Aflac has notified millions of individuals about a major data breach involving personal information, including Social Security and health data, stolen by a sophisticated cybercrime group in June 2025. The incident is believed to be part of a broader campaign targeting the insurance industry, potentially linked to the Scattered Spider hacking…
Category: Cyber Security News
This article highlights the increasing risks posed by adversarial AI during continuous global commerce, especially during high-volume seasons like the holidays. It emphasizes the importance of integrating intelligent trust, dynamic compliance, and autonomous resilience into cybersecurity strategies to stay ahead of relentless threats. #AdversarialAI #GuardianAgents…
A new, more resilient strain of the Shai-Hulud worm, dubbed “The Golden Path,” has been detected by security researchers, indicating ongoing threats in the npm ecosystem. The malware now features cross-platform propagation and improved exfiltration methods, emphasizing the need for stricter security measures. #ShaiHulud #npmSupplyChain…
Georgia’s former security chief, Grigol Liluashvili, has been arrested for corruption, bribery, and abuse of power related to energy projects, illegal call centers, and kindergarten procurement. The investigation reveals widespread abuse spanning multiple years, involving bribes and protection schemes linked to criminal operations and opposition media influence. #Liluashvili #GeorgiaCorruption #CallCenters #EnergyBribery…
Recent AI security incidents in 2024 and 2025 reveal that traditional security frameworks are insufficient to protect against emerging AI-specific threats like prompt injection and model poisoning. Organizations must adopt new, proactive security measures tailored to AI systems since existing standards do not adequately address these vulnerabilities. #Ultralytics #ChatGPTVulnerabilities…
A critical vulnerability in MongoDB, CVE-2025-14847, is actively being exploited, affecting over 87,000 instances worldwide. The flaw arises from a zlib compression issue that can leak sensitive data without requiring user authentication. #MongoBleed #CVE202514847…
A hacker named “Lovely” claims to have breached Condé Nast, leaking over 2.3 million subscriber records and threatening further releases of up to 40 million records. The leak has been validated by researchers, exposing personal details of subscribers across multiple Condé Nast properties, raising concerns about security vulnerabilities and data privacy. #CondéNastBreach #WIREDDataLeak
A critical vulnerability called MongoBleed (CVE-2025-14847) affects numerous MongoDB versions and is actively exploited, exposing over 80,000 servers worldwide. Attackers can remotely extract sensitive data such as credentials and API keys without requiring authentication, prompting urgent patching and detection efforts. #MongoBleed #CVE-2025-14847
![Cybersecurity News | Daily Recap [27 Dec 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [27 Dec 2025]")
Daily Recap, In crypto and scams, Trust Wallet’s browser extension was compromised to inject malicious code, prompting a $7 million theft, while fake GrubHub emails urged recipients to send cryptocurrency for a tenfold return. In nation-state and security updates, the China-linked Panda group deployed DNS poisoning to install the MgBot backdoor, La Poste faced a claimed attack by pro-Russian actors, Net-SNMP’s CVE-2025-68615 requires urgent patching, ParrotOS 7 debuts with KDE Plasma 6, and authorities in Georgia arrested a former spy chief over scam centers. #TrustWallet #GrubHub #Panda #MgBot #LaPoste #NetSNMP #CVE-2025-68615 #ParrotOS7 #Georgia
Ubisoft’s Rainbow Six Siege was hacked, allowing attackers to manipulate player bans, distribute in-game currency, and unlock cosmetic items. The incident may be part of a larger breach involving MongoDB vulnerabilities, but official details are still pending. #RainbowSixSiege #MongoBleed
A critical security flaw in MongoDB (CVE-2025-14847) allows unauthenticated attackers to read uninitialized heap memory through mismatched length fields in Zlib headers. Users are urged to update to secure versions or disable Zlib compression to mitigate the risk. #MongoDB #CVE-2025-14847…
A major data breach exposed millions of subscriber records from WIRED and threatens a larger release involving Condé Nast publications. This incident underscores vulnerabilities like IDOR exploitation and broken access control that facilitated the leak. #IDORExploit #CondéNastBreach
Daily Recap, critical LangChain Core deserialization vulnerability can expose secrets via serialization injection, risking credential and token leakage across affected deployments. It also highlights ongoing security events—from FortiOS SSL VPN 2FA bypass and active Docker attacks to the Trust Wallet extension hack and Webrat distribution—along with AI security research by NIST and MITRE, the LastPass breach link, and Uzbekistan’s plate surveillance concerns. #LangChain #FortiOS #Docker #TrustWallet #Webrat #LastPass #Uzbekistan #NIST #MITRE
Grubhub users received fraudulent emails promising a tenfold bitcoin payout as part of a fake ‘Holiday Crypto Promotion’. The company confirmed it has identified and contained the issue, which may be linked to a DNS takeover attack. #CryptoScam #PhishingEmails
Trust Wallet’s Chrome extension was compromised on December 24, resulting in the theft of over $7 million in cryptocurrency through a supply chain attack and malicious code. Users are advised to update to version 2.69 and remain vigilant against related phishing scams. #TrustWallet #ChromeExtension #SupplyChainAttack #PhishingScams