PlushDaemon Compromises Network Devices for Adversary-in-the-Middle Attacks
PlushDaemon Compromises Network Devices for Adversary-in-the-Middle Attacks www.welivesecurity.com/en/eset-r… ESET researchers have detailed how PlushDaemon …
- Hackers Actively Exploiting 7-Zip
Hackers Actively Exploiting 7-Zip Symbolic-Link RCE Vulnerability (CVE-2025-11001) thehackernews.com/2025/11/h… A recently disclosed vulnerability affecting …
- Meet ShinySp1d3r: New Ransomware-as-a-Service Created by ShinyHunters
Meet ShinySp1d3r: New Ransomware-as-a-Service Created by ShinyHunters www.bleepingcomputer.com/news/secu… An early build of the forthcoming ShinySp1d3r …
- Operation WrtHug: The Global Espionage Campaign Hiding in Your Home Router
Operation WrtHug: The Global Espionage Campaign Hiding in Your Home Router securityscorecard.com/blog/oper… A new report, “Operation WrtHug,” has revealed that …
- Cloudflare Blames Outage on Internal Configuration Error
Cloudflare Blames Outage on Internal Configuration Error www.darkreading.com/cyber-ris… Cloudflare attributed a multihour outage that disrupted major websites …
- Anatomy of an Akira Ransomware Attack
Anatomy of an Akira Ransomware Attack: When a Fake CAPTCHA Led to Forty-Two Days of Compromise unit42.paloaltonetworks.com/fake-capt… Unit 42 recently assisted …
- European Commission ‘simplification’ proposal would weaken GDPR, AI regulations | The Record from Recorded Future News
The European Commission has proposed changes to the GDPR and AI Act, which critics argue would weaken data protection rules by allowing companies to use …
- Operation WrtHug hijacks 50,000+ ASUS routers to Bìbuild global botnet
Operation WrtHug has hijacked over 50,000 ASUS routers, primarily targeting outdated models in Taiwan, the U.S., and Russia to build a global botnet. Attackers …
- Exploiting A Pre-Auth RCE in W3 Total Cache For WordPress (CVE-2025-9501) | RCE Security
This article details the exploitation of CVE-2025-9501, a pre-authentication Remote Code Execution (RCE) vulnerability in the W3 Total Cache WordPress plugin. …
- Breaking Down S3 Ransomware
Breaking Down S3 Ransomware: Variants, Attack Paths and Trend Vision One™ Defenses www.trendmicro.com/en_us/res… Ransomware remains a persistent threat, …
- npm Malware Campaign
npm Malware Campaign Uses Adspect Cloaking to Deliver Malicious Redirects socket.dev/blog/npm-… The Socket Threat Research Team recently uncovered dino_reborn, …
- ShadowRay 2.0
ShadowRay 2.0: Attackers Turn AI Against Itself in a Global Campaign That Hijacks AI Into a Self-Propagating Botnet www.oligo.security/blog/shad… In early …
- MI5 Warns Lawmakers That Chinese Spies Are Trying to Reach Them via LinkedIn - SecurityWeek
Britains MI5 intelligence agency has warned lawmakers that Chinese spies are using LinkedIn to reach out to them, aiming to recruit and cultivate them for …
- More work for admins as Google patches latest zero-day Chrome vulnerability | CSO Online
Google has released an emergency patch for a zero-day vulnerability (CVE-2025-13223) in its V8 JavaScript engine, which is also used by other Chromium-based …
- Airlines Will Shut Down Program That Sold Your Flights Records to Government
The Airlines Reporting Corporation (ARC) will shut down its Travel Intelligence Program (TIP), which sold access to flight records to government agencies, …
- ACLU and EFF Sue a City Blanketed With Flock Surveillance Cameras
The ACLU and EFF have filed a lawsuit against the city of San Jose, California, challenging the pervasive use of Flock license plate-reading surveillance …
- HPE security advisory (AV25-768) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security issued HPE security advisory AV25-768 on November 18, 2025, addressing vulnerabilities in HPE Aruba Networking AOS-CX, …
- Fortinet security advisory (AV25-769) - Canadian Centre for Cyber Security
On November 18, 2025, Fortinet released security advisories for multiple products, with an exploit for CVE-2025-58034 already in the wild and added to CISA’s …
- New Technique Shows Gaps in LLM Safety Screening
Researchers have discovered a new technique called “EchoGram” that exploits token sequences to bypass AI guardrail models designed to screen Large Language …
- A miracle: A company says sorry after a cyber attack - and donates the ransom to cybersecurity research
In a refreshing departure from typical corporate responses to data breaches, Checkout.com has publicly apologized for a cyber attack that exposed data from a …
- Fortinet’s silent patch sparks alarm as a critical FortiWeb flaw is exploited in the wild | CSO Online
