December 2025
266 posts. Browse all months
- In 2025, age checks started locking people out of the internet | Malwarebytes
In 2025, age verification systems began restricting internet access in Europe and the US, particularly for adult content, leading to geo-blocking and increased …
- LinkedIn Job Scams - Schneier on Security
The article discusses LinkedIn job scams that prey on job seekers globally, with different tactics used in countries like India, Kenya, Mexico, and Nigeria. …
- Red Team Brainstorming With GPTs Accelerates Threat Modeling
Offensive cybersecurity consultant Erica Burgess views AI hallucinations as valuable, untested ideas that accelerate threat modeling by helping red teams …
- Two Cybersecurity Professionals Admit to Being BlackCat Ransomware Affiliates
Two Cybersecurity Professionals Admit to Being BlackCat Ransomware Affiliates www.databreachtoday.com/2-cyber-p… Two cybersecurity professionals who moonlighted …
- European Space Agency Confirms Breach of External Servers
European Space Agency Confirms Breach of External Servers www.bleepingcomputer.com/news/secu… The European Space Agency (ESA) has confirmed that attackers …
- Finns Fear Data Breaches
Finns Fear Data Breaches — Scam Calls Do Not Concern Young People www.tivi.fi/uutiset/a… Fifty-six per cent of Finns consider data breaches to be a significant …
- U.S., Australia Say ‘MongoBleed’ Bug Being Exploited
U.S., Australia Say ‘MongoBleed’ Bug Being Exploited therecord.media/us-austra… U.S. and Australian cyber agencies have confirmed that hackers are exploiting a …
- Researchers Spot New Shai Hulud Variant
Researchers Spot New Shai Hulud Variant www.databreachtoday.com/researche… Hackers behind the Shai Hulud malicious npm JavaScript campaign are likely testing a …
- Silver Fox Targets Indian Users With Tax-Themed Emails Delivering ValleyRAT Malware
The threat actor Silver Fox is targeting Indian users with tax-themed phishing emails to deploy the ValleyRAT malware. This sophisticated attack uses DLL …
- 8 Cybersecurity Acquisitions Surpassed $1 Billion Mark in 2025 - SecurityWeek
Eight cybersecurity acquisitions surpassed the $1 billion mark in 2025, with Google’s acquisition of Wiz for $32 billion and Palo Alto Networks' $25 billion …
- Researchers Spot New Shai Hulud Variant - GovInfoSecurity
Researchers have identified a new variant of the Shai Hulud malicious npm JavaScript campaign, likely in its beta testing phase. This latest version includes …
- Hacker arrested for KMSAuto malware
Hacker arrested for KMSAuto malware campaign with 2.8 million downloads www.bleepingcomputer.com/news/secu… A Lithuanian national has been arrested for his …
- Romanian energy provider hit by Gentlemen ransomware
Romanian energy provider hit by Gentlemen ransomware attack www.bleepingcomputer.com/news/secu… A ransomware attack hit Oltenia Energy Complex (Complexul …
- The HoneyMyte APT evolves with a kernel-mode rootkit and a ToneShell backdoor
The HoneyMyte APT evolves with a kernel-mode rootkit and a ToneShell backdoor securelist.com/honeymyte… In mid-2025, we identified a malicious driver file on …
- Top US Accounting Firm Sax Discloses 2024 Data Breach Impacting 220,000 - SecurityWeek
Top US accounting firm Sax LLP is notifying over 220,000 individuals about a data breach that occurred after a cyberattack detected on August 7, 2024. The …
- French software company fined $2 million for cyber failings leading to data breach | The Record from Recorded Future News
France’s data protection regulator, CNIL, has fined the software company Nexpublica €1.7 million ($2 million) for poor cybersecurity practices that led to a …
- 39C3: Multiple vulnerabilities in GnuPG and other cryptographic tools | heise online
Security researchers discovered 14 vulnerabilities in cryptographic tools like GnuPG, Sequoia-PGP, Minisign, and age, primarily due to implementation errors …
- Bluetooth Headphone Jacking: Full Disclosure of Airoha RACE Vulnerabilities – Insinuator.net
Researchers Dennis Heinze and Frieder Steinmetz disclose three critical vulnerabilities (CVE-2025-20700, CVE-2025-20701, CVE-2025-20702) in Airoha-based …
- Hunting MongoBleed
Hunting MongoBleed (CVE-2025-14847) blog.ecapuano.com/p/hunting… CVE-2025-14847 dropped recently and it’s a nasty one. Dubbed “MongoBleed” by the security …
- Death, torture, and amputation: How cybercrime shook the world in 2025
Death, torture, and amputation: How cybercrime shook the world in 2025 www.theregister.com/2025/12/2… The knock-on, and often unintentional, impacts of a …
- LLMs are automating the human part of romance scams - Help Net Security
New research reveals that Large Language Models (LLMs) are increasingly used to automate the human element of romance scams, convincingly building emotional …
- Evasive Panda cyberespionage campaign uses DNS poisoning to install MgBot backdoor
The China-linked APT group Evasive Panda conducted a cyber-espionage campaign using DNS poisoning to deliver the MgBot backdoor to victims in Türkiye, China, …
- Hacker Claims Theft of 40 Million Condé Nast Records After Wired Data Leak - SecurityWeek
A hacker has leaked 2.3 million subscriber records from Wired magazine and is threatening to release an additional 40 million records stolen from its parent …
- 27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials
A spear-phishing campaign has utilized 27 malicious npm packages to host lures that mimic document-sharing and Microsoft sign-in pages, aiming to steal login …
- Fortinet warns of 5-year-old FortiOS 2FA bypass still exploited in attacks
Fortinet is warning that a 2FA bypass vulnerability (CVE-2020-12812) in FortiOS that has existed for five years is still being actively exploited by attackers. …
- Infostealer Malware Delivered in EmEditor Supply Chain Attack - SecurityWeek
The popular text and code editing software EmEditor was recently targeted in a supply chain attack, leading to the distribution of infostealer malware. …
- Malware in 2025 spread far beyond Windows PCs | Malwarebytes
In 2025, malware expanded beyond Windows PCs to target Android and macOS with increasingly sophisticated threats like banking Trojans and stealer malware. …
- 22 Million Affected by Aflac Data Breach - SecurityWeek
Insurance giant Aflac is notifying approximately 22.65 million people that their personal information, including Social Security numbers and medical data, was …
- Microsoft Copilot is rolling out GPT 5.2 as “Smart Plus” mode
Microsoft is releasing GPT 5.2 as a free upgrade to Copilot on the web, Windows, and mobile, introducing a new “Smart Plus” mode. This advanced model, …
- Anthony Albanese’s phone number is leaked online in major privacy breach
Prime Minister Anthony Albanese’s phone number was leaked online as part of a major privacy breach affecting world leaders' details. The breach reportedly …
- Iran-linked hacking group claims access to phone of Netanyahu aide | Iran International
An Iran-linked hacking group named Handala claims to have accessed the phone of Tzachi Braverman, chief of staff to Israeli Prime Minister Benjamin Netanyahu, …
- Massive Rainbow Six Siege breach gives players billions of credits
A massive breach in Rainbow Six Siege allowed hackers to grant players billions of R6 Credits and unlock all cosmetic items, while also manipulating bans. …
- LangChain core vulnerability allows prompt injection and data exposure
A critical vulnerability in LangChain Core (CVE-2025-68664) allows prompt injection and data exposure by enabling attackers to instantiate unsafe objects …
