As Windows 10’s support ends on October 14, 2025, users are encouraged to enroll in the Extended Security Updates (ESU) program to stay protected against new vulnerabilities. Microsoft patched actively exploited security flaws, emphasizing the importance of continued updates for guarding against malware and cyber threats. #CVE-2025-24990 #Windows10EndOfSupport
Category: Cyber Security News
The GlassWorm malware campaign has reemerged, infecting new VSCode extensions on OpenVSX with updated infrastructure to target global systems. This persistent threat continues to exploit platform vulnerabilities to steal credentials and cryptocurrency data. #GlassWorm #OpenVSX #VSCodeExtensions #Solana
Microsoft reveals Whisper Leak, a new side-channel attack that can infer the topics of conversations with encrypted language models by analyzing network traffic patterns. This vulnerability poses significant privacy risks for users and enterprises, especially when communicating sensitive information over untrusted networks. #WhisperLeak #LanguageModels #EncryptedTraffic…
An NFC relay attack called NGate has emerged in Poland, targeting banking customers to perform unauthorized ATM cash withdrawals without physical cards. The attack combines social engineering and advanced technical exploitation, highlighting the evolving threat landscape in mobile banking security. #NGate #NFCRelayAttack…
Several malicious NuGet packages containing time-delayed payloads were identified, capable of sabotaging industrial systems and databases after specific trigger dates. The packages were linked to a threat actor possibly of Chinese origin and exploited trusted libraries like Sharp7 to embed their malware, making detection challenging. #NuGetSupplyChain #Sharp7 #IndustrialControlSystems #TimeDelayedPayloads…
A China-linked threat actor targeted a U.S. non-profit organization in a strategic cyber campaign aiming for long-term persistence and influence over U.S. policy discussions. The attack involved exploit scanning, establishing persistence, and deploying sophisticated malware, revealing ongoing Chinese cyber activities affecting various sectors worldwide. #SaltTyphoon #Kelp…
![Cybersecurity News | Daily Recap [07 Nov 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [07 Nov 2025]")
Daily Recap, The latest policy, breach, and vulnerability news cover Google-Wiz approval, Europol data-sharing advances, CBO and Nevada breach responses, high-severity Chrome 142 fixes, Cisco advisory, and evolving threats like ClickFix and AI-Slop with LLM-enabled evasion. The landscape shows growing regulatory cooperation, enforcement actions, and intensified attacker techniques across multiple sectors.
#GoogleWiz #Europol #CBO #Nevada #SonicWall #Chrome142 #Cisco #ClickFix #AI-Slop #LLMs
Microsoft is testing enhanced Quick Machine Recovery (QMR) and Smart App Control (SAC), offering faster recovery options and easier toggling without reinstalling Windows. These updates aim to improve system resilience and security management for Windows 11 users. #QuickMachineRecovery #SmartAppControl
Malicious packages on NuGet pose a significant threat by containing sabotage payloads scheduled to activate in 2027 and 2028, targeting databases and Siemens S7 PLCs. These packages use probabilistic triggers to execute harmful actions, potentially disrupting industrial operations and compromising data integrity. #NuGet #Shanhai666
A security flaw in Samsung Galaxy devices was exploited as a zero-day to deliver the espionage tool LANDFALL, targeting Middle Eastern users. The campaign involved malicious WhatsApp images and exploited two unpatched vulnerabilities, revealing advanced command-and-control techniques. #CVE-2025-21042 #LANDFALL #StealthFalcon…
Security researchers uncovered LANDFALL, a sophisticated spyware campaign targeting Samsung Galaxy phones using a zero-day exploit. The campaign appears to be driven by espionage motives, with potential links to Middle Eastern threat actors. #LANDFALL #ZeroDay #SamsungGalaxy #Espionage #MiddleEast…
The CBO was recently targeted in a cyberattack believed to be conducted by a nation-state actor, compromising sensitive messages and systems. The incident highlights ongoing threats to government agencies from foreign hackers, leading to enhanced security measures. #CBO #nationstateattack…
The Department of Defense has released a new model for developing U.S. military cyber forces, focusing on long-term initiatives to improve training, capabilities, and personnel readiness. The plan, expected to take years to fully implement, may increase calls for a dedicated cyber service amid ongoing challenges in attracting top talent. #CyberCommand…
Radical empowerment in cybersecurity leadership involves giving front-line teams maximum authority, trust, and resources to foster innovation and quick problem-solving. However, misdefinitions and top-down approaches can lead to disempowerment, fear, and stagnation, emphasizing the importance of genuine trust and organizational safety. #CyberPsychology #CyberLeadership…
A new Android spyware called Landfall exploited a zero-day vulnerability in Samsung devices for remote code execution, primarily targeting users in the Middle East and North Africa. The attack involved infected DNG images sent via WhatsApp, allowing spying capabilities such as microphone recording and data theft. #CVE-2025-21042 #Landfall #SamsungGalaxy #StealthFalcon…