Penn and Phoenix Universities Disclose Data Breach After Oracle Hack

This article discusses a widespread cyberattack targeting Oracle’s E-Business Suite, affecting multiple universities including the University of Pennsylvania and the University of Phoenix. The breach exposed sensitive personal data of thousands and highlights ongoing threats from the Cl0p ransomware group and other threat actors. #OracleEBS #Cl0p #FIN11 #UniversityOfPennsylvania #UniversityOfPhoenix…

Read More
IP Camera Hacking Scandal: South Korea Targets Exploitative Video Network

The National Police Agency has arrested four suspects involved in a large-scale IP camera hacking scheme that led to the theft and illegal sale of sensitive footage affecting over 120,000 devices. Authorities are investigating website operators, purchasers, and viewers, while providing victim protection and working to shut down the illegal platform….

Read More
US Offers M for Iranian Cyber Operatives Behind Election Interference and Critical Infrastructure Attacks

Iranian cyber operatives linked to the Revolutionary Guard are conducting sophisticated campaigns targeting elections, critical infrastructure, and international events using AI and cover personas. The U.S. State Department has issued a reward of up to $10 million for information on their location, highlighting their impact on sectors across the US, Europe,…

Read More
EU and Singapore Deepen Tech Ties, Prioritize AI Safety and Cybersecurity

The European Union and Singapore are strengthening their digital collaboration through the Digital Partnership Council, focusing on AI, cybersecurity, digital trust, and technological innovation. They emphasize safe AI development, digital identity interoperability, and securing cross-border data flows to bolster global digital trade. #EuropeanUnion #Singapore #DigitalTrust #AI #Cybersecurity #Semiconductors #DigitalTrade…

Read More
Cybersecurity News | Daily Recap [02 Dec 2025]

Daily Recap, researchers warn of a third GlassWorm wave arriving through malicious VS Code packages and a ShadyPanda browser extension campaign, with the Contagious Interview expansion introducing OtterCookie to the attack surface. The roundup also highlights North Korea’s Lazarus operations, high-profile breaches at Coupang and Brsk, the BOSS/APT36 Linux espionage pivot, and enforcement actions such as Cryptomixer takedowns and Sanchar Saathi regulatory measures. #GlassWorm #ShadyPanda #OtterCookie #Lazarus #Coupang #Brsk #APT36 #ShaiHulud #Cryptomixer #SancharSaathi #IlluminateEducation #EvilTwin

Read More
Shai-Hulud 2.0 NPM malware attack exposed up to 400,000 dev secrets

The recent Shai-Hulud attacks exposed around 400,000 secrets through infected NPM packages and compromised GitHub repositories, posing significant supply chain risks. Researchers warn that although many secrets may no longer be valid, over 60% of leaked NPM tokens are still active, increasing the threat of future attacks. #ShaiHulud #NPM #GitHub #SupplyChainThreats

Read More
FTC settlement requires Illuminate to delete unnecessary student data

The FTC has proposed requiring Illuminate Education to delete unnecessary student data and enhance security after a 2021 breach exposed information for over 10 million students. The incident revealed significant security failures, including poor access controls and delayed breach notification, leading to financial settlements with multiple states. #IlluminateEducation #StudentDataBreach

Read More
India Orders Messaging Apps to Work Only With Active SIM Cards to Prevent Fraud and Misuse

India’s Department of Telecommunications has mandated that app-based communication services must be linked to an active SIM card, requiring periodic re-authentication to prevent misuse and enhance cybersecurity. This move aims to combat scams, account hijacking, and shadow operations by enforcing stricter verification and session controls. #TelecomCyberSecurityRules #SIMBinding…

Read More
Iran-linked hackers target Israeli, Egyptian critical infrastructure through phishing campaign

MuddyWater, an Iran-linked threat actor, is targeting critical infrastructure in Egypt and Israel with sophisticated spyware disguised as the Snake game. The campaign involves spearphishing, customized malware, and credential theft tools, demonstrating increased technical evolution and evasion techniques. #MuddyWater #SnakeGameSpyware…

Read More