A critical FortiWeb flaw (CVE-2025-64446) has been actively exploited in the wild before Fortinet disclosed its severity, allowing unauthenticated actors to …
- Iranian Hackers Use DEEPROOT and TWOSTROKE Malware in Aerospace and Defense Attacks
Iranian hackers, tracked as UNC1549, are utilizing malware like DEEPROOT and TWOSTROKE in sophisticated attacks targeting aerospace, aviation, and defense …
- Princeton University Data Breach Impacts Alumni, Students, Employees - SecurityWeek
Princeton University disclosed a data breach impacting alumni, donors, faculty, students, and employees after a phishing attack on November 10th. The breach …
- Pennsylvania Attorney General Confirms Data Breach After Ransomware Attack - SecurityWeek
The Pennsylvania Office of the Attorney General (OAG) has confirmed a data breach following a ransomware attack by the Inc Ransom group, which claims to have …
- Google Chrome security advisory (AV25-766) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security has issued a security advisory (AV25-766) regarding a vulnerability in Google Chrome for Desktop. Users and …
- Zyxel security advisory (AV25-767) - Canadian Centre for Cyber Security
Zyxel published a security advisory (AV25-767) on November 18, 2025, addressing vulnerabilities in various 4G LTE/5G NR CPE, DSL/Ethernet CPE, Fiber ONTs, …
- Internet slowly recovers after far-reaching Cloudflare outage - Help Net Security
A major Cloudflare outage impacted numerous popular websites and services, including X (formerly Twitter) and OpenAI, due to an undisclosed network issue. …
- 'Largest-ever' cloud DDoS attack
‘Largest-ever’ cloud DDoS attack pummels Azure with 3.64B packets per second www.theregister.com/2025/11/1… Azure was hit by the “largest-ever” cloud-based …
- Cursor Issue Paves Way for Credential-Stealing Attacks
Cursor Issue Paves Way for Credential-Stealing Attacks www.darkreading.com/vulnerabi… An inherent insecurity in the increasingly popular artificial intelligence …
- Eurofiber France warns of breach
Eurofiber France warns of breach after hacker tries to sell customer data www.bleepingcomputer.com/news/secu… Eurofiber France disclosed a data breach it …
- New EVALUSION ClickFix Campaign
New EVALUSION ClickFix Campaign Delivers Amatera Stealer and NetSupport RAT thehackernews.com/2025/11/n… Cybersecurity researchers have discovered malware …
- Analysis of UNC1549
Frontline Intelligence: Analysis of UNC1549 TTPs, Custom Tools, and Malware Targeting the Aerospace and Defense Ecosystem cloud.google.com/blog/topi… Last year, …
- Dutch police seizes 250 servers
Dutch police seizes 250 servers used by “bulletproof hosting” service www.bleepingcomputer.com/news/secu… The police in the Netherlands have seized around 250 …
- Windows 10 KB5068781 ESU update may fail
Microsoft: Windows 10 KB5068781 ESU update may fail with 0x800f0922 errors www.bleepingcomputer.com/news/micr… Microsoft has confirmed it is investigating a bug …
- Hardened Containers Look to Eliminate Common Source of Vulnerabilities
Hardened Containers Look to Eliminate Common Source of Vulnerabilities www.darkreading.com/applicati… Containerization technology makes software development and …
- How Code Reuse Spread Critical Vulnerabilities
ShadowMQ: How Code Reuse Spread Critical Vulnerabilities Across the AI Ecosystem www.oligo.security/blog/shad… In the race to make the adoption of AI faster, it …
- 4 Americans plead guilty to helping North Korea
4 Americans plead guilty to helping North Korean scammers earn over $2 million from dozens of companies www.politico.com/news/2025… Four Americans and one …
- RondoDox Exploits Unpatched XWiki Servers
RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet thehackernews.com/2025/11/r… The botnet malware known as RondoDox has been …
- A Turning Point for Cyber Physical Resilience - Industrial Cyber
The Industrial Cyber Days: Critical Infrastructure 2025 event highlighted a significant shift in cyber-physical resilience, emphasizing practical steps, …
- Fortinet Releases Security Advisory for Relative Path Traversal Vulnerability Affecting FortiWeb Products | CISA
CISA is aware of exploitation of a relative path traversal vulnerability (CVE-2025-64446) affecting Fortinet FortiWeb products. This vulnerability allows an …
- Cisco security advisory (AV25-759) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security has issued security advisory AV25-759 regarding vulnerabilities in Cisco Catalyst Center Hardware Appliance and Virtual …
- Digital Doppelgangers: Anatomy of Evolving Impersonation Campaigns Distributing Gh0st RAT
Two interconnected malware campaigns in 2025 used large-scale brand impersonation to distribute the Gh0st remote access Trojan (RAT) to Chinese-speaking users, …
