> TODAY'S SUMMARY (8 articles)
Today's cyber news highlights significant threats and vulnerabilities. The FBI has seized $1.2 billion in cryptocurrency linked to North Korean hackers, who are also implicated in a $400 million social engineering scheme. This operation involved using video call deception to trick victims. In software security, several vulnerabilities in Ubuntu products have been addressed, including fixes for x11vnc's insecure shared memory permissions, TigerVNC's server impersonation risks, and the signing-party's potential for executing malicious commands via crafted OpenPGP keys. Additionally, updates for SA-Exim and Ruby OpenID have been released to mitigate risks of unsafe rule evaluations and server-side request forgery, respectively.
|
// AI-powered summary generated at 04:01
The federal cybersecurity agency said some government departments had been actively exploited after failing to properly patch their systems.
A new phishing campaign is attempting to trick users into believing theyâve missed important emails, security researchers are warning. The emails The bogus email alerts look like they are coming from the recipientâs email domain, and falsely claim that due to a âSecure Message systemâ upgrade, impor...
Joining nations such as Russia, Georgia and Hungary, legislators in Kazakhstan voted to censor what they label as âLGBT propagandaâ in the media and online.
Here at ColorTokens, most CISOs we speak with understand the need to stop lateral movement attacks. They know that they will inevitably have an initial compromise at some point, for the simple reason that when it comes to perimeter security, the attacker only has to be right once; the defender must...
Quantum Route Redirect PhaaS targets Microsoft 365 users worldwide A new phishing automation platform named Quantum Route Redirect is using around 1,000 domains to steal Microsoft 365 usersâ credentials. The kit comes pre-configured with phishing domains to allow less skilled threat actors to achiev...
The Washington Post is notifying nearly 10,000 employees and contractors that some of their personal and financial data has been exposed in the Oracle data theft attack. [...]
SESSION
Session 2D: Android Security 1
Authors, Creators & Presenters: Mathias Oberhuber (Graz University of Technology), Martin Unterguggenberger (Graz University of Technology), Lukas Maar (Graz University of Technology), Andreas Kogler (Graz University of Technology), Stefan Mangard (Graz Uni...
The goal of 'oxidizing' the Linux distro hits another bump Two vulnerabilities in Ubuntu 25.10's new "sudo-rs" command have been found, disclosed, and fixed in short order.âŠ
Join Protonâs 2025 Lifetime Fundraiser and help decide which organizations receive grants supporting privacy, free speech, and human rights.
A researcher found a way to exploit an SSRF vulnerability related to custom GPTs to obtain an Azure access token.Â
The post ChatGPT Vulnerability Exposed Underlying Cloud Infrastructure appeared first on SecurityWeek.
Europolâs Operation Endgame dismantles Rhadamanthys, Venom RAT, and Elysium botnet in a global crackdown on cybercriminal infrastructures. Europol and Eurojust have launched a new phase of Operation Endgame, carried out between November 10 and 13, 2025, dismantling major malware families including R...
An individual believed to have been involved in the operation of VenomRAT was arrested recently in Greece.
The post 1,000+ Servers Hit in Law Enforcement Takedown of Rhadamanthys, VenomRAT, Elysium appeared first on SecurityWeek.
A new npm worm dubbed âIndonesianFoodsâ has doubled the number of known malicious packages
The operation used a sophisticated phishing kit designed to impersonate the login and payment pages of Aruba S.p.A., stealing customer credentials and credit card details.
Federal agencies have reported as âpatchedâ ASA or FTD devices running software versions vulnerable to attacks.
The post CISA Updates Guidance on Patching Cisco Devices Targeted in China-Linked Attacks appeared first on SecurityWeek.
Kerberoasting attacks let hackers steal service account passwords and escalate to domain admin, often without triggering alerts. Specops Software shares how auditing AD passwords, enforcing long unique credentials, and using AES encryption can shut these attacks down early. [...]
The Call for Papers is now open for the FOSDEM 2026 Open Source Digital Forensics devroomâsubmit your proposal today.
The system could be made to expose sensitive information.
Several security issues were fixed in the Linux kernel.
Rhadamanthys, VenomRAT, and the Elysium botnet were targeted in the takedowns.
The post Operation Endgame targets malware networks in global crackdown appeared first on CyberScoop.