Swiss startup Saporo secures €7 million in funding to expand its identity security platform, which helps organizations identify and eliminate attack paths in their hybrid environments. The company’s graph-based approach enhances proactive breach prevention and reduces attack surfaces effectively. #Saporo #IdentitySecurity #AttackPaths…
Category: Cyber Security News
A threat actor known as ShadyPanda has been deploying malicious Chrome and Edge extensions that track users and execute remote code, affecting millions of downloads. These extensions have evolved from legitimate tools into backdoors capable of surveillance, data exfiltration, and potentially more malicious activities. #ShadyPanda #InfinityV+ #CleanMaster #nuggetsno15 #Zhang…
Effective communication is crucial in cybersecurity, yet professionals often find themselves having different conversations without realizing it. Recognizing and aligning these conversations can significantly improve understanding and collaboration in security efforts. #AI #APISecurity…
Qualcomm has identified and issued patches for multiple critical vulnerabilities affecting its chipset ecosystem, including a severe flaw in the secure boot process. These vulnerabilities impact a broad range of Qualcomm platforms and components, emphasizing the importance of prompt remediation. #CVE-2025-47372 #QualcommSecurity…
The U.S. FTC has taken enforcement action against Illuminate Education after a data breach exposed over 10 million students’ personal information. The company failed to implement adequate security measures despite warnings, leading to regulatory penalties and new security requirements. #IlluminateEducation #DataBreach #FTCEnforcement #StudentDataProtection…
![Cybersecurity News | Daily Recap [01 Dec 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [01 Dec 2025]")
Daily Recap, today’s Cybersecurity News spans Android MaaS campaigns like Albiriox targeting 400+ apps, Tomiris APT’s switch to public-service implants and covert C2, Bloody Wolf expansion into Central Asia with NetSupport RAT, and a North Korea linked npm package flood delivering OtterCookie. It also covers a Coupang data breach affecting ~33.7 million users, ScadaBR vulnerability warnings, Airbus A320 retrofit, Cryptomixer takedown, WiFi attack sentencing, Linux Kernel 6.18 release removing bcachefs, India’s SIM-binding rule, and Agentic AI browser risks in a weekly threat roundup.
#Albiriox #Tomiris #BloodyWolf #OtterCookie #Coupang #ScadaBR #Airbus #Cryptomixer #WiFiAttacks #LinuxKernel618 #SIMBinding #AgenticAI
New vulnerabilities have been identified in Devolutions Server, including a critical SQL injection flaw that could lead to data extraction. Organizations using affected versions should urgently update to prevent data breaches and unauthorized access. #DevolutionsServer #SQLInjection #VulnerabilityAlert…
ShadyPanda has conducted a seven-year campaign using browser extensions that evolved from legitimate tools to sophisticated spyware, collecting vast amounts of user data. The campaign exploited trusted extension updates and marketplace policies, highlighting the risks of post-approval activity monitoring. #ShadyPanda #BrowserExtensions #GoogleChrome #MicrosoftEdge…
India’s telecommunications ministry has mandated pre-installation of the Sanchar Saathi app on all new mobile devices to enhance telecom security and combat fraud. The app cannot be deleted and helps users report threats like illegal calls and stolen devices, contributing to national security efforts. #SancharSaathi #IndiaTelecomSecurity…
Law enforcement agencies in Switzerland and Germany have dismantled Cryptomixer, a major Bitcoin mixing service used by cybercriminals to launder illegal funds. The takedown disrupted a platform that handled over €1.3 billion since 2016 and provided anonymity for ransomware gangs and dark web vendors. #Cryptomixer #BitcoinMixing #Europol #Cybercrime…
A North Korean hacking group, Lazarus, is suspected of stealing $30 million from South Korea’s Upbit cryptocurrency exchange. This attack mirrors a previous Lazarus operation in 2019, highlighting ongoing threats linked to North Korean cyber espionage and financial thefts. #Lazarus #Upbit #NorthKorea #cryptoinvestigation…
A powerful threat actor known as APT36 has advanced its cyberattack techniques, now focusing on Linux-based systems used by the Indian government. The campaign involves sophisticated malware that targets Bharat Operating System Solutions (BOSS) Linux environments to maintain covert access and espionage capabilities. #APT36 #BOSSLinux #IndianGovernment…
Microsoft is addressing a bug in Outlook that prevents users from opening Excel email attachments with non-ASCII characters. A fix has been deployed, but some users still need to update their systems to resolve the issue. #ExcelAttachmentBug #OutlookEncodingError
The open-source SmartTube YouTube client for Android TV was compromised when attacker access led to malware being injected into a version of the app. Users are advised to avoid the compromised versions, update to the new app once released, and take security precautions. #SmartTube #YuriyYuliskov #AndroidTV #malware #appsigning
The Glassworm malware campaign has re-emerged on extension marketplaces for VS Code, infecting new packages with malicious code designed to steal sensitive information and maintain stealthy remote access. Despite efforts to contain it, the malware returns with new techniques, including Rust-based implants, and manipulates search results to appear trustworthy. #Glassworm #OpenVSX #VisualStudioMarketplace