- Meet the team that investigates when journalists and activists get hacked with government spyware | TechCrunch
The Access Now Digital Security Helpline is a team of digital security experts who investigate suspected government spyware attacks on journalists and …
- Petlibro: Your Pet Feeder Is Feeding Data To Anyone Who Asks | bobdahacker
A security researcher discovered multiple critical vulnerabilities in Petlibro’s smart pet feeder app, including an authentication bypass that allows complete …
- Everest Ransomware Group Claims Theft of Over 1TB of Chrysler Data – Hackread – Cybersecurity News, Data Breaches, AI, and More
The Everest ransomware group claims to have stolen over 1TB of data from Chrysler, including extensive operational and customer records from 2021-2025. The …
- NPM package with 56,000 downloads compromises WhatsApp accounts
The NPM package Lotusbail, downloaded over 56,000 times, has been revealed to steal WhatsApp credentials and data by acting as a malicious WhatsApp Web API …
- Denmark Is Being Heavily Targeted: Weekly DDoS Threat Intelligence Analysis
Denmark Is Being Heavily Targeted: Weekly DDoS Threat Intelligence Analysis “Between 15 and 21 December 2025, SOCRadar identified a coordinated DDoS campaign …
- Coordinated Scams Target MENA Region With Fake Online Job Ads
Coordinated Scams Target MENA Region With Fake Online Job Ads “A coordinated wave of fake online job advertisements targeting countries across the Middle East …
- Phoenix University data breach exposes 3.4MPhoenix University data breach exposes another 3.4M victims of Cl0p Oracle hacks | Cybernews
The University of Phoenix is notifying 3.4 million individuals about a data breach that occurred in August, exposing personal information including Social …
- Shinsegae affiliate reports leak of personal data involving some 80,000 employees - The Korea Times
South Korean retail giant Shinsegae Group’s IT affiliate, Shinsegae I&C Inc., has reported a personal data leak affecting approximately 80,000 employees and …
- GitHub - ruvnet/wifi-densepose: Production-ready implementation of InvisPose - a revolutionary WiFi-based dense human pose estimation system that enables real-time full-body tracking through walls using commodity mesh routers
The WiFi DensePose GitHub repository introduces a privacy-first human pose estimation system that utilizes WiFi signals and Channel State Information (CSI) …
- Asiana Airlines informs employees of personal data hack
Asiana Airlines disclosed a data breach affecting approximately 10,000 employees, including staff from partner companies. The breach, caused by an external …
- The Evasive Panda APT group
Evasive Panda APT poisons DNS requests to deliver MgBot securelist.com/evasive-p… The Evasive Panda APT group (also known as Bronze Highland, Daggerfly, and …
- Lumma Stealer: Danger lurking in fake game updates
Lumma Stealer: Danger lurking in fake game updates from itch.io and Patreon www.gdatasoftware.com/blog/2025… Another malicious campaign has again been found on …
- ThreatsDay Bulletin: Stealth Loaders, AI Chatbot Flaws AI Exploits, Docker Hack, and 15 More Stories
The ThreatsDay Bulletin highlights a shift in cyberattacks towards stealth and manipulation, with attackers increasingly abusing legitimate software, AI …
- xHunt APT: Cyber-Espionage Operations Targeting Kuwait and Exchange Servers
The xHunt APT group has been conducting cyber-espionage operations targeting Kuwait, focusing on shipping, transportation, and government sectors since 2018. …
- ‘I Quit!’ - When CISOs Need to Take Charge of Their Careers
This article discusses how CISOs face career challenges due to structural flaws in how organizations manage cyber risk, leading to retroactive accountability …
- CISA Flags Actively Exploited Digiever NVR Vulnerability Allowing Remote Code Execution
CISA has added a command injection vulnerability (CVE-2023-52163) in Digiever DS-2105 Pro NVRs to its Known Exploited Vulnerabilities (KEV) catalog, noting …
- LastPass 2022 Breach Led to Years-Long Cryptocurrency Thefts, TRM Labs Finds
The 2022 LastPass breach has led to years-long cryptocurrency thefts, with bad actors cracking stolen vault backups to drain assets as recently as late 2025, …
- FBI seized ‘web3adspanels.org’ hosting stolen logins
The FBI seized the domain web3adspanels.org, used by cybercriminals to store stolen bank login credentials. The criminals used fake ads to redirect victims to …
- GitHub - tomer8007/mtproto-dissector: Wireshark plugin for dissecting the Telegram protocol
Wireshark dissector for Telegram traffic using MTProto 2.0 protocol. Supports de-obfuscation, decryption with auth key, and TL language RPC payload dissection. …
- US Energy Dept Flags AI, Cyber Gaps as Top Risks for 2026
A new inspector general report identifies AI and cybersecurity governance as major risks for the U.S. Energy Department in 2026, citing a lag between rapid …
- FCC bans foreign-made drones
FCC bans foreign-made drones over national security, spying concerns www.politico.com/news/2025… The Federal Communications Commission on Monday blacklisted all …
- Microsoft Teams strengthens messaging security by default in January
Microsoft Teams strengthens messaging security by default in January www.bleepingcomputer.com/news/micr… Microsoft announced that Teams will automatically …
- Malicious extensions in Chrome Web store
Malicious extensions in Chrome Web store steal user credentials www.bleepingcomputer.com/news/secu… Two Chrome extensions in the Web Store named ‘Phantom …
- Shinhan Card reports internal leak of 190,000 customers' data - The Korea Herald
Shinhan Card has reported an internal data leak affecting approximately 190,000 customers, primarily small business owners, with leaked information including …
- How Cyber Powerhouse Israel Was Embarrassed by a String of Hacks - WSJ
Iranian-linked hackers have successfully breached less-defended Israeli institutions, such as hospitals, exploiting known vulnerabilities. These attacks, known …
- Red Hat Breach Exposes Data of 21,000 Nissan Customers - CX Today
A third-party breach at Red Hat, a vendor for Nissan, exposed the personal data of 21,000 Nissan customers in Japan, including names, addresses, and phone …
- DDoS incident disrupts France’s postal and banking services
DDoS incident disrupts France’s postal and banking services ahead of Christmas therecord.media/la-poste-… France’s national postal service, La Poste, confirmed …
- Critical RCE flaw impacts over 115,000 WatchGuard firewalls
Critical RCE flaw impacts over 115,000 WatchGuard firewalls www.bleepingcomputer.com/news/secu… Over 115,000 WatchGuard Firebox devices exposed online remain …
- Ukrainian hacker admits affiliate role in Nefilim ransomware gang
Ukrainian hacker admits affiliate role in Nefilim ransomware gang www.bleepingcomputer.com/news/secu… A Ukrainian national pleaded guilty on Friday to …
- Interpol-led action decrypts 6 ransomware strains
Interpol-led action decrypts 6 ransomware strains, arrests hundreds www.bleepingcomputer.com/news/secu… An Interpol-coordinated initiative called Operation …
- MacSync macOS Malware Distributed via Signed Swift Application - SecurityWeek
MacSync Stealer, a macOS malware, has updated its distribution method to use a signed Swift application within a disk image, eliminating the need for direct …
- Pornhub tells users to expect sextortion emails after data exposure | Malwarebytes
Following a data breach that exposed a limited set of analytics events for certain Pornhub Premium members, the platform is warning users to expect sextortion …
