I added hover over text, it messed up some of the formatting. But whatever, I gotta go write my TPS report.<h2>Krebs on Security</h2><h2>Dark Reading</h2><h2>The Hacker News [ THN ] - Best Security Blog</h2>2025-12-05 - <a href="https://thehackernews.com/2025/12/jpcert-confirms-active-command.html" title="A command injection vulnerability in Array Networks AG Series secure access gateways has been exploited in the wild since August 2025, according to an alert issued by JPCERT/CC this week.
The vulnerability, which does not have a CVE identifier, was addressed by the company on May 11, 2025. It's rooted in Array's DesktopDirect, a remote desktop access solution that allows users to securely access">JPCERT Confirms Active Command Injection Attacks on Array AG Gateways</a><br>2025-12-04 - <a href="https://thehackernews.com/2025/12/silver-fox-uses-fake-microsoft-teams.html" title="The threat actor known as Silver Fox has been spotted orchestrating a false flag operation to mimic a Russian threat group in attacks targeting organizations in China.
The search engine optimization (SEO) poisoning campaign leverages Microsoft Teams lures to trick unsuspecting users into downloading a malicious setup file that leads to the deployment of ValleyRAT (Winos 4.0), a known malware">Silver Fox Uses Fake Microsoft Teams Installer to Spread ValleyRAT Malware in China</a><br>2025-12-04 - <a href="https://thehackernews.com/2025/12/threatsday-bulletin-wi-fi-hack-npm-worm.html" title="Think your Wi-Fi is safe? Your coding tools? Or even your favorite financial apps? This week proves again how hackers, companies, and governments are all locked in a nonstop race to outsmart each other.
Here’s a quick rundown of the latest cyber stories that show how fast the game keeps changing.







  
  
    DeFi exploit drains funds
    
      Critical yETH Exploit Used to Steal $9M">ThreatsDay Bulletin: Wi-Fi Hack, npm Worm, DeFi Theft, Phishing Blasts— and 15 More Stories</a><br>2025-12-04 - <a href="https://thehackernews.com/2025/12/5-threats-that-reshaped-web-security.html" title="As 2025 draws to a close, security professionals face a sobering realization: the traditional playbook for web security has become dangerously obsolete. AI-powered attacks, evolving injection techniques, and supply chain compromises affecting hundreds of thousands of websites forced a fundamental rethink of defensive strategies.
Here are the five threats that reshaped web security this year, and">5 Threats That Reshaped Web Security This Year [2025]</a><br>2025-12-04 - <a href="https://thehackernews.com/2025/12/goldfactory-hits-southeast-asia-with.html" title="Cybercriminals associated with a financially motivated group known as GoldFactory have been observed staging a fresh round of attacks targeting mobile users in Indonesia, Thailand, and Vietnam by impersonating government services.
The activity, observed since October 2024, involves distributing modified banking applications that act as a conduit for Android malware, Group-IB said in a technical">GoldFactory Hits Southeast Asia with Modified Banking Apps Driving 11,000+ Infections</a><br>2025-12-04 - <a href="https://thehackernews.com/2025/12/record-297-tbps-ddos-attack-linked-to.html" title="Cloudflare on Wednesday said it detected and mitigated the largest ever distributed denial-of-service (DDoS) attack that measured at 29.7 terabits per second (Tbps).
The activity, the web infrastructure and security company said, originated from a DDoS botnet-for-hire known as AISURU, which has been linked to a number of hyper-volumetric DDoS attacks over the past year. The attack lasted for 69">Record 29.7 Tbps DDoS Attack Linked to AISURU Botnet with up to 4 Million Infected Hosts</a><br>2025-12-03 - <a href="https://thehackernews.com/2025/12/critical-rsc-bugs-in-react-and-nextjs.html" title="A maximum-severity security flaw has been disclosed in React Server Components (RSC) that, if successfully exploited, could result in remote code execution.
The vulnerability, tracked as CVE-2025-55182, carries a CVSS score of 10.0. The vulnerability has been codenamed React2shell.
It allows "unauthenticated remote code execution by exploiting a flaw in how React decodes payloads sent to React">Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code Execution</a><br>2025-12-03 - <a href="https://thehackernews.com/2025/12/discover-ai-tools-fueling-next.html" title="Remember when phishing emails were easy to spot? Bad grammar, weird formatting, and requests from a "Prince" in a distant country?
Those days are over.
Today, a 16-year-old with zero coding skills and a $200 allowance can launch a campaign that rivals state-sponsored hackers. They don't need to be smart; they just need to subscribe to the right AI tool.
We are witnessing the industrialization of">Discover the AI Tools Fueling the Next Cybercrime Wave — Watch the Webinar</a><br>2025-12-03 - <a href="https://thehackernews.com/2025/12/microsoft-silently-patches-windows-lnk.html" title="Microsoft has silently plugged a security flaw that has been exploited by several threat actors since 2017 as part of the company's November 2025 Patch Tuesday updates, according to ACROS Security's 0patch.
The vulnerability in question is CVE-2025-9491 (CVSS score: 7.8/7.0), which has been described as a Windows Shortcut (LNK) file UI misinterpretation vulnerability that could lead to remote">Microsoft Silently Patches Windows LNK Flaw After Years of Active Exploitation</a><br>2025-12-03 - <a href="https://thehackernews.com/2025/12/wordpress-king-addons-flaw-under-active.html" title="A critical security flaw impacting a WordPress plugin known as King Addons for Elementor has come under active exploitation in the wild.
The vulnerability, CVE-2025-8489 (CVSS score: 9.8), is a case of privilege escalation that allows unauthenticated attackers to grant themselves administrative privileges by simply specifying the administrator user role during registration.
It affects versions">WordPress King Addons Flaw Under Active Attack Lets Hackers Make Admin Accounts</a><br>2025-12-03 - <a href="https://thehackernews.com/2025/12/brazil-hit-by-banking-trojan-spread-via.html" title="The threat actor known as Water Saci is actively evolving its tactics, switching to a sophisticated, highly layered infection chain that uses HTML Application (HTA) files and PDFs to propagate via WhatsApp a worm that deploys a banking trojan in attacks targeting users in Brazil.
The latest wave is characterized by the attackers shifting from PowerShell to a Python-based variant that spreads the">Brazil Hit by Banking Trojan Spread via WhatsApp Worm and RelayNFC NFC Relay Fraud</a><br>2025-12-03 - <a href="https://thehackernews.com/2025/12/chopping-ai-down-to-size-turning.html" title="Most people know the story of Paul Bunyan. A giant lumberjack, a trusted axe, and a challenge from a machine that promised to outpace him. Paul doubled down on his old way of working, swung harder, and still lost by a quarter inch. His mistake was not losing the contest. His mistake was assuming that effort alone could outmatch a new kind of tool.
Security professionals are facing a similar">Chopping AI Down to Size: Turning Disruptive Technology into a Strategic Advantage</a><br>2025-12-03 - <a href="https://thehackernews.com/2025/12/picklescan-bugs-allow-malicious-pytorch.html" title="Three critical security flaws have been disclosed in an open-source utility called Picklescan that could allow malicious actors to execute arbitrary code by loading untrusted PyTorch models, effectively bypassing the tool's protections.
Picklescan, developed and maintained by Matthieu Maitre (@mmaitre314), is a security scanner that's designed to parse Python pickle files and detect suspicious">Picklescan Bugs Allow Malicious PyTorch Models to Evade Scans and Execute Code</a><br>2025-12-03 - <a href="https://thehackernews.com/2025/12/malicious-rust-crate-delivers-os.html" title="Cybersecurity researchers have discovered a malicious Rust package that's capable of targeting Windows, macOS, and Linux systems, and features malicious functionality to stealthily execute on developer machines by masquerading as an Ethereum Virtual Machine (EVM) unit helper tool.
The Rust crate, named "evm-units," was uploaded to crates.io in mid-April 2025 by a user named "ablerust,">Malicious Rust Crate Delivers OS-Specific Malware to Web3 Developer Systems</a><br>2025-12-02 - <a href="https://thehackernews.com/2025/12/india-orders-messaging-apps-to-work.html" title="India's Department of Telecommunications (DoT) has issued directions to app-based communication service providers to ensure that the platforms cannot be used without an active SIM card linked to the user's mobile number.
To that end, messaging apps like WhatsApp, Telegram, Snapchat, Arattai, Sharechat, Josh, JioChat, and Signal that use an Indian mobile number for uniquely identifying their">India Orders Messaging Apps to Work Only With Active SIM Cards to Prevent Fraud and Misuse</a><br>2025-12-02 - <a href="https://thehackernews.com/2025/12/researchers-capture-lazarus-apts-remote.html" title="A joint investigation led by Mauro Eldritch, founder of BCA LTD, conducted together with threat-intel initiative NorthScan and ANY.RUN, a solution for interactive malware analysis and threat intelligence, has uncovered one of North Korea’s most persistent infiltration schemes: a network of remote IT workers tied to Lazarus Group’s Famous Chollima division.
For the first time, researchers managed">Researchers Capture Lazarus APT's Remote-Worker Scheme Live on Camera</a><br>2025-12-02 - <a href="https://thehackernews.com/2025/12/glassworm-returns-with-24-malicious.html" title="The supply chain campaign known as GlassWorm has once again reared its head, infiltrating both Microsoft Visual Studio Marketplace and Open VSX with 24 extensions impersonating popular developer tools and frameworks like Flutter, React, Tailwind, Vim, and Vue.
