Microsoft revealed a new backdoor named SesameOp that exploits the OpenAI Assistants API for stealthy command-and-control communications. The malware enables persistent long-term access for espionage through sophisticated techniques involving AI APIs and internal web shells. #SesameOp #OpenAIAssistantsAPI…
Category: Cyber Security News
A group of U.S. nationals, including Ryan Clifford Goldberg and Kevin Tyler Martin, are accused of using BlackCat ransomware to attack five U.S. companies and extort millions of dollars. The case involves insider knowledge from cybersecurity firms, and some individuals have pleaded guilty or denied charges, highlighting the ongoing threats from…
Google’s AI agent Big Sleep uncovered multiple vulnerabilities in Apple’s WebKit, leading to potential crashes and memory corruption in Safari. Apple addressed these issues in the latest updates across various devices and operating systems, highlighting ongoing AI-driven security advancements. #BigSleep #WebKitVulnerabilities…
Google has released security updates for Android to fix two critical vulnerabilities, including one that could allow remote code execution without user interaction. These updates mark a shift from monthly patches, with the latest focusing on Android versions 13 to 16. #CVEs #AndroidSecurityVulnerabilities…
Zscaler has acquired AI security company SPLX to enhance its Zero Trust Exchange platform, focusing on securing the AI lifecycle. This strategic move aims to broaden AI security capabilities amid increasing mergers and acquisitions in the cybersecurity landscape. #SPLX #Zscaler…
Apple has released significant security updates for iOS, iPadOS, and macOS to fix over 100 vulnerabilities, including critical WebKit flaws. These patches address issues that could lead to data leaks, system crashes, and privilege escalation, enhancing device security. #WebKit #KernelMemoryCorruption…
![Cybersecurity News | Daily Recap [03 Nov 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [03 Nov 2025]")
Daily Recap, Ransomware actors are exploiting the Linux kernel CVE-2024-1086 to deploy malware and escalate incidents while a new BOF tool bypasses Microsoft Teams cookie encryption to steal user chats. Chrome vulnerability rewards and a Windows Task Manager bug are also noted in the weekās security updates.
#CVE-2024-1086 #LinuxKernel #TeamsBOF #ChromeRewards #KB5067036
European organizations experienced a significant 13% rise in ransomware attacks, with UK targets most affected, according to CrowdStrike’s 2025 European Threat Landscape Report. The report highlights the prominence of big-game hunting and the increasing menace of violence-as-a-service linked to heightened criminal activities across Europe. #CrowdStrike #RansomwareGroups…
Proton’s Data Breach Observatory detects and reports large-scale data leaks on the dark web, helping organizations prevent serious security incidents. The breaches involve sensitive personal data across various industries, increasing risks of identity theft and financial fraud. #QantasAirways #AllianzLife…
The Akira ransomware gang claims to have stolen 23 GB of sensitive data from Apache OpenOffice, raising concerns about security in open-source projects. The incident highlights the increasing threat of ransomware targeting nonprofit organizations and software foundations. #Akira #ApacheOpenOffice…
Hackers have stolen over $120 million from the DeFi platform Balancer through a security breach involving faulty access controls. Several blockchain platforms responded by freezing funds and halting networks to prevent further losses. #Balancer #DeFiSecurity…
Seqrite Labsā APT Team exposed the espionage activities of Silent Lynx, a threat group conducting phishing campaigns targeting diplomatic and infrastructure entities in Central and South Asia. Their operations focus on regional summits and strategic projects, with potential expansion to other diplomatic events. #SilentLynx #APT #GeopoliticalEspionage…
Hacktivist attacks on critical infrastructure, especially industrial control systems (ICS), doubled in the third quarter, with Russia-linked groups leading the strikes. These threats are increasingly targeting energy, utilities, manufacturing, and agriculture sectors across Europe and North America, driven by geopolitical conflicts. #INTEID #Z-Pentest…
The article provides an in-depth interview with the developers of AURA, a rapidly growing cybercriminal stealer community emphasizing product quality and customer support. It also addresses misconceptions about AURA’s similarity to Lumma Stealer and highlights the project’s unique goals and market presence. #LummaStealer #AURA #CybercrimeMarkets
Microsoft security researchers uncovered a new backdoor malware, SesameOp, that covertly communicates via the OpenAI Assistants API for persistent access and remote management. This attack highlights how threat actors misuse legitimate cloud services for stealthy cyber-espionage activities. #SesameOp #OpenAIAssistantsAPI