Tech News

1. AI and Cybersecurity:

   • Threat actors are exploiting Citrix flaws by weaponizing a new AI offensive security tool called HexStrike AI, which automates vulnerability discovery. 👉 thehackernews.com
   • The AI-powered tool performs reconnaissance and vulnerability discovery, but is being weaponized by threat actors. 👉 thehackernews.com
   • New Google-funded AI search tool for Siri. 👉 bloomberg.com^$ 👉 theverge.com 👉 engadget.com 👉 gizmodo.com 👉 theinformation.com 👉 macworld.com 👉 searchengineland.com 👉 appleinsider.com 👉 finance.yahoo.com 👉 9to5mac.com 👉 macrumors.com
   • Apple might work with Google to have Gemini power a new Siri platform, and Apple is reportedly planning to launch "AI Search" inside of Siri next year. 👉 x.com

2. Data Breaches and Leaks:

   • Palo Alto Networks suffered a data breach exposing customer data and support cases due to attackers abusing stolen OAuth tokens. 👉 bleepingcomputer.com
   • Zscaler data breach exposes customer information after Salesloft Drift compromise. 👉 bleepingcomputer.com
   • A data leak exposed 252 million identities across seven countries. 👉 cybernews.com
   • Over 1 million sensitive log streams at risk. 👉 fortune.com
   • SaaS giant Workiva disclosed a data breach after a Salesforce attack. 👉 bleepingcomputer.com

3. Malware and Exploits:

   • New Android malware, Brokewell, is being delivered through fake TradingView ads. 👉 bleepingcomputer.com
   • An info stealer called TamperedChef is being distributed via fraudulent PDF editors. 👉 bleepingcomputer.com
   • Google patched 120 Android flaws in its September update, including two zero-days under active attack. 👉 bleepingcomputer.com
   • The Lazarus Group is expanding its malware arsenal with PondRAT, ThemeForestRAT, and RemotePE. 👉 thehackernews.com
   • A new backdoor, MystRodX, uses DNS and ICMP triggers for stealthy control. 👉 thehackernews.com

4. DDoS Attacks:

   • Cloudflare mitigated a record-breaking 11.5 Tbps DDoS attack. 👉 bleepingcomputer.com 👉 zdnet.com

5. Cybercrime and Law Enforcement:

   • US offers $10 million bounty for info on Russian FSB hackers. 👉 bleepingcomputer.com
   • Streameast, the world's largest illegal sports streaming platform, has been shut down after a year-long investigation. 👉 nytimes.com^$ 👉 yro.slashdot.org
   • Police disrupts Streameast, the largest pirated sports streaming network. 👉 bleepingcomputer.com
   • Anti-piracy organization ACE says a joint operation with Egyptian law enforcement shut down Streameast, the world's largest illegal sports streaming platform. 👉 nytimes.com^$
   • The FTC and Utah say Pornhub operator Aylo will pay a $5M fine to settle charges that it did little to block CSAM and non-consensual material. 👉 reuters.com
   • Police have disrupted Streameast, the largest pirated sports streaming network. 👉 bleepingcomputer.com (1 day ago)
   • Disney will pay $10M to settle claims it collected kids’ data on YouTube. 👉 bleepingcomputer.com

6. Data Privacy and Compliance:

   • France's CNIL fines Google €325M for placing tracking cookies and ads in Gmail without users' consent; Google says it is reviewing the decision. 👉 france24.com
   • France hits Google with $381 million fine for consumer protection failures. 👉 reuters.com
   • The EU's General Court backs the EU-US Data Privacy Framework, rejecting a legal challenge that US surveillance laws fall short of EU laws. 👉 bloomberg.com^$
   • US sues robot toy maker for exposing children's data to Chinese devs. 👉 bleepingcomputer.com
   • The US Department of Justice has sued toy maker Apitor Technology for allegedly allowing a Chinese third party to collect children's geolocation data without their knowledge and parental consent. 👉 bleepingcomputer.com (1 day ago)

7. Vulnerabilities and Patches:

   • CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation. 👉 thehackernews.com
   • Microsoft releases updates to fix more than 100 security flaws in Windows. 👉 krebsonsecurity.com (1 day ago)

8. Authentication and Phishing:

   • Iranian Hackers Exploit 100+ Embassy Email Accounts in Global Phishing Targeting Diplomats. 👉 thehackernews.com
   • Threat actors are abusing X’s Grok AI to spread malicious links. 👉 bleepingcomputer.com
   • Mobile phishers are targeting brokerage accounts in ramp-and-dump cashout scheme. 👉 krebsonsecurity.com

9. Cyber Espionage:

   • The US says it has disrupted Russian APT29 hackers targeting Microsoft 365. 👉 bleepingcomputer.com
   • Iranian Hackers Exploit 100+ Embassy Email Accounts in Global Phishing Targeting Diplomats. 👉 thehackernews.com
   • Hackers breach fintech firm in attempted $130M bank heist. 👉 bleepingcomputer.com (1 day ago)

10. eCommerce:

    • US v. Google: letting Google continue paying for traffic acquisition is a huge win for Apple and for Mozilla. 👉 spyglass.org

11. Artificial Intelligence:

    • An effort by the College Board to reemphasize the benefits of deep reading. 👉 bloomberg.com^$
    • Apple plans an AI search tool, World Knowledge Answers, for a spring 2026 Siri revamp. 👉 bloomberg.com^$
    • Apple is planning to launch its own artificial intelligence-powered web search tool next year, stepping up competition with OpenAI and Perplexity AI Inc. 👉 bloomberg.com^$
    • Apple's Siri ChatGPT Rival to Lean on Google AI: Report. 👉 iphoneincanada.ca
    • Facebook and Google are working on fixing chatbots. 👉 thehill.com

12. Data Privacy:

    • You can finally scroll Instagram on your iPad - after 15 years. 👉 zdnet.com
    • Meta launches Instagram for iPadOS, 15 years after its iOS debut. 👉 theverge.com
    • XAI CFO Leaves Elon Musk's AI Venture Three Months After Taking Job. 👉 bloomberg.com^$
    • Twitter X logo flare. 👉 bleepingcomputer.com
    • Judge: Google can keep Chrome, must share search data with “qualified competitors”. 👉 arstechnica.com

13. Job Market:

    • For the first time in more than four years, there are fewer open jobs in the U.S. than there are job seekers. 👉 edition.cnn.com

14. Dolby:

    • Dolby Vision 2 addresses two widespread TV viewing problems. 👉 arstechnica.com

15. Cloudflare:

    • During that just more than half-minute attack, it delivered over 5.1 billion packets per second. 👉 zdnet.com
    • This operation highlights both the rising sophistication of attack methods and the resilience of modern internet infrastructure defenses. 👉 zdnet.com

16. FreeBSD:

    • The FreeBSD Project says no thanks to code generated by LLM-based assistants. 👉 theregister.com

17. Garmin:

    • Garmin unveiled its Fenix 8 Pro with built-in inReach satellite and cellular connectivity, SOS features, and a blindingly bright 4,500-nit microLED display. 👉 macrumors.com 👉 garmin.com

18. Tesco sues Broadcom:

    • Tesco is suing Broadcom and reseller Computacenter for at least $134 million, claiming that VMware's perpetual license support agreements were breached after Broadcom's acquisition. 👉 theregister.com

19. US workers more stressed:

    • U.S. workers are becoming more stressed about their rising personal debts and financial health, a Bank of America survey showed. 👉 reuters.com

1756944600000