GlassWorm was first documented in October 2025, detailing its use of the Solana blockchain for command-and-control (C2) and harvest npm,">GlassWorm Returns with 24 Malicious Extensions Impersonating Popular Developer Tools</a><br>2025-12-02 - <a href="https://thehackernews.com/2025/12/malicious-npm-package-uses-hidden.html" title="Cybersecurity researchers have disclosed details of an npm package that attempts to influence artificial intelligence (AI)-driven security scanners.
The package in question is eslint-plugin-unicorn-ts-2, which masquerades as a TypeScript extension of the popular ESLint plugin. It was uploaded to the registry by a user named "hamburgerisland" in February 2024. The package has been downloaded">Malicious npm Package Uses Hidden Prompt and Script to Evade AI Security Tools</a><br>2025-12-02 - <a href="https://thehackernews.com/2025/12/iran-linked-hackers-hits-israeli_2.html" title="Israeli entities spanning academia, engineering, local government, manufacturing, technology, transportation, and utilities sectors have emerged as the target of a new set of attacks undertaken by Iranian nation-state actors that have delivered a previously undocumented backdoor called MuddyViper.
The activity has been attributed by ESET to a hacking group known as MuddyWater (aka Mango">Iran-Linked Hackers Hit Israeli Sectors with New MuddyViper Backdoor in Targeted Attacks</a><br>2025-12-02 - <a href="https://thehackernews.com/2025/12/secalerts-cuts-through-noise-with.html" title="Vulnerability management is a core component of every cybersecurity strategy. However, businesses often use thousands of software without realising it (when was the last time you checked?), and keeping track of all the vulnerability alerts, notifications, and updates can be a burden on resources and often leads to missed vulnerabilities.&nbsp;
Taking into account that nearly 10% of">SecAlerts Cuts Through the Noise with a Smarter, Faster Way to Track Vulnerabilities</a><br>2025-12-02 - <a href="https://thehackernews.com/2025/12/google-patches-107-android-flaws.html" title="Google on Monday released monthly security updates for the Android operating system, including two vulnerabilities that it said have been exploited in the wild.
The patch addresses a total of 107 security flaws spanning different components, including Framework, System, Kernel, as well as those from Arm, Imagination Technologies, MediaTek, Qualcomm, and Unison.
The two high-severity shortcomings">Google Patches 107 Android Flaws, Including Two Framework Bugs Exploited in the Wild</a><br>2025-12-01 - <a href="https://thehackernews.com/2025/12/india-orders-phone-makers-to-pre.html" title="India's telecommunications ministry has ordered major mobile device manufacturers to preload a government-backed cybersecurity app named Sanchar Saathi on all new phones within 90 days.
According to a report from Reuters, the app cannot be deleted or disabled from users' devices.
Sanchar Saathi, available on the web and via mobile apps for Android and iOS, allows users to report suspected fraud,">India Orders Phone Makers to Pre-Install Government App to Tackle Telecom Fraud</a><br>2025-12-01 - <a href="https://thehackernews.com/2025/12/shadypanda-turns-popular-browser.html" title="A threat actor known as ShadyPanda has been linked to a seven-year-long browser extension campaign that has amassed over 4.3 million installations over time.
Five of these extensions started off as legitimate programs before malicious changes were introduced in mid-2024, according to a report from Koi Security, attracting 300,000 installs. These extensions have since been taken down.
"These">ShadyPanda Turns Popular Browser Extensions with 4.3 Million Installs Into Spyware</a><br>2025-12-01 - <a href="https://thehackernews.com/2025/12/weekly-recap-hot-cves-npm-worm-returns.html" title="Hackers aren’t kicking down the door anymore. They just use the same tools we use every day — code packages, cloud accounts, email, chat, phones, and “trusted” partners — and turn them against us.
One bad download can leak your keys. One weak vendor can expose many customers at once. One guest invite, one link on a phone, one bug in a common tool, and suddenly your mail, chats, repos, and">⚡ Weekly Recap: Hot CVEs, npm Worm Returns, Firefox RCE, M365 Email Raid & More</a><br>2025-12-01 - <a href="https://thehackernews.com/2025/12/webinar-agentic-trojan-horse-why-new-ai.html" title="The AI browser wars are coming to a desktop near you, and you need to start worrying about their security challenges.
For the last two decades, whether you used Chrome, Edge, or Firefox, the fundamental paradigm remained the same: a passive window through which a human user viewed and interacted with the internet.
That era is over. We are currently witnessing a shift that renders the old">Webinar: The "Agentic" Trojan Horse: Why the New AI Browsers War is a Nightmare for Security Teams</a><br>2025-12-01 - <a href="https://thehackernews.com/2025/12/new-albiriox-maas-malware-targets-400.html" title="A new Android malware named Albiriox has been advertised under a malware-as-a-service (MaaS) model to offer a "full spectrum" of features to facilitate on-device fraud (ODF), screen manipulation, and real-time interaction with infected devices.
The malware embeds a hard-coded list comprising over 400 applications spanning banking, financial technology, payment processors, cryptocurrency">New Albiriox MaaS Malware Targets 400+ Apps for On-Device Fraud and Screen Control</a><br>2025-12-01 - <a href="https://thehackernews.com/2025/12/tomiris-shifts-to-public-service.html" title="The threat actor known as Tomiris has been attributed to attacks targeting foreign ministries, intergovernmental organizations, and government entities in Russia with an aim to establish remote access and deploy additional tools.
"These attacks highlight a notable shift in Tomiris's tactics, namely the increased use of implants that leverage public services (e.g., Telegram and Discord) as">Tomiris Shifts to Public-Service Implants for Stealthier C2 in Attacks on Government Targets</a><br><h2>Schneier on Security</h2>2025-12-02 - <a href="https://www.schneier.com/blog/archives/2025/12/like-social-media-ai-requires-difficult-choices.html" title="<p>In his 2020 book, &#8220;<a href="https://global.oup.com/academic/product/future-politics-9780198825616?cc=ca&#38;lang=en&#38;">Future Politics</a><em>,</em>&#8221; British barrister Jamie Susskind wrote that the dominant question of the 20th century was &#8220;How much of our collective life should be determined by the state, and what should be left to the market and civil society?&#8221; But in the early decades of this century, Susskind suggested that we face a different question: &#8220;To what extent should our lives be directed and controlled by powerful digital systems&#8212;and on what terms?&#8221;</p>
<p>Artificial intelligence (AI) forces us to confront this question. It is a technology that in theory amplifies the power of its users: A manager, marketer, political campaigner, or opinionated internet user can utter a single instruction, and see their message&#8212;whatever it is&#8212;instantly written, personalized, and propagated via email, text, social, or other channels to thousands of people within their organization, or millions around the world. It also allows us to individualize solicitations for political donations, elaborate a grievance into a well-articulated policy position, or tailor a persuasive argument to an identity group, or even a single person...</p>">Like Social Media, AI Requires Difficult Choices</a><br>2025-12-01 - <a href="https://www.schneier.com/blog/archives/2025/12/banning-vpns.html" title="<p>This is crazy. Lawmakers in several US states are contemplating <a href="https://www.eff.org/deeplinks/2025/11/lawmakers-want-ban-vpns-and-they-have-no-idea-what-theyre-doing">banning VPNs</a>, because&#8230;think of the children!</p>
<blockquote><p>As of this writing, Wisconsin lawmakers are escalating their war on privacy by targeting VPNs in the name of &#8220;protecting children&#8221; in <a href="https://docs.legis.wisconsin.gov/2025/proposals/reg/asm/bill/AB105">A.B. 105</a>/<a href="https://docs.legis.wisconsin.gov/2025/proposals/sb130">S.B. 130</a>. It’s an age verification bill that requires all websites distributing material that could conceivably be deemed &#8220;sexual content&#8221; to both implement an age verification system and also to block the access of users connected via VPN. The bill seeks to broadly expand the definition of materials that are &#8220;harmful to minors&#8221; beyond the type of speech that states can prohibit minors from accessing­ potentially encompassing things like depictions and discussions of human anatomy, sexuality, and reproduction...</p></blockquote>">Banning VPNs</a><br>2025-12-01 - <a href="https://www.schneier.com/blog/archives/2025/11/friday-squid-blogging-flying-neon-squid-found-on-israeli-beach.html" title="<p>A meter-long flying neon squid (<i>Ommastrephes bartramii</i>) was <a href="https://www.timesofisrael.com/meter-long-squid-washes-up-on-northern-israeli-beach/">found dead</a> on an Israeli beach. The species is rare in the Mediterranean.</p>
