Privacy/Governance Feed
Asahi Group’s CEO said he is considering creating a dedicated cyber unit following the ransomware attack that crippled the company – Read More –
Author: Joe-W
Attack Feeds
Cybersecurity researchers have disclosed details of an active phishing campaign that’s targeting a wide range of sectors in Russia with phishing emails that deliver Phantom Stealer via malicious ISO optical disc images. The activity, codenamed Operation MoneyMount-ISO by Seqrite Labs, has primarily singled out finance and accounting entities, with those in the procurement, legal, payroll … Read More “Phantom Stealer Spread by ISO Phishing Emails Hitting Russian Finance Sector – The Hacker News” »
Attack Feeds
Torrance, United States / California, December 12th, 2025, CyberNewsWire In December 2025, CVE-2025-55182 (React2Shell), a vulnerability in React… – Read More – Hackread – Cybersecurity News, Data Breaches, AI, and More
Privacy/Governance Feed
The UK’s National Cyber Security Centre has called on businesses to apply Cyber Essentials to suppliers – Read More –
Privacy/Governance Feed
A fundamental change is in progress across the GCC: data privacy is to no longer be a box that… The post Data Privacy vs Compliance: Why Zero Trust Is the Future for GCC Companies appeared first on JISA Softech Pvt Ltd. – Read More – JISA Softech Pvt Ltd
Attack Feeds
The pro-Russian hacktivist group known as CyberVolk (aka GLORIAMIST) has resurfaced with a new ransomware-as-a-service (RaaS) offering called VolkLocker that suffers from implementation lapses in test artifacts, allowing users to decrypt files without paying an extortion fee. According to SentinelOne, VolkLocker (aka CyberVolk 2.x) emerged in August 2025 and is capable of targeting both Windows … Read More “VolkLocker Ransomware Exposed by Hard-Coded Master Key Allowing Free Decryption – The Hacker News” »
Attack Feeds
UK’s ICO fines LastPass £1.2M for the 2022 data breach that exposed 1.6 million users’ data. Learn how a flaw in an employee’s personal PC led to the massive security failure. – Read More – Hackread – Cybersecurity News, Data Breaches, AI, and More
Attack Feeds
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a high-severity flaw impacting Sierra Wireless AirLink ALEOS routers to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild. CVE-2018-4063 (CVSS score: 8.8/9.9) refers to an unrestricted file upload vulnerability that could be exploited to achieve remote code – … Read More “CISA Adds Actively Exploited Sierra Wireless Router Flaw Enabling RCE Attacks – The Hacker News” »
Gov/ISAC Feeds
Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user an attacker could then install programs; … Read More “Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution – Cyber Security Advisories – MS-ISAC” »
Attack Feeds
Apple on Friday released security updates for iOS, iPadOS, macOS, tvOS, watchOS, visionOS, and its Safari web browser to address two security flaws that it said have been exploited in the wild, one of which is the same flaw that was patched by Google in Chrome earlier this week. The vulnerabilities are listed below – … Read More “Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild – The Hacker News” »
Attack Feeds
The Oyster backdoor (also known as Broomstick) is targeting the financial world, using malicious search ads for PuTTY, Teams, and Google Meet. – Read More – Hackread – Cybersecurity News, Data Breaches, AI, and More
Attack Feeds
Scale software teams fast with development team augmentation. Learn when it works best, key models, common mistakes, and how to choose the right partner. – Read More – Hackread – Cybersecurity News, Data Breaches, AI, and More
Attack Feeds
The Department of Justice is suing Fulton County, Georgia and its election clerk over the county’s refusal to hand over voter records, part of a larger nationwide project to collect as much election and voter information as possible from state and local governments ahead of the 2026 and 2028 elections. In a lawsuit announced Thursday, … Read More “DOJ sues Fulton County over 2020 voter data – CyberScoop” »
Attack Feeds
A new malware called PyStoreRAT is being through fake OSINT tools on GitHub targeting IT and OSINT pros. Read Morphisec’s report detailing how it uses AI and evades security. – Read More – Hackread – Cybersecurity News, Data Breaches, AI, and More
Attack Feeds
Cybersecurity researchers are calling attention to a new campaign that’s leveraging GitHub-hosted Python repositories to distribute a previously undocumented JavaScript-based Remote Access Trojan (RAT) dubbed PyStoreRAT. “These repositories, often themed as development utilities or OSINT tools, contain only a few lines of code responsible for silently downloading a remote HTA file and executing – Read … Read More “Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads – The Hacker News” »
Attack Feeds
Disclosure: This article was submitted by PDFAid for publication. – Read More – Hackread – Cybersecurity News, Data Breaches, AI, and More
Attack Feeds
President Donald Trump announced Thursday his intention to issue a federal pardon for an individual convicted in connection with efforts related to challenging the 2020 election results. However, on this occasion, the person in question will remain behind bars. In a statement on Truth Social, Trump said he was pardoning Tina Peters, a former Mesa County … Read More “Trump moves to pardon Colorado election clerk Tina Peters, even though he can’t – CyberScoop” »