- Worm flooding npm registry with token stealers still isn’t under control | CSO Online
A coordinated token farming campaign continues to flood the npm registry with tens of thousands of infected packages daily, aiming to steal Tea tokens by …
- Multiple Vulnerabilities in GoSign Desktop lead to Remote Code Execution
Multiple vulnerabilities in GoSign Desktop allow for Remote Code Execution and Privilege Escalation due to disabled TLS certificate validation and an unsigned …
- Google Sues Operators of Lighthouse Smishing Campaign
Google has sued the Chinese-speaking operators of the Lighthouse Smishing Campaign, a phishing-as-a-service operation responsible for over 100 counterfeit …
- Document Tech Firm Hit as New Cyber Gang Expands Reach
The cybercrime gang Kazu is threatening to publish 353 gigabytes of data allegedly stolen from Doctor Alliance, a tech firm providing services to physician …
- DOJ Continues Crackdown on North Korea’s Cyber Schemes
The DOJ has secured guilty pleas and over $15 million in civil forfeiture as part of a crackdown on North Korea’s cyber schemes. U.S. facilitators aided North …
- Somalia reels after massive e-visa hack; airspace ‘war’ with Somaliland compounds turmoil | Somali Guardian
Somalia’s controversial e-visa system suffered a major cyberattack, compromising personal data of over 35,000 applicants, including Western nationals, raising …
- Splunk security advisory (AV25-754) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security has issued Splunk security advisory AV25-754, detailing vulnerabilities in multiple versions of Splunk Enterprise and …
- Microsoft Edge security advisory (AV25-755) - Canadian Centre for Cyber Security
Microsoft Edge Stable Channel versions prior to 142.0.3595.80 have vulnerabilities addressed in a security update published on November 13, 2025. The Cyber …
- The Good, the Bad and the Ugly in Cybersecurity – Week 46
A Russian national has pleaded guilty to acting as an initial access broker for Yanluowang ransomware attacks, while an international effort called Operation …
- Millions of sites at risk from Imunify360 critical flaw exploit
A critical vulnerability in Imunify360 (versions prior to v32.7.4.0) allows attackers to execute arbitrary code on shared servers, potentially compromising …
- Researchers Find Serious AI Bugs Exposing Meta, Nvidia, and Microsoft Inference Frameworks
Serious AI bugs, specifically remote code execution flaws, have been discovered in inference engines from Meta, Nvidia, and Microsoft, stemming from unsafe …
- Be careful responding to unexpected job interviews | Malwarebytes
Be cautious of unexpected job interview invitations, as a recent scam involved fake recruiters contacting individuals via LinkedIn and email, leading to a …
- HPE security advisory (AV25-756) - Canadian Centre for Cyber Security
HPE security advisory AV25-756 addresses a vulnerability in HPE SimpliVity 325 Gen10 Plus versions prior to HPE SimpliVity Gen10 Support Pack (SVTSP) …
- Samsung mobile security advisory (AV25-757) - Canadian Centre for Cyber Security
Samsung mobile security advisory AV25-757 addresses vulnerabilities in Samsung mobile devices prior to SMR-NOV-2025, with a security update released on …
- Fortinet security advisory (AV25-758) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security issued Fortinet security advisory AV25-758 on November 14, 2025, addressing a critical vulnerability (CVE-2025-64446) in …
- CISA Warns of Active Attacks on Cisco ASA and Firepower Flaws – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
CISA has issued an urgent warning about active attacks exploiting CVE-2025-20362 and CVE-2025-20333 in Cisco ASA and Firepower devices, which are being used in …
- North Korean Hackers Turn JSON Services into Covert Malware Delivery Channels
North Korean hackers are using JSON storage services like JSON Keeper and JSONsilo as covert malware delivery channels within the Contagious Interview …
- Personal details of Tate galleries job applicants leaked online | Data protection | The Guardian
Personal details of 111 job applicants for a website developer position at Tate galleries have been leaked online, including addresses, salaries, and referee …
- Critical CVE-2025-59367 flaw lets hackers access ASUS DSL routers remotely
A critical auth-bypass flaw (CVE-2025-59367) has been discovered in ASUS DSL routers, allowing remote attackers to access devices without authentication. ASUS …
- US Strike Force Takes Aim at Southeast Asian Scam Centers
The U.S. Attorney for the District of Columbia has launched the Scam Center Strike Force to dismantle criminal networks in Southeast Asia that are behind …