- Romanian water authority hit by ransomware attack over weekend
The Romanian water authority was subjected to a ransomware attack over the weekend, impacting approximately 1,000 computer systems across its national and …
- How I Reverse Engineered a Rust Botnet and Built a C2 Honeypot to Monitor Its Targets | AI deception platform
A Rust-based DDoS botnet exploiting unauthenticated Docker APIs was analyzed. The botnet’s custom bincode C2 protocol was reverse engineered, revealing …
- Pirate activists have copied Spotify’s entire music library | CSO Online
Pirate activists claim to have copied Spotify’s entire music library, including 256 million rows of metadata and 86 million audio files, with some data now …
- Fake WhatsApp API Package on npm Steals Messages, Contacts, and Login Tokens
A malicious npm package named lotusbail has been discovered that functions as a WhatsApp API but secretly steals messages, contacts, and login tokens. This …
- Scammers use AI to make fake art seem real | CSO Online
Scammers are increasingly using AI to create fake art documentation, making long-standing fraud easier and faster. To combat this, insurers and appraisers are …
- Uzbek Users Under Attack by Android SMS Stealers
Uzbek users are being targeted by increasingly sophisticated Android SMS stealer malware, distributed via APK files and Telegram, which steals money and …
- Iranian Infy APT Resurfaces with New Malware
Iranian Infy APT Resurfaces with New Malware Activity After Years of Silence thehackernews.com/2025/12/i… Threat hunters have discerned new activity associated …
- Chinese Hackers Targeting Cisco Email Gateways
Chinese Hackers Targeting Cisco Email Gateways www.databreachtoday.com/chinese-h… Cisco Talos, the manufacturer’s threat intel arm, said Wednesday that hackers …
- Testing AI-Orchestrated Attacks in Practice
Testing AI-Orchestrated Attacks in Practice blog.fraktal.fi/testing-a… In November 2025, Anthropic published a report documenting what they called “the first …
- CISA warns ASUS Live Update backdoor is still exploitable
CISA warns ASUS Live Update backdoor is still exploitable, seven years on www.malwarebytes.com/blog/news… Recently, the Cybersecurity and Infrastructure …
- Airbus to migrate critical apps to a sovereign Euro cloud
Airbus to migrate critical apps to a sovereign Euro cloud www.theregister.com/2025/12/1… Airbus is preparing to tender a major contract to migrate …
- WatchGuard sounds alarm as critical Firebox flaw comes under active attack
WatchGuard sounds alarm as critical Firebox flaw comes under active attack www.theregister.com/2025/12/1… WatchGuard is in emergency patch mode after confirming …
- OpenAI User Data Exposed in Mixpanel Hack - SecurityWeek
OpenAI is notifying users about a data breach impacting its analytics provider, Mixpanel. The breach exposed limited customer identifiable and analytics …
- Over 25,000 FortiCloud SSO devices exposed to remote attacks
Over 25,000 Fortinet devices have been found exposed online with FortiCloud SSO enabled, making them vulnerable to remote attacks targeting a critical …
- Top lawmaker asks White House to address open-source software risks | Cybersecurity Dive
Senator Tom Cotton is urging the White House to address the risks of open-source software, citing concerns about foreign adversaries tampering with code and …
- Cracked Software and YouTube Videos Spread CountLoader and GachiLoader Malware
A new campaign is distributing CountLoader malware through cracked software downloads, employing a multi-stage attack that includes evasion and delivery of …
- LongNosedGoblin Caught Snooping on Asian Governments
A new China-aligned APT group, dubbed LongNosedGoblin, has been conducting cyber-espionage against governments in Southeast Asia and Japan since at least 2023, …
- Code audit for the Tor Project completed by 7aSecurity | The Tor Project
The Tor Project has completed a code audit conducted by 7aSecurity on tools used to monitor the health of the Tor network, identifying six vulnerabilities and …
- Smart TV manufacturer ordered to stop collecting viewer data while court case proceeds in Texas | The Record from Recorded Future News
A Texas judge has issued a temporary restraining order against Hisense, a smart TV manufacturer, to halt the collection of viewer data from state residents. …
- Rockrose Development suffers security breach affecting 47,000 people | Cybersecurity Dive
Rockrose Development suffered a security breach on July 4, impacting 47,392 people by potentially exposing sensitive personally identifiable information. The …
- State-linked and criminal hackers use device code phishing against M365 users | Cybersecurity Dive
State-linked and criminal hackers are increasingly using device code phishing to target Microsoft 365 users, abusing a legitimate authorization workflow to …
- New cybersecurity laws and trends in 2026 | Kaspersky official blog
In 2026, new cybersecurity laws and trends will require users to understand local legislation, master secure access methods like VPNs, and brace for document …
- Fears thousands of confidential documents were leaked in Foreign Office hack | The Independent
The Foreign Office experienced a cyber attack two months ago, with fears that thousands of confidential documents, including visa details, were leaked. …
- Government data stolen in hack, minister confirms
Trade Minister Chris Bryant confirmed that government data was stolen in a hack, though he believes the risk to individuals is low; a Chinese-affiliated group …
- Clop ransomware targets Gladinet CentreStack in data theft attacks
The Clop ransomware gang is actively targeting Gladinet CentreStack file servers exposed online in a new data theft campaign, exploiting an unknown …
- Clop ransomware targets Gladinet CentreStack in data theft attacks
The Clop ransomware gang is actively targeting Gladinet CentreStack file servers exposed online in a new data theft campaign, exploiting an unknown …
- New China-linked hacker group spies on governments in Southeast Asia, Japan | The Record from Recorded Future News
A newly identified, China-aligned hacker group named LongNosedGoblin has been observed spying on governments in Southeast Asia and Japan since at least …
- HPE OneView vulnerable to remote code execution attack | CSO Online
A critical remote code execution vulnerability (CVE-2025-37164) has been discovered in HPE OneView, affecting all versions between 5.20 and 10.20. This …
- North Korea’s Digital Surge: $2B Stolen in Crypto as Amazon Blocks 1,800 Fake IT Workers - SecurityWeek
North Korea has escalated its digital operations, stealing over $2 billion in cryptocurrency in 2025, a record high, according to Chainalysis. Concurrently, …
- Nigeria Arrests RaccoonO365 Phishing Developer Linked to Microsoft 365 Attacks
Authorities in Nigeria have arrested the main developer behind the RaccoonO365 phishing-as-a-service (PhaaS) scheme, identified as Okitipi Samuel, who …
- ‘Kimwolf’ Android Botnet Ensnares 1.8 Million Devices - SecurityWeek
A new Android botnet named Kimwolf has infected over 1.8 million devices and is capable of launching massive DDoS attacks. This botnet, primarily targeting …
- University of Sydney Data Breach Affects 27,000 Individuals - SecurityWeek
The University of Sydney experienced a data breach affecting approximately 27,500 individuals, including current and former staff, alumni, and students. …
- AI Advertising Company Hacked - Schneier on Security
