Collecting Cyber-News from over 60 sources

Tag: cyber

4.3 Million Chrome and Edge Users Hacked in 7-Year ShadyPanda Malware Campaign

Dec 2, 2025 8:49 AM

Tags: access, browser, chrome, cyber, malware, marketplace, threat

Koi researchers have uncovered a seven-year browser extension operation that has silently compromised at least 4.3 million Chrome and Edge users worldwide. The threat actor, dubbed ShadyPanda, systematically abused browser marketplaces to turn seemingly legitimate extensions into long”‘term surveillance and remote access platforms. Koi’s investigation identified two ongoing campaigns linked to the same actor. A 300,000″‘user remote…
Glassworm Malware Targets OpenVSX and Microsoft Visual Studio with 24 New Malicious Packages

Dec 2, 2025 8:49 AM

Tags: attack, cyber, malicious, malware, marketplace, microsoft, software, supply-chain, threat

Security threats rarely adhere to holiday schedules, and while developers may take time off, malicious actors are working overtime. A significant new wave of software supply chain attacks has been identified targeting the Microsoft Visual Studio Marketplace and OpenVSX platforms. Researchers at Secure Annex have uncovered and tracked 24 new malicious packages linked to the…
Mandatory ‘Undeletable’ Security App to Be Installed on Every Smartphone in India

Dec 2, 2025 6:49 AM

Tags: cyber, government, india, mobile, phone

In a significant decision that will affect millions of mobile phone users, the Indian government has ordered all smartphone companies to install a specific security app on every new device sold in the country. The Department of Telecommunications (DoT) issued this order on November 28, 2025. The government has told phone makers that they have…
BreachLock Named a Leader in 2025 GigaOm Radar Report for Penetration Testing as a Service (PTaaS) for Third Consecutive Year

Dec 2, 2025 6:49 AM

Tags: cyber, penetration-testing, service

New York, New York, December 1st, 2025, CyberNewswire BreachLock, the global leader in Penetration Testing as a Service (PTaaS), has been named a Leader and Fast Mover in the 2025 GigaOm Radar Report for PTaaS for the third year in a row. The GigaOm Radar Report for PTaaS is published annually to help security leaders and practitioners…
Cyber Monday: Online-Rabattschlacht durch Bad-Bot-Traffic gefährdet

Dec 2, 2025 12:49 AM

Tags: cyber

First seen on datensicherheit.de Jump to article: www.datensicherheit.de/cyber-monday-online-rabattschlacht-bad-bot-traffic-gefahr
Cyber Monday: Online-Rabattschlacht durch Bad-Bot-Traffic gefährdet

Dec 2, 2025 12:49 AM

Tags: cyber

First seen on datensicherheit.de Jump to article: www.datensicherheit.de/cyber-monday-online-rabattschlacht-bad-bot-traffic-gefahr
US Federal Modernization Funds Slashed in Senate Bill

Dec 2, 2025 12:49 AM

Tags: cyber, cybersecurity, infrastructure

Proposed Tech Modernization Fund Allocation Falls to $5M Despite Bipartisan Support. Congressional appropriators have proposed significant reductions to federal cybersecurity and modernization initiatives in the 2026 budget, signaling a potential retreat from centralized cyber federal oversight even as agencies struggle with aging infrastructure and escalating nation-state threats. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/us-federal-modernization-funds-slashed-in-senate-bill-a-30174
‘Cyber Issue’ Leads to FDA Recall of Baxter Respiratory Gear

Dec 2, 2025 12:49 AM

Tags: access, cyber, hacker

Hackers Could Adjust Life Support Settings of At-Home Life 2000 Ventilation System. The Food and Drug Administration is warning that Life 2000 – an at-home ventilation system by medical device maker Baxter – has been permanently recalled due to a cyber issue that could allow individuals with physical access to tamper with the gear’s life…
Tomiris Unleashes ‘Havoc’ With New Tools, Tactics

Dec 1, 2025 11:49 PM

Tags: cyber, espionage, government, group, russia, tactics, tool

The Russian-speaking group is targeting government and diplomatic entities in CIS member states and Central Asia in its latest cyber-espionage campaign. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/tomiris-unleashes-havoc-new-tools-tactics
Police Disrupt ‘Cryptomixer,’ Seize Millions in Crypto

Dec 1, 2025 9:49 PM

Tags: crypto, cyber, cybercrime, law, ransomware, service

Multiple European law enforcement agencies recently disrupted Cryptomixer, a service allegedly used by cybercriminals to launder ill-gotten gains from ransomware and other cyber activities. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/police-disrupt-cryptomixer-seize-millions-crypto
Akamai Study Shows Microsegmentation Boosts Security

Dec 1, 2025 7:49 PM

Tags: cyber, cyberattack, defense, insurance, threat

Microsegmentation no longer remains a buzzword. In today’s threat landscape, organizations are adopting it as a frontline defense against cyberattacks and higher cyber insurance premiums. About 90% of organizations are using some form of segmentation, according to Akamai’s 2025 Segmentation Impact Study. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/interviews/akamai-study-shows-microsegmentation-boosts-security-i-5501
NETSCOUT wins “Overall Network Security Solution of the Year”

Dec 1, 2025 6:49 PM

Tags: attack, automation, cloud, compliance, cyber, cybersecurity, data, detection, google, incident response, intelligence, microsoft, network, risk, service, threat, tool, zero-day

The challenge: Visibility gaps create risk Modern enterprises face expanding attack surfaces, hybrid cloud environments, and increasing operational complexity. Security teams are flooded with alerts but lack the visibility to see what’s truly happening behind them.Many tools promise detection, but few deliver the clarity and confidence that come from true visibility. Without that clarity, investigations…
What are zero-day attacks and why do they work?

