A new wave of cyberattacks targeting US infrastructure employs criminal tools like SocGholish and RomCom to obscure attribution and hinder response efforts. These attacks aim to gather intelligence on critical systems, facilitated by third-party contractors and linked to Russian threat actors. #SocGholish #RomCom #USInfrastructure #CyberEspionage…
Category: Cyber Security News
France’s CNIL fined Les Publications Condé Nast €750,000 for repeatedly violating cookie consent laws on Vanity Fair’s website, despite previous compliance orders. This enforcement highlights France’s strict stance on privacy violations and the ongoing challenges companies face in ensuring proper cookie management under ePrivacy rules. #CNIL #CookieConsent #NOYB #LesPublicationsCondéNast #VanityFair…
Hackers are hijacking US radio transmission equipment to broadcast false emergency tones and offensive content, exploiting unsecured devices like Barix hardware. This highlights the ongoing vulnerability of broadcast infrastructure and the need for strengthened security measures. #Barix #FCC #EmergencyAlertSystem…
A cyber campaign by the Bloody Wolf APT group utilizing legitimate remote-access tools targets government agencies in Central Asia, employing advanced social engineering tactics. This ongoing operation highlights a shift towards using Java-based malware to evade detection and sustain long-term espionage efforts. #BloodyWolf #NetSupportRAT…
JASCO Applied Sciences experienced a data breach in July 2025, with the Rhysida ransomware gang claiming responsibility in October and demanding a ransom to delete stolen data. The attack exposed personal information of US residents, highlighting the ongoing threat of ransomware targeting organizations that serve multiple industries. #Rhysida #ViceSociety #JASCOAppliedSciences #DataBreach…
![Cybersecurity News | Daily Recap [27 Nov 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [27 Nov 2025]")
Daily Recap, OpenAI disclosed that API/customer data was exposed after its vendor Mixpanel was hacked, prompting incident disclosures and investigations. Ransomware and outages were reported across multiple fronts, including Qilin’s data heist via a South Korean MSP breach and an Asahi Group ransomware incident potentially exposing about 2 million records, along with IT outages affecting London councils and the U.S. CodeRED emergency system. #Qilin #AsahiGroup
Several London councils are currently experiencing a cyberattack, leading to network shutdowns and activation of emergency protocols. Authorities are focused on protecting systems, restoring services, and investigating potential data theft. #LondonCouncils #Cyberattack #KensingtonAndChelsea #Westminster #HammersmithFulham…
Microsoft Teams’ B2B Guest Access feature has a significant security flaw that allows attackers to bypass protection measures like Microsoft Defender. This vulnerability arises because security permissions shift from the user’s organization to the host environment once they accept a guest invitation, enabling malicious actors to exploit unprotected Teams accounts. #MicrosoftTeams…
Arctic Wolf Labs identified RomCom threat actors delivering Mythic Agent via SocGholish to a U.S. company, highlighting sophisticated nation-state targeting linked to Russia’s GRU. This marks the first known instance of RomCom using SocGholish for their operations, emphasizing evolving malware delivery tactics. #RomCom #MythicAgent #SocGholish #GRUUnit29155…
Bloody Wolf is a cyber threat group targeting Central Asian countries like Kyrgyzstan and Uzbekistan using sophisticated social engineering techniques and malware. Their campaigns primarily focus on impersonating government agencies to deploy NetSupport RAT and establish persistence on infected systems. #BloodyWolf #NetSupportRAT…
Polish authorities have detained a Russian citizen suspected of hacking into local company systems, amid ongoing concerns about Moscow’s espionage activities. The suspect, who obtained refugee status in Poland, is linked to cyber intrusions targeting businesses across Poland and the EU, highlighting increasing Russian cyber efforts. #MoscowSabotage #EuropeanCyberThreats…
The European Union has reached an agreement on the Child Sexual Abuse Regulation, which mandates online platforms to detect, report, and remove child abuse material, while critics express concerns over mass surveillance and privacy violations. Key features include permanent voluntary scanning provisions and the creation of a new EU Centre on…
A 23-year-old Russian citizen was arrested in Poland for unauthorized access to e-commerce databases, affecting nearly one million customer records. The investigation is linked to broader cybercrime activities and escalating Russian-backed cyberattacks targeting European infrastructure. #RussianCyberCrime #PolishCyberattacks…
Microsoft plans to enhance Entra ID security by implementing stricter Content Security Policy (CSP) controls to prevent script injection attacks starting in October 2026. This move is part of its broader Secure Future Initiative (SFI) to improve authentication security and protect against cross-site scripting (XSS) threats. #EntraID #ContentSecurityPolicy #XSS #SecureFutureInitiative…
Japanese company Asahi experienced a severe ransomware attack that compromised personal data of over 2 million individuals. The Qilin ransomware group claimed the theft, which disrupted operations and exposed sensitive personal and employee information. #Qilin #AsahiDataLeak…