A security flaw in Amazon WorkSpaces client for Linux can allow attackers to extract authentication tokens and access corporate environments unauthorizedly. This vulnerability emphasizes the importance of prompt patching and robust endpoint security measures. #AmazonWorkSpaces #CVE202512779…
Category: Cyber Security News
A ransomware attack against Nevada’s government was traced back to a May intrusion caused by a state employee downloading malicious software from a spoofed website. The state managed to recover 90% of the impacted data without paying ransom, highlighting the importance of cybersecurity readiness. #NevadaGovernment #RansomwareAttack…
The Australian government, in collaboration with the United States, has imposed sanctions on entities and individuals linked to North Korea’s cybercriminal operations, including cryptocurrency theft and espionage. These actions aim to pressure North Korea to cease its illegal activities and comply with international sanctions. #NorthKoreaCyber #CryptocurrencyTheft…
QNAP Systems has released patches addressing over two dozen vulnerabilities across its product range, including flaws demonstrated at the Pwn2Own Ireland 2025 hacking event. These updates are crucial as threat actors often target QNAP devices due to their popularity, even though no exploits have been reported in the wild. #QNAP #Pwn2OwnIreland2025…
The first in-orbit satellite cybersecurity competition in Europe, CTRLSpace CTF, demonstrated the feasibility of protecting space infrastructure from cyber threats through live testing on operational satellites. This event marked a significant advancement in space security, emphasizing the importance of security-by-design for satellite systems. #CTRLSpace #ESA #D-Orbit…
The 2021 Illuminate Education data breach exposed sensitive student information and highlighted the company’s failure to implement basic cybersecurity practices, leading to a $5.1 million settlement. The case underscores the importance of cybersecurity compliance and proactive data protection measures in the edtech industry. #IlluminateEducation #StudentDataBreach…
The AI Vulnerability Scoring System (AIVSS) is a novel framework developed to address the limitations of traditional vulnerability models like CVSS in evaluating AI systems. It introduces new parameters to quantify risks related to agentic AI, including autonomy, non-determinism, and dynamic tool use. #AIVSS #AgenticAI #CyberRiskAssessment…
The Indian government has launched the Digital Life Certificate 4.0 campaign to facilitate pension verification through digital means, reducing the need for in-person visits. A cybersecurity advisory accompanies this initiative, emphasizing safe online practices to protect pensioners from fraud and identity theft. #JeevanPramaan #CyberCrimePortal…
![Threat Research | Weekly Recap [09 Nov 2025]](https://www.hendryadrian.com/tweet/image/WeeklyRecap.png "Threat Research | Weekly Recap [09 Nov 2025]")
Cybersecurity Threat Research ‘Weekly’ Recap. Adversaries persist with phishing, credential theft, supply-chain compromises, and AI-enabled threats, targeting individuals, organizations, and critical infrastructure across multiple sectors. The report highlights notable campaigns, new backdoors, ransomware evolutions, vulnerabilities, and the increasing use of AI for malware development, detection evasion, and incident response improvements.
#Tycoon 2FA #Fake DMCA #RaccoonO365 #Booking.com “I Paid Twice” #AdE crypto-tax phishing #Bank of Italy phishing #Remcos #SleepyDuck #Gootloader #LANDFALL #Fantasy Hub #Cephalus #Midnight ransomware #DragonForce #MuddyWater #SesameOp #OpenAI C2 #Balancer #Great Firewall
The Windows Start menu is undergoing its first major redesign since 2021, featuring a more adaptive and categorized UI. The update aims to improve user experience with scrollable menus, customizable views, and enhanced layout options, rolling out gradually starting November 2025. #WindowsStartMenu #Build26200.7019
A Chinese-linked cyber espionage campaign targeted a U.S. nonprofit to influence foreign policy, employing advanced persistence techniques and known malicious tools. The operation utilized legitimate Windows components for stealth and shared tactics with groups like APT41 and Kelp. #ChineseEspionage #APT41 #SpacePirates…
Three vulnerabilities in the runC container runtime used by Docker and Kubernetes could allow attackers to bypass isolation and gain control of the host system. Fixes are available, but exploitation could lead to container escape and root access if specific conditions are met. #runC #ContainerEscape
The Swiss NCSC warns iPhone users about a sophisticated phishing scam involving fake lost device messages designed to steal Apple ID credentials. Attackers exploit the Find My app and SMS messages to lure victims into providing login details, risking losing personal data and bypassing security features like Activation Lock. #AppleID #PhishingScam
NAKIVO Backup & Replication v11.1 introduces new multilingual support, enhanced backup for Proxmox VE, and improved disaster recovery features to strengthen data resilience. The update also offers streamlined MSP integration, real-time VMware replication, and granular physical machine backups. #NAKIVO #ProxmoxVE #VMware #MSPDirectConnect
![Cybersecurity News | Daily Recap [08 Nov 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [08 Nov 2025]")
Daily Recap, Malicious NuGet time bombs threaten industrial systems, while Landfall spyware exploits a Samsung zero-click flaw to target devices across regions. State-backed actors continue to use legacy flaws for espionage and destructive campaigns, with new zero-day fixes and AI-powered malware emerging in the threat landscape. #NuGet #Landfall #Log4j #Sandworm #CavalryWerewolf #QNAP #UPenn #CyberCommand