Attack Feeds
Cybersecurity researchers have documented four new phishing kits named BlackForce, GhostFrame, InboxPrime AI, and Spiderman that are capable of facilitating credential theft at scale. BlackForce, first detected in August 2025, is designed to steal credentials and perform Man-in-the-Browser (MitB) attacks to capture one-time passwords (OTPs) and bypass multi-factor authentication (MFA). The kit – Read More … Read More “New Advanced Phishing Kits Use AI and MFA Bypass Tactics to Steal Credentials at Scale – The Hacker News” »
Attack Feeds
Analyst firm Gartner has issued a blunt warning to organizations: Agentic AI browsers introduce serious new security risks and should be blocked “for the foreseeable future.” Read more in my article on the Fortra blog. – Read More – Graham Cluley
Attack Feeds
The browser has become the main interface to GenAI for most enterprises: from web-based LLMs and copilots, to GenAI‑powered extensions and agentic browsers like ChatGPT Atlas. Employees are leveraging the power of GenAI to draft emails, summarize documents, work on code, and analyze data, often by copying/pasting sensitive information directly into prompts or uploading files. … Read More “Securing GenAI in the Browser: Policy, Isolation, and Data Controls That Actually Work – The Hacker News” »
Attack Feeds
The browser has become the main interface to GenAI for most enterprises: from web-based LLMs and copilots, to GenAI‑powered extensions and agentic browsers like ChatGPT Atlas. Employees are leveraging the power of GenAI to draft emails, summarize documents, work on code, and analyze data, often by copying/pasting sensitive information directly into prompts or uploading files. … Read More “Securing GenAI in the Browser: Policy, Isolation, and Data Controls That Actually Work – The Hacker News” »
Privacy/Governance Feed
The National Cyber Security Centre has released new learnings from a cyber deception pilot – Read More –
Privacy/Governance Feed
The UK’s data protection regulator has fined password manager provider LastPass £1.2m after 2022 data breach – Read More –
Attack Feeds
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has urged federal agencies to patch the recent React2Shell vulnerability by December 12, 2025, amid reports of widespread exploitation. The critical vulnerability, tracked as CVE-2025-55182 (CVSS score: 10.0), affects the React Server Components (RSC) Flight protocol. The underlying cause of the issue is an unsafe deserialization – … Read More “React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency Mitigation – The Hacker News” »
Attack Feeds
The React team has released fixes for two new types of flaws in React Server Components (RSC) that, if successfully exploited, could result in denial-of-service (DoS) or source code exposure. The team said the issues were found by the security community while attempting to exploit the patches released for CVE-2025-55182 (CVSS score: 10.0), a critical … Read More “New React RSC Vulnerabilities Enable DoS and Source Code Exposure – The Hacker News” »
Privacy/Governance Feed
The Coupang South Korean unit’s response will be spearheaded by an executive based in the US – Read More –
Attack Feeds
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a high-severity security flaw impacting OSGeo GeoServer to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation in the wild. The vulnerability in question is CVE-2025-58360 (CVSS score: 8.2), an unauthenticated XML External Entity (XXE) flaw that affects all versions prior … Read More “CISA Flags Actively Exploited GeoServer XXE Flaw in Updated KEV Catalog – The Hacker News” »
Attack Feeds
A fresh effort is mounting in Congress to require federal agents to obtain a warrant before searching a government surveillance database for information about U.S. citizens, as Congress again faces an impending deadline, in four months, to renew a major surveillance law. But there are also signs that renewal of Section 702 of the Foreign … Read More “Warrant requirements, Democratic worries could factor into spy law renewal debate – CyberScoop” »
Attack Feeds
VS Code developers beware: ReversingLabs found 19 malicious extensions hiding trojans inside a popular dependency, disguising the final malware payload as a standard PNG image file. – Read More – Hackread – Cybersecurity News, Data Breaches, AI, and More
Privacy/Governance Feed
OpenAI has reported a surge in performance as GPT-5.1-Codex-Max reaching 76% in capability assessments, and warned of upcoming cyber-risks – Read More –
Privacy/Governance Feed
A new campaign involving 19 malicious Visual Studio Code extensions used a legitimate npm package to embed malware in dependency folders – Read More –
Attack Feeds
Road Town, British Virgin Islands, 11th December 2025, CyberNewsWire – Read More – Hackread – Cybersecurity News, Data Breaches, AI, and More
Attack Feeds
Zimperium zLabs reveals DroidLock, a new Android malware acting like ransomware that can hijack Android devices, steal credentials via phishing, and stream your screen via VNC. – Read More – Hackread – Cybersecurity News, Data Breaches, AI, and More
Attack Feeds