- Deepwatch, Axonius Carry Out Steep Layoffs Amid Surge in AI
Cybersecurity firms Deepwatch and Axonius have conducted significant layoffs, reportedly cutting double-digit percentages of their workforces. Deepwatch cited …
- Cyber Threat Intelligence Report – Nov. 14, 2025
Threat activity over the past forty-eight hours reflects sustained pressure on enterprises from state-aligned espionage, zero-day exploitation, and ransomware …
- Checkout.com Hacked - ShinyHunters Breached Cloud Storage
The hacking group ShinyHunters has breached Checkout.com’s legacy cloud storage, exposing internal documents. Checkout.com confirmed the breach, stating that …
- Chinese Tech Firm Leak Reportedly Exposes State Linked Hacking – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
A major data leak from Chinese cybersecurity firm Knownsec reportedly exposed over 12,000 files detailing state-linked hacking tools and operations, including …
- Cl0P Ransomware Group Allegedly Claims Breach of Entrust in Oracle 0-Day EBS Hack - Cyber Security News
The Cl0P ransomware group has claimed responsibility for breaching Entrust, a digital security firm, by exploiting a zero-day vulnerability in Oracle …
- The ad blocker that fights back: why AdNauseam deserves your attention
AdNauseam is a unique privacy tool that actively fights surveillance capitalism by polluting the data advertisers rely on. Unlike traditional blockers that …
- State of Ransomware in Q3 2025
The State of Ransomware in Q3 2025 blog.checkpoint.com/research/… The ransomware landscape in Q3 2025 has reached a critical inflection point. Despite multiple …
- Google is easing up on Android's new sideloading restrictions
Breaking: Google is easing up on Android’s new sideloading restrictions! www.androidauthority.com/android-p… TL;DR: Google is working to make it easier for …
- Fortinet zero-day exploited
Suspected Fortinet zero-day exploited in the wild www.pwndefend.com/2025/11/1… This weeks been an interesting one, I’ve been doing quite a bit of research …
- Orgs Move to SSO, Passkeys to Solve Bad Password Habits
Orgs Move to SSO, Passkeys to Solve Bad Password Habits www.darkreading.com/identity-… New survey data indicates that organizations are pushing hard for …
- CISA warns feds to fully patch actively exploited Cisco flaws
CISA warns feds to fully patch actively exploited Cisco flaws www.bleepingcomputer.com/news/secu… CISA warned U.S. federal agencies to fully patch two actively …
- Washington Post data breach impacts nearly 10K
Washington Post data breach impacts nearly 10K employees, contractors www.bleepingcomputer.com/news/secu… The Washington Post is notifying nearly 10,000 …
- Cybersecurity firm Deepwatch lays off dozens, citing move to ‘accelerate’ AI investment | TechCrunch
Cybersecurity firm Deepwatch has laid off dozens of employees, citing a strategic move to accelerate AI investment and automation. This decision impacts …
- 2B email addresses and 1.3B passwords compromised in data breaches
A recent compilation of data breaches has revealed that approximately 2 billion email addresses and 1.3 billion passwords have been compromised. This extensive …
- CISA Adds Three Known Exploited Vulnerabilities
CISA Adds Three Known Exploited Vulnerabilities to Catalog www.cisa.gov/news-even… CISA has added three new vulnerabilities to its Known Exploited …
- German extremist arrested
German extremist arrested over operating alleged darknet assassination marketplace therecord.media/german-ex… German prosecutors have arrested a suspected …
- Hackers exploited Citrix, Cisco ISE flaws
Hackers exploited Citrix, Cisco ISE flaws in zero-day attacks www.bleepingcomputer.com/news/secu… An advanced threat actor exploited the critical …
- DanaBot malware is back
DanaBot malware is back to infecting Windows after 6-month break www.bleepingcomputer.com/news/secu… The DanaBot malware has returned with a new version …
- Hackers abuse Triofox antivirus
Hackers abuse Triofox antivirus feature to deploy remote access tools www.bleepingcomputer.com/news/secu… Hackers exploited a critical vulnerability and the …
- Russian hacker admits helping Yanluowang ransomware infect companies
A Russian hacker, Aleksey Olegovich Volkov, has admitted to pleading guilty for his role as an initial access broker for the Yanluowang ransomware group. …
- Australia’s spy chief warns of China-linked threats to critical infrastructure
Australia’s spy chief, Mike Burgess, has warned that China-linked actors, including the Volt Typhoon APT group, are probing and have gained access to critical …
- Judge Rules Flock Surveillance Images Are Public Records That Can Be Requested By Anyone