Dec 1, 2025 6:49 PM

Tags: access, antivirus, attack, breach, bug-bounty, cyber, cybersecurity, data, detection, edr, email, endpoint, espionage, exploit, government, group, hacker, infrastructure, intelligence, malicious, mobile, network, phishing, risk, service, software, spear-phishing, strategy, supply-chain, tactics, threat, tool, unauthorized, update, vulnerability, vulnerability-management, zero-day, zero-trust

No available patch: These exploits are unknown to both vendors and defenders, meaning they have not been identified and patched yet, leaving the door open for attackers.High-value targets: These attacks are often used in cyber espionage, ransomware campaigns, and advanced persistent threats (APTs) to target high-value assets with sensitive data.Difficult to detect: These exploits often are missed by traditional detection tools, especially…
The first line of defense is still the network. But that’s only the beginning

Dec 1, 2025 6:49 PM

Tags: cloud, cyber, defense, detection, intelligence, network, threat

Detection is only step one: But here’s where we believe the conversation needs to change. Detection, while critical, is just the first step. The real challenge, and the real value, lies in understanding a threat through the investigation phase.Think about it: an alert tells you something happened. But only investigation tells you what it was,…
Microsoft gives Windows admins a legacy migration headache with WINS sunset

Dec 1, 2025 6:49 PM

Tags: attack, control, cyber, dns, exploit, hacker, infrastructure, malicious, microsoft, network, open-source, penetration-testing, risk, service, technology, tool, vulnerability, windows

Why WINS is still in use: Organizations still using WINS are likely to fall into one of two categories: those using it to support old technologies with long lifecycles such as operational technology (OT) systems, and those that have simply half-forgotten that they are still using it.”For OT stacks built around WINS/NetBIOS, replacing them isn’t…
What are zero-day attacks and why do they work?

Dec 1, 2025 6:49 PM

Tags: access, antivirus, attack, breach, bug-bounty, cyber, cybersecurity, data, detection, edr, email, endpoint, espionage, exploit, government, group, hacker, infrastructure, intelligence, malicious, mobile, network, phishing, risk, service, software, spear-phishing, strategy, supply-chain, tactics, threat, tool, unauthorized, update, vulnerability, vulnerability-management, zero-day, zero-trust

No available patch: These exploits are unknown to both vendors and defenders, meaning they have not been identified and patched yet, leaving the door open for attackers.High-value targets: These attacks are often used in cyber espionage, ransomware campaigns, and advanced persistent threats (APTs) to target high-value assets with sensitive data.Difficult to detect: These exploits often are missed by traditional detection tools, especially…
South Korea’s Coupang Confirms 34 Million Customer Data Leak

Dec 1, 2025 5:49 PM

Tags: attack, cyber, data, korea, leak

The South Korean police are tracking the suspect behind a cyber-attack targeting e-commerce giant Coupang First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/south-korea-coupang-34m-customer/
When Hackers Wear Suits: Protecting Your Team from Insider Cyber Threats

Dec 1, 2025 4:49 PM

Tags: access, breach, control, cyber, deep-fake, hacker, jobs, threat

Hackers impersonate IT pros with deepfakes, fake resumes, and stolen identities, turning hiring pipelines into insider threats. Huntres sLabs explains how stronger vetting and access controls help stop these threats. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/when-hackers-wear-suits-protecting-your-team-from-insider-cyber-threats/
Devolutions Server Hit by SQL Injection Flaw Allowing Data Theft

Dec 1, 2025 3:49 PM

Tags: access, advisory, cyber, data, flaw, injection, password, software, sql, theft, vulnerability

A critical security vulnerability has been discovered in Devolutions Server, a popular centralized password and privileged access management solution. The flaw, rated critical severity by experts, could allow attackers to steal sensitive data or modify internal records. Devolutions, the company behind the software, released a security advisory (DEVO-2025-0018) on November 27, 2025, detailing three separate…
Hackers Launch 2,000+ Fake Holiday Shops in Massive Payment Theft Scheme

Dec 1, 2025 3:49 PM

Tags: cyber, cybersecurity, finance, hacker, infrastructure, network, phishing, tactics, theft, unauthorized

Cybersecurity researchers have uncovered a massive network of over 2,000 fraudulent online storefronts deliberately activated during the Black Friday and Cyber Monday shopping season to harvest consumer payment information and execute unauthorized financial transactions. The discovery reveals two distinct but potentially coordinated phishing clusters that leverage shared infrastructure, automated templates, and brand impersonation tactics to…
Kevin Lancaster Joins the usecure Board to Accelerate North American Channel Growth