The AI advertising company Doublespeed, which manages hundreds of AI-generated social media accounts using a phone farm, has been hacked. The hack exposed the …
- Denmark blames Russia for destructive cyberattack on water utility
Denmark has blamed Russia for a destructive cyberattack on a water utility, identifying Z-Pentest and NoName057(16) as state-backed groups involved in hybrid …
- Stealth in Layers: Unmasking the Loader used in Targeted Email Campaigns
This analysis details a sophisticated commodity loader used in targeted email campaigns against Manufacturing and Government organizations in Italy, Finland, …
- How China built its ‘Manhattan Project’ to rival the West in AI chips
Reuters reports that Chinese scientists in Shenzhen have built a prototype extreme ultraviolet (EUV) lithography machine — the class of tool required to …
- 16.4 million could be affected in giant French hack | Insurance Business
France is investigating a malicious intrusion into its Ministry of the Interior systems, with a poster on BreachForums claiming access to data on over 16.4 …
- ‘Pay The Ransom Or…’: Hackers Warn Pornhub Data Leak Could Turn Ugly For Premium Users | Tech News - News18
Hackers from the group ShinyHunters have leaked Pornhub data and are demanding a ransom in Bitcoin to prevent further publication of premium user information. …
- Bennett concedes cyber breach after Iranian hackers leak private chats
Former prime minister Naftali Bennett has confirmed a cyber breach of his Telegram account after an Iranian-linked hacker group, Handala, leaked private chats …
- UAT-9686 actively targets Cisco Secure Email Gateway and Secure Email
UAT-9686 actively targets Cisco Secure Email Gateway and Secure Email and Web Manager blog.talosintelligence.com/uat-9686/ Cisco Talos recently discovered a …
- NATO's battle for cloud sovereignty
NATO’s battle for cloud sovereignty: Speed is existential www.theregister.com/2025/12/1… NATO is in an existential race to develop sovereign cloud-based …
- European police bust Ukraine-based call center network
European police bust Ukraine-based call center network behind $11 million in scams therecord.media/european-… Law enforcement agencies from several European …
- GhostPoster attacks hide malicious JavaScript in Firefox addon logos
GhostPoster attacks hide malicious JavaScript in Firefox addon logos www.bleepingcomputer.com/news/secu… A new campaign dubbed ‘GhostPoster’ is hiding …
- Cellik Android malware builds malicious versions from Google Play apps
Cellik Android malware builds malicious versions from Google Play apps www.bleepingcomputer.com/news/secu… A new Android malware-as-a-service (MaaS) named …
- An Upgrade in RansomHouse Encryption
From Linear to Complex: An Upgrade in RansomHouse Encryption unit42.paloaltonetworks.com/ransomhou… RansomHouse is a ransomware-as-a-service (RaaS) operation …
- Does OpenAI expect upcoming AI models to present a high cybersecurity risk?
Does OpenAI expect upcoming AI models to present a high cybersecurity risk? www.pandasecurity.com/en/mediac… OpenAI confirms that AI models will reach a high …
- Two Chrome flaws could be triggered by simply browsing the web
Two Chrome flaws could be triggered by simply browsing the web: Update now www.malwarebytes.com/blog/news… Google issued an extra patch addressing two security …
- GachiLoader: Defeating Node.js Malware with API Tracing
GachiLoader: Defeating Node.js Malware with API Tracing research.checkpoint.com/2025/gach… The YouTube Ghost Network is a malware distribution network that …
- New spyware discovered on Belarusian journalist’s phone after interrogation | The Record from Recorded Future News
A previously unknown spyware, ResidentBat, has been discovered on a Belarusian journalist’s phone after their detention and interrogation by the Belarusian …
- Kimwolf Botnet Hijacks 1.8 Million Android TVs, Launches Large-Scale DDoS Attacks
The Kimwolf botnet has compromised 1.8 million Android TVs, set-top boxes, and tablets, launching large-scale DDoS attacks and proxy services. This botnet, …
- Russian BlueDelta hackers ran phishing campaign against Ukrainian webmail users | The Record from Recorded Future News
Russian state-backed hackers, identified as BlueDelta (also known as APT28 or Fancy Bear), conducted a prolonged phishing campaign against users of UKR.NET, a …
- Chinese Hackers Hijack European Networks for Espionage
A Chinese hacking group, known as Ink Dragon, is leveraging compromised European government networks as relay nodes for espionage operations, a tactic …
- WhatsApp device linking abused in account hijacking attacks
Threat actors are exploiting a legitimate WhatsApp device-linking feature to hijack accounts through a campaign called GhostPairing, which tricks victims into …
- Cisco email security appliances rooted and backdoored via still unpatched zero-day - Help Net Security
Cisco email security appliances have been compromised by a Chinese-nexus threat group exploiting an unpatched zero-day vulnerability (CVE-2025-20393). The …
- Startup investigation reveals 50 peer-reviewed papers contained hallucinated citations | BetaKit
A startup named GPTZero discovered that 50 peer-reviewed papers submitted to the International Conference on Learning Representations (ICLR) contained …
- Hack reveals reviewer identities for huge AI conference | Science | AAAS
A data breach at the AI conference ICLR has revealed the identities of anonymous reviewers, leading to harassment and extortion attempts. This incident, …
- 4.3 Billion Records Exposed in Massive Lead-Generation Data Leak | eSecurity Planet
A massive, unsecured database containing 4.3 billion records of professional profiles, including LinkedIn data and contact information, has been exposed, …
- The “Double-Blind” Signal: A Security Analysis of Phreeli Wireless
Phreeli Wireless claims it can decouple your legal identity from cellular activity using a “double-blind” architecture — but what does that actually mean for …
- Amazon Exposes Years-Long GRU Cyber Campaign
Amazon Exposes Years-Long GRU Cyber Campaign Targeting Energy and Cloud Infrastructure thehackernews.com/2025/12/a… Amazon’s threat intelligence team has …
- New SantaStealer malware steals data
New SantaStealer malware steals data from browsers, crypto wallets www.bleepingcomputer.com/news/secu… A new malware-as-a-service (MaaS) information stealer …
- Why Hypervisors are a Ransomware Magnet
The Hidden Risk in Virtualization: Why Hypervisors are a Ransomware Magnet www.bleepingcomputer.com/news/secu… Hypervisors are the backbone of modern …
- Most Parked Domains Now Serving Malicious Content
Most Parked Domains Now Serving Malicious Content krebsonsecurity.com/2025/12/m… Direct navigation — the act of visiting a website by manually typing a domain …
- Android threats in 2025: When your phone becomes the main attack surface
Android threats in 2025: When your phone becomes the main attack surface www.malwarebytes.com/blog/mobi… Android users spent 2025 walking a tighter rope than …
- Ink Dragon Expands With New Tools and a Growing Victim Network
Ink Dragon Expands With New Tools and a Growing Victim Network blog.checkpoint.com/research/… Ink Dragon, a Chinese espionage group, has expanded from Asia and …
- Microsoft to Kill RC4 in Kerberos by 2026 - GovInfoSecurity
Microsoft is disabling RC4 by default in Windows Kerberos by mid-2026, moving to stronger AES-SHA1 encryption to enhance security. This change impacts user and …
- JumpCloud Remote Assist Vulnerability Can Expose Systems to Takeover - SecurityWeek