<p>As usual, you can also use this squid post to talk about the security stories in the news that I haven&#8217;t covered.</p>
<p><a href="https://www.schneier.com/blog/archives/2024/06/new-blog-moderation-policy.html">Blog moderation policy.</a></p>">Friday Squid Blogging: Flying Neon Squid Found on Israeli Beach</a><br>2025-12-01 - <a href="https://www.schneier.com/blog/archives/2025/11/prompt-injection-through-poetry.html" title="<p>In a new paper, &#8220;<a href="https://arxiv.org/pdf/2511.15304">Adversarial Poetry as a Universal Single-Turn Jailbreak Mechanism in Large Language Models</a>,&#8221; researchers found that turning LLM prompts into poetry resulted in jailbreaking the models:</p>
<blockquote><p><b>Abstract</b>: We present evidence that adversarial poetry functions as a universal single-turn jailbreak technique for Large Language Models (LLMs). Across 25 frontier proprietary and open-weight models, curated poetic prompts yielded high attack-success rates (ASR), with some providers exceeding 90%. Mapping prompts to MLCommons and EU CoP risk taxonomies shows that poetic attacks transfer across CBRN, manipulation, cyber-offence, and loss-of-control domains. Converting 1,200 ML-Commons harmful prompts into verse via a standardized meta-prompt produced ASRs up to 18 times higher than their prose baselines. Outputs are evaluated using an ensemble of 3 open-weight LLM judges, whose binary safety assessments were validated on a stratified human-labeled subset. Poetic framing achieved an average jailbreak success rate of 62% for hand-crafted poems and approximately 43% for meta-prompt conversions (compared to non-poetic baselines), substantially outperforming non-poetic baselines and revealing a systematic vulnerability across model families and safety training approaches. These findings demonstrate that stylistic variation alone can circumvent contemporary safety mechanisms, suggesting fundamental limitations in current alignment methods and evaluation protocols...</p></blockquote>">Prompt Injection Through Poetry</a><br>2025-12-03 - <a href="https://www.schneier.com/blog/archives/2025/11/four-ways-ai-is-being-used-to-strengthen-democracies-worldwide.html" title="<p>Democracy is colliding with the technologies of artificial intelligence. Judging from the audience reaction at the recent <a href="https://www.coe.int/en/web/world-forum-democracy">World Forum on Democracy</a> in Strasbourg, the general expectation is that democracy will be the worse for it. We have another narrative. Yes, there are risks to democracy from AI, but there are also opportunities.</p>
<p>We have just published the book <a href="https://mitpress.mit.edu/9780262049948/rewiring-democracy/">Rewiring Democracy: How AI will Transform Politics, Government, and Citizenship</a><em>.</em> In it, we take a clear-eyed view of how AI is undermining confidence in our information ecosystem, how the use of biased AI can harm constituents of democracies and how elected officials with authoritarian tendencies can use it to consolidate power. But we also give positive examples of how AI is transforming democratic governance and politics for the better...</p>">Four Ways AI Is Being Used to Strengthen Democracies Worldwide</a><br><h2>ThreatPost</h2><h2>Sydney Morning Herald</h2><h2>New York Times</h2>2025-12-04 - <a href="https://www.nytimes.com/2025/12/04/technology/meta-cuts-metaverse-unit.html" title="Meta plans to direct its investments to focus on wearables like its augmented reality glasses but does not plan to abandon building the metaverse.">Meta Weighs Cuts to Its Metaverse Unit</a><br>2025-12-04 - <a href="https://www.nytimes.com/2025/12/04/technology/ai-deal-making-faster.html" title="Investors are deciding within 15 minutes whether to shovel millions into A.I. start-ups and taking entrepreneurs weight lifting and rock climbing to get deals done.">A.I. Deal Making Is Getting Faster</a><br>2025-12-04 - <a href="https://www.nytimes.com/2025/12/04/technology/personaltech/why-one-man-is-fighting-for-our-right-to-control-our-garage-door-openers.html" title="If companies can modify internet-connected products and charge subscriptions after people have already purchased them, what does it mean to own anything anymore?">Why One Man Is Fighting for Our Right to Control Our Garage Door Openers</a><br>2025-12-03 - <a href="https://www.nytimes.com/2025/12/03/technology/cryptocurrencies-tumble-trump-rally.html" title="Bitcoin has plunged more than 30 percent and Ether is down around 40 percent in recent months, as gains from President Trump’s pro-crypto policies evaporated.">Bitcoin’s Predicted Sky-High Prices Have Not Panned Out</a><br>2025-12-05 - <a href="https://www.nytimes.com/2025/12/04/technology/rebecca-heineman-dead.html" title="Fleeing an abusive home life, she went on to win a national Space Invaders tournament, taught herself to program and left a trail of popular games in her wake.">Rebecca Heineman, Transgender Video Game Pioneer, Dies at 62</a><br>2025-12-04 - <a href="https://www.nytimes.com/2025/12/04/science/lost-science-nist-atomic-measurements.html" title="Yuri Ralchenko led one of the oldest teams at the National Institute for Standards and Technology. The fate of some experiments hangs in the air.">His Group Made World-Class Measurements of Atomic Elements</a><br>2025-12-02 - <a href="https://www.nytimes.com/2025/12/02/business/beta-eve-embraer-electric-planes.html" title="The deal with a company owned by Embraer gives Beta Technologies an additional source of revenue as it develops its own electric aircraft.">Beta Will Sell Motors to Another Electric Aircraft Company</a><br>2025-12-02 - <a href="https://www.nytimes.com/2025/12/02/technology/artificial-intelligence-amazon-gmail.html" title="Several new start-ups are building replicas of sites so A.I. can learn to use the internet and maybe replace white-collar workers.">Silicon Valley Builds Amazon and Gmail Copycats to Train A.I. Agents</a><br>2025-12-01 - <a href="https://www.nytimes.com/2025/12/01/technology/college-computer-science-ai-boom.html" title="At M.I.T., a new program called “artificial intelligence and decision-making” is now the second-most-popular undergraduate major.">College Students Choosing A.I. Majors Over Computer Science</a><br>2025-12-01 - <a href="https://www.nytimes.com/2025/11/30/technology/david-sacks-white-house-profits.html" title="David Sacks, the Trump administration’s A.I. and crypto czar, has helped formulate policies that aid his Silicon Valley friends and many of his own tech investments.">Silicon Valley’s Man in the White House Is Benefiting Himself and His Friends</a><br><h2>Wall Street Journal</h2><h2>BBC</h2>2025-12-04 - <a href="https://www.bbc.com/news/articles/c93nll07z3go?at_medium=RSS&at_campaign=rss" title="The regulator tells the BBC it has been emailing AVS Group Ltd without reply since July.">Porn site fined £1m over age checks has never responded to Ofcom</a><br>2025-12-03 - <a href="https://www.bbc.com/news/articles/c0mpr1mvwj3o?at_medium=RSS&at_campaign=rss" title="The London Assembly found the growth of new data centres temporarily halted building some houses in 2022.">New homes delayed by 'energy-hungry' data centres</a><br>2025-12-03 - <a href="https://www.bbc.com/news/articles/ckgzqxjzjyqo?at_medium=RSS&at_campaign=rss" title="The issue is in the spotlight after Shein announced a global ban on the sale of sex dolls with a childlike appearance.">Production halted at Chinese factory making 'childlike' sex dolls</a><br>2025-12-03 - <a href="https://www.bbc.com/news/articles/clydg2re4d1o?at_medium=RSS&at_campaign=rss" title="The order to make the registration mandatory had led to a major backlash from several cyber experts.">India scraps order to pre-install state-run cyber safety app on smartphones</a><br>2025-12-02 - <a href="https://www.bbc.com/news/articles/cx2e0y3913jo?at_medium=RSS&at_campaign=rss" title="The central bank says US stock price valuations are their most stretched since the dotcom bubble burst.">Bank of England warns of AI bubble risk</a><br>2025-12-02 - <a href="https://www.bbc.com/news/articles/cyvgq184vgqo?at_medium=RSS&at_campaign=rss" title="The donation will help seed new Trump-branded investment accounts.">Dell family to seed Trump accounts for kids with $250</a><br>2025-12-02 - <a href="https://www.bbc.com/news/articles/cze81xe3r4yo?at_medium=RSS&at_campaign=rss" title="The app, which was criticised at launch for its $11.99 (£9) a month fee, will close on 31 December.">YouTuber Marques Brownlee shutting down phone wallpaper app</a><br>2025-12-02 - <a href="https://www.bbc.com/news/articles/cwyvjyvn83go?at_medium=RSS&at_campaign=rss" title="Social media users have called the luxury Italian fashion brand's artificial intelligence-made adverts "cheap" and "lazy".">Fashion house Valentino criticised over 'disturbing' AI handbag ads</a><br>2025-12-02 - <a href="https://www.bbc.com/news/articles/c23e0k41kxeo?at_medium=RSS&at_campaign=rss" title="It will be able to monitor changes in brain function just minutes after weapon use, scientists say.">'First of its kind' scanner to study blast trauma</a><br>2025-12-01 - <a href="https://www.bbc.com/news/articles/cwyvjye18e9o?at_medium=RSS&at_campaign=rss" title="The label claims Haven's dance hit I Run was made using AI trained on the award-winning singer's voice.">Jorja Smith's record label hits out at 'AI clone' song</a><br>2025-12-01 - <a href="https://www.bbc.com/news/articles/ce8qv9319zlo?at_medium=RSS&at_campaign=rss" title="Ofcom has fined Virgin Media after an investigation found it had left thousands of vulnerable telecare customers at risk.">Virgin Media fined £24m for leaving vulnerable customers 'at risk of harm'</a><br>2025-12-02 - <a href="https://www.bbc.co.uk/sounds/play/w3ct6zps?at_medium=RSS&at_campaign=rss" title="How AI is used in songwriting and fashion. Plus, a warning on how it’s used in toys.">Tech Life</a><br><h2>SecurityBrief AU</h2><h2>ITNews AU</h2>2025-12-04 - <a href="https://www.itnews.com.au/news/india-revokes-order-to-preload-cyber-security-app-on-smartphones-622330?