A Washington judge ruled that images from Flock’s AI license plate-scanning cameras are public records, rejecting the city’s arguments that the data was exempt …
- Phishing Tool Uses Smart Redirects to Bypass Detection
A new phishing tool called Quantum Route Redirect is simplifying social engineering attacks against Microsoft 365 users, allowing less experienced …
- Hyundai Data Breach May Have Leaked Drivers' Personal Information
Hyundai is notifying customers of a security breach that may have exposed millions of people’s personal information, including names, driver’s license numbers, …
- Another Chinese security firm has its data leaked
A leak of over 12,000 internal documents from Chinese security firm KnownSec has exposed details about its contracts with the Chinese government, developed …
- Taiwan: Amendment to Personal Data Protection Act - Global Compliance News
Taiwan’s Personal Data Protection Act (PDPA) has been amended, establishing the Personal Data Protection Commission (PDPC) as the new supervisory authority. …
- Chipmaker Patch Tuesday: Over 60 Vulnerabilities Patched by Intel - SecurityWeek
Intel, AMD, and Nvidia have released security advisories detailing over 60 vulnerabilities across their products. These vulnerabilities, ranging in severity, …
- Update now: November Patch Tuesday fixes Windows zero-day exploited in the wild | Malwarebytes
The November Patch Tuesday addresses critical security vulnerabilities in Windows, including a zero-day flaw (CVE-2025-6215) that was actively exploited in the …
- High-Severity Vulnerabilities Patched by Ivanti and Zoom - SecurityWeek
Ivanti and Zoom have released patches for several vulnerabilities, including high-severity issues that could allow for arbitrary file writes and code …
- Synnovis Notifying UK Providers of Data Theft in 2024 Attack
British pathology firm Synnovis is notifying healthcare providers of a data breach stemming from a June 2024 ransomware attack, after a complex forensics …
- ClickFix may be the biggest security threat
ClickFix may be the biggest security threat your family has never heard of arstechnica.com/security/… Over the past year, scammers have ramped up a new way to …
- GootLoader Is Back, Using a New Font Trick to Hide Malware
GootLoader Is Back, Using a New Font Trick to Hide Malware on WordPress Sites thehackernews.com/2025/11/g… The malware known as GootLoader has resurfaced yet …
- GlassWorm Returns
GlassWorm Returns, Slices Back into VS Code Extensions www.darkreading.com/cyberatta… GlassWorm, a self-propagating malware targeting Visual Studio Code (VS …
- OWASP Highlights Supply Chain Risks
OWASP Highlights Supply Chain Risks in New Top 10 List www.darkreading.com/applicati… OWASP has updated its list of Top 10 software vulnerabilities to align it …
- CISA orders feds to patch Samsung zero-day
CISA orders feds to patch Samsung zero-day used in spyware attacks www.bleepingcomputer.com/news/secu… CISA ordered U.S. federal agencies today to patch a …
- Quantum Route Redirect PhaaS
Quantum Route Redirect PhaaS targets Microsoft 365 users worldwide www.bleepingcomputer.com/news/secu… A new phishing automation platform named Quantum Route …
- APT37 hackers abuse Google Find Hub
APT37 hackers abuse Google Find Hub in Android data-wiping attacks www.bleepingcomputer.com/news/secu… North Korean hackers are abusing Google’s Find Hub tool …
- GlobalLogic warns 10,000 employees of data theft
GlobalLogic warns 10,000 employees of data theft after Oracle breach www.bleepingcomputer.com/news/secu… GlobalLogic, a provider of digital engineering services …
- Iranian-backed Cyber Toufan Hacks Israeli Defense Contractors, Leaks Classified Australian Military Plans - SSBCrack News
The Iranian-backed hacking group Cyber Toufan has breached 17 Israeli defense contractors, leaking classified Australian military plans for the AS21 Redback …
- Tehran-Linked Hacking Group Leaks Technical Designs of Australia’s $7 Billion Armored Vehicles - Iran Focus
A Tehran-linked hacking group, Cyber Tornado, has allegedly leaked the technical designs of Australia’s $7 billion armored vehicles, the Redback infantry …
- Healthcare firm apparently hit by major cyberattack exposing over a million medical records - how to find out if you’re affected | TechRadar
A cyberattack has allegedly impacted Doctor Alliance, a healthcare firm, with a threat actor claiming to have stolen 1.24 million sensitive health files. The …
- Samsung Mobile Devices Out-of-Bounds Write Vulnerability
CISA Adds One Known Exploited Vulnerability to Catalog: Samsung Mobile Devices Out-of-Bounds Write Vulnerability www.cisa.gov/news-even… CISA has added one new …
