Attack Surface Management (ASM) tools often focus on asset discovery rather than actual risk reduction, leading to busy dashboards but unclear improvements in security. Effective ROI in ASM is better measured by outcome metrics like faster asset ownership, reduced risky endpoints, and quicker decommissioning, which show real risk mitigation. #TopherLyons #SprocketSecurity…
Category: Cyber Security News
Transparent Tribe (APT36) is actively launching targeted cyber espionage campaigns against Indian organizations using sophisticated remote access trojans (RATs) and deception techniques. Their campaigns include spear-phishing, environment-aware persistence methods, and evolving malware like CapraRAT and Crimson RAT. #TransparentTribe #APT36…
Finnish authorities detained members of the ship Fitburg suspected of damaging an undersea telecommunications cable in the Baltic Sea. The investigation involves advanced underwater equipment and aims to determine the cause of the cable fault, with a focus on potential criminal activity related to the ship’s cargo and transit route. #Fitburg…
Recent attacks exploit the React2Shell vulnerability (CVE-2025-55182) affecting Next.js servers, enabling remote code execution and botnet infections. The RondoDox botnet has actively targeted these vulnerable systems, deploying malicious payloads and establishing persistence across various architectures. #React2Shell #RondoDox…
Two US cybersecurity professionals have pleaded guilty to conspiracy charges related to their involvement in BlackCat/Alphv ransomware attacks, which targeted over 1,000 organizations and resulted in millions of dollars in ransom payments. The case highlights ongoing legal actions against ransomware affiliates and the broader threat posed by the BlackCat group. #BlackCat…
A cyberattack on La Poste and La Banque Postale caused significant service disruptions, affecting their websites and mobile banking platforms. The incident is linked to the pro-Russian hacker group NoName057(16), raising concerns about the security of France’s critical infrastructure. #NoName057(16) #LaPosteCyberattack…
This week’s cybersecurity roundup highlights recent legal updates, insider threats, and global ransomware campaigns, emphasizing the evolving threat landscape in 2025. Key topics include China’s new cybersecurity law, TikTok’s disinformation issues in Poland, and GDPR enforcement in France. #ChinaCybersecurityLaw #BlackCatRansomware #TikTokDisinformation #GDPRFrance #CL0PRansomware…
Cybersecurity experts have uncovered a phishing campaign exploiting Google Cloud’s Application Integration service to send convincing fake emails that bypass traditional security filters. The attack uses trusted Google domains and structures to deceive recipients across multiple industries globally. #GoogleCloud #PhishingCampaign…
A threat actor is exploiting multiple vulnerabilities in Adobe ColdFusion through a coordinated campaign, primarily during Christmas 2025. The activity involves sophisticated attack techniques and originates mainly from Japanese infrastructure, affecting systems nationwide. #ColdFusion #JNDIInjection…
A major data breach at Covenant Health impacted over 478,000 individuals, exposing sensitive personal and health information. The breach was linked to the Qilin ransomware group, which claimed to have stolen and publicly released over 1.3 million files. #QilinRansomware #CovenantHealth #DataBreach…
China’s new cybersecurity law, effective from January 1, 2026, significantly enhances incident reporting requirements, penalties, and extraterritorial jurisdiction. The law emphasizes rapid response, accountability, and AI governance, impacting both domestic and global organizations operating in or with China. #ChinaCybersecurityLaw #IncidentReporting…
![Cybersecurity News | Daily Recap [01 Jan 2026]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [01 Jan 2026]")
Daily Recap, The Shai-Hulud supply-chain attack on a Trust Wallet Chrome extension drained $8.5 million and spawned worm variants testing payloads on npm, while attackers drained $3.9 million from Unleash Protocol after hijacking a multisig wallet. Other major items include the RondoDox botnet exploiting the React2Shell flaw to breach IoT devices and Next.js deployments, the DarkSpectre campaign affecting about 8.8 million users, IBM’s API Connect vulnerability enabling remote authentication bypass, HoneyMyte’s rootkit infiltrating Asian governments, Finland’s seizure of a ship suspected of damaging a subsea cable in the Baltic Sea, and NYC banning Flipper Zero and Raspberry Pi devices at the mayoral inauguration. #ShaiHulud #DarkSpectre
The latest wave of the GlassWorm campaign targets macOS developers with malicious VSCode extensions, aiming to steal credentials and cryptocurrency wallet data. Despite increased defenses, the malware has re-emerged, now using advanced encryption and targeting hardware wallets. #GlassWorm #VSCodeExtensions
2025 was marked by significant cybersecurity incidents including high-profile data breaches, advanced cyberattacks, and increasingly sophisticated threat actor activities. Notable events include the PornHub data breach, the ByBit crypto heist, and the rise of AI-powered attacks. #PornHubDataBreach #ByBitCryptoHeist #AIpromptInjections
Daily Recap, critical patch notices hit IBM API Connect with an authentication bypass that could expose protected services, and a critical SmarterMail flaw (CVE-2025-52691) enabling unauthenticated RCE on vulnerable servers, with CISA ordering patches for the MongoBleed flaw following observed intrusions that affected Oracle EBS deployments including Korean Air and the University of Phoenix. The European Space Agency confirmed a breach of external servers, Disney agreed to pay $10 million to settle child data privacy claims related to YouTube content, two ALPHV/BlackCat ransomware operators pleaded guilty, and new info-stealers and malvertising campaigns—ErrTraffic, Lumma, Vidar, Cerberus, and Zoom Stealer—illustrate ongoing threat activity, alongside Intellexa Predator sanctions being reversed. #IBMAPIConnect #CVE2025_52691 #MongoBleed #OracleEBS #KoreanAir #UniversityofPhoenix #EuropeanSpaceAgency #Disney #ALPHV #BlackCat #ErrTraffic #Lumma #Vidar #Cerberus #ZoomStealer #Intellexa #Predator