A vulnerability in JumpCloud Remote Assist for Windows (CVE-2025-34352) could allow local attackers to escalate privileges and potentially take over endpoints …
- European authorities dismantle call center fraud ring in Ukraine
European authorities have dismantled a call center fraud ring operating in Ukraine, which scammed victims across Europe out of over 10 million euros. The …
- Photo booth flaw exposes people’s private pictures online | Malwarebytes
A security researcher discovered a vulnerability in Hama Film’s photo booth system that reportedly exposed hundreds of customers' private photos and videos …
- ‘Featured’ Urban VPN caught stealing private AI chats | CSO Online
Security researchers discovered that Urban VPN Proxy, a popular free browser VPN extension, has been collecting and exporting full AI chat conversations from …
- x.com/aiatmeta/…
Meta’s AI at Meta account announced SAM Audio, the latest open-source model in the Segment Anything family, capable of isolating and editing specific sounds …
- Mozilla Names New CEO, Firefox To Evolve Into A “Modern AI Browser” - Phoronix
Mozilla Corporation has appointed Anthony Enzor-DeMeo as its new CEO. Under his leadership, Firefox is set to evolve into a modern AI browser and a broader …
- Why ServiceNow Is Eyeing a $7B Buy of Venture-Backed Armis
ServiceNow is reportedly in advanced talks to acquire Armis, a cyber exposure management vendor, for $7 billion. This acquisition would significantly boost …
- User Data Compromised in SoundCloud Hack - SecurityWeek
SoundCloud experienced a cyberattack that compromised limited user data, including email addresses and public profile information. While sensitive data was not …
- Fortinet FortiGate Under Active Attack Through SAML SSO Authentication Bypass
Threat actors are exploiting two critical authentication bypass vulnerabilities (CVE-2025-59718 and CVE-2025-59719) in Fortinet FortiGate devices. …
- Google is discontinuing its dark web report: why it matters | Malwarebytes
Google is discontinuing its dark web report in early 2026, citing a lack of actionable steps for users. While the report provided valuable information about …
- 700Credit data breach impacts 5.8 million vehicle dealership customers
700Credit data breach exposed personal data of 5.8 million vehicle dealership customers, including full names, addresses, dates of birth, and Social Security …
- Nation-State and Cybercrime Exploits Tied to React2Shell
The React2Shell vulnerability, tracked as CVE-2025-55182, is being widely exploited by nation-state actors from China, North Korea, and Iran, as well as by …
- Makop ransomware: GuLoader and privilege escalation in attacks against Indian businesses
Makop ransomware, a variant of Phobos, is targeting Indian businesses by exploiting exposed RDP systems and employing tools like GuLoader for secondary payload …
- Marquis data breach impacts over 74 US banks, credit unions
The financial software provider Marquis Software Solutions has disclosed a data breach impacting over 74 US banks and credit unions, affecting more than …
- BreachForums Reemerges, Claims French Govt Hack and Data Theft - TechNadu
The BreachForums administration claims responsibility for a French government hack, allegedly compromising sensitive police records of over 16 million …
- Askul says 740,000 sets of data breached in cyberattack – DataBreaches.Net
Japanese retailer Askul reported that a ransomware cyberattack in October led to the breach of approximately 740,000 data sets, affecting individual customers, …
- Experts found an unsecured 16TB database containing 4.3B professional records
An unsecured 16TB database exposed approximately 4.3 billion professional records, including names, emails, and LinkedIn profiles, before being secured. This …
- Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware
Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads thehackernews.com/2025/12/f… Cybersecurity researchers are calling attention to a new …
- CISA Adds Actively Exploited Sierra Wireless Router Flaw
CISA Adds Actively Exploited Sierra Wireless Router Flaw Enabling RCE Attacks thehackernews.com/2025/12/c… The U.S. Cybersecurity and Infrastructure Security …
- Multiple Threat Actors Exploit React2Shell
Multiple Threat Actors Exploit React2Shell (CVE-2025-55182) cloud.google.com/blog/topi… On Dec. 3, 2025, a critical unauthenticated remote code execution (RCE) …
- Abuse of ISO Mounting to Deliver Phantom Stealer Malware
Abuse of ISO Mounting to Deliver Phantom Stealer Malware on Windows Platforms cyberpress.org/iso-mount… Seqrite Labs researchers have identified an active …
- Fake ‘One Battle After Another’ torrent hides malware in subtitles
Fake ‘One Battle After Another’ torrent hides malware in subtitles www.bleepingcomputer.com/news/secu… A fake torrent for Leonardo DiCaprio’s ‘One Battle After …
- Free unofficial patches are available for a new Windows zero-day vulnerability
New Windows RasMan zero-day flaw gets free, unofficial patches www.bleepingcomputer.com/news/micr… Free unofficial patches are available for a new Windows …
- Technical Analysis of the BlackForce Phishing Kit
Technical Analysis of the BlackForce Phishing Kit www.zscaler.com/blogs/sec… Zscaler ThreatLabz identified a new phishing kit named BlackForce, which was first …
- Google and Apple roll out emergency security updates after zero-day attacks | TechCrunch
Both Google and Apple have released emergency security updates to address zero-day attacks that exploited vulnerabilities in their Chrome browser and various …
- Why AI agents failed to take over in 2025
Why AI agents failed to take over in 2025 - it’s ‘a story as old as time,’ says Deloitte …
- Nvidia builds location verification tech that could help fight chip smuggling
Nvidia builds location verification tech that could help fight chip smuggling www.reuters.com/business/… Nvidia has built location verification technology that …
- Lawmaker calls facial recognition on doorbell cameras a ‘privacy nightmare’
Lawmaker calls facial recognition on doorbell cameras a ‘privacy nightmare’ therecord.media/lawmaker-… Ring, the maker of popular doorbell cameras, said device …
- 5 Real-Word Third-Party Risk Examples
5 Real-Word Third-Party Risk Examples www.recordedfuture.com/blog/thir… Key Takeaways: Static vendor checks fall short: Traditional, point-in-time third-party …
- Researcher claims Salt Typhoon spies attended Cisco training scheme
Researcher claims Salt Typhoon spies attended Cisco training scheme www.theregister.com/2025/12/1… A security researcher specializing in tracking China threats …
- Hackers reportedly breach developer involved with Russia’s military draft database
Hackers reportedly breach developer involved with Russia’s military draft database therecord.media/hackers-r… An anonymous hacker group has reportedly breached …
- New BYOVD loader behind DeadLock ransomware attack
New BYOVD loader behind DeadLock ransomware attack blog.talosintelligence.com/byovd-loa… While tracking ransomware activities, Cisco Talos uncovered new …
- How whaling attacks target top executives
The big catch: How whaling attacks target top executives www.welivesecurity.com/en/busine… When a hedge fund manager opened up an innocuous Zoom meeting invite, …
- ConsentFix attack hijacks Microsoft accounts
New ConsentFix attack hijacks Microsoft accounts via Azure CLI www.bleepingcomputer.com/news/secu… A new variation of the ClickFix attack dubbed ‘ConsentFix’ …
- Canadian military intelligence member charged with espionage, says DND | CBC News
