An attacker exploited indirect prompt injections to access user data via Anthropic’s Claude AI, leveraging the Files APIs and network access features. This vulnerability allows exfiltration of up to 30MB of data, including chat conversations, by hijacking the AI’s interactions with external APIs. #Claude #AnthropicAPIs…
Category: Cyber Security News
Burnout has become endemic among cybersecurity professionals, especially CISOs, driven by infinite demands, responsibility without authority, and ongoing crises. Understanding, prevention, and recovery methods like iRest show promise in addressing this epidemic and its related conditions, including PTSD and neurodivergence. #CISOburnout #iRest #CybersecurityLeadership…
A Carnegie Mellon professor, Zico Kolter, plays a critical role in overseeing AI safety at OpenAI, with authority to halt unsafe AI releases. The company is emphasizing safety commitments amid its transition to a for-profit structure, aiming to address ethical and security concerns surrounding AI development. #OpenAI #AI safety…
CISA has issued a warning about a critical Linux Kernel vulnerability, CVE-2024-1086, actively exploited in ransomware attacks worldwide. This flaw affects numerous Linux distributions and allows attackers to escalate privileges to root, enabling full system control and malicious activities. #CVE-2024-1086 #LinuxKernelVulnerability #RansomwareAttacks…
The Philippine National Police is actively monitoring its online systems and strengthening defenses against potential DDoS attacks, in coordination with the DICT’s warnings for November 5. Although the attack is not expected to cause data breaches, it could disrupt critical police and government services, prompting heightened vigilance. #DDoS #DICT #PNP #CyberDefense…
Microsoft has acknowledged a bug in the October 2025 Windows 11 update that causes the Task Manager to continue running in the background after closing it. This issue can lead to system slowdowns and performance problems, with Microsoft providing a temporary manual workaround until a fix is released. #Windows11Update #TaskManagerBug
The Conduent data breach in January 2025 compromised personal data of over 10 million individuals, including sensitive information like SSNs and health data. The company responded promptly, restoring operations and offering identity protection, but faced significant costs and disclosure obligations. #Conduent #DataBreach #IdentityTheft…
Cybersecurity researchers have developed a BOF tool exploiting a weakness in Microsoft Teams cookie encryption, allowing attackers to access sensitive communications. This vulnerability leverages how Teams stores and encrypts cookies using the user’s DPAPI master key, unlike modern browsers that use SYSTEM privileges. #MicrosoftTeams #DPAPI #CookieEncryption…
Google has rolled out Chrome 142 with patches for 20 vulnerabilities, some of which could be exploited for remote code execution. Google paid a total of $130,000 in bug bounties for the critical security fixes. #V8JavaScript #ChromeSecurity…
California’s Attorney General has fined Sling TV $530,000 for violating the California Consumer Privacy Act by making it difficult for users to exercise their privacy rights, especially regarding data opt-out and children’s protections. This enforcement showcases ongoing efforts to ensure streaming services comply with privacy laws in California. #CCPA #SlingTV #PrivacyEnforcement…
Cyble Research and Intelligence Labs uncovered a cyber-espionage campaign targeting defense systems using a weaponized ZIP file disguised as a Belarusian military document. The operation employed advanced obfuscation, covert tunneling through Tor, and persistence techniques reminiscent of Sandworm’s tactics, raising concerns about state-sponsored espionage efforts. #Sandworm #BelarusianMilitary…
![Threat Research | Weekly Recap [02 Nov 2025]](https://www.hendryadrian.com/tweet/image/WeeklyRecap.png "Threat Research | Weekly Recap [02 Nov 2025]")
Cybersecurity Threat Research ‘Weekly’ Recap. A wide range of topics cover Tor-based SSH backdoors, supply-chain and dev-tooling compromises, cloud abuse and credential theft, active vulnerabilities and exploits, diverse malware families and ransomware trends, phishing and mobile propagation, botnets and anonymized infrastructure, APTs and regional campaigns, detection frameworks and risk management, and a large leak exposing Great Firewall internals.
Researchers at Gen Threat Labs have uncovered new toolsets used by North Korean threat actors, including Kimsuky’s HttpTroy backdoor and an upgraded Lazarus Group RAT. These sophisticated tools demonstrate ongoing investment in stealthy cyber espionage activities targeting global victims. #Kimsuky #LazarusGroup #HttpTroy #BLINDINGCAN…
Arctic Wolf Labs uncovered a sophisticated cyber espionage campaign by Chinese-affiliated UNC6384 targeting European diplomatic targets using new Windows exploits and stealth malware. The campaign signifies a strategic shift from Southeast Asia to Europe, aiming to monitor EU defense, infrastructure, and diplomatic activities. #UNC6384 #PlugX…
Researchers at SEQRITE Labs have uncovered “Operation SkyCloak”, a covert cyber espionage campaign targeting Russian and Belarusian military personnel using sophisticated PowerShell-based malware and Tor communication channels. The operation demonstrates a high level of stealth, employing anti-sandbox techniques, self-hosted SSH servers, and custom Tor bridges to maintain persistent access to defense…