December 1, 2025

Vulnerability

Windows Administrator Protection, CVE-2025-60718 Microsoft AI Compute, IREN Infrastructure Microsoft Japan PPA, Renewable Energy Microsoft AI Investment, Cloud Expansion Microsoft Azure, Startup Credits Infinite Workday, AI in Work Microsoft Russia, Bankruptcy AI code generation, Microsoft AI Microsoft Layoffs, Restructuring

PoC Exploit Releases for CVE-2025-60718 – Windows Administrator Protection Elevation of Privilege Vulnerability

Ddos December 1, 2025 0
Microsoft Access end of life CVE-2025-21298 Azure Vulnerabilities

CVE-2025-54918: Windows NTLM Elevation of Privilege Vulnerability

Ddos November 26, 2025 0
Flowise Auth Bypass, Unauthenticated Registration Flowise RCE, WriteFileTool FlowiseAI, account takeover CVE-2025-58434

Critical Flowise Flaw Allows Unauthenticated Remote Admin Takeover via Exposed Registration Endpoint

Ddos November 18, 2025 0
WindowsAI Recall LPE, Symlink Attack

PoC Exploit Releases for Windows Privilege Escalation Vulnerability

Ddos November 13, 2025 0

Cyber Security

Operation Hanoi Thief: Hackers Use ‘Pseudo-Polyglot’ LNK/Image to Deploy LOTUSHARVEST Stealer via DLL Sideloading LOTUSHARVEST Stealer, Pseudo-Polyglot LNK

Operation Hanoi Thief: Hackers Use ‘Pseudo-Polyglot’ LNK/Image to Deploy LOTUSHARVEST Stealer via DLL Sideloading

December 1, 2025 0
New MaaS Operator TAG-150 Uses ClickFix Lure and Custom CastleLoader to Compromise 469 US Devices TAG-150 CastleLoader, ClickFix MaaS NetSupport RAT ClickFix, Multi-Cluster RMM

New MaaS Operator TAG-150 Uses ClickFix Lure and Custom CastleLoader to Compromise 469 US Devices

December 1, 2025 0
The “Korean Leaks” Siege: Qilin & North Korea Cripple Financial Sector via MSP Hack Korean Leaks, Qilin Ransomware

The “Korean Leaks” Siege: Qilin & North Korea Cripple Financial Sector via MSP Hack

November 28, 2025 0
Crypto Crisis: UPBIT Hacked for $369 Million in Solana-Based Tokens UPBIT $369M Hack CVE-2024-55591 Ivanti VPN vulnerability, cyber espionage

Crypto Crisis: UPBIT Hacked for $369 Million in Solana-Based Tokens

November 27, 2025 0

Malware Alert

New TangleCrypt Packer Hides EDR Killer, But Coding Flaws Cause Ransomware to Crash Unexpectedly TangleCrypt Packer, STONESTOP EDR Killer Gamaredon APT - BoneSpy and PlainGnome

New TangleCrypt Packer Hides EDR Killer, But Coding Flaws Cause Ransomware to Crash Unexpectedly

December 1, 2025 0
Russian Tomiris APT Adopts “Polyglot” Strategy, Hijacking Telegram/Discord as Covert C2 for Diplomatic Spies Tomiris APT, Polyglot C2

Russian Tomiris APT Adopts “Polyglot” Strategy, Hijacking Telegram/Discord as Covert C2 for Diplomatic Spies

December 1, 2025 0
ShadowV2 Mirai Botnet Launched Coordinated IoT Test Attack During Global AWS Outage ShadowV2 Mirai, AWS Outage Attack

ShadowV2 Mirai Botnet Launched Coordinated IoT Test Attack During Global AWS Outage

December 1, 2025 0
Bloody Wolf APT Expands to Central Asia, Deploys NetSupport RAT via Custom Java Droppers and Geo-Fencing Patchwork APT, DLL Sideloading Subtle Snail, cyber espionage ShadowSilk, cyber espionage Volt Typhoon APT Group - Chinese Cybersecurity Firm

Bloody Wolf APT Expands to Central Asia, Deploys NetSupport RAT via Custom Java Droppers and Geo-Fencing

December 1, 2025 0

Data Leak

OpenAI API Users Exposed in Mixpanel Security Breach OpenAI, Mixpanel Breach ChatGPT Data Preservation, NYT Lawsuit ChatGPT Apps SDK, super app OpenAI Jony Ive, AI Hardware Delay Musk Apple lawsuit, App Store antitrust UK AI Partnership, OpenAI Collaboration Jony Ive OpenAI, DoD Contract OpenAI Lawsuit, ChatGPT Privacy North Korea ChatGPT - GPT-4.5 model OpenAI Models, AI Advancements OpenAI pricing, Flex API

OpenAI API Users Exposed in Mixpanel Security Breach

November 28, 2025 0
UNMASKED: Massive Leak Exposes Iran’s ‘Department 40’ Cyber-Terror Unit Department 40, IRGC Cyber Leak

UNMASKED: Massive Leak Exposes Iran’s ‘Department 40’ Cyber-Terror Unit

November 27, 2025 0
Salesforce Revokes Access Tokens: Gainsight App Breach May Have Exposed Customer Data Salesforce Gainsight Breach AppExchange Security Vishing, Salesforce Attack UNC6040

Salesforce Revokes Access Tokens: Gainsight App Breach May Have Exposed Customer Data

November 21, 2025 0
9 Million Installs: Malicious Chrome VPN Extensions Hijack User Traffic Via Remote PAC Proxy Injection Chrome VPN Malware, Traffic Hijacking

9 Million Installs: Malicious Chrome VPN Extensions Hijack User Traffic Via Remote PAC Proxy Injection

November 19, 2025 0
BreachLock Named a Leader in 2025 GigaOm Radar Report for Penetration Testing as a Service (PTaaS) for Third Consecutive Year BreachLock_Leader_Gigaom_1_1764605573LlJouGPsJh

BreachLock Named a Leader in 2025 GigaOm Radar Report for Penetration Testing as a Service (PTaaS) for Third Consecutive Year

cybernewswire December 1, 2025 0
New York, New York, 1st December 2025, CyberNewsWire
Read More Read more about BreachLock Named a Leader in 2025 GigaOm Radar Report for Penetration Testing as a Service (PTaaS) for Third Consecutive Year