A Russian-speaking threat behind an ongoing, mass phishing campaign has registered more than 4,300 domain names since the start of the year. The activity , per Netcraft security researcher Andrew …
AI Security Roundup
Daily AI security roundup covering malware, vulnerabilities, defensive research, cloud risk, and incident response signals from trusted technical sources.
ai-security
EN
ThreatsDay Bulletin: Cisco 0-Days, AI Bug Bounties, Crypto Heists, State-Linked Leaks and 20 More Stories
** Nov 13, 2025 ** Ravie Lakshmanan Cybersecurity / Hacking News Behind every click, there’s a risk waiting to be tested. A simple ad, email, or link can now hide something dangerous. Hackers …
Book Review: The Business of Secrets The Business of Secrets: Adventures in Selling Encryption Around the World by Fred Kinch (May 24, 2004) From the vantage point of today, it’s surreal reading about …
ai-security
EN
When Attacks Come Faster Than Patches: Why 2026 Will be the Year of Machine-Speed Security
The Race for Every New CVE Based on multiple 2025 industry reports: roughly 50 to 61 percent of newly disclosed vulnerabilities saw exploit code weaponized within 48 hours. Using the CISA Known …
ai-security
EN
Operation Endgame Dismantles Rhadamanthys, Venom RAT, and Elysium Botnet in Global Crackdown
** Nov 13, 2025 ** Ravie Lakshmanan Botnet / Cybercrime Malware families like Rhadamanthys Stealer , Venom RAT , and the Elysium botnet have been disrupted as part of a coordinated law enforcement …
ai-security
EN
Fake Chrome Extension “Safery” Steals Ethereum Wallet Seed Phrases Using Sui Blockchain
** Nov 13, 2025 ** Ravie Lakshmanan Browser Security / Threat Intelligence Cybersecurity researchers have uncovered a malicious Chrome extension that poses as a legitimate Ethereum wallet but harbors …
Cybersecurity researchers are calling attention to a large-scale spam campaign that has flooded the npm registry with thousands of fake packages since early 2024 as part of a likely financially …
ai-security
EN
CISA Flags Critical WatchGuard Fireware Flaw Exposing 54,000 Fireboxes to No-Login Attacks
** Nov 13, 2025 ** Ravie Lakshmanan Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical security flaw impacting WatchGuard …
On Hacking Back Former DoJ attorney John Carlin writes about hackback, which he defines thus: “A hack back is a type of cyber response that incorporates a counterattack designed to proactively engage …
ai-security
EN
Microsoft Fixes 63 Security Flaws, Including a Windows Kernel Zero-Day Under Active Attack
** Nov 12, 2025 ** Ravie Lakshmanan Vulnerability / Patch Tuesday Microsoft on Tuesday released patches for 63 new security vulnerabilities identified in its software, including one that has come …
Active Directory remains the authentication backbone for over 90% of Fortune 1000 companies. AD’s importance has grown as companies adopt hybrid and cloud infrastructure, but so has its …
** Nov 12, 2025 ** Ravie Lakshmanan Network Security / Zero-Day Amazon’s threat intelligence team on Wednesday disclosed that it observed an advanced threat actor exploiting two then-zero-day …
** Nov 12, 2025 ** The Hacker News Threat Detection / Risk Management Every day, security teams face the same problem—too many risks, too many alerts, and not enough time. You fix one issue, and three …
** Nov 12, 2025 ** Ravie Lakshmanan Cybercrime / Malware Google has filed a civil lawsuit in the U.S. District Court for the Southern District of New York (SDNY) against China-based hackers who are …
Threat hunters have uncovered similarities between a banking malware called Coyote and a newly disclosed malicious program dubbed Maverick that has been propagated via WhatsApp. According to a report …
** Nov 11, 2025 ** Ravie Lakshmanan Malware / Network Security The malware known as GootLoader has resurfaced yet again after a brief spike in activity earlier this March, according to new findings …
His novel Flesh, a rags-to-riches tale exploring class and power, was described as an “extraordinary, singular novel” by chairman of the judges, Roddy Doyle. An extract from the book, performed by …
Tourists feed black-headed gulls at the Haigeng Dam in Kunming, southwest China’s Yunnan Province, Nov. 10, 2025. Black-headed gulls migrate to Kunming for the warm weather there in winter. …
The Independent Commission on UK Counter-Terrorism Law, Policy and Practice found that the current official definition of terrorism is too broad and “extends beyond acts of violence or serious threat, …
The council took legal action against the hotel owner, Somani Hotels, claiming that accommodating asylum seekers there breaches planning rules. Lawyers for Epping Forest District Council (EFDC) said …
Epping Forest District Council (EFDC) is taking legal action against Somani Hotels, which owns the Bell Hotel, claiming that accommodating asylum seekers there breaches planning rules. The company …
Prompt Injection in AI Browsers This is why AIs are not ready to be personal assistants: A new attack called ‘CometJacking’ exploits URL parameters to pass to Perplexity’s Comet AI browser hidden …
The North Korea-affiliated threat actor known as Konni (aka Earth Imp, Opal Sleet, Osmium, TA406, and Vedalia) has been attributed to a new set of attacks targeting both Android and Windows devices …
** Nov 11, 2025 ** Ravie Lakshmanan Software Supply Chain / Malware Cybersecurity researchers have discovered a malicious npm package named “@acitons/artifact” that typosquats the …
** Nov 10, 2025 ** Ravie Lakshmanan Vulnerability / Incident Response Google’s Mandiant Threat Defense on Monday said it discovered n-day exploitation of a now-patched security flaw in …