- Threat Hunting vs. Threat Intelligence
Threat Hunting vs. Threat Intelligence www.recordedfuture.com/blog/thre… Threat intelligence and threat hunting are two cornerstone practices in modern …
- Hack halts Dutch broadcaster
Hack halts Dutch broadcaster, forcing radio hosts back to LPs www.bitdefender.com/en-us/blo… A Dutch TV and radio broadcaster has found itself at the mercy of …
- ClickFix Campaign Targets Hotels, Spurs Secondary Customer Attacks
ClickFix Campaign Targets Hotels, Spurs Secondary Customer Attacks www.darkreading.com/cyberatta… Researchers have uncovered a broad campaign in which threat …
- 5 reasons why attackers are phishing over LinkedIn
5 reasons why attackers are phishing over LinkedIn www.bleepingcomputer.com/news/secu… Phishing attacks are no longer confined to the email inbox, with 34% of …
- Nationwide U.S. government shutdown – travel and service impacts
Nationwide U.S. government shutdown – travel and service impacts The continuing U.S. federal government shutdown is expected to last into at least early …
- Danish authorities in rush to close security loophole
Danish authorities in rush to close security loophole in Chinese electric buses www.theguardian.com/world/202… Authorities in Denmark are urgently studying how …
- Gootloader malware is back with new tricks after 7-month break
Gootloader malware is back with new tricks after 7-month break www.bleepingcomputer.com/news/secu… The Gootloader malware loader operation has returned after a …
- ESET APT Activity Report Q2 2025–Q3 2025
ESET APT Activity Report Q2 2025–Q3 2025 www.welivesecurity.com/en/eset-r… ESET APT Activity Report Q2 2025–Q3 2025 summarizes notable activities of selected …
- Malicious Infrastructure Finds Stability with aurologic GmbH
Malicious Infrastructure Finds Stability with aurologic GmbH www.recordedfuture.com/research/… German hosting provider aurologic GmbH has emerged as a central …
- China sentences 5 Myanmar scam kingpins
China sentences 5 Myanmar scam kingpins to death therecord.media/china-sen… A Chinese court sentenced five members of a Myanmar crime syndicate to death for …
- Crossed wires: a case study of Iranian espionage
Crossed wires: a case study of Iranian espionage and attribution www.proofpoint.com/us/blog/t… In June, Proofpoint Threat Research began investigating a benign …
- How an Attacker Drained $128M from Balancer Through Rounding Error Exploitation
How an Attacker Drained $128M from Balancer Through Rounding Error Exploitation research.checkpoint.com/2025/how-… On November 3, 2025, Check Point Research’s …
- Advances in Threat Actor Usage of AI Tools
GTIG AI Threat Tracker: Advances in Threat Actor Usage of AI Tools cloud.google.com/blog/topi… Based on recent analysis of the broader threat landscape, Google …
- Securing critical infrastructure
Securing critical infrastructure: Why Europe’s risk-based regulations matter www.microsoft.com/en-us/sec… The Deputy CISO blog series is where Microsoft …
- US sanctions more North Koreans over remote IT worker scam
US sanctions more North Koreans over remote IT worker scam www.politico.com/news/2025… The Trump administration on Tuesday sanctioned nearly a dozen North …
- M&S pegs cyberattack cleanup costs at £136M
M&S pegs cyberattack cleanup costs at £136M as profits slump www.theregister.com/2025/11/0… Marks & Spencer says its April cyberattack will cost around £136 …
- Polish loan platform hacked
Polish loan platform hacked; mobile payment system and other businesses disrupted therecord.media/poland-ha… Polish authorities are investigating a series of …
- My ServiceOttawa data breach affects 2,400 users, City says
The My ServiceOttawa data breach has affected approximately 2,400 users, with their email and physical addresses being accessed. The City of Ottawa has …
- How to Opt-Out of Airlines Selling Your Travel Data to the Government
It is possible to opt-out of Airlines Reporting Corporation (ARC) selling your flight data to the government by emailing them with specific personal …
- Apple security advisory (AV25-722) - Canadian Centre for Cyber Security
Apple released security updates on November 3, 2025, to fix vulnerabilities in Safari, Xcode, iOS, iPadOS, macOS (Sequoia, Sonoma, Tahoe), tvOS, visionOS, and …
- VMware security advisory (AV25-724) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security has issued VMware security advisory AV25-724, detailing critical updates for vulnerabilities in several VMware Tanzu …
- Europol and Eurojust Dismantle €600 Million Crypto Fraud Network in Global Sweep
Europol and Eurojust dismantled a €600 million crypto fraud network through a global sweep, arresting nine individuals in Cyprus, Spain, and Germany. The …