A Canadian military intelligence member, Master Warrant Officer Matthew Robar, has been charged with espionage and breach of trust for allegedly passing …
- Docker Hub Images Leak Auth Keys — Millions of Users Might Be at Risk Now | IBTimes UK
A significant security vulnerability on Docker Hub has led to the exposure of authentication keys and sensitive data in over 10,000 container images, …
- South African State Security Agency denies it was hacked by China – MyBroadband
The South African State Security Agency (SSA) has denied reports of being hacked by China, with Minister Khumbudzo Ntshavheni stating there is no evidence of a …
- Multi-Platform Ransomware Written in Rust
01flip: Multi-Platform Ransomware Written in Rust unit42.paloaltonetworks.com/new-ranso… In June 2025, we observed a new ransomware family named 01flip …
- Cracking ValleyRAT
Cracking ValleyRAT: From Builder Secrets to Kernel Rootkits research.checkpoint.com/2025/crac… Check Point Research (CPR) presents a full dissection of the …
- EFF Launches Age Verification Hub
EFF Launches Age Verification Hub as Resource Against Misguided Laws www.eff.org/press/rel… With ill-advised and dangerous age verification laws proliferating …
- Ransomware Victim Warning: The Streisand Effect May Apply
Ransomware Victim Warning: The Streisand Effect May Apply www.databreachtoday.com/ransomwar… Paying off ransomware hackers to avoid notoriety is a losing …
- Russia’s flagship airline hacked through little-known tech vendor
Russia’s flagship airline hacked through little-known tech vendor, according to new report therecord.media/russia-fl… A cyberattack that forced Russia’s …
- Thousands of Exposed Secrets Found on Docker Hub
Thousands of Exposed Secrets Found on Docker Hub, Putting Organizations at Risk https://flare.io/learn/resources/docker-hub-secrets-exposed/ For years, there’s …
- HTTPS certificate industry phasing out less secure domain validation
HTTPS certificate industry phasing out less secure domain validation methods security.googleblog.com/2025/12/h… Secure connections are the backbone of the …
- Microsoft won’t fix .NET RCE bug
Microsoft won’t fix .NET RCE bug affecting slew of enterprise apps, researchers say www.theregister.com/2025/12/1… Security researchers have revealed a .NET …
- Russia-linked attacks targeting meat processing plants
DOJ, CISA warn of Russia-linked attacks targeting meat processing plants, nuclear regulatory entities and other critical infrastructure …
- New DroidLock malware locks Android devices and demands a ransom
New DroidLock malware locks Android devices and demands a ransom www.bleepingcomputer.com/news/secu… A newly discovered Android malware dubbed DroidLock can …
- self-hosted Gits battered in 0-day attacks
700+ self-hosted Gits battered in 0-day attacks with no fix imminent www.theregister.com/2025/12/1… Attackers are actively exploiting a zero-day bug in Gogs, a …
- Hospice Firm, Eye Care Practice Notifying 520,000 of Hacks
VITAS Hospice and Tri Century Eye Care are notifying 520,000 individuals about recent hacking incidents. VITAS’ breach, affecting 319,177 people, involved …
- APT28 Cyber Threat Profile and Detailed TTPs
APT28, also known as Fancy Bear, is a persistent threat group active since 2009, known for targeting political, military, and diplomatic entities globally. …
- Uncovering Hidden Forensic Evidence in Windows
Uncovering Hidden Forensic Evidence in Windows: The Mystery of AutoLogger-Diagtrack-Listener.etl www.fortinet.com/blog/thre… During a recent incident response …
- Inside Shanya, a packer-as-a-service fueling modern attacks
Inside Shanya, a packer-as-a-service fueling modern attacks news.sophos.com/en-us/202… We have covered packer-as-a-service offerings from the computer …
- GrayBravo’s CastleLoader Activity Clusters Target Multiple Industries
GrayBravo’s CastleLoader Activity Clusters Target Multiple Industries www.recordedfuture.com/research/… Insikt Group continues to monitor GrayBravo (formerly …
- Infostealer has entered the chat
Infostealer has entered the chat www.kaspersky.com/blog/shar… A new wave of ClickFix attacks spreading a macOS infostealer are posting malicious user guides on …
- Goodbye, dark Telegram: Blocks are pushing the underground out
Goodbye, dark Telegram: Blocks are pushing the underground out https://securelist.com/goodbye-dark-telegram/118286/ Telegram has won over users worldwide, and …
- GeminiJack: The Google Gemini Zero-Click Vulnerability Leaked Gmail, Calendar and Docs Data
GeminiJack: The Google Gemini Zero-Click Vulnerability Leaked Gmail, Calendar and Docs Data noma.security/blog/gemi… Noma Labs recently discovered a …
- Ransomware IAB abuses EDR for stealthy malware execution
Ransomware IAB abuses EDR for stealthy malware execution www.bleepingcomputer.com/news/secu… An initial access broker tracked as Storm-0249 is abusing endpoint …
- Malicious VSCode extensions on Microsoft's registry drop infostealers
Malicious VSCode extensions on Microsoft’s registry drop infostealers www.bleepingcomputer.com/news/secu… Two malicious extensions on Microsoft’s Visual Studio …
- Gartner Calls For Pause on AI Browser Use - Infosecurity Magazine
Gartner recommends enterprises block AI browser use due to significant risks like prompt injection, credential loss, and data exfiltration, urging a pause …
- Shanya: The “Packer-as-a-Service” Powering the Ransomware Boom
Shanya is a Packer-as-a-Service that enables ransomware gangs to evade antivirus and EDR detection by using vulnerable drivers to gain kernel access and …
- New GeminiJack 0-Click Flaw in Gemini AI Exposed Users to Data Leaks – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
A significant 0-click vulnerability named GeminiJack was discovered in Google’s Gemini Enterprise and Vertex AI Search, allowing attackers to steal …
- LeakDataorg Publishes Personal Data of Indians, Triggers CERT-In Probe - The420.in
The website LeakData.org has published personal data of Indian citizens, including mobile numbers and Aadhaar details, prompting a probe by India’s CERT-In. …
- Employee Error Leads to ixi-O Call Information Leak… Are AI Call Apps Safe Enough? - MK
An employee error during an update caused a data leak of call information for 36 users of LG Uplus’s ixi-O AI Assistant, raising concerns about the safety of …
- Petco Data Breach Exposes SSNs, Driver’s Licenses in Major Leak | The Tech Buzz
Petco has confirmed a major data breach exposing customers' Social Security numbers, driver’s licenses, and financial account details due to a misconfigured …
- Space Bears Ransomware Claims Comcast Data Theft Through Quasar Breach – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
The Space Bears ransomware group claims to have stolen Comcast data by breaching Quasar Inc., a telecommunications contractor. The group alleges that Quasar’s …
- Dartmouth Data Breach Exposes 40,000 Social Security Numbers In Cl0p’s Oracle Rampage
A cyberattack exploited an Oracle zero-day vulnerability, leading to a significant data breach at Dartmouth College, exposing over 40,000 Social Security …
- Researcher finds Chinese KVM has undocumented microphone, communicates with China-based servers — Sipeed’s nanoKVM switch has other severe security flaws and allows audio recording, claims researcher | Tom’s Hardware
A security researcher has found that the Sipeed NanoKVM, a budget remote management device, contains an undocumented microphone that can be activated remotely, …
- Poland arrests Ukrainians utilizing ‘advanced’ hacking equipment
