Recent research indicates a potential slowdown in the use of Intellexa’s Predator spyware in 2025, but increased domain obfuscation may mask its activity. Operations linked to Intellexa have been identified in various countries, with efforts by authorities to limit its reach through sanctions. #Intellexa #PredatorSpyware…
Category: Cyber Security News
The UK has implemented sanctions against Russia’s military intelligence agency, the GRU, and 11 of its officers, following a public inquiry linking them to cyber operations and a nerve agent attack. These measures aim to dismantle Russian hybrid warfare tactics and hold individuals accountable for actions threatening UK security. #GRU #Novichok…
Freedom Mobile has disclosed a recent data breach caused by credential compromise, exposing personal information of a limited number of customers. The company promptly responded with security measures, but the incident raises concerns about repeated cybersecurity vulnerabilities. #FreedomMobile #CredentialTheft…
Several countries’ cybersecurity agencies have released joint guidelines for the secure integration of AI in operational technology (OT) environments within critical infrastructure. The document emphasizes understanding AI risks, proper governance, use case evaluation, and oversight practices to enhance safety and security. #OperationalTechnology #CriticalInfrastructure #AIIntegration #CybersecurityGuidelines…
Russian-linked Star Blizzard APT targeted Reporters Without Borders using sophisticated phishing campaigns involving compromised ProtonMail accounts. The group also attempted to compromise ProtonMail accounts with a custom phishing kit capable of relaying two-factor authentication. #StarBlizzard #UNC4057…
Hundreds of Porsche vehicles in Russia have unexpectedly stopped functioning due to issues with the Vehicle Tracking System (VTS), raising concerns over connected-car security vulnerabilities. Authorities and Porsche are investigating whether a cyberattack or technical glitch caused these widespread failures. #VehicleTrackingSystem #Cyberattack…
India initially mandated the pre-installation of the Sanchar Saathi app on new smartphones to enhance cybersecurity, but reversed the order due to privacy concerns and public backlash. The controversy highlighted tensions between government security measures and citizens’ privacy rights in India’s digital infrastructure efforts. #SancharSaathi #IndiaCybersecurity #PrivacyConcerns…
The UK’s ICO campaign in 2025 significantly improved cookie consent compliance across top websites, giving millions more control over online tracking. Enforcement actions led to widespread industry changes, with only 21 sites remaining non-compliant, underscoring the importance of privacy regulation. #UKICO #CookieConsent…
The ClickFix attack is a highly deceptive social engineering campaign that tricks users into downloading fake software and executing malicious commands, leading to potential full system control. Recent studies show a dramatic increase in its use, with sophisticated cloning and command-line tactics employed by state-backed hacking groups to target various platforms….
Cloudflare reports the mitigation of the largest DDoS attack ever recorded at 29.7 Tbps, originating from the AISURU botnet. This attack highlights the increasing size, sophistication, and targeting of DDoS threats, especially affecting industries such as telecommunications, gaming, and AI. #AISURU #DDoSattacks…
This article explores a rare glimpse into the operations of North Korean threat actors involved in a major cryptocurrency heist, revealing their use of sophisticated malware infrastructure. An interactive forensic dashboard allows users to explore the infected machine and understand the tactics, techniques, and tools used by these APT actors. #LazarusGroup #NorthKoreanCyberThreats
![Cybersecurity News | Daily Recap [03 Dec 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [03 Dec 2025]")
Daily Recap, this edition highlights regulatory actions shaping cybersecurity—from Temu being sued for customer data misuse and the EU’s online marketplace data-processing ruling to the FTC’s Illuminate order and India’s SIM-mandate as a cyber-safety push. Incidents and threats include an Oracle breach disclosure, the Shai-Hulud 2.0 NPM campaign exposing up to 400,000 developer secrets, persistent browser extensions backdoors, and Iran-linked phishing against critical infrastructure, alongside AI safety initiatives and major security funding.
#Temu #Illuminate #ShaiHulud #Oracle #Iran #Israel #Egypt #SIMMandate #EUSingaporePact #AustraliaAIInstitute #IPCamera
Russia’s telecommunications regulator has blocked the Roblox platform for spreading extremist, terrorist, and LGBT propaganda. This follows previous bans on messaging apps and platforms accused of violating anti-terrorism and anti-extremism laws. #Roskomnadzor #Roblox #WhatsApp #Viber #Telegram
Freedom Mobile has experienced a data breach caused by attackers exploiting a subcontractor’s account, exposing personal customer information. The company assures no network or operational disruptions and advises affected customers to remain vigilant for suspicious communications. #FreedomMobile #DataBreach
Leroy Merlin, a major home improvement retailer, has experienced a data breach affecting only French customers, exposing personal details such as names, contact info, and loyalty data. The company has assured that no banking or online login information was compromised and has taken measures to contain the incident. #LeroyMerlin #DataBreach