- Google fixed a critical remote code execution in Android
Google’s November 2025 Android security updates have fixed a critical remote code execution vulnerability in the System component, which requires no user …
- Tenable security advisory (AV25-725) - Canadian Centre for Cyber Security
Tenable security advisory AV25-725 addresses vulnerabilities in Tenable Identity Exposure - On-premises LTS version prior to 3.77.14, including a critical …
- How to disable Windows Recall — and why you should | Proton
The Windows Recall feature, an AI tool that creates a searchable timeline of user activity, has faced significant backlash due to privacy and security …
- Hypervisors, the Next Big Target for Hackers - GovInfoSecurity
A Google report highlights that hypervisors, the core of virtualized IT, are becoming a significant cybersecurity vulnerability due to lack of monitoring and …
- Analysis of NGate malware campaign (NFC relay) | CERT Polska
The NGate malware campaign uses social engineering and a fake bank support call to trick victims into installing an Android app that facilitates NFC relay …
- Fewer data breaches in Australia, but human error now a bigger threat | Computer Weekly
In the first half of 2025, Australia saw a 10% decrease in data breaches, with 532 reported incidents. However, human error is an increasing concern, now …
- Hundreds of residents' details shared in data breach
South Gloucestershire Council accidentally published the personal details of 625 residents, including names, addresses, phone numbers, and email addresses, …
- Ubiquiti security advisory (AV25-721) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security issued a security advisory (AV25-721) regarding a critical vulnerability in Ubiquiti’s UniFi Access Application versions …
- New Dante Spyware Linked to Rebranded Hacking Team, Now Memento Labs – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
A new global cyber-espionage threat has emerged with Dante spyware, developed by Memento Labs, the rebranded entity of Hacking Team. The Operation ForumTroll …
- Threat Actors Weaponize Judicial Documents To Deliver PureHVNC RAT
Threat actors are using weaponized judicial documents as lures in phishing campaigns targeting Spanish-speaking users, tricking them into downloading and …
- Crooks exploit RMM software to hijack trucking firms and steal cargo
Cybercriminals are exploiting RMM software to hijack trucking firms and steal cargo, primarily food and beverages. These sophisticated attacks, active since at …
- Operation SkyCloak Deploys Tor-Enabled OpenSSH Backdoor Targeting Defense Sectors
Operation SkyCloak is a cyberattack campaign using phishing emails with weaponized military documents to deliver a backdoor that exploits OpenSSH and Tor for …
- Apple Patches 19 WebKit Vulnerabilities - SecurityWeek
Apple has released security updates for iOS and macOS, patching over 100 vulnerabilities, including 19 in the WebKit browser engine. These updates address …
- Google Big Sleep found five vulnerabilities in Safari
Googles AI agent Big Sleep identified five vulnerabilities in Safari that could lead to browser crashes or memory corruption. Apple has released updates for …
- New backdoor ‘SesameOp’ abuses OpenAI Assistants API for stealthy C2 operations | CSO Online
Microsoft has uncovered a new backdoor named SesameOp that exploits the OpenAI Assistants API for covert command-and-control operations, making detection …
- Former ransomware negotiators allegedly targeted US firms with ALPHV/BlackCat ransomware - Help Net Security
Two individuals, a former ransomware negotiator and an incident response manager, have been indicted for allegedly deploying the ALPHV/BlackCat ransomware …
- Data Theft Hits Behavioral Health Network in 3 States
A data theft incident at Oglethorpe Inc., a behavioral health network operating in Florida, Ohio, and Louisiana, has potentially exposed the personal and …
- BadCandy Implant Hits Cisco Devices Across Australia
The Australian Cyber Security Centre has warned of a BadCandy implant targeting unpatched Cisco IOS XE devices, with at least 150 compromised in Australia. …
- US Appeals Court lowers burden of proof for data breach lawsuits | CSO Online
The 4th US Circuit Court of Appeals has lowered the burden of proof for data breach lawsuits, ruling that publication of stolen data on the dark web alone may …
- New HttpTroy Backdoor Poses as VPN Invoice in Targeted Cyberattack on South Korea
A North Korea-linked threat actor, Kimsuky, has deployed a new backdoor named HttpTroy in a targeted cyberattack on South Korea, masquerading as a VPN invoice …