As enterprises refine their strategies for handling Non-Human Identities (NHIs), Robotic Process Automation (RPA) has become a powerful tool for streamlining operations and enhancing security. However, since RPA bots have varying levels of access to sensitive information, enterprises must be prepared to mitigate a variety of challenges. In large organizations, bots are starting to outnumber … Read More “The Impact of Robotic Process Automation (RPA) on Identity and Access Management – The Hacker News” »
Attack Feeds
Cary, North Carolina, USA, 11th December 2025, CyberNewsWire – Read More – Hackread – Cybersecurity News, Data Breaches, AI, and More
Attack Feeds
Phishing campaign: Scammers sent over 40,000 spoofed SharePoint, DocuSign and e-sign emails to companies, hiding malicious links behind trusted redirect services. – Read More – Hackread – Cybersecurity News, Data Breaches, AI, and More
Attack Feeds
Cybersecurity researchers have disclosed details of a new fully-featured Windows backdoor called NANOREMOTE that uses the Google Drive API for command-and-control (C2) purposes. According to a report from Elastic Security Labs, the malware shares code similarities with another implant codenamed FINALDRAFT (aka Squidoor) that employs Microsoft Graph API for C2. FINALDRAFT is attributed to a … Read More “NANOREMOTE Malware Uses Google Drive API for Hidden Control on Windows Systems – The Hacker News” »
Attack Feeds
This week’s cyber stories show how fast the online world can turn risky. Hackers are sneaking malware into movie downloads, browser add-ons, and even software updates people trust. Tech giants and governments are racing to plug new holes while arguing over privacy and control. And researchers keep uncovering just how much of our digital life … Read More “ThreatsDay Bulletin: Spyware Alerts, Mirai Strikes, Docker Leaks, ValleyRAT Rootkit — and 20 More Stories – The Hacker News” »
Attack Feeds
Global cybersecurity agencies have issued the first unified guidance on applying artificial intelligence (AI) within critical infrastructure, signaling a major shift from theoretical debate to practical guardrails for safety and reliability. The release of joint guidance on Principles for the Secure Integration of Artificial Intelligence in Operational Technology marks a meaningful milestone for critical infrastructure … Read More “New cybersecurity guidance paves the way for AI in critical infrastructure – CyberScoop” »
Attack Feeds
Every business today has to deal with private information – whether it is about customers, employees, or financial… – Read More – Hackread – Cybersecurity News, Data Breaches, AI, and More
Attack Feeds
An advanced persistent threat (APT) known as WIRTE has been attributed to attacks targeting government and diplomatic entities across the Middle East with a previously undocumented malware suite dubbed AshTag since 2020. Palo Alto Networks is tracking the activity cluster under the name Ashen Lepus. Artifacts uploaded to the VirusTotal platform show that the threat … Read More “WIRTE Leverages AshenLoader Sideloading to Install the AshTag Espionage Backdoor – The Hacker News” »
Attack Feeds
Google on Wednesday shipped security updates for its Chrome browser to address three security flaws, including one it said has come under active exploitation in the wild. The vulnerability, rated high in severity, is being tracked under the Chromium issue tracker ID “466192044.” Unlike other disclosures, Google has opted to keep information about the CVE … Read More “Chrome Targeted by Active In-the-Wild Exploit Tied to Undisclosed High-Severity Flaw – The Hacker News” »
Attack Feeds
Cybersecurity researchers at Blackpoint Cyber discovered a new, evasive CastleLoader malware variant using Python and ClickFix social engineering to deliver RATs and info-stealers directly from memory. – Read More – Hackread – Cybersecurity News, Data Breaches, AI, and More
Attack Feeds
A high-severity unpatched security vulnerability in Gogs has come under active exploitation, with more than 700 compromised instances accessible over the internet, according to new findings from Wiz. The flaw, tracked as CVE-2025-8110 (CVSS score: 8.7), is a case of file overwrite in the file update API of the Go-based self-hosted Git service. A fix … Read More “Unpatched Gogs Zero-Day Exploited Across 700+ Instances Amid Active Attacks – The Hacker News” »
Privacy/Governance Feed
New ITRC research finds 81% of US small businesses suffered a data or security breach in the past year – Read More –
Privacy/Governance Feed
Google has released a Chrome security update to fix three zero-day vulnerabilities, including a high-severity flaw with an active exploit – Read More –
Privacy/Governance Feed
Experts say a new Firm Checker tool from the FCA won’t move the dial on fraud but is a step in the right direction – Read More –
Privacy/Governance Feed
Cisco Talos has detected new tactics from a financially motivated actor using DeadLock ransomware – Read More –
Gov/ISAC Feeds
An update on the NCSC’s trials to test the real-world efficacy of cyber deception solutions. – Read More – NCSC Feed
Attack Feeds
Just when you thought there couldn’t be another type of cyber thief, they develop new and devious methods to steal valuable information and finances. Over the last few yearsthere has been an uptick in “SIM pharm” crimes. This form of crime has encompassed avariety of scams including theft of banking credentials, impersonation, investment fraud,and online … Read More “SIM Pharm Cyber crime Escalates in South Africa – Da Vinci Cybersecurity: Leading Cyber Security Services in South Africa.” »