Three Ukrainians were arrested in Poland for allegedly using advanced hacking equipment to target IT systems and obtain sensitive national defense data. The …
- MuddyWater Deploys UDPGangster Backdoor in Targeted Turkey-Israel-Azerbaijan Campaign
The Iranian hacking group MuddyWater has deployed a new backdoor called UDPGangster, utilizing UDP for command-and-control in targeted campaigns against …
- December 2025 Patch Tuesday forecast: And it’s a wrap - Help Net Security
The December 2025 Patch Tuesday is expected to bring a moderate number of CVEs for Windows 10 LTSC, Windows 11, and supported Server versions, along with …
- Tri-Century Eye Care Data Breach Impacts 200,000 Individuals - SecurityWeek
A Tri-Century Eye Care data breach has impacted approximately 200,000 individuals, with personal and protected health information potentially compromised. The …
- UK intelligence warns AI ‘prompt injection’ attacks might never go away | The Record from Recorded Future News
British intelligence warns that AI prompt injection attacks may never be fully mitigated due to the fundamental way large language models process information. …
- Scammers harvesting Facebook photos to stage fake kidnappings, warns FBI | Malwarebytes
The FBI has issued a warning about scammers using Facebook photos to stage fake kidnappings, demanding ransom by providing harvested images as proof-of-life. …
- Major drug research company confirms cyberattack compromised employee and partner data | Cybersecurity Dive
Pharmaceutical research company Inotiv has confirmed a cyberattack in August exposed data belonging to approximately 9,500 individuals, including current and …
- Risky Bulletin: APTs go after the React2Shell vulnerability within hours - Risky Business Media
Two Chinese APTs, Earth Lamia and Jackpot Panda, are actively exploiting the React2Shell vulnerability (CVE-2025-55182) in React’s server components, with …
- Researchers track dozens of organizations affected by React2Shell compromises tied to China’s MSS | The Record from Recorded Future News
Researchers have identified over 30 organizations affected by the React2Shell vulnerability (CVE-2025-55182), which is being exploited by an initial access …
- X cuts off the European Commission’s ad account
X cuts off the European Commission’s ad account after being fined €120 million www.theverge.com/news/8397… Friday, the EU slapped X with a €120 million fine …
- Attempts to Bypass CDNs
Attempts to Bypass CDNs isc.sans.edu/diary/325… Currently, in order to provide basic DDoS protection and filter aggressive bots, some form of Content Delivery …
- Portugal updates cybercrime law to exempt security researchers
Portugal updates cybercrime law to exempt security researchers www.bleepingcomputer.com/news/secu… Portugal has modified its cybercrime law to establish a legal …
- Phishing, privileges and passwords: Why identity is critical to improving cybersecurity posture
Phishing, privileges and passwords: Why identity is critical to improving cybersecurity posture www.welivesecurity.com/en/busine… What do M&S and Co-op Group …
- Death to one-time text codes: Passkeys are the new hotness in MFA
Death to one-time text codes: Passkeys are the new hotness in MFA www.theregister.com/2025/12/0… Using someone’s legitimate account credentials is a much more …
- Security and Privacy are not the same thing. Let’s decode the latest Forbes headline.
Security and Privacy are not the same thing. Let’s decode the latest Forbes headline. You might have seen the viral article claiming “Apple Warns All iPhone …
- AI Provenance or Silent Tracking? The devil is in the metadata.
Interesting technical discovery coming out of the Grok community this week. Users have noticed that video outputs are being tagged with a suspicious Base64 …
- Critical XXE Bug CVE-2025-66516 (CVSS 10.0) Hits Apache Tika, Requires Urgent Patch
A critical XXE bug (CVE-2025-66516) with a CVSS score of 10.0 has been discovered in Apache Tika, affecting multiple modules including tika-core, …
- FBI warns of virtual kidnapping scams using altered social media photos
The FBI is warning about a rise in virtual kidnapping scams where criminals use altered social media photos as fake proof of life to demand ransom. These scams …
- Chinese Nation-State Groups Tied to ‘React2Shell’ Targeting
A critical vulnerability (CVE-2025-55182) in the React web application framework, allowing full remote code execution, is being actively exploited by Chinese …
- Zero-Click Agentic Browser Attack Can Delete Entire Google Drive Using Crafted Emails
A zero-click agentic browser attack can delete entire Google Drive contents by exploiting how AI assistants interpret natural language instructions in crafted …
- How GenAI Is Powering Defenders and Attackers
Spy vs. Spy: How GenAI Is Powering Defenders and Attackers Source: blog.talosintelligence.com/spy-vs-sp… Generative AI is reshaping how individuals and …
- Intellexa’s Prolific Zero-Day Exploits Continue
Sanctioned but Still Spying: Intellexa’s Prolific Zero-Day Exploits Continue cloud.google.com/blog/topi… Despite extensive scrutiny and public reporting, …
- ValleyRAT Campaign Targets Job Seekers
ValleyRAT Campaign Targets Job Seekers, Abuses Foxit PDF Reader for DLL Side-loading Source: www.trendmicro.com/en_us/res… Trend Micro has identified a new …
- Silver Fox’s Russian Ruse: ValleyRAT Used in Fake Microsoft Teams Attack
Silver Fox’s Russian Ruse: ValleyRAT Used in Fake Microsoft Teams Attack Source: reliaquest.com/blog/thre… ReliaQuest assesses with high confidence that a …
- French NGO Reporters Without Borders Targeted by Calisto
French NGO Reporters Without Borders Targeted by Calisto in Recent Campaign Source: blog.sekoia.io/ngo-repor… In May and June 2025, two organisations — …
- Critical RSC Bugs in React and Next.js Enable Unauthenticated Remote Code Execution
Critical RSC Bugs in React and Next.js Enable Unauthenticated Remote Code Execution Source: thehackernews.com/2025/12/c… A maximum-severity flaw has been …
- ASUS confirms vendor breach as Everest gang leaks data, claims ArcSoft and Qualcomm
ASUS has confirmed a vendor breach, with the Everest ransomware gang claiming to have leaked data from ASUS, ArcSoft, and Qualcomm. This incident follows other …
- Silver Fox Uses Fake Microsoft Teams Installer to Spread ValleyRAT Malware in China
The threat actor Silver Fox is using a fake Microsoft Teams installer as part of an SEO poisoning campaign to spread ValleyRAT malware in China, employing …
- How scammers use fake insurance texts to steal your identity | Malwarebytes
Scammers use fake insurance texts to steal your identity by requesting personal information like age and gender, often timed around open enrollment periods. To …
- CISA warns of Chinese “BrickStorm” malware attacks on VMware servers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about Chinese hackers using BrickStorm malware to target VMware vSphere …
- Virginia brothers charged with hacking, deleting federal databases holding FOIA info | The Record from Recorded Future News
Brothers Muneeb and Sohaib Akhter have been arrested for allegedly hacking and deleting federal databases containing FOIA information and sensitive …
- Russia blocks FaceTime and Snapchat over use in terrorist attacks
Russia’s telecommunications watchdog, Roskomnadzor, has blocked FaceTime and Snapchat, alleging their use in coordinating terrorist attacks, recruiting …
- British officials seek to expand facial recognition technology use | The Record from Recorded Future News
