Airbus has nearly completed a global retrofit of its A320 fleet following a software vulnerability caused by solar radiation, which led to the largest emergency recall in the manufacturer’s history. This incident, triggered by a JetBlue mid-air altitude drop, prompted worldwide groundings and operational disruptions, but most affected aircraft are now…
Category: Cyber Security News
Law enforcement agencies from Switzerland and Germany successfully shut down the Cryptomixer cryptocurrency mixing service involved in laundering stolen funds. This operation highlights the ongoing efforts to combat crypto-based money laundering linked to various cybercrimes. #Cryptomixer #OperationOlympia
Tomiris, a threat actor targeting government and diplomatic entities in Russia and Central Asia, has adopted new tactics utilizing public services as command-and-control servers to evade detection. The campaign involves sophisticated malware, including implants and reverse shells, with an emphasis on stealth, persistence, and multi-language capabilities. #Tomiris #Kaspersky #SUNSHUTTLE #YoroTrooper #AdaptixC2…
A new Android malware named Albiriox is promoted through malware-as-a-service to conduct device fraud and remote control activities, targeting banking and financial apps. Researchers also identified RadzaRat, a remote access trojan, and other malicious campaigns exploiting fake app stores and social engineering. #Albiriox #RadzaRat #BTMOB #GoldenCrypt…
An Australian man was sentenced to over seven years in prison for launching Wi-Fi attacks at airports and on flights using a Wi-Fi Pineapple device. The attack involved creating rogue access points to steal credentials and monitor personal data, highlighting threats against wireless network security. #WiFiPineapple #EvilTwinAttacks…
India’s Department of Telecommunications has implemented new rules requiring messaging platforms to enforce SIM-binding to enhance cybersecurity and prevent misuse of mobile numbers. These measures include continuous verification tied to active SIM cards, which aim to reduce cyber fraud and improve identity traceability across the country. #TelecomCybersecurity #SIMBinding…
Coupang, South Korea’s leading e-commerce platform, experienced a significant data breach exposing personal information of nearly 33.7 million users due to unauthorized access by a former employee. Authorities are investigating the incident, which has heightened public concern and prompted regulatory oversight. #Coupang #DataBreach #SouthKorea…
Linux Kernel version 6.18 introduces significant architectural updates, hardware enhancements, and subsystem changes, including the removal of Bcachefs support. The update also expands hardware compatibility and performance improvements, positioning it as a potential Long-Term Support (LTS) kernel series. #LinuxKernel #Bcachefs #KernelUpdate #HardwareSupport…
![Threat Research | Weekly Recap [30 Nov 2025]](https://www.hendryadrian.com/tweet/image/WeeklyRecap.png "Threat Research | Weekly Recap [30 Nov 2025]")
Cybersecurity Threat Research ‘Weekly’ Recap: The report highlights a broad wave of risk from supply-chain and developer-ecosystem abuse—including npm worm campaigns like Shai-Hulud 2.0, OtterCookie, and PyPI domain-takeover vectors—alongside ongoing nation-state operations from Lazarus, Kimsuky, Gamaredon, Tomiris, and related actors. It also covers infostealers, loaders, vulnerabilities (CVE-2025-61882, CVE-2025-64446), breaches, and e-commerce fraud, with defensive guidance on threat intelligence integration, automated security validation, phishing simulations, and AI risk mitigation.
#ShaiHulud #OtterCookie #Kimsuky #Lazarus #Gamaredon #Tomiris #WaterGamayun #BerserkBear #ShinySp1d3r #Gainsight
Bloody Wolf, an advanced persistent threat group, has expanded its operations across Central Asia, employing legitimate remote management tools to evade detection. Their sophisticated attack techniques include spear-phishing with official-looking documents and custom Java loaders to infect networks. #BloodyWolf #NetSupportRAT…
North Korean threat actors are conducting a persistent campaign targeting blockchain and Web3 developers by deploying malware through fake coding tests and job interviews. This sophisticated operation involves nearly 200 malicious npm packages, a complex multi-layered infrastructure, and an evolving approach to bypass security measures. #NorthKorea #npmMalware…
A threat actor named Tomiris has evolved its tactics for targeting high-level diplomatic and political organizations by using public chat platforms as C2 servers and deploying diverse, polyglot malware. This strategic shift enhances their ability to evade detection and maintain long-term access to sensitive networks. #Tomiris #Discord #Telegram #diplomaticcyberattackers…
The U.S. CISA has added CVE-2021-26829, a cross-site scripting vulnerability in OpenPLC ScadaBR, to its KEV catalog due to active exploitation. The threat actor TwoNet exploited this flaw to deface a honeypot and gain initial access, highlighting ongoing industrial system targeting. #CISA #OpenPLC #TwoNet #CVE202126829 #Honeypot…
![Cybersecurity News | Daily Recap [29 Nov 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [29 Nov 2025]")
Daily Recap, Japan’s Asahi reports a ransomware-related data breach that may have exposed personal data of about 1.5 million people, while France’s Football Federation disclosed a cyberattack compromising administrative software and stealing member data. In malware and supply chain news, North Korea-linked actors deployed 197 npm packages to distribute the OtterCookie malware, legacy PyPI bootstrap scripts create a domain-takeover risk, public GitLab repositories exposed over 17,000 secrets, Windows updates hid the password login icon on the lock screen, and the in-flight Wi-Fi attacker was sentenced to seven years in prison. #AsahiBreaches #OtterCookie
The cyberattack on Asahi Group Holdings, Japan’s largest beer producer, resulted in data theft affecting up to 1.9 million individuals. The incident involved ransomware and data leak claims by Qilin ransomware, emphasizing the importance of enhanced cybersecurity measures. #QilinRansomware #AsahiDataLeak