- Hacktivists increasingly target industrial control systems, Canada Cyber Centre warns | CSO Online
The Canada Cyber Centre warns that hacktivists are increasingly targeting industrial control systems (ICS) in critical sectors like water, oil and gas, and …
- Rhysida ransomware exploits Microsoft certificate to slip malware past defenses | CSO Online
The Rhysida ransomware gang is exploiting Microsoft’s trusted signing system to distribute its OysterLoader malware through fake search ads, bypassing security …
- Cyber-espionage campaign mirroring Sandworm TTPs hit Russian and Belarusian military - Help Net Security
A spear-phishing campaign is targeting Russian and Belarusian military personnel, using military-themed documents as lures to deliver malicious LNK files. …
- You may be getting a notice that your personal info was leaked in a Conduent data breach. Here’s why | wfaa.com
More than ten million individuals had sensitive personal and health-related data stolen during a prolonged breach of Conduent’s systems. Attackers accessed the …
- Scans for Port 8530/8531 (TCP)
Scans for Port 8530/8531 (TCP). Likely related to WSUS Vulnerability CVE-2025-59287 isc.sans.edu/diary/rss… Sensors reporting firewall logs detected a …
- Drawn to Danger: Windows Graphics Vulnerabilities
Drawn to Danger: Windows Graphics Vulnerabilities Lead to Remote Code Execution and Memory Exposure research.checkpoint.com/2025/draw… Check Point Research …
- University of Pennsylvania says it wasn’t hacked after a vulgar email was sent to campus community – DataBreaches.Net
The University of Pennsylvania is investigating a fraudulent email sent to its community, urging recipients to stop giving money. The email, sent from various …
- Veradigm’s Breach Claims Under Scrutiny After Dark Web Leak – DataBreaches.Net
A data breach affecting Veradigm LLC, a health information technology company, has come under scrutiny after a dark web leak. The breach, which occurred on …
- (Web-)Insecurity Blog | Dead Domain Discovery: Discover Expired or Unregistered Domains
Two tools, a Chrome extension and a DNS forwarder, were created to help identify expired or unregistered domains. The Chrome extension scans for abandoned …
- China-linked UNC6384 exploits Windows zero-day to spy on European diplomats
China-linked APT group UNC6384 is exploiting a Windows zero-day vulnerability (ZDI-CAN-25373) to spy on European diplomats, using sophisticated techniques like …
- New Kurdish Hacktivists Hezi Rash Behind 350 DDoS Attacks in 2 Months – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
A new hacktivist group called Hezi Rash has conducted approximately 350 DDoS attacks in two months, targeting countries perceived as threats to Kurdish or …
- BadCandy Webshell threatens unpatched Cisco IOS XE devices, warns Australian government
The Australian government has issued a warning regarding the BadCandy webshell, which is actively exploiting an unpatched vulnerability (CVE-2023-20198) in …
- Ukrainian extradited to US over Conti ransomware involvement
A Ukrainian national, Oleksii Lytvynenko, has been extradited from Ireland to the US to face charges for his alleged involvement in Conti ransomware attacks. …
- Denmark Withdraws Chat Control Proposal Amid Controversy
Denmark withdrew its proposal for mandatory client-side scanning of communications and files for child sexual abuse material (CSAM) after facing domestic and …
- Proton Exposes 300 Million Stolen Credentials — 49% Include Passwords
Privacy company Proton has uncovered 300 million stolen credentials on the dark web, with 49% of them including passwords. This exposure highlights the ongoing …
- Russia Arrests Meduza Stealer Developers After Government Hack – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
Russian law enforcement arrested three IT specialists suspected of developing and selling the Meduza Stealer malware, a Malware-as-a-Service operation active …
- Massive Great Firewall Leak Exposes 500GB of Censorship Data – DataBreaches.Net
A massive leak of over 500GB of data from Chinese infrastructure firms associated with the Great Firewall has exposed internal source code, operational …
- Nearly 58 billion personal data points have been leaked online since 2004, new study reveals | TechRadar
A new study reveals that 57.8 billion personal data points have been leaked online since 2004, with passwords being the most common type of exposed …
- Hackers threaten to leak data after breaching University of Pennsylvania to send mass emails | TechCrunch
The University of Pennsylvania experienced a data breach where hackers sent mass emails from university accounts, threatening to leak data and citing FERPA …