Artificial Intelligence Anthropic Says Claude AI Powered 90% of Chinese Espionage Campaign A state-sponsored threat actor manipulated Claude Code to execute cyberattacks on roughly 30 organizations worldwide. Ionut ArghireNovember 14, 2025
Phishing Google Says Chinese ‘Lighthouse’ Phishing Kit Disrupted Following Lawsuit The cybercriminals informed customers that their cloud server was shut down due to complaints. Eduard KovacsNovember 14, 2025
Data Breaches NHS Investigating Oracle EBS Hack Claims as Hackers Name Over 40 Alleged Victims The UK’s national healthcare system is working with the country’s National Cyber Security Centre to investigate the incident. Eduard KovacsNovember 13, 2025
Vulnerabilities Cisco ISE, CitrixBleed 2 Vulnerabilities Exploited as Zero-Days: Amazon Amazon has seen a threat actor exploiting CVE-2025-20337 and CVE-2025-5777, two critical Cisco and Citrix vulnerabilities, as zero-days. Ionut ArghireNovember 13, 2025
Cyberwarfare China’s Cyber Silence Is More Worrying Than Russia’s Noise, Chief Cybersecurity Strategist Says NTT’s chief cybersecurity strategist Mihoko Matsubara on the new geopolitics of hacking, the "chicken and egg" problem of 5G, and the AGI threat to... Kevin TownsendNovember 12, 2025
Phishing Google Sues Chinese Cybercriminals Behind ‘Lighthouse’ Phishing Kit Google is targeting the threat group known as Smishing Triad, which used over 194,000 malicious domains in a campaign. Eduard KovacsNovember 12, 2025
Vulnerabilities Microsoft Patches Actively Exploited Windows Kernel Zero-Day Microsoft’s latest Patch Tuesday updates address more than 60 vulnerabilities in Windows and other products. Eduard KovacsNovember 11, 2025
Compliance CMMC Live: Pentagon Demands Verified Cybersecurity From Contractors Enforcement of the Department of Defense’s Cybersecurity Maturity Model Certification (CMMC) requirements started on November 10, 2025. Eduard KovacsNovember 11, 2025
Artificial Intelligence ‘Whisper Leak’ LLM Side-Channel Attack Infers User Prompt Topics Attackers intercepting network traffic can determine the conversation topic with a chatbot despite end-to-end encrypted communication. Ionut ArghireNovember 11, 2025
Data Breaches Nearly 30 Alleged Victims of Oracle EBS Hack Named on Cl0p Ransomware Site The Cl0p website lists major organizations such as Logitech, The Washington Post, Cox Enterprises, Pan American Silver, LKQ Corporation, and Copeland. Eduard KovacsNovember 10, 2025
Malware & Threats Landfall Android Spyware Targeted Samsung Phones via Zero-Day Threat actors exploited CVE-2025-21042 to deliver malware via specially crafted images to users in the Middle East. Eduard KovacsNovember 7, 2025
Malware & Threats ClickFix Attacks Against macOS Users Evolving ClickFix prompts typically contain instructions for Windows users, but now they are tailored for macOS and they are getting increasingly convincing. Eduard KovacsNovember 7, 2025
M&A Tracker DOJ Antitrust Review Clears Google’s $32 Billion Acquisition of Wiz Google’s acquisition of Wiz is expected to close in 2026, but there are other reviews that need to be cleared. Eduard KovacsNovember 7, 2025
Artificial Intelligence Researchers Hack ChatGPT Memories and Web Search Features Tenable researchers discovered seven vulnerabilities, including ones affecting the latest GPT model. Eduard KovacsNovember 6, 2025
Nation-State State-Sponsored Hackers Stole SonicWall Cloud Backups in Recent Attack The threat actor stole the firewall configuration files of all SonicWall customers who used the cloud backup service. Ionut ArghireNovember 6, 2025
Artificial Intelligence Malware Now Uses AI During Execution to Mutate and Collect Data, Google Warns Google has released a report describing the novel ways in which malware has been using AI to adapt and evade detection. Eduard KovacsNovember 5, 2025
Data Breaches Nikkei Says 17,000 Impacted by Data Breach Stemming From Slack Account Hack The Japanese media giant says compromised Slack credentials were used to steal employee and business partner information. Eduard KovacsNovember 5, 2025
Malware & Threats Transportation Companies Hacked to Steal Cargo Threat actors engage in elaborate attack chains to infect trucking and logistics companies with remote access tools. Ionut ArghireNovember 4, 2025
Hacker Conversations Hacker Conversations: Kunal Agarwal and the DNA of a Hacker For Agarwal, being a hacker is not what you do, but who you are; that is, someone who always questions the status quo and... Kevin TownsendNovember 4, 2025
Malware & Threats SesameOp Malware Abuses OpenAI API A component of the newly discovered SesameOp backdoor uses the API to store and relay commands from the C&C server. Ionut ArghireNovember 4, 2025