> TODAY'S SUMMARY (8 articles)
Today's cyber news highlights significant threats and vulnerabilities. The FBI has seized $1.2 billion in cryptocurrency linked to North Korean hackers, who are also implicated in a $400 million social engineering scheme. This operation involved using video call deception to trick victims. In software security, several vulnerabilities in Ubuntu products have been addressed, including fixes for x11vnc's insecure shared memory permissions, TigerVNC's server impersonation risks, and the signing-party's potential for executing malicious commands via crafted OpenPGP keys. Additionally, updates for SA-Exim and Ruby OpenID have been released to mitigate risks of unsafe rule evaluations and server-side request forgery, respectively.
|
// AI-powered summary generated at 04:01
La Vereinigte Stadtwerke GmbH a été victime d'une attaque de hackers en novembre 2025, mais les systèmes critiques pour la fourniture de services publics n'ont pas été affectés. L'attaque a été détectée et stoppée rapidement, mais un flux de données partiel a eu lieu. L'entreprise prend des mesures...
Regis Resources, un producteur d'or australien, a confirmé avoir subi une attaque cybernétique en novembre 2025, mais a indiqué que ses systèmes de sécurité avaient empêché toute fuite de données. L'attaque a été revendiquée par le groupe de ransomware Lynx, qui a publié des informations sur les dir...
Short-finned pilot wales (Globicephala macrorhynchus) eat at lot of squid:
To figure out a short-finned pilot whale’s caloric intake, Gough says, the team had to combine data from a variety of sources, including movement data from short-lasting tags, daily feeding rates from satellite tags, body mea...
Two campaigns delivering Gh0st RAT to Chinese speakers show a deep understanding of the target population's virtual environment and online behavior.
The post Digital Doppelgangers: Anatomy of Evolving Impersonation Campaigns Distributing Gh0st RAT appeared first on Unit 42.
FedRAMP is a government-wide program meant to ensure a standardized baseline for information security throughout the cloud service providers working with the federal government. It’s a tall order. Setting forth standards that are robust enough to cover all the bases, while being open and flexible en...
A new bill sponsored by Sen. Hawley (D-MO), Sen. Blumenthal (D-CT), Sen. Britt (R-AL), Sen. Warner (D-VA), and Sen. Murphy (D-CT) would require AI chatbots to verify all users’ ages, prohibit minors from using AI tools, and implement steep criminal penalties for chatbots that promote or solicit cert...
Hardware accessory giant Logitech has confirmed it suffered a data breach in a cyberattack claimed by the Clop extortion gang, which conducted Oracle E-Business Suite data theft attacks in July. [...]
How Does the Management of Non-Human Identities (NHIs) Bridge Security Gaps? Cybersecurity is complex and multifaceted. Where machines and applications continuously interact and communicate with one another across various platforms, one may wonder how we can effectively manage these interactions to...
How Can AI-Driven Security Stay Ahead of Emerging Threats? What are the processes that ensure AI-driven security solutions tackle evolving threats efficiently? Where organizations transition to cloud environments, understanding and managing Non-Human Identities (NHIs) becomes crucial. NHIs represent...
More than a month after PoC made public Fortinet finally published a security advisory on Friday for a critical FortiWeb path traversal vulnerability under active exploitation – but it appears digital intruders got a month's head start.…
How Can Organizations Strengthen Non-Human Identity Security? How can organizations effectively secure their Non-Human Identities (NHIs)? When businesses increasingly rely on cloud environments, understanding and implementing robust NHI security practices is critical. NHIs, often referred to as mach...
How Do Non-Human Identities Fit into Cybersecurity? How do machine identities, known as Non-Human Identities (NHIs), enhance the security of cloud environments? Where businesses increasingly migrate their operations to the cloud, understanding this aspect of cybersecurity becomes crucial. NHIs act a...
A new US law enforcement initiative is aimed at crypto fraudsters targeting Americans—and now seeks to seize infrastructure it claims is crucial to notorious scam compounds.
Federal prosecutors secured five guilty pleas from people who supported overseas remote IT workers, and seized $15 million in stolen cryptocurrency tied to the North Korean regime.
The post DOJ lauds series of gains against North Korean IT worker scheme, crypto thefts appeared first on CyberScoop.
Security firms say the flaw has been actively exploited for weeks, even as Fortinet quietly shipped fixes and CISA added the bug to its KEV catalog.
The post Fortinet Confirms Active Exploitation of Critical FortiWeb Vulnerability appeared first on SecurityWeek.
Checkout.com said the notorious ShinyHunters threat group breached a badly decommissioned legacy cloud storage system last used by the company in 2020 and stole some merchant data. The hackers demanded a ransom, but the company instead will give the amount demanded to cybersecurity research groups....
Three U.S. nationals pleaded guilty to directly handing over their identities for use in North Korean IT worker scams, the Justice Department said, and two other people also admitted helping such schemes.
The U.S. Department of Justice announced that five individuals pleaded guilty to aiding North Korea's illicit revenue generation schemes, including remote IT worker fraud and cryptocurrency theft. [...]
SESSION
Session 3A: Network Security 1
Authors, Creators & Presenters: Diwen Xue (University of Michigan), Robert Stanley (University of Michigan), Piyush Kumar (University of Michigan), Roya Ensafi (University of Michigan)
-----
PAPER
-----
The Discriminative Power of Cross-layer RTTs in Finger...
AWS re:Invent 2025, the premier cloud computing conference hosted by Amazon Web Services (AWS), returns to Las Vegas, Nevada, December 1–5, 2025. At AWS, security is our top priority, and re:Invent 2025 reflects this commitment with our most comprehensive security track to date. With more than 80 se...