OpenAI experienced a data exposure incident affecting some ChatGPT API users due to a breach at third-party analytics provider Mixpanel. The incident involved limited user information, but OpenAI assures no sensitive data such as passwords or API keys was compromised. #Mixpanel #APIDataExposure
Category: Cyber Security News
This week highlighted the resurgence of Mirai-based IoT malware and the increasing sophistication of cybercriminal techniques such as AI-powered scams and stealthy malware targeting email servers. Governments and security companies are actively fighting back through regulation, upgrades, and takedowns. #ShadowV2 #Mirai #OpenFind…
OpenAI revealed that a data breach at Mixpanel affected some of its user data, including profile information, due to a smishing campaign. The breach did not impact OpenAI’s core systems or sensitive data like passwords or API keys. #Mixpanel #Smishing #OpenAI #DataBreach…
Gainsight experienced a larger-than-expected data breach affecting multiple customers, attributed to the ShinyHunters cybercrime group. Several companies temporarily suspended integrations and recommended security measures to prevent further damage. #ShinyHunters #GainsightBreach…
Asahi Group Holdings experienced a significant cyberattack involving ransomware, leading to potential exposure of personal data for around 2 million individuals in Japan. The company is implementing enhanced security measures and working towards full system recovery to restore normal operations. #Qilin #AsahiCyberattack…
OpenAI experienced a security breach related to its use of the third-party analytics service Mixpanel, exposing limited user data. The incident did not affect OpenAI’s core systems or sensitive user information but highlights the importance of third-party security measures. #Mixpanel #OpenAI #DataBreach…
![Cybersecurity News | Daily Recap [26 Nov 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [26 Nov 2025]")
Daily Recap, London councils experienced a cyber incident that temporarily disrupted services across local authorities, while a widespread US emergency alert outage affected OnSolve’s CodeRED service and related Georgia Clerks Authority court-filing systems. The evolution of threats—from mass account-takeover fraud to Crypto Copilot-driven DeFi siphoning and state-sponsored web implants—highlights ongoing risk across public-sector, financial, and infrastructure targets and the imperative for effective risk management. #GeorgiaClerks #CryptoCopilot
The second wave of the Shai-Hulud supply chain attack has compromised over 830 npm packages and a Maven Central package, affecting global developers and stealing sensitive data. This sophisticated malware campaign exploits vulnerabilities in CI workflows and trusted distribution channels to spread malicious code stealthily and broadly. #ShaiHulud #PostHog #GitHubActions #AsyncAPI…
The House Energy and Commerce Committee introduced new bills aimed at enhancing online safety for children, including a revised Kids Online Safety Act (KOSA). The legislation focuses on establishing policies to address online harms without imposing liability on tech companies, sparking ongoing debates about free speech and child protection. #KidsOnlineSafetyAct #CyberHarms…
A new cyber espionage campaign by Russia-aligned APT group Water Gamayun exploits a zero-day Windows vulnerability, CVE-2025-26633, to infiltrate high-value networks. The attack relies on social engineering and exploits trusted Windows processes to deploy malware and steal sensitive information. #WaterGamayun #CVE202526633…
Comcast agrees to pay a $1.5 million fine to settle investigations over a data breach that exposed personal information of over 275,000 customers. The breach stemmed from a hacked vendor, FBCS, which affected millions of individuals and led to stricter oversight measures for Comcast’s data security practices. #FBCSBreach #FCCInvestigations
A critical vulnerability in the ‘node-forge’ JavaScript cryptography library allows attackers to bypass signature verification by crafting malformed ASN.1 data, potentially leading to security breaches. The flaw, identified as CVE-2025-12816, affects versions 1.3.1 and earlier, with a fix released in version 1.3.2; it impacts applications relying on this library for cryptographic integrity. #node-forge #CVE-2025-12816
NordVPN’s Black Friday 2025 deals offer up to 77% discounts on long-term plans, making premium VPN services more affordable than ever. These discounts include access to fast speeds, strong encryption, streaming capabilities, and comprehensive security tools, ensuring safer online experiences. #NordVPN #WireGuard
A new Mirai-based botnet named ShadowV2 targets vulnerable IoT devices from D-Link, TP-Link, and other vendors, exploiting known security flaws. Its global activity during a major AWS outage suggests it might have been a test, with potential for launching large-scale DDoS attacks. #ShadowV2 #MiraiVariant
Over 35,000 individuals had their personal information compromised due to a cyberattack targeting Dartmouth College’s use of Oracle E-Business Suite software. Multiple organizations, including Harvard, Cox Enterprises, and military and educational institutions, confirmed data breaches related to a Russian cybercriminal operation exploiting a zero-day vulnerability. #OracleEBS #ClopGang…