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed" title="After outcry.">India revokes order to preload cyber security app on smartphones</a><br>2025-12-04 - <a href="https://www.itnews.com.au/news/asx-outage-caused-by-security-software-upgrade-622331?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed" title="Deepens investors' doubts over broader tech overhaul.">ASX outage caused by security software upgrade</a><br>2025-12-02 - <a href="https://www.itnews.com.au/news/home-affairs-to-unleash-ai-on-sensitive-government-data-622118?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed" title="Upgrades from OFFICIAL to PROTECTED information.">Home Affairs to unleash AI on sensitive government data</a><br>2025-12-02 - <a href="https://www.itnews.com.au/news/south-korean-police-probe-massive-data-leak-at-coupang-622234?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed" title="Ecommerce giant's customers impacted.">South Korean police probe massive data leak at Coupang</a><br>2025-12-02 - <a href="https://www.itnews.com.au/news/watt-flags-more-fed-insourcing-after-bom-website-outrage-622228?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed" title="Lack of budget left project at mercy of contractors and vendors.">Watt flags more fed insourcing after BoM website outrage</a><br>2025-12-01 - <a href="https://www.itnews.com.au/news/wa-man-jailed-for-at-least-five-years-for-evil-twin-attack-622190?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed" title="Fake wifi on flights and at airports.">WA man jailed for at least five years for evil twin attack</a><br><h2>BleepingComputer</h2>2025-12-04 - <a href="https://www.bleepingcomputer.com/news/security/hackers-are-exploiting-arrayos-ag-vpn-flaw-to-plant-webshells/" title="Threat actors have been exploiting a command injection vulnerability in Array AG Series VPN devices to plant webshells and create rogue users. [...]">Hackers are exploiting ArrayOS AG VPN flaw to plant webshells</a><br>2025-12-04 - <a href="https://www.bleepingcomputer.com/news/security/ncscs-proactive-notifications-warns-orgs-of-flaws-in-exposed-devices/" title="The UK's National Cyber Security Center (NCSC) announced the testing phase of a new service called Proactive Notifications, designed to inform organizations in the country of vulnerabilities present in their environment. [...]">NCSC's ‘Proactive Notifications’ warns orgs of flaws in exposed devices</a><br>2025-12-04 - <a href="https://www.bleepingcomputer.com/news/security/predator-spyware-uses-new-infection-vector-for-zero-click-attacks/" title="The Predator spyware from surveillance company Intellexa has been using a zero-click infection mechanism dubbed "Aladdin" that compromised specific targets when simply viewing a malicious advertisement. [...]">Predator spyware uses new infection vector for zero-click attacks</a><br>2025-12-04 - <a href="https://www.bleepingcomputer.com/news/security/russia-blocks-facetime-and-snapchat-over-use-in-terrorist-attacks/" title="Russian telecommunications watchdog Roskomnadzor has blocked access to Apple's FaceTime video conferencing platform and the Snapchat instant messaging service, claiming they're being used to coordinate terrorist attacks. [...]">Russia blocks FaceTime and Snapchat for alleged use by terrorists</a><br>2025-12-04 - <a href="https://www.bleepingcomputer.com/news/security/cisa-warns-of-chinese-brickstorm-malware-attacks-on-vmware-servers/" title="The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned network defenders of Chinese hackers backdooring VMware vSphere servers with Brickstorm malware. [...]">CISA warns of Chinese "BrickStorm" malware attacks on VMware servers</a><br>2025-12-04 - <a href="https://www.bleepingcomputer.com/news/security/contractors-with-hacking-records-accused-of-wiping-96-govt-databases/" title="U.S. prosecutors have charged two Virginia brothers arrested on Wednesday with allegedly conspiring to steal sensitive information and destroy government databases after being fired from their jobs as federal contractors. [...]">Contractors with hacking records accused of wiping 96 govt databases</a><br>2025-12-04 - <a href="https://www.bleepingcomputer.com/news/security/critical-react2shell-flaw-in-react-nextjs-lets-hackers-run-javascript-code/" title="A maximum severity vulnerability, dubbed 'React2Shell', in the React Server Components (RSC) 'Flight' protocol allows remote code execution without authentication in React and Next.js applications. [...]">Critical React, Next.js flaw lets hackers execute code on servers</a><br>2025-12-04 - <a href="https://www.bleepingcomputer.com/news/security/how-strong-password-policies-secure-ot-systems-against-cyber-threats/" title="OT environments rely on aging systems, shared accounts, and remote access, making weak or reused passwords a major attack vector. Specops Software explains how stronger password policies and continuous checks for compromised credentials help secure critical OT infrastructure. [...]">How strong password policies secure OT systems against cyber threats</a><br>2025-12-04 - <a href="https://www.bleepingcomputer.com/news/microsoft/microsoft-bug-in-microsoft-365-license-checks-blocks-desktop-app-downloads/" title="​Microsoft is investigating and working to resolve a known issue that prevents customers from downloading Microsoft 365 desktop apps from the Microsoft 365 homepage. [...]">Microsoft 365 license check bug blocks desktop app downloads</a><br>2025-12-03 - <a href="https://www.bleepingcomputer.com/news/security/marquis-data-breach-impacts-over-74-us-banks-credit-unions/" title="Financial software provider Marquis Software Solutions is warning that it suffered a data breach that impacted dozens of banks and credit unions across the US. [...]">Marquis data breach impacts over 74 US banks, credit unions</a><br>2025-12-03 - <a href="https://www.bleepingcomputer.com/news/security/critical-flaw-in-wordpress-add-on-for-elementor-exploited-in-attacks/" title="Attackers are exploiting a critical-severity privilege escalation vulnerability (CVE-2025-8489) in the King Addons for Elementor plugin for WordPress, which lets them obtain administrative permissions during the registration process. [...]">Critical flaw in WordPress add-on for Elementor exploited in attacks</a><br>2025-12-03 - <a href="https://www.bleepingcomputer.com/news/security/french-diy-retail-giant-leroy-merlin-discloses-a-data-breach/" title="Leroy Merlin is sending security breach notifications to customers in France, informing them that their personal data was compromised. [...]">French DIY retail giant Leroy Merlin discloses a data breach</a><br>2025-12-03 - <a href="https://www.bleepingcomputer.com/news/security/freedom-mobile-discloses-data-breach-exposing-customer-data/" title="Freedom Mobile, the fourth-largest wireless carrier in Canada, has disclosed a data breach after attackers hacked into its customer account management platform and stole the personal information of an undisclosed number of customers. [...]">Freedom Mobile discloses data breach exposing customer data</a><br><h2>/r/NetSec</h2>2025-12-01 - <a href="https://www.reddit.com/r/netsec/comments/1pbe776/rnetsec_monthly_discussion_tool_thread/" title="<!-- SC_OFF --><div class="md"><p>Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.</p> <h1>Rules &amp; Guidelines</h1> <ul> <li>Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.</li> <li>Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.</li> <li>If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.</li> <li>Avoid use of memes. If you have something to say, say it with real words.</li> <li>All discussions and questions should directly relate to netsec.</li> <li>No tech support is to be requested or provided on <a href="https://www.reddit.com/r/netsec">r/netsec</a>.</li> </ul> <p>As always, the content &amp; discussion guidelines should also be observed on <a href="https://www.reddit.com/r/netsec">r/netsec</a>.