Tech News

1. Data Breaches:

   • FinWise Bank disclosed a data breach affecting 689K American First Finance customers due to insider access. 👉 bleepingcomputer.com (1 day ago)
   • A student loan breach exposed 2.5 million records, potentially causing further issues. 👉 threatpost.com (3 weeks ago)
   • Luxury skincare firm Clarins Group faced a data breach exposing 600K users, with the Everest ransomware cartel claiming responsibility. 👉 cybernews.com (1 day ago)
   • A data theft and extortion campaign, UNC6040 and UNC6395, are targeting Salesforce platforms, as warned by the FBI. 👉 thehackernews.com 👉 bleepingcomputer.com (1 day ago)

2. Vulnerability Exploits & Patches:

   • The Cybersecurity and Infrastructure Security Agency (CISA) has cautioned about the active exploitation of a critical remote code execution (RCE) vulnerability, identified as CVE-2025-5086, in Dassault Systèmes DELMIA Apriso software. 👉 bleepingcomputer.com 👉 thehackernews.com (3 days ago)
   • New "Phoenix" attack bypasses Rowhammer defenses in DDR5 memory chips. 👉 bleepingcomputer.com (1 day ago)
   • Apple alerted French users about a fourth spyware campaign in 2025. 👉 thehackernews.com (3 days ago)
   • Microsoft released September Patch Tuesday updates, fixing 81 flaws including two zero-days and critical vulnerabilities in Windows NTLM and SMBv1. 👉 bleepingcomputer.com 👉 krebsonsecurity.com (1 day ago)
   • A flaw was found in a major enterprise chatbot maker that leads to cookie theft. 👉 cybernews.com (1 day ago)
   • A new ransomware strain, HybridPetya, can bypass UEFI Secure Boot using CVE-2024-7344. 👉 bleepingcomputer.com 👉 thehackernews.com (3 days ago)
   • VSCode, Cursor, and Windsurf users are being targeted by a threat actor called WhiteCobra who is planting 24 malicious extensions in the Visual Studio marketplace and the Open VSX registry. 👉 bleepingcomputer.com (3 days ago)
   • Researchers uncovered a watering hole attack, likely by APT TA423, attempting to plant the ScanBox keylogger. 👉 threatpost.com (1 week ago)

3. Mobile Security:

   • The new Apple AirPods Pro 3 features a significantly better fit, sound quality, noise cancellation and battery life. 👉 cnet.com (1 day ago)
   • Samsung released its monthly security updates for Android, including a fix for a security vulnerability that it said has been exploited in zero-day attacks. 👉 thehackernews.com (4 days ago)

4. AI & Cloud Security:

   • Microsoft is testing new AI features in Windows 11 File Explorer. 👉 bleepingcomputer.com (1 day ago)
   • Anthropic finds businesses are mainly using AI to automate work. 👉 bloomberg.com^$
   • Anthropic issued a report on Claude usage, finding 77% of business uses involve automation. 👉 anthropic.com 👉 bloomberg.com^$ (1 day ago)
   • Google says users want summaries over links as it tries to balance ‘a healthy ecosystem’ amid AI Overview lawsuit. 👉 9to5google.com (1 day ago)
   • A new AI-powered tool called Villager is attracting attention and concern in security circles. 👉 thehackernews.com (1 day ago)
   • New York University engineers develop AI system that can detect fires before alarms even sound. 👉 cybernews.com (1 day ago)

5. Malware & Threat Actors:

   • The EU's financial sanctions on bulletproof hoster Stark Industries Solutions have been circumvented through rebranding. 👉 krebsonsecurity.com (1 day ago)
   • Mustang Panda is deploying SnakeDisk USB worm to deliver Yokai backdoor on Thailand IPs. 👉 thehackernews.com (1 day ago)
   • A man gets over 4 years in prison for selling unreleased movies. 👉 bleepingcomputer.com (4 days ago)
   • China accuses Nvidia of breaking the law in microchip trade war. 👉 telegraph.co.uk (1 day ago)
   • New VoidProxy phishing service targets Microsoft 365, Google accounts. 👉 bleepingcomputer.com (2 days ago)
   • The market is now transitioning to the convenient USB-C standard. 👉 pocket-lint.com

6. Business & Financial News:

   • Alphabet becomes the fourth company to reach a $3T market cap. 👉 cnbc.com (1 day ago)
   • China rules that Nvidia violated anti-monopoly laws by acquiring Mellanox in April 2020, as the US and China negotiate tariffs in Madrid. 👉 bloomberg.com^$ (1 day ago)
   • Robinhood has filed with the SEC to launch "Robinhood Ventures Fund I," a publicly traded fund designed to give retail investors access to startup shares before IPOs. 👉 techcrunch.com 👉 slashdot.org (1 day ago)
   • Larry Ellison is on cusp of adding TikTok to his list of toys. 👉 dailykos.com
   • CoreWeave signed a new $6.3 billion order with Nvidia for cloud computing capacity through April 13, 2032. 👉 reuters.com (1 day ago)
   • A new super PAC called the Fellowship PAC says it will spend $100M+ to support pro-crypto legislators; sources say Tether is expected to be one of the backers. 👉 nytimes.com^$ (1 day ago)

