The European Union’s top court has declared online marketplaces as data controllers under GDPR, requiring them to obtain consent and verify personal data in advertisements. This ruling significantly impacts how marketplace sites operate, raise concerns about compliance, free expression, and privacy. #GDPR #DataControllers…
Category: Cyber Security News
Zafran Security has raised $60 million in Series C funding to enhance its AI-native exposure management platform. The company’s innovative approach uses autonomous agents to identify and remediate vulnerabilities proactively, helping organizations stay ahead of threat actors. #ZafranSecurity #AIexposuremanagement…
Australia is establishing the AI Safety Institute with a $29.9 million fund to oversee AI risks and ensure compliance under existing legal frameworks. The institute emphasizes addressing both upstream AI risks and downstream harms through international collaboration and regulatory support. #AIrisks #AIsafety #Australia…
CISA has issued a warning that two high-severity Android zero-day vulnerabilities, CVE-2025-48572 and CVE-2025-48633, are currently being actively exploited. These vulnerabilities impact the Android framework and pose significant risks to organizations and users alike. #AndroidZeroDay #CISAAlert…
![Full Disclosure: [REVIVE-SA-2025-005] Revive Adserver Vulnerability](https://seclists.org/images/fulldisclosure-logo.png "Full Disclosure: [REVIVE-SA-2025-005] Revive Adserver Vulnerability"){kind=logo}
Revive Adserver has addressed a vulnerability related to incomplete disallowance of certain username inputs that could enable impersonation attacks. Users are advised to update to version 6.0.4 or later to mitigate this medium-risk security issue. #ReviveAdserver #CVE-2025-55129…
Google revealed two actively exploited zero-day vulnerabilities affecting Android, part of a broader security update patching 107 issues this month. These vulnerabilities pose significant risks such as privilege escalation and information access, highlighting ongoing challenges in Android security management. #CVE-2025-48633 #CVE-2025-48572…
This article discusses a sophisticated phishing campaign impersonating well-known brands through Calendly links to steal Google Workspace and Facebook credentials. The campaign employs AI-generated content, targeted malvertising, and anti-analysis tactics, making it highly effective for cybercriminal activities such as credential theft and reselling compromised accounts. #CalendlyPhishing #AiTM #GoogleWorkspace #FacebookCredentials
Google’s December 2025 Android security bulletin fixes 107 vulnerabilities, including two actively exploited flaws, impacting Android versions 13-16. The updates address critical security issues across Android Framework, Kernel, and third-party components, with some fixes also available via Play Store updates for older devices. #CVE-2025-48633 #CVE-2025-48572
Security researchers uncovered North Korean IT recruiters from the Lazarus group, who use AI and deep fakes to lure developers into renting their identities for espionage and revenue. The operation involves recruiting engineers to act as fronts in remote jobs, with the threat actors conducting sophisticated cyber tactics to hide their location. #FamousChollima #LazarusGroup
Cybercrime has shifted to a subscription-based model, offering scalable and versatile hacking services like phishing-as-a-service, social engineering bots, and advanced malware rentals. This evolution makes cyberattacks more accessible to inexperienced criminals, raising the need for proactive cybersecurity measures. #SpamGPT #Varonis #AtroposiaRAT
Microsoft is addressing a service outage affecting Defender XDR portal functionalities caused by high CPU utilization due to increased traffic. The issue has impacted access to features like threat-hunting alerts and device visibility, but recovery efforts are ongoing. #MicrosoftDefender #XDRPortal #ServiceOutage
Cybersecurity researchers have uncovered a malicious npm package called eslint-plugin-unicorn-ts-2 that aims to interfere with AI-driven security tools and exfiltrate sensitive information. This development highlights the evolving tactics of threat actors who are now targeting AI analysis and leveraging underground markets for malicious language models. #eslint-plugin-unicorn-ts-2 #AI-manipulation…
The GlassWorm supply chain campaign has re-emerged, targeting Microsoft Visual Studio Marketplace and Open VSX with 24 malicious extensions impersonating popular developer tools. The attackers use stolen credentials and Rust-based implants to spread malware, compromise repositories, and drain cryptocurrency assets. #GlassWorm #Solana #VisualStudioMarketplace #OpenVSX…
This investigation reveals North Korea’s Lazarus Group’s use of remote IT workers trained through fake job schemes to infiltrate organizations. The operatives worked in controlled sandbox environments, focusing on identity theft and remote access rather than malware. #LazarusGroup #FamousChollima…
Apple decides not to preload the Indian “cyber safety” app on new devices, citing security concerns, while the Indian government insists the app is optional. The move highlights ongoing tensions between tech companies and government regulations aimed at enhancing digital security and control. #SancharSaathi #Apple #India #DigitalSurveillance…