</p> <h1>Feedback</h1> <p>Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/albinowax"> /u/albinowax </a> <br /> <span><a href="https://www.reddit.com/r/netsec/comments/1pbe776/rnetsec_monthly_discussion_tool_thread/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pbe776/rnetsec_monthly_discussion_tool_thread/">[comments]</a></span>">r/netsec monthly discussion & tool thread</a><br>2025-12-05 - <a href="https://www.reddit.com/r/netsec/comments/1peln7w/privilege_escalation_with_sagemaker_and_theres/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/alt69785"> /u/alt69785 </a> <br /> <span><a href="https://www.plerion.com/blog/privilege-escalation-with-sagemaker-and-execution-roles">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1peln7w/privilege_escalation_with_sagemaker_and_theres/">[comments]</a></span>">Privilege escalation with SageMaker and there's more hiding in execution roles</a><br>2025-12-04 - <a href="https://www.reddit.com/r/netsec/comments/1pe97bl/prompt_injection_inside_github_actions/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/ScottContini"> /u/ScottContini </a> <br /> <span><a href="https://www.aikido.dev/blog/promptpwnd-github-actions-ai-agents">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pe97bl/prompt_injection_inside_github_actions/">[comments]</a></span>">Prompt Injection Inside GitHub Actions</a><br>2025-12-05 - <a href="https://www.reddit.com/r/netsec/comments/1pegf92/scam_telegram_uncovering_a_network_of_groups/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/WesternBest"> /u/WesternBest </a> <br /> <span><a href="https://timsh.org/scam-telegram-investigation/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pegf92/scam_telegram_uncovering_a_network_of_groups/">[comments]</a></span>">Scam Telegram: Uncovering a network of groups spreading crypto drainers</a><br>2025-12-04 - <a href="https://www.reddit.com/r/netsec/comments/1pdpyz9/how_i_reverse_engineered_a_billiondollar_legal_ai/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/alt69785"> /u/alt69785 </a> <br /> <span><a href="https://alexschapiro.com/security/vulnerability/2025/12/02/filevine-api-100k">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pdpyz9/how_i_reverse_engineered_a_billiondollar_legal_ai/">[comments]</a></span>">How I Reverse Engineered a Billion-Dollar Legal AI Tool and Found 100k+ Confidential Files</a><br>2025-12-04 - <a href="https://www.reddit.com/r/netsec/comments/1pe2ifa/svg_clickjacking_a_novel_and_powerful_twist_on_an/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/rebane2001"> /u/rebane2001 </a> <br /> <span><a href="https://lyra.horse/blog/2025/12/svg-clickjacking/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pe2ifa/svg_clickjacking_a_novel_and_powerful_twist_on_an/">[comments]</a></span>">SVG Clickjacking: A novel and powerful twist on an old classic</a><br>2025-12-04 - <a href="https://www.reddit.com/r/netsec/comments/1pe6oyg/second_order_prompt_injection_attacks_on/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/smode21"> /u/smode21 </a> <br /> <span><a href="https://appomni.com/ao-labs/ai-agent-to-agent-discovery-prompt-injection/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pe6oyg/second_order_prompt_injection_attacks_on/">[comments]</a></span>">Second order prompt injection attacks on ServiceNow Now Assist</a><br>2025-12-03 - <a href="https://www.reddit.com/r/netsec/comments/1pdczk2/68_of_phishing_websites_are_protected_by/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/theMiddleBlue"> /u/theMiddleBlue </a> <br /> <span><a href="https://blog.sicuranext.com/68-of-phishing-websites-are-protected-by-cloudflare/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pdczk2/68_of_phishing_websites_are_protected_by/">[comments]</a></span>">68% Of Phishing Websites Are Protected by CloudFlare</a><br>2025-12-04 - <a href="https://www.reddit.com/r/netsec/comments/1pdthi6/high_fidelity_detection_mechanism_for_rscnextjs/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/Mempodipper"> /u/Mempodipper </a> <br /> <span><a href="https://slcyber.io/research-center/high-fidelity-detection-mechanism-for-rsc-next-js-rce-cve-2025-55182-cve-2025-66478/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pdthi6/high_fidelity_detection_mechanism_for_rscnextjs/">[comments]</a></span>">High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)</a><br>2025-12-04 - <a href="https://www.reddit.com/r/netsec/comments/1pdz8eb/cve_poc_search/" title="<!-- SC_OFF --><div class="md"><p>Rolling out a small research utility I have been building. It provides a simple way to look up proof-of-concept exploit links associated with a given CVE. It is not a vulnerability database. It is a discovery surface that points directly to the underlying code. Anyone can test it, inspect it, or fold it into their own workflow. </p> <p>A small rate limit is in place to stop automated scraping. The limit is visible at:</p> <p><a href="https://labs.jamessawyer.co.uk/cves/api/whoami">https://labs.jamessawyer.co.uk/cves/api/whoami</a></p> <p>An API layer sits behind it. A CVE query looks like:</p> <p>curl -i &quot;<a href="https://labs.jamessawyer.co.uk/cves/api/cves?q=CVE-2025-0282">https://labs.jamessawyer.co.uk/cves/api/cves?q=CVE-2025-0282</a>&quot;</p> <p>The Web Ui is</p> <p><a href="https://labs.jamessawyer.co.uk/cves/">https://labs.jamessawyer.co.uk/cves/</a></p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/JS-Labs"> /u/JS-Labs </a> <br /> <span><a href="https://labs.jamessawyer.co.uk/cves/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pdz8eb/cve_poc_search/">[comments]</a></span>">CVE PoC Search</a><br>2025-12-04 - <a href="https://www.reddit.com/r/netsec/comments/1pdolfo/hunting_the_hidden_gems_in_libraries/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/Salt-Consequence3647"> /u/Salt-Consequence3647 </a> <br /> <span><a href="https://blog.byteray.co.uk/hunting-hidden-gems-in-libraries-84b9588d7f80">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pdolfo/hunting_the_hidden_gems_in_libraries/">[comments]</a></span>">Hunting the hidden gems in libraries</a><br>2025-12-03 - <a href="https://www.reddit.com/r/netsec/comments/1pd8q2x/critical_security_vulnerability_in_react_server/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/unknownhad"> /u/unknownhad </a> <br /> <span><a href="https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pd8q2x/critical_security_vulnerability_in_react_server/">[comments]</a></span>">Critical Security Vulnerability in React Server Components – React</a><br>2025-12-03 - <a href="https://www.reddit.com/r/netsec/comments/1pd59ga/from_zero_to_system_building_printspoofer_from/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/AlmondOffSec"> /u/AlmondOffSec </a> <br /> <span><a href="https://bl4ckarch.github.io/posts/PrintSpoofer_from_scratch/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pd59ga/from_zero_to_system_building_printspoofer_from/">[comments]</a></span>">From Zero to SYSTEM: Building PrintSpoofer from Scratch</a><br>2025-12-03 - <a href="https://www.reddit.com/r/netsec/comments/1pd094r/pytorch_users_at_risk_unveiling_3_zeroday/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/SRMish3"> /u/SRMish3 </a> <br /> <span><a href="https://jfrog.com/blog/unveiling-3-zero-day-vulnerabilities-in-picklescan/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pd094r/pytorch_users_at_risk_unveiling_3_zeroday/">[comments]</a></span>">PyTorch Users at Risk: Unveiling 3 Zero-Day PickleScan Vulnerabilities</a><br>2025-12-03 - <a href="https://www.reddit.com/r/netsec/comments/1pdd7gt/using_clickhouse_for_realtime_l7_ddos_bot_traffic/" title="<!-- SC_OFF --><div class="md"><p>Most open-source L7 DDoS mitigation and bot-protection approaches rely on challenges (e.g., CAPTCHA or JavaScript proof-of-work) or static rules based on the User-Agent, Referer, or client geolocation. These techniques are increasingly ineffective, as they are easily bypassed by modern open-source impersonation libraries and paid cloud proxy networks.</p> <p>We explore a different approach: classifying HTTP client requests in near real time using ClickHouse as the primary analytics backend.</p> <p>We collect access logs directly from <a href="https://github.com/tempesta-tech/tempesta">Tempesta FW</a>, a high-performance open-source hybrid of an HTTP reverse proxy and a firewall. Tempesta FW implements zero-copy per-CPU log shipping into ClickHouse, so the dataset growth rate is limited only by ClickHouse bulk ingestion performance - which is very high.</p> <p><a href="https://github.com/tempesta-tech/webshield/">WebShield</a>, a small open-source Python daemon:</p> <ul> <li><p>periodically executes analytic queries to detect spikes in traffic (requests or bytes per second), response delays, surges in HTTP error codes, and other anomalies;</p></li> <li><p>upon detecting a spike, classifies the clients and validates the current model;</p></li> <li><p>if the model is validated, automatically blocks malicious clients by IP, TLS fingerprints, or HTTP fingerprints.</p></li> </ul> <p>To simplify and accelerate classification — whether automatic or manual — we introduced a new TLS fingerprinting method.</p> <p>WebShield is a small and simple daemon, yet it is effective against multi-thousand-IP botnets.</p> <p>The <a href="https://tempesta-tech.com/blog/defending-against-l7-ddos-and-web-bots-with-tempesta-fw/">full article</a> with configuration examples, ClickHouse schemas, and queries.