Cybersecurity News from Across the Internet
Cleafy analysis reveals Albiriox, a new Android Malware-as-a-Service (MaaS) RAT that targets over 400 global banking and crypto apps. Learn how ODF fraud enables full device takeover. – Read More – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
As 2025 draws to a close, security professionals face a sobering realization: the traditional playbook for web security has become dangerously obsolete. AI-powered attacks, evolving injection techniques, and supply chain compromises affecting hundreds of thousands of websites forced a fundamental rethink of defensive strategies. Here are the five threats that reshaped web security this year, … Read More “5 Threats That Reshaped Web Security This Year [2025] – The Hacker News” »
ISC2 report reveals 59% of global organizations have critical or significant skills shortages – Read More –
Cybercriminals associated with a financially motivated group known as GoldFactory have been observed staging a fresh round of attacks targeting mobile users in Indonesia, Thailand, and Vietnam by impersonating government services. The activity, observed since October 2024, involves distributing modified banking applications that act as a conduit for Android malware, Group-IB said in a technical … Read More “GoldFactory Hits Southeast Asia with Modified Banking Apps Driving 11,000+ Infections – The Hacker News” »
The Information Commissioner’s Office has chosen only to reprimand the Post Office after a 2024 breach – Read More –
Cloudflare on Wednesday said it detected and mitigated the largest ever distributed denial-of-service (DDoS) attack that measured at 29.7 terabits per second (Tbps). The activity, the web infrastructure and security company said, originated from a DDoS botnet-for-hire known as AISURU, which has been linked to a number of hyper-volumetric DDoS attacks over the past year. … Read More “Record 29.7 Tbps DDoS Attack Linked to AISURU Botnet with up to 4 Million Infected Hosts – The Hacker News” »
A teenage cybercriminal posts a smug screenshot to mock a sextortion scammer… and accidentally hands over the keys to his real-world identity. Meanwhile, we look into the crystal ball for 2026 and consider how stolen data is now the jet fuel of cybercrime – and how next year could be even nastier than 2025. Plus, … Read More “Smashing Security podcast #446: A hacker doxxes himself, and social engineering-as-a-service – Graham Cluley” »
Twin brothers Muneeb and Sohaib Akhter were arrested in Alexandria, Va., Wednesday for allegedly stealing and destroying government data held by a government contractor minutes after they were fired from the company earlier this year, the Justice Department said. Prosecutors accuse the 34-year-old brothers of the crimes during a weeklong spree in February, compromising data … Read More “Twins with hacking history charged in insider data breach affecting multiple federal agencies – CyberScoop” »
Cybersecurity today is about a lot more than just firewalls and antivirus software. As organisations adopt cloud computing,… – Read More – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
Cybersecurity researchers have uncovered a critical ChatGPT Atlas browser attack, confirming the danger of the ongoing surge in the ClickFix threat. – Read More – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
A maximum-severity security flaw has been disclosed in React Server Components (RSC) that, if successfully exploited, could result in remote code execution. The vulnerability, tracked as CVE-2025-55182, carries a CVSS score of 10.0. It allows “unauthenticated remote code execution by exploiting a flaw in how React decodes payloads sent to React Server Function endpoints,” the … Read More “Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code Execution – The Hacker News” »
Security researchers and code developers are scrambling to patch and investigate a critical vulnerability affecting React Server Components, an open-source library used widely across the internet and embedded into many essential software frameworks. The rapid response underscores the potential consequences of exploitation. Although no attacks have been observed or reported, researchers expect them soon and … Read More “Developers scramble as critical React flaw threatens major apps – CyberScoop” »
A critical security flaw impacting a WordPress plugin known as King Addons for Elementor has come under active exploitation in the wild. The vulnerability, CVE-2025-8489 (CVSS score: 9.8), is a case of privilege escalation that allows unauthenticated attackers to grant themselves administrative privileges by simply specifying the administrator user role during registration. It affects versions … Read More “WordPress King Addons Flaw Under Active Attack Lets Hackers Make Admin Accounts – The Hacker News” »
Microsoft has silently plugged a security flaw that has been exploited by several threat actors since 2017 as part of the company’s November 2025 Patch Tuesday updates, according to ACROS Security’s 0patch. The vulnerability in question is CVE-2025-9491 (CVSS score: 7.8/7.0), which has been described as a Windows Shortcut (LNK) file UI misinterpretation vulnerability that … Read More “Microsoft Silently Patches Windows LNK Flaw After Years of Active Exploitation – The Hacker News” »
Guide to scale ready code security with event driven scans unified data and API first design for large teams seeking strong growth aligned control. – Read More – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