The British Home Office is seeking public input on expanding the use of facial recognition technology by law enforcement, aiming to create a more specific …
- Phishing attempt against Reporters Without Borders attributed to Russia-linked group | The Record from Recorded Future News
A Russia-linked group known as Callisto or ColdRiver attempted to phish Reporters Without Borders (RSF) in March using a decoy document lure, a tactic …
- WebXR Flaw Hits 4 Billion Chromium Users, Update Your Browser Now – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
A WebXR flaw in Chromium-based browsers like Chrome, Edge, Brave, and Opera, affecting over 4 billion devices, could lead to data leaks by exposing nearby …
- Post Office avoids fine over leak of wrongfully convicted operators’ names | Post Office | The Guardian
The Post Office has avoided a fine after accidentally publishing the names and addresses of over 500 individuals involved in the Horizon IT scandal. The …
- Microsoft “Mitigates” Windows LNK Flaw
Microsoft “Mitigates” Windows LNK Flaw Exploited as Zero-Day www.bleepingcomputer.com/news/micr… Microsoft has quietly implemented a mitigation for a …
- Malicious Rust Crate evm-units Serves Cross-Platform Payloads
Malicious Rust Crate evm-units Serves Cross-Platform Payloads for Silent Execution socket.dev/blog/mali… The Socket Threat Research Team has identified a …
- The Browser Defense Playbook
The Browser Defense Playbook: Stopping the Attacks That Start on Your Screen unit42.paloaltonetworks.com/browser-d… Cloud-based applications and the shift to …
- How Attackers Use Real IT Tools to Take Over Your Computer
How Attackers Use Real IT Tools to Take Over Your Computer www.malwarebytes.com/blog/news… A new wave of attacks is leveraging legitimate Remote Monitoring and …
- The DragonForce Cartel: Scattered Spider at the Gate
The DragonForce Cartel: Scattered Spider at the Gate www.acronis.com/en/tru/po… The Acronis Threat Research Unit has analyzed recent activity linked to the …
- India Backs Off Mandatory ‘Cyber Safety’ App
India Backs Off Mandatory ‘Cyber Safety’ App After Surveillance Backlash therecord.media/india-dro… India has reversed plans to require smartphone manufacturers …
- FBI Warns of Surge in Account Takeover (ATO) Fraud Schemes
FBI Warns of Surge in Account Takeover (ATO) Fraud Schemes — What You Need to Know www.fortra.com/blog/fbi-… Account takeover fraud (ATO) occurs when a …
- TSA Warning—Do Not Use These Networks On Your Smartphone
The TSA is warning smartphone users not to use public Wi-Fi networks, a caution echoed by Google, due to risks like evil twin attacks where hackers create fake …
- ‘End-to-end encrypted’ smart toilet camera is not actually end-to-end encrypted | TechCrunch
Kohler’s ‘Dekoda’ smart toilet camera, marketed with end-to-end encryption, is actually using standard TLS encryption for data in transit, a distinction that …
- Marketing and Compliance Software Vendor to Banks Breached
Marquis Software Solutions, a vendor for banks and credit unions, suffered a data breach after attackers exploited a vulnerability in their SonicWall firewall. …
- 68% Of Phishing Websites Are Protected by CloudFlare
Article claims that : A recent analysis reveals that 68% of phishing infrastructure operates on Cloudflare, leveraging its free services for anonymity and …
- V3G4 Mirai Botnet Evolves
This analysis details the V3G4 botnet’s operations, including reconnaissance using system information gathering, resource development with specific C2 …
- Aisuru botnet behind new record-breaking 29.7 Tbps DDoS attack
The Aisuru botnet has launched a record-breaking 29.7 Tbps DDoS attack, part of over 1,300 attacks in three months, utilizing millions of compromised devices. …
- Small numbers of Notepad++ users reporting security woes | by Kevin Beaumont | Dec, 2025 | DoublePulsar
A small number of organizations, primarily in East Asia, have reported security incidents where Notepad++ processes appear to have been the initial access …
- The State of Ransomware in Manufacturing and Production 2025 – Sophos News
The State of Ransomware in Manufacturing and Production 2025 report reveals that exploited vulnerabilities and lack of expertise are leading causes of attacks, …
- Deep dive into DragonForce ransomware and its Scattered Spider connection
The DragonForce ransomware has evolved into a ransomware cartel, partnering with the Scattered Spider hacking group to execute sophisticated attacks. This …
- Brazil Hit by Banking Trojan Spread via WhatsApp Worm and RelayNFC NFC Relay Fraud
The Water Saci threat actor is using a sophisticated, multi-layered infection chain via WhatsApp to spread a banking trojan in Brazil, utilizing HTA files and …
- 7 Year Long ShadyPanda Attack Spied on 4.3M Chrome and Edge Users – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
A seven-year espionage operation by the ShadyPanda group has been uncovered, infecting over 4.3 million Chrome and Edge users through malicious browser …
- TridentLocker hits bpost: 30GB leaked | Cybernews
The ransomware group TridentLocker claims to have breached bpost, the Belgian postal service, stealing over 30GB of data. Bpost has confirmed a limited data …
- Mixpanel Cyberattack Exposes Client Data Including OpenAI | Ukraine news - #Mezha
A cyberattack on Mixpanel has exposed client data, including that of OpenAI, with stolen information comprising usernames, email addresses, and device details. …
- Netmarble confirms additional leak of 8,000 personal data records following major hacking incident - The Korea Times
Netmarble has confirmed an additional leak of approximately 8,000 personal data records, including customer service inquiries and job applicant information, …
- Penn and Phoenix Universities Disclose Data Breach After Oracle Hack - SecurityWeek
The University of Pennsylvania and the University of Phoenix have confirmed they are victims of a data breach stemming from a cyberattack on Oracle’s …
- Everest Ransomware Claims ASUS Breach and 1TB Data Theft – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
The Everest ransomware group claims to have breached ASUS, stealing over 1TB of data including camera source code, and has issued a 21-hour deadline for …
- “Sleeper” browser extensions woke up as spyware on 4 million devices | Malwarebytes
A malware campaign has been uncovered where browser extensions, after years of normal operation, were updated to act as spyware and deploy malicious code on …
- How a noisy ransomware intrusion exposed a long-term espionage foothold - Help Net Security
A noisy ransomware intrusion by the Thor group exposed a long-term espionage foothold maintained by the QuietCrabs threat actor, who typically has a dwell time …
- Huge password breach exposes billions of stolen credentials online | Fox News
A recent discovery has revealed a massive leak of 1.3 billion passwords and 2 billion email addresses, sourced from both the open and dark web. This extensive …
- Why People Keep Flocking to Linux
Why People Keep Flocking to Linux in 2025 (And It’s Not Just to Escape Windows) Source: www.zdnet.com/article/w… Industry observers have long encouraged users …
- The WIRED Guide to Digital Opsec for Teens
The WIRED Guide to Digital Opsec for Teens Source: www.wired.com/story/dig… Teenagers have long been formidable contributors to the hacking landscape. In recent …
- How CVSS v4.0 Works: Characterizing and Scoring Vulnerabilities
How CVSS v4.0 Works: Characterizing and Scoring Vulnerabilities Source: www.malwarebytes.com/blog/news… The Common Vulnerability Scoring System (CVSS) provides …