</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/krizhanovsky"> /u/krizhanovsky </a> <br /> <span><a href="https://tempesta-tech.com/blog/defending-against-l7-ddos-and-web-bots-with-tempesta-fw/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pdd7gt/using_clickhouse_for_realtime_l7_ddos_bot_traffic/">[comments]</a></span>">Using ClickHouse for Real-Time L7 DDoS & Bot Traffic Analytics with Tempesta FW</a><br>2025-12-03 - <a href="https://www.reddit.com/r/netsec/comments/1pcrtmu/newly_allocated_cves_on_an_ics_5g_modem/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/Salt-Consequence3647"> /u/Salt-Consequence3647 </a> <br /> <span><a href="https://blog.byteray.co.uk/critical-vulnerabilities-in-rut22gw-industrial-lte-cellular-routers-f4eb8768feb7">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pcrtmu/newly_allocated_cves_on_an_ics_5g_modem/">[comments]</a></span>">Newly allocated CVEs on an ICS 5G modem</a><br>2025-12-03 - <a href="https://www.reddit.com/r/netsec/comments/1pcplsx/hacking_the_meatmeet_bbq_probe_ble_bbq_botnet/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/duduywn"> /u/duduywn </a> <br /> <span><a href="https://www.softwaresecured.com/post/hacking-the-meatmeet-bbq-probe3">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pcplsx/hacking_the_meatmeet_bbq_probe_ble_bbq_botnet/">[comments]</a></span>">Hacking the Meatmeet BBQ Probe — BLE BBQ Botnet</a><br>2025-12-03 - <a href="https://www.reddit.com/r/netsec/comments/1pd5vs2/security_research_in_the_age_of_ai_tools/" title="<!-- SC_OFF --><div class="md"><p><a href="https://invicti.com/blog/security-labs/security-research-in-the-age-of-ai-tools">https://invicti.com/blog/security-labs/security-research-in-the-age-of-ai-tools</a></p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/Ok_Information1453"> /u/Ok_Information1453 </a> <br /> <span><a href="https://invicti.com/blog/security-labs/security-research-in-the-age-of-ai-tools">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pd5vs2/security_research_in_the_age_of_ai_tools/">[comments]</a></span>">Security research in the age of AI tools</a><br>2025-12-01 - <a href="https://www.reddit.com/r/netsec/comments/1pbixwd/shai_hulud_20_analysis_and_community_resources/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/alt69785"> /u/alt69785 </a> <br /> <span><a href="https://pulse.latio.tech/p/shai-hulud-20-analysis-and-community">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pbixwd/shai_hulud_20_analysis_and_community_resources/">[comments]</a></span>">Shai Hulud 2.0: Analysis and Community Resources</a><br>2025-12-01 - <a href="https://www.reddit.com/r/netsec/comments/1pbg3pn/security_audit_of_openexr_luma/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/smaury"> /u/smaury </a> <br /> <span><a href="https://luma.com/ir16fuig?tk=F1iTz7">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pbg3pn/security_audit_of_openexr_luma/">[comments]</a></span>">Security Audit of OpenEXR · Luma</a><br>2025-12-01 - <a href="https://www.reddit.com/r/netsec/comments/1pbbq69/bind_link_edr_tampering/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/netbiosX"> /u/netbiosX </a> <br /> <span><a href="https://ipurple.team/2025/12/01/bind-link-edr-tampering/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pbbq69/bind_link_edr_tampering/">[comments]</a></span>">Bind Link – EDR Tampering</a><br>2025-12-01 - <a href="https://www.reddit.com/r/netsec/comments/1pbbatx/armo_ctrl_cloud_threat_readiness_lab_for/" title="<!-- SC_OFF --><div class="md"><p>Hey everyone, if you manage cloud infrastructure, Kubernetes, or container workloads and use tools like CSPM / CNAPP / runtime protection / WAF / IDS, you probably hope they catch real attacks. But how if they work under real-world conditions?</p> <p>That’s where ARMO CTRL comes in: it’s a free, controlled attack lab that helps you simulate real web-to-cloud attacks, and validate whether your security stack actually detects them</p> <p>What it does</p> <ul> <li>Spins up a Kubernetes lab with intentionally vulnerable services, then runs attack scenarios covering common real-world vectors: command injection, LFI, SSRF, SQL injection </li> <li>Lets you test detection across your full stack (API gateway / WAF / runtime policies / EDR / logging / SIEM / CNAPP) to see which tools fire alerts, which detect anomalous behavior, and which might miss something</li> </ul> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/Hefty-Bullfrog-9436"> /u/Hefty-Bullfrog-9436 </a> <br /> <span><a href="https://www.armosec.io/blog/armo-ctrl-cloud-threat-readiness-lab/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pbbatx/armo_ctrl_cloud_threat_readiness_lab_for/">[comments]</a></span>">ARMO CTRL: Cloud Threat Readiness Lab for Realistic Attack Testing</a><br>2025-12-01 - <a href="https://www.reddit.com/r/netsec/comments/1pbdbh9/how_i_found_a_europaeu_compromise/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/unknownhad"> /u/unknownhad </a> <br /> <span><a href="https://blog.himanshuanand.com/2025/11/how-i-found-a-europa.eu-compromise-thanks-to-cricket/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1pbdbh9/how_i_found_a_europaeu_compromise/">[comments]</a></span>">How i found a europa.eu compromise</a><br><h2>/r/InfoSecNews</h2>2025-12-05 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pegqsa/predator_spyware_uses_new_infection_vector_for/" title="<table> <tr><td> <a href="https://www.reddit.com/r/InfoSecNews/comments/1pegqsa/predator_spyware_uses_new_infection_vector_for/"> <img alt="Predator spyware uses new infection vector for zero-click attacks" src="https://external-preview.redd.it/If21b6vkyn2DjS9G4xo6KxIbQM-oLZ9dEPeIp6P5Mxc.jpeg?width=640&amp;crop=smart&amp;auto=webp&amp;s=6200bf3b9fd88eff67bc4c32de6971312523bae8" title="Predator spyware uses new infection vector for zero-click attacks" /> </a> </td><td> &#32; submitted by &#32; <a href="https://www.reddit.com/user/quellaman"> /u/quellaman </a> <br /> <span><a href="https://www.bleepingcomputer.com/news/security/predator-spyware-uses-new-infection-vector-for-zero-click-attacks/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pegqsa/predator_spyware_uses_new_infection_vector_for/">[comments]</a></span> </td></tr></table>">Predator spyware uses new infection vector for zero-click attacks</a><br>2025-12-04 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pea6t6/north_korean_state_hackers_device_infected_with/" title="<table> <tr><td> <a href="https://www.reddit.com/r/InfoSecNews/comments/1pea6t6/north_korean_state_hackers_device_infected_with/"> <img alt="North Korean State Hacker's Device Infected with LummaC2 Infostealer Shows Links to $1.4B ByBit Breach, Tools, Specs and More" src="https://external-preview.redd.it/8EtnWUJBc9e4kn8JxGOSuYYq2Bnaw94--pr2MKB-UIw.jpeg?width=640&amp;crop=smart&amp;auto=webp&amp;s=38cb977e81afe537e7fa6196ae1453d20af75b63" title="North Korean State Hacker's Device Infected with LummaC2 Infostealer Shows Links to $1.4B ByBit Breach, Tools, Specs and More" /> </a> </td><td> &#32; submitted by &#32; <a href="https://www.reddit.com/user/jamessonnycrockett"> /u/jamessonnycrockett </a> <br /> <span><a href="https://hackread.com/north-korean-hacker-device-lummac2-infostealer-bybit/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pea6t6/north_korean_state_hackers_device_infected_with/">[comments]</a></span> </td></tr></table>">North Korean State Hacker's Device Infected with LummaC2 Infostealer Shows Links to $1.4B ByBit Breach, Tools, Specs and More</a><br>2025-12-04 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pe484r/cloudflare_blocks_aisuru_botnet_powered_largest/" title="<table> <tr><td> <a href="https://www.reddit.com/r/InfoSecNews/comments/1pe484r/cloudflare_blocks_aisuru_botnet_powered_largest/"> <img alt="Cloudflare Blocks Aisuru Botnet Powered Largest Ever 29.7 Tbps DDoS Attack" src="https://external-preview.redd.it/aMKYms6YsKFQp-CYH82ORXjN08w99JddeP7diT_1NsQ.jpeg?width=640&amp;crop=smart&amp;auto=webp&amp;s=c877dc97fc38896d50718ebfee438ea7eff5bd80" title="Cloudflare Blocks Aisuru Botnet Powered Largest Ever 29.7 Tbps DDoS Attack" /> </a> </td><td> &#32; submitted by &#32; <a href="https://www.reddit.com/user/jamessonnycrockett"> /u/jamessonnycrockett </a> <br /> <span><a href="https://hackread.com/cloudflare-aisuru-botnet-ddos-attack/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pe484r/cloudflare_blocks_aisuru_botnet_powered_largest/">[comments]</a></span> </td></tr></table>">Cloudflare Blocks Aisuru Botnet Powered Largest Ever 29.7 Tbps DDoS Attack</a><br>2025-12-04 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pe6en2/contractors_with_hacking_records_accused_of/" title="<table> <tr><td> <a href="https://www.reddit.com/r/InfoSecNews/comments/1pe6en2/contractors_with_hacking_records_accused_of/"> <img alt="Contractors with hacking records accused of wiping 96 govt databases" src="https://external-preview.redd.it/Dxk-TACttdGJhi0u6WBc7r09C-E_73DoFiOqOmiN1EY.jpeg?width=640&amp;crop=smart&amp;auto=webp&amp;s=6732a759bac7568365eace14837123e0f001101e" title="Contractors with hacking records accused of wiping 96 govt databases" /> </a> </td><td> &#32; submitted by &#32; <a href="https://www.reddit.com/user/quellaman"> /u/quellaman </a> <br /> <span><a