The threat actor known as Water Saci is actively evolving its tactics, switching to a sophisticated, highly layered infection chain that uses HTML Application (HTA) files and PDFs to propagate a worm that deploys a banking trojan via WhatsApp in attacks targeting users in Brazil. The latest wave is characterized by the attackers shifting from … Read More “Brazil Hit by Banking Trojan Spread via WhatsApp Worm and RelayNFC NFC Relay Fraud – The Hacker News” »
The FBI has recently issued a public service announcement that warns that since January 2025 there have been more than 5,100 complaints of account takeover fraud, and total reported losses in excess of US $262 million. Read more in my article on the Fortra blog. – Read More – Graham Cluley
A fresh wave of spear-phishing linked to the Russia-based Star Blizzard group has been detected by Sekoia – Read More –
A critical vulnerability in Yearn Finance’s yETH pool allowed an attacker to steal around $9m – Read More –
A new cyber defense service has prevented almost one billion early-stage cyber-attacks in the past year, British Security Minister claims – Read More –
The UK government’s proposed ransomware payment ban for public sector and critical infrastructure will come with national security exemptions – Read More –
Remember when phishing emails were easy to spot? Bad grammar, weird formatting, and requests from a “Prince” in a distant country? Those days are over. Today, a 16-year-old with zero coding skills and a $200 allowance can launch a campaign that rivals state-sponsored hackers. They don’t need to be smart; they just need to subscribe … Read More “Discover the AI Tools Fueling the Next Cybercrime Wave — Watch the Webinar – The Hacker News” »
Smarter SOC performance with faster triage, proactive defence, and a unified stack powered by instant alert context from ANY.RUN to cut MTTD and MTTR. – Read More – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
A new WEF report reveals that AI-powered threats like disinformation are among executives’ biggest concerns – Read More –
Koi Security exposes ShadyPanda, a group that used trusted Chrome/Edge extensions to infect 4.3 million users over 7 years for deep surveillance and corporate espionage. – Read More – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
Most people know the story of Paul Bunyan. A giant lumberjack, a trusted axe, and a challenge from a machine that promised to outpace him. Paul doubled down on his old way of working, swung harder, and still lost by a quarter inch. His mistake was not losing the contest. His mistake was assuming that … Read More “Chopping AI Down to Size: Turning Disruptive Technology into a Strategic Advantage – The Hacker News” »
The Pall Mall Process begins outreach to define guidelines for private commercial intrusion industry – Read More –
Cybersecurity researchers have discovered a malicious Rust package that’s capable of targeting Windows, macOS, and Linux systems, and features malicious functionality to stealthily execute on developer machines by masquerading as an Ethereum Virtual Machine (EVM) unit helper tool. The Rust crate, named “evm-units,” was uploaded to crates.io in mid-April 2025 by a user named “ablerust,” … Read More “Malicious Rust Crate Delivers OS-Specific Malware to Web3 Developer Systems – The Hacker News” »
Three critical security flaws have been disclosed in an open-source utility called Picklescan that could allow malicious actors to execute arbitrary code by loading untrusted PyTorch models, effectively bypassing the tool’s protections. Picklescan, developed and maintained by Matthieu Maitre (@mmaitre314), is a security scanner that’s designed to parse Python pickle files and detect suspicious – … Read More “Picklescan Bugs Allow Malicious PyTorch Models to Evade Scans and Execute Code – The Hacker News” »
Trends toward a digital-first enterprise have already entered watershed data privacy and security in 2026. New regulation, technology and… The post Looking Ahead: 2026 Privacy & Security Trends appeared first on JISA Softech Pvt Ltd. – Read More – JISA Softech Pvt Ltd
In episode 79 of The AI Fix, Gemini 3 roasts the competition, scares Nvidia, and can’t remember what year it is. Meanwhile, Graham investigates a fight between a fridge and robot, and Mark discovers that poetry could be a universal jailbreak for LLMs. Also in this episode, our hosts ponder whether Mark Zuckerberg’s underground bunker … Read More “The AI Fix #79: Gemini 3, poetry jailbreaks, and do we even need safe robots? – Graham Cluley” »
Asahi Group Holdings, the makers of the popular Japanese beer Asahi Super Dry, has confirmed that the ransomware attack that disrupted its operations in late September also saw a significant data breach that affects more than 1.5 million customers and approximately 275,000 current and former employees and their families. Read more in my article on … Read More “Asahi cyber attack spirals into massive data breach impacting almost 2 million people – Graham Cluley” »
When news broke approximately a year ago that Chinese hackers had systemically penetrated at least nine major U.S. communications networks, the level of alarm from policymakers was clear. At a hearing held Tuesday by the Senate Committee on Commerce, experts offered differing assessments of the threat. While intelligence officials have characterized the Salt Typhoon operation’s … Read More “The Congressional remedy for Salt Typhoon? More information sharing with industry – CyberScoop” »
Everest ransomware group claims it breached ASUS, stealing over 1TB of data including camera source code. ASUS has been given 21 hours to respond via Qtox. – Read More – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
