Reflectiz has secured $22 million in Series B funding to enhance its web exposure management platform that safeguards data and reputation for global enterprises. The company’s platform provides visibility and risk detection for third-party services and open source components without impacting website performance. #Reflectiz #WebExposureManagement…
Category: Cyber Security News
Spektrum Labs has launched a platform that provides cryptographic proof of an organization’s cyber resilience using AI-driven validation. The platform helps organizations demonstrate the effectiveness of their security measures to stakeholders, regulators, and insurers. #SpektrumFusion #CyberResilience…
Australia’s Privacy Commissioner found Vinomofo responsible for a major data breach affecting nearly one million customers, highlighting failures in security, governance, and organizational culture. The case emphasizes the importance of organizations taking reasonable security measures during cloud migrations and integrating privacy into corporate practices. #AustralianPrivacyPrinciple #VinomofoDataBreach…
A security vulnerability in Dovecot IMAP Server versions 2.4.0 and 2.4.1 causes incorrect caching of authentication lookups, potentially leading to login issues. The issue has been fixed in version 2.4.2, and disabling auth cache is a temporary workaround. #Dovecot #CVE-2025-30189…
Kaspersky’s GReAT team revealed new tactics used by BlueNoroff, a subdivision of North Korea’s Lazarus Group, including campaigns GhostCall and GhostHire that leverage AI for advanced malware deployment. These operations target organizations involved in cryptocurrency, blockchain, and tech sectors across multiple continents, highlighting the increasing sophistication of cyber threats. #BlueNoroff #GhostCall…
Cybersecurity researchers have reported a surge in attacks targeting PHP servers, IoT devices, and cloud gateways, largely driven by botnets like Mirai, Gafgyt, and Mozi exploiting known vulnerabilities. The increasing attack surface highlights the need for vigilant patching, proper configuration, and continuous monitoring to defend against these evolving threats. #Mirai #Gafgyt…
An Australian national, Peter Williams, pleaded guilty to stealing cyber-exploit components from a US defense contractor and selling them to a Russian broker. The stolen trade secrets, valued at $35 million, were transferred using encrypted methods, and Williams faces potential prison time and fines. #RussianCyberExploit #TradeSecretTheft…
Modern mobile app security must extend beyond login protections to address post-authentication threats like session hijacking and API exploits. Incorporating runtime protection, continuous device integrity checks, and end-to-end API security is crucial for industries such as BFSI, fintech, and digital commerce to prevent fraud effectively. #RASP #APIProtection…
Cybersecurity experts have identified a new vulnerability called AI-targeted cloaking that exploits agentic web browsers like ChatGPT Atlas, allowing malicious actors to manipulate AI outputs. This technique can undermine trust in AI systems and is capable of being weaponized for misinformation and bias, impacting millions of users. #OpenAIChatGPT #AI-targetedCloaking…
Cybersecurity experts report an increase in automated attacks exploiting vulnerabilities in PHP servers, IoT devices, and cloud gateways using botnets like Mirai and Gafgyt. These attacks leverage known CVE flaws, misconfigurations, and cloud services to expand their network and evade detection. #Mirai #Gafgyt #PHPVulnerabilities #IoTThreats #CloudSecurity…
A cybersecurity breach at government contractor Conduent exposed personal data of over 10 million individuals, affecting multiple states’ programs. The attack was attributed to the SafePay ransomware group, which stole 8.5 TB of data, prompting investigations, law enforcement involvement, and breach notifications. #SafePay #Conduent #DataBreach #Ransomware…
The NSA is undergoing a leadership overhaul after months without a permanent director, amid staffing cuts and organizational shakeups. The agency is actively searching for new top officials, including a director, deputy, general counsel, and other key positions. #NSA #CyberCommand #LeadershipVacuum #FederalWorkforce…
A former L3 Harris executive pleaded guilty to selling national security software and cyber exploits to a Russian broker. This case highlights the risks posed by insider threats and international cyber espionage activities. #L3Harris #SpywareExploits…
Ten malicious npm packages mimicking legitimate projects have been found to download a powerful infostealer capable of stealing sensitive data across multiple operating systems. Despite being reported, these packages remain available, highlighting the ongoing threat posed by typosquatting and sophisticated obfuscation techniques. #npmpackages #typosquatting
![Cybersecurity News | Daily Recap [29 Oct 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [29 Oct 2025]")
Daily Recap, Russian-linked actors used living-off-the-land techniques to breach Ukrainian organizations, while BlueNoroff leveraged AI-enhanced espionage on macOS to social-engineer victims. Major vulnerabilities and breaches, from Tomcat flaws to DELMIA alarms, underscore rapid attack surface expansion across industries. #RussianBreaches #BlueNoroffAI #TomcatFlaws #DELMIAWarning #ConduentBreach #DentsuMerkle #RavinAcademy #UKAfghanLeak