href="https://www.bleepingcomputer.com/news/security/contractors-with-hacking-records-accused-of-wiping-96-govt-databases/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pe6en2/contractors_with_hacking_records_accused_of/">[comments]</a></span> </td></tr></table>">Contractors with hacking records accused of wiping 96 govt databases</a><br>2025-12-04 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pdzrvb/webxr_flaw_hits_4_billion_chromium_users_update/" title="<table> <tr><td> <a href="https://www.reddit.com/r/InfoSecNews/comments/1pdzrvb/webxr_flaw_hits_4_billion_chromium_users_update/"> <img alt="WebXR Flaw Hits 4 Billion Chromium Users, Update Your Browser Now" src="https://external-preview.redd.it/J42_zKqMIFvxb6A32xrrCEFnRVrpi2-qslG1B_oX3aY.jpeg?width=640&amp;crop=smart&amp;auto=webp&amp;s=8c29fc2a6290950ef8cfec1dabc78f04c8101b15" title="WebXR Flaw Hits 4 Billion Chromium Users, Update Your Browser Now" /> </a> </td><td> &#32; submitted by &#32; <a href="https://www.reddit.com/user/jamessonnycrockett"> /u/jamessonnycrockett </a> <br /> <span><a href="https://hackread.com/webxr-flaw-chromium-users-browser-update/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pdzrvb/webxr_flaw_hits_4_billion_chromium_users_update/">[comments]</a></span> </td></tr></table>">WebXR Flaw Hits 4 Billion Chromium Users, Update Your Browser Now</a><br>2025-12-04 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pdzan0/newly_sold_albiriox_android_malware_targets_banks/" title="<table> <tr><td> <a href="https://www.reddit.com/r/InfoSecNews/comments/1pdzan0/newly_sold_albiriox_android_malware_targets_banks/"> <img alt="Newly Sold Albiriox Android Malware Targets Banks and Crypto Holders" src="https://external-preview.redd.it/QriEywLY4GVsP4ots-bE4aHalts47BHhC94JZwyuUEk.jpeg?width=640&amp;crop=smart&amp;auto=webp&amp;s=a943bf0b97e4ed2fff7046b3df0ad15c4601e2b3" title="Newly Sold Albiriox Android Malware Targets Banks and Crypto Holders" /> </a> </td><td> &#32; submitted by &#32; <a href="https://www.reddit.com/user/jamessonnycrockett"> /u/jamessonnycrockett </a> <br /> <span><a href="https://hackread.com/albiriox-android-malware-targets-banks-crypto/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pdzan0/newly_sold_albiriox_android_malware_targets_banks/">[comments]</a></span> </td></tr></table>">Newly Sold Albiriox Android Malware Targets Banks and Crypto Holders</a><br>2025-12-04 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pdwhno/kohlers_encrypted_smart_toilet_camera_is_not/" title="<table> <tr><td> <a href="https://www.reddit.com/r/InfoSecNews/comments/1pdwhno/kohlers_encrypted_smart_toilet_camera_is_not/"> <img alt="Kohler's Encrypted Smart Toilet Camera is not Actually end-to-end Encrypted" src="https://external-preview.redd.it/yuk44XCvbsCZnbHD6ePxCWl5Rc6-mZoLuE5YonOlNFw.jpeg?width=640&amp;crop=smart&amp;auto=webp&amp;s=93cc9cae29079d2042eb5de9cef4cab2fb7d2ae2" title="Kohler's Encrypted Smart Toilet Camera is not Actually end-to-end Encrypted" /> </a> </td><td> &#32; submitted by &#32; <a href="https://www.reddit.com/user/quellaman"> /u/quellaman </a> <br /> <span><a href="https://cybersecuritynews.com/kohlers-encrypted-smart-toilet-camera/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pdwhno/kohlers_encrypted_smart_toilet_camera_is_not/">[comments]</a></span> </td></tr></table>">Kohler's Encrypted Smart Toilet Camera is not Actually end-to-end Encrypted</a><br>2025-12-04 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pdwier/marquis_data_breach_impacts_over_74_us_banks/" title="<table> <tr><td> <a href="https://www.reddit.com/r/InfoSecNews/comments/1pdwier/marquis_data_breach_impacts_over_74_us_banks/"> <img alt="Marquis data breach impacts over 74 US banks, credit unions" src="https://external-preview.redd.it/glyKVIRBQWnLLOydcjYVyGgTR6xNeywiibJ8SW3o2qw.png?width=640&amp;crop=smart&amp;auto=webp&amp;s=dd1947fbb47657bc0434b8324b1f740ee0c012dd" title="Marquis data breach impacts over 74 US banks, credit unions" /> </a> </td><td> &#32; submitted by &#32; <a href="https://www.reddit.com/user/quellaman"> /u/quellaman </a> <br /> <span><a href="https://www.bleepingcomputer.com/news/security/marquis-data-breach-impacts-over-74-us-banks-credit-unions/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pdwier/marquis_data_breach_impacts_over_74_us_banks/">[comments]</a></span> </td></tr></table>">Marquis data breach impacts over 74 US banks, credit unions</a><br>2025-12-04 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pdwh8v/goldfactory_hits_southeast_asia_with_modified/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/quellaman"> /u/quellaman </a> <br /> <span><a href="https://thehackernews.com/2025/12/goldfactory-hits-southeast-asia-with.html">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pdwh8v/goldfactory_hits_southeast_asia_with_modified/">[comments]</a></span>">GoldFactory Hits Southeast Asia with Modified Banking Apps Driving 11,000+ Infections</a><br>2025-12-03 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pdkgx0/french_diy_retail_giant_leroy_merlin_discloses_a/" title="<table> <tr><td> <a href="https://www.reddit.com/r/InfoSecNews/comments/1pdkgx0/french_diy_retail_giant_leroy_merlin_discloses_a/"> <img alt="French DIY retail giant Leroy Merlin discloses a data breach" src="https://external-preview.redd.it/IOO4NcpDjXgIgJaBpv0anI6Wejp7aDXfPKWpn6KIcRk.jpeg?width=640&amp;crop=smart&amp;auto=webp&amp;s=894329cd5384d48ae16f7785568f68e6ef61c179" title="French DIY retail giant Leroy Merlin discloses a data breach" /> </a> </td><td> &#32; submitted by &#32; <a href="https://www.reddit.com/user/quellaman"> /u/quellaman </a> <br /> <span><a href="https://www.bleepingcomputer.com/news/security/french-diy-retail-giant-leroy-merlin-discloses-a-data-breach/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pdkgx0/french_diy_retail_giant_leroy_merlin_discloses_a/">[comments]</a></span> </td></tr></table>">French DIY retail giant Leroy Merlin discloses a data breach</a><br>2025-12-03 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pdkha2/freedom_mobile_discloses_data_breach_exposing/" title="<table> <tr><td> <a href="https://www.reddit.com/r/InfoSecNews/comments/1pdkha2/freedom_mobile_discloses_data_breach_exposing/"> <img alt="Freedom Mobile discloses data breach exposing customer data" src="https://external-preview.redd.it/J3-cquC5bPAf801d_k5ws6l43NeqvaL8ftMWoRQ6rKc.jpeg?width=640&amp;crop=smart&amp;auto=webp&amp;s=99e7510f932f5c068f06ac6442ead176f287186e" title="Freedom Mobile discloses data breach exposing customer data" /> </a> </td><td> &#32; submitted by &#32; <a href="https://www.reddit.com/user/quellaman"> /u/quellaman </a> <br /> <span><a href="https://www.bleepingcomputer.com/news/security/freedom-mobile-discloses-data-breach-exposing-customer-data/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pdkha2/freedom_mobile_discloses_data_breach_exposing/">[comments]</a></span> </td></tr></table>">Freedom Mobile discloses data breach exposing customer data</a><br>2025-12-03 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pdeehm/microsoft_silently_patches_windows_lnk_flaw_after/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/quellaman"> /u/quellaman </a> <br /> <span><a href="https://thehackernews.com/2025/12/microsoft-silently-patches-windows-lnk.html">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pdeehm/microsoft_silently_patches_windows_lnk_flaw_after/">[comments]</a></span>">Microsoft Silently Patches Windows LNK Flaw After Years of Active Exploitation</a><br>2025-12-03 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pdarok/fake_chatgpt_atlas_browser_used_in_clickfix/" title="<table> <tr><td> <a href="https://www.reddit.com/r/InfoSecNews/comments/1pdarok/fake_chatgpt_atlas_browser_used_in_clickfix/"> <img alt="Fake ChatGPT Atlas Browser Used in ClickFix Attack to Steal Passwords" src="https://external-preview.redd.it/FV5IkfYbjitCkUDCeImxsHiOp92bctNlpoUcIpUd-QI.jpeg?width=640&amp;crop=smart&amp;auto=webp&amp;s=cf6f738f7859b1d3ecd78f9477e6c961f216a809" title="Fake ChatGPT Atlas Browser Used in ClickFix Attack to Steal Passwords" /> </a> </td><td> &#32; submitted by &#32; <a href="https://www.reddit.com/user/jamessonnycrockett"> /u/jamessonnycrockett </a> <br /> <span><a href="https://hackread.com/fake-chatgpt-atlas-clickfix-steal-passwords/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pdarok/fake_chatgpt_atlas_browser_used_in_clickfix/">[comments]</a></span> </td></tr></table>">Fake ChatGPT Atlas Browser Used in ClickFix Attack to Steal Passwords</a><br>2025-12-03 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pd9xoi/deep_dive_into_dragonforce_ransomware_and_its/" title="<table> <tr><td> <a href="https://www.reddit.com/r/InfoSecNews/comments/1pd9xoi/deep_dive_into_dragonforce_ransomware_and_its/"> <img alt="Deep dive into DragonForce ransomware and its Scattered Spider connection" src="https://external-preview.redd.it/V1CiNDPcwCs4JxQO6FT50IVcDzngmA0y3WJPRtATlm4.jpeg?width=640&amp;crop=smart&amp;auto=webp&amp;s=53623e64aa21d7f0a4795a61bf190bfae732d960" title="Deep dive into DragonForce ransomware and its Scattered Spider connection" /> </a> </td><td> &#32; submitted by &#32; <a href="https://www.reddit.com/user/quellaman"> /u/quellaman </a> <br /> <span><a href="https://www.bleepingcomputer.com/news/security/deep-dive-into-dragonforce-ransomware-and-its-scattered-spider-connection/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pd9xoi/deep_dive_into_dragonforce_ransomware_and_its/">[comments]</a></span> </td></tr></table>">Deep dive into DragonForce ransomware and its Scattered Spider connection</a><br>2025-12-03 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pd9x1g/brazil_hit_by_banking_trojan_spread_via_whatsapp/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/quellaman"> /u/quellaman </a> <br /> <span><a href="https://thehackernews.com/2025/12/brazil-hit-by-banking-trojan-spread-via.html">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pd9x1g/brazil_hit_by_banking_trojan_spread_via_whatsapp/">[comments]</a></span>">Brazil Hit by Banking Trojan Spread via WhatsApp Worm and RelayNFC NFC Relay Fraud</a><br>2025-12-03 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pdefcl/wordpress_king_addons_flaw_under_active_attack/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/quellaman"> /u/quellaman </a> <br /> <span><a href="https://thehackernews.com/2025/12/wordpress-king-addons-flaw-under-active.html">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pdefcl/wordpress_king_addons_flaw_under_active_attack/">[comments]</a></span>">WordPress King Addons Flaw Under Active Attack Lets Hackers Make Admin Accounts</a><br>2025-12-03 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pdeex7/russia_blocks_roblox_over_distribution_of_lgbt/" title="<table> <tr><td> <a href="https://www.reddit.com/r/InfoSecNews/comments/1pdeex7/russia_blocks_roblox_over_distribution_of_lgbt/"> <img alt="Russia blocks Roblox over distribution of LGBT &quot;propaganda&quot;" src="https://external-preview.redd.it/IJmpKr0cDcSyFDH0Hmlx24ZPzx9MMspGclYRDgWOc1c.jpeg?width=640&amp;crop=smart&amp;auto=webp&amp;s=445276e85043b5ceb813e00f052815dd1f13fcd4" title="Russia blocks Roblox over distribution of LGBT &quot;propaganda&quot;" /> </a> </td><td> &#32; submitted by &#32; <a href="https://www.reddit.com/user/quellaman"> /u/quellaman </a> <br /> <span><a href="https://www.bleepingcomputer.com/news/security/russia-blocks-roblox-over-distribution-of-lgbt-propaganda/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pdeex7/russia_blocks_roblox_over_distribution_of_lgbt/">[comments]</a></span> </td></tr></table>">Russia blocks Roblox over distribution of LGBT "propaganda"</a><br>2025-12-03 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pdee5d/critical_rsc_bugs_in_react_and_nextjs_allow/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/quellaman"> /u/quellaman </a> <br /> <span><a href="https://thehackernews.com/2025/12/critical-rsc-bugs-in-react-and-nextjs.html">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pdee5d/critical_rsc_bugs_in_react_and_nextjs_allow/">[comments]</a></span>">Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code Execution</a><br>2025-12-03 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pd108q/7_year_long_shadypanda_attack_spied_on_43m_chrome/" title="<table> <tr><td> <a href="https://www.reddit.com/r/InfoSecNews/comments/1pd108q/7_year_long_shadypanda_attack_spied_on_43m_chrome/"> <img alt="7 Year Long ShadyPanda Attack Spied on 4.3M Chrome and Edge Users" src="https://external-preview.redd.it/L865DQ0vQRBmRXKAe8CNr-muzZx16hjcOCeRXafRuKA.jpeg?width=640&amp;crop=smart&amp;auto=webp&amp;s=0c81e59ec6e9d6d74619eb540d9b279cb3f1f4cd" title="7 Year Long ShadyPanda Attack Spied on 4.3M Chrome and Edge Users" /> </a> </td><td> &#32; submitted by &#32; <a href="https://www.reddit.com/user/jamessonnycrockett"> /u/jamessonnycrockett </a> <br /> <span><a href="https://hackread.com/shadypanda-attack-spied-chrome-edge-users/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pd108q/7_year_long_shadypanda_attack_spied_on_43m_chrome/">[comments]</a></span> </td></tr></table>">7 Year Long ShadyPanda Attack Spied on 4.3M Chrome and Edge Users</a><br>2025-12-03 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pd5oyu/researchers_spotted_lazaruss_remote_it_workers_in/" title="<table> <tr><td> <a href="https://www.reddit.com/r/InfoSecNews/comments/1pd5oyu/researchers_spotted_lazaruss_remote_it_workers_in/"> <img alt="Researchers spotted Lazarus’s remote IT workers in action" src="https://external-preview.redd.it/MaU4b7iGJDHCea4x0z_45rkxx9UXO4SiJN6FHZPwR3s.png?width=640&amp;crop=smart&amp;auto=webp&amp;s=0305c00025cd113e366c5b030f325a25329697af" title="Researchers spotted Lazarus’s remote IT workers in action" /> </a> </td><td> &#32; submitted by &#32; <a href="https://www.reddit.com/user/quellaman"> /u/quellaman </a> <br /> <span><a href="https://securityaffairs.com/185271/hacking/researchers-spotted-lazaruss-remote-it-workers-in-action.html">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pd5oyu/researchers_spotted_lazaruss_remote_it_workers_in/">[comments]</a></span> </td></tr></table>">Researchers spotted Lazarus’s remote IT workers in action</a><br>2025-12-03 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pd5obd/university_of_phoenix_discloses_data_breach_after/" title="<table> <tr><td> <a href="https://www.reddit.com/r/InfoSecNews/comments/1pd5obd/university_of_phoenix_discloses_data_breach_after/"> <img alt="University of Phoenix discloses data breach after Oracle hack" src="https://external-preview.redd.it/RQA-XZfhBOao3yHOyyGKSlGm9gx9Qf1CqYeGxS9dWbw.jpeg?width=640&amp;crop=smart&amp;auto=webp&amp;s=afc1319b224744f526f7a1b83f45873f352274c1" title="University of Phoenix discloses data breach after Oracle hack" /> </a> </td><td> &#32; submitted by &#32; <a href="https://www.reddit.com/user/quellaman"> /u/quellaman </a> <br /> <span><a href="https://www.bleepingcomputer.com/news/security/university-of-phoenix-discloses-data-breach-after-oracle-hack/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pd5obd/university_of_phoenix_discloses_data_breach_after/">[comments]</a></span> </td></tr></table>">University of Phoenix discloses data breach after Oracle hack</a><br>2025-12-03 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pd5n6l/aisuru_botnet_behind_new_recordbreaking_297_tbps/" title="<table> <tr><td> <a href="https://www.reddit.com/r/InfoSecNews/comments/1pd5n6l/aisuru_botnet_behind_new_recordbreaking_297_tbps/"> <img alt="Aisuru botnet behind new record-breaking 29.7 Tbps DDoS attack" src="https://external-preview.redd.it/c0Geu0yzuFbLf1dDLgBCHRepA2l034N4nAko-fWakvc.jpeg?width=640&amp;crop=smart&amp;auto=webp&amp;s=783314d7a104c0437c07ee355d4cfdf60d42e273" title="Aisuru botnet behind new record-breaking 29.7 Tbps DDoS attack" /> </a> </td><td> &#32; submitted by &#32; <a href="https://www.reddit.com/user/quellaman"> /u/quellaman </a> <br /> <span><a href="https://www.bleepingcomputer.com/news/security/aisuru-botnet-behind-new-record-breaking-297-tbps-ddos-attack/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pd5n6l/aisuru_botnet_behind_new_recordbreaking_297_tbps/">[comments]</a></span> </td></tr></table>">Aisuru botnet behind new record-breaking 29.7 Tbps DDoS attack</a><br>2025-12-03 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pd072u/korea_arrests_suspects_selling_intimate_videos/" title="<table> <tr><td> <a href="https://www.reddit.com/r/InfoSecNews/comments/1pd072u/korea_arrests_suspects_selling_intimate_videos/"> <img alt="Korea arrests suspects selling intimate videos from hacked IP cameras" src="https://external-preview.redd.it/0puTpl4Pp32YZ3j1p2seosO_NhQhpd4vcbxW0ruGgqo.jpeg?width=640&amp;crop=smart&amp;auto=webp&amp;s=ab501efe9513a4dc3f4a5c93ca574cc09cf3f65a" title="Korea arrests suspects selling intimate videos from hacked IP cameras" /> </a> </td><td> &#32; submitted by &#32; <a href="https://www.reddit.com/user/quellaman"> /u/quellaman </a> <br /> <span><a href="https://www.bleepingcomputer.com/news/security/korea-arrests-suspects-selling-intimate-videos-from-hacked-ip-cameras/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pd072u/korea_arrests_suspects_selling_intimate_videos/">[comments]</a></span> </td></tr></table>">Korea arrests suspects selling intimate videos from hacked IP cameras</a><br>2025-12-03 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pd44xe/malicious_rust_crate_delivers_osspecific_malware/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/quellaman"> /u/quellaman </a> <br /> <span><a href="https://thehackernews.com/2025/12/malicious-rust-crate-delivers-os.html">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pd44xe/malicious_rust_crate_delivers_osspecific_malware/">[comments]</a></span>">Malicious Rust Crate Delivers OS-Specific Malware to Web3 Developer Systems</a><br>2025-12-03 - <a href="https://www.reddit.com/r/InfoSecNews/comments/1pd44du/picklescan_bugs_allow_malicious_pytorch_models_to/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/quellaman"> /u/quellaman </a> <br /> <span><a href="https://thehackernews.com/2025/12/picklescan-bugs-allow-malicious-pytorch.html">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/InfoSecNews/comments/1pd44du/picklescan_bugs_allow_malicious_pytorch_models_to/">[comments]</a></span>">Picklescan Bugs Allow Malicious PyTorch Models to Evade Scans and Execute Code</a><br><h2>
</h2>