A House Republican introduced legislation Tuesday aimed at deterring cyberattacks against the United States at a time when the Trump administration is prioritizing the punishment of malicious hackers. Rep. August Pfluger, R-Texas, revived legislation he first sponsored in 2022, the Cyber Deterrence and Response Act. The legislation would direct the executive branch to formally designate … Read More “Legislation would designate ‘critical cyber threat actors,’ direct sanctions against them – CyberScoop” »
The University of Pennsylvania joined the steadily growing number of victim organizations impacted by the widespread data theft and extortion campaign involving a notorious ransomware group’s exploitation of a zero-day vulnerability and other defects in Oracle E-Business Suite earlier this year. The university filed a data breach notification in Maine Monday, confirming nearly 1,500 Maine … Read More “University of Pennsylvania joins growing pool of Oracle customers impacted by Clop attacks – CyberScoop” »
India’s Department of Telecommunications (DoT) has issued directions to app-based communication service providers to ensure that the platforms cannot be used without an active SIM card linked to the user’s mobile number. To that end, messaging apps like WhatsApp, Telegram, Snapchat, Arattai, Sharechat, Josh, JioChat, and Signal that use an Indian mobile number for uniquely … Read More “India Orders Messaging Apps to Work Only With Active SIM Cards to Prevent Fraud and Misuse – The Hacker News” »
North Korean hackers escalated the “Contagious Interview” attack, flooding the npm registry with over 200 malicious packages to install OtterCookie malware. This attack targets blockchain and Web3 developers through fake job interviews and coding tests. – Read More – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
3 critical zero-day flaws in PickleScan, affecting Python and PyTorch, allowed undetected attacks – Read More –
Cybersecurity researchers have disclosed details of an npm package that attempts to influence artificial intelligence (AI)-driven security scanners. The package in question is eslint-plugin-unicorn-ts-2, which masquerades as a TypeScript extension of the popular ESLint plugin. It was uploaded to the registry by a user named “hamburgerisland” in February 2024. The package has been downloaded – … Read More “Malicious npm Package Uses Hidden Prompt and Script to Evade AI Security Tools – The Hacker News” »
The supply chain campaign known as GlassWorm has once again reared its head, infiltrating both Microsoft Visual Studio Marketplace and Open VSX with 24 extensions impersonating popular developer tools and frameworks like Flutter, React, Tailwind, Vim, and Vue. GlassWorm was first documented in October 2025, detailing its use of the Solana blockchain for command-and-control (C2) … Read More “GlassWorm Returns with 24 Malicious Extensions Impersonating Popular Developer Tools – The Hacker News” »
A joint investigation led by Mauro Eldritch, founder of BCA LTD, conducted together with threat-intel initiative NorthScan and ANY.RUN, a solution for interactive malware analysis and threat intelligence, has uncovered one of North Korea’s most persistent infiltration schemes: a network of remote IT workers tied to Lazarus Group’s Famous Chollima division. For the first time, … Read More “Researchers Capture Lazarus APT’s Remote-Worker Scheme Live on Camera – The Hacker News” »
Infected 4.3 million Chrome and Edge users via extensions; ShadyPanda exploited browser marketplaces – Read More –
Israeli entities spanning academia, engineering, local government, manufacturing, technology, transportation, and utilities sectors have emerged as the target of a new set of attacks undertaken by Iranian nation-state actors that have delivered a previously undocumented backdoor called MuddyViper. The activity has been attributed by ESET to a hacking group known as MuddyWater (aka Mango – … Read More “Iran-Linked Hackers Hits Israeli Sectors with New MuddyViper Backdoor in Targeted Attacks – The Hacker News” »
Bethesda, USA / Maryland, 2nd December 2025, CyberNewsWire – Read More – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
Proxyearth is a new site that shows names, Aadhaar numbers, and live locations of users in India using only mobile numbers, raising serious privacy and security concerns. – Read More – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
Baltimore, MD, 2nd December 2025, CyberNewsWire – Read More – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
Vulnerability management is a core component of every cybersecurity strategy. However, businesses often use thousands of software without realising it (when was the last time you checked?), and keeping track of all the vulnerability alerts, notifications, and updates can be a burden on resources and often leads to missed vulnerabilities. Taking into account that nearly … Read More “SecAlerts Cuts Through the Noise with a Smarter, Faster Way to Track Vulnerabilities – The Hacker News” »
Google said it found indications that two newly identified vulnerabilities affecting Android “may be under limited, targeted exploitation” – Read More –
The UK Information Commissioner’s Office has launched an investigation into the mobile gaming sector – Read More –
![5 Threats That Reshaped Web Security This Year [2025] – The Hacker News](https://attackfeed.com/wp-content/uploads/2025/12/reflectiz-rUVNK0.jpg "5 Threats That Reshaped Web Security This Year [2025]")