Dec 1, 2025 3:49 PM

Tags: cyber, risk, risk-management

Claymont, Delaware, December 1st, 2025, CyberNewsWire Lancaster’s arrival brings significant North American channel experience and expertise, supporting usecure’s ambition to cement its position as the market-leading human risk management solution for MSPs. usecure today announced the appointment of Kevin Lancaster as a Non-Executive Director. Kevin joins usecure with a wealth of experience in the North…
Qualcomm Alerts Users to Critical Flaws That Compromise the Secure Boot Process

Dec 1, 2025 3:49 PM

Tags: cyber, flaw, malicious, software, update, vulnerability

Qualcomm Technologies, Inc. has issued an urgent security bulletin warning customers about multiple critical vulnerabilities affecting millions of devices worldwide. The most severe flaw threatens the secure boot process, a fundamental security mechanism that protects devices from malicious software during startup. The security update, published today, addresses six high-priority vulnerabilities discovered in Qualcomm’s proprietary software.…
Chinese Front Companies Offering Advanced Steganography Tools for APT Groups

Dec 1, 2025 3:49 PM

Tags: apt, china, cyber, firewall, government, group, leak, technology, tool

The Chinese government’s cyber ecosystem continues to attract significant scrutiny from security researchers worldwide. Following revelations from Intrusion Truth, the i-Soon leaks, tracking of EagleMsgSpy, and exposure of Great Firewall components, a recent analysis has uncovered details about two technology companies allegedly linked to China’s Ministry of State Security (MSS). BIETA and its subsidiary CIII…
Australian Man Jailed for Running Fake Wi-Fi Attacks at Airports and Onboard Flights

Dec 1, 2025 3:49 PM

Tags: attack, crime, crimes, cyber, network, wifi

A Perth man has been sent to jail for stealing private videos from women and creating a fake Wi-Fi network to trick airline passengers. The 44-year-old’s crimes have shocked the aviation industry and left many victims feeling violated. The Fake Wi-Fi Scheme The trouble started in April 2024 when workers at Qantas spotted something suspicious.…
KimJongRAT Strikes Windows Users via Malicious HTA Files

Dec 1, 2025 3:49 PM

Tags: access, attack, credentials, cyber, group, korea, malicious, north-korea, windows

Security researchers have confirmed that KimJongRAT, a sophisticated remote access Trojan attributed to the Kimsuky group and believed to be backed by North Korea, is being actively distributed via weaponized .hta files targeting Windows users. The discovery reveals a carefully orchestrated attack chain designed to harvest sensitive credentials and system information from compromised machines. The…
Hackers Shift to ‘Living Off the Land’ Tactics to Evade EDR on Windows Systems

Dec 1, 2025 3:49 PM

Tags: cyber, cyberattack, edr, hacker, tactics, tool, windows

Security researchers have discovered that modern attackers are abandoning traditional offensive tools and instead weaponizing legitimate Windows utilities to conduct cyberattacks without triggering security alarms. This shift in tactics, known as >>Living Off the Land,
Australian Man Jailed for Running Fake Wi-Fi Attacks at Airports and Onboard Flights

Dec 1, 2025 3:49 PM

Tags: attack, crime, crimes, cyber, network, wifi

A Perth man has been sent to jail for stealing private videos from women and creating a fake Wi-Fi network to trick airline passengers. The 44-year-old’s crimes have shocked the aviation industry and left many victims feeling violated. The Fake Wi-Fi Scheme The trouble started in April 2024 when workers at Qantas spotted something suspicious.…
Authorities Shut Down ‘Cryptomixer’ Platform Used for Cybercrime and Money Laundering

Dec 1, 2025 3:49 PM

Tags: crypto, cyber, cybercrime, germany, law, service

Law enforcement authorities from Switzerland and Germany, with support from Europol, have successfully dismantled a primary cryptocurrency mixing service called ‘Cryptomixer’ that was facilitating cybercrime and money laundering operations worldwide. The coordinated action took place between November 24 and 28, 2025, in Zurich, Switzerland. During the operation, authorities seized three servers and confiscated the cryptomixer.io…
Operation Hanoi Thief: Pseudo-Polyglot Payloads Targeting IT Professionals

Dec 1, 2025 3:49 PM

Tags: apt, cyber, cyberattack, jobs, malicious, malware

SEQRITE Labs APT-Team has uncovered a sophisticated cyberattack campaign dubbed >>Operation Hanoi Thief,
Devolutions Server Hit by SQL Injection Flaw Allowing Data Theft

Dec 1, 2025 3:49 PM

Tags: access, advisory, cyber, data, flaw, injection, password, software, sql, theft, vulnerability

A critical security vulnerability has been discovered in Devolutions Server, a popular centralized password and privileged access management solution. The flaw, rated critical severity by experts, could allow attackers to steal sensitive data or modify internal records. Devolutions, the company behind the software, released a security advisory (DEVO-2025-0018) on November 27, 2025, detailing three separate…