7. Social Media:

   • A now-removed unlisted video on Meta's YouTube channel shows Meta Ray-Ban glasses with a HUD shown to one eye, used for Meta AI and on-foot navigation. 👉 uploadvr.com (1 day ago)
   • Trump suggests a TikTok deal with China has been made that will save the app. 👉 news.yahoo.com (1 day ago)
   • Businesses are overwhelmingly relying on Anthropic's AI software to automate rather than collaborate on work, according to a new report from the OpenAI rival, adding to the risk that AI will upend livelihoods. 👉 bloomberg.com^$ (1 day ago)
   • EU commission said Yuri and Ivan Neculiti, owners of PQ Hosting were linked to Russia's hybrid warfare efforts. 👉 eur-lex.europa.eu (4 months ago)

8. Operating Systems & Software Updates:

   • Microsoft to force install the Microsoft 365 Copilot app in October. 👉 bleepingcomputer.com (1 day ago)
   • Microsoft fixes Windows 11 audio issues confirmed in December (9 months ago). 👉 bleepingcomputer.com (1 day ago)
   • Microsoft says Windows September updates break SMBv1 shares. 👉 bleepingcomputer.com (1 day ago)
   • Apple launches iOS 26, iPadOS 26, macOS 26 Tahoe, watchOS 26, visionOS 26, and tvOS 26, featuring Liquid Glass design, new Apple Intelligence features, and more. 👉 bgr.com 👉 techmeme.com (1 day ago)
   • You Can Now Download & Upgrade to iOS 26. 👉 osxdaily.com (1 day ago)
   • Microsoft reminds of Windows 10 support ending in 30 days. 👉 bleepingcomputer.com (3 days ago)
   • Microsoft: Exchange 2016 and 2019 reach end of support in 30 days. 👉 bleepingcomputer.com (1 day ago)
   • Windows 11 23H2 Home and Pro reach end of support in 60 days. 👉 bleepingcomputer.com (4 days ago)

9. Corporate Espionage:

   • How UAE's $2B investment in Trump family's WLF is linked to the deal allowing the UAE's G42 to access AI chips, in which David Sacks played a key role. 👉 nytimes.com^$ (1 day ago)

10. Cybersecurity Tools:

    • New Whitepaper: The Evolution of Phishing Attacks. 👉 pushsecurity.com (1 day ago)
    • Stop waiting on NVD — get real-time vulnerability alerts now. 👉 secalerts.co (1 day ago)
    • MITRE Engenuity ATT&CK Evaluations: 👉 attack.mitre.org
    • Qualys TruRisk: 👉 qualys.com
    • 5 Must-Have CNAPP Features to Outpace Tomorrow's Cloud Threats. 👉 thehackernews.uk
    • Weaponized GenAI + Extortion-First Strategies Fueling a New Age of Ransomware. 👉 thehackernews.uk

11. DDoS Attacks & Botnets:

    • Oregon man charged in Rapper Bot DDoS service. 👉 krebsonsecurity.com (3 weeks ago)

12. E-commerce:

    • Scammers unleash flood of slick online gaming sites. 👉 krebsonsecurity.com (2 months ago)

13. Financial Crime:

    • PayPa launches PayPal Links, which lets users create personalized, one-time links to send money to or request payment from other PayPal users, including crypto. 👉 zdnet.com (1 day ago)
    • Mobile phishers target brokerage accounts in ramp-and-dump cashout scheme. 👉 krebsonsecurity.com (4 weeks ago)
    • FinWise insider breach impacts 689K American First Finance customers. 👉 bleepingcomputer.com (1 day ago)
    • The SEC settles a lawsuit accusing crypto exchange Gemini of failing to register the Gemini Earn lending program before offering it to retail investors. 👉 reuters.com (1 day ago)

14. Cyber Espionage:

    • Chinese APT Deploys EggStreme Fileless Malware to Breach Philippine Military Systems. 👉 thehackernews.com (4 days ago)

15. Other Security News:

    • A 20-year-old Florida man at the center of a prolific cybercrime group known as “Scattered Spider” was sentenced to 10 years in federal prison today, and ordered to pay roughly $13 million in restitution to victims. 👉 krebsonsecurity.com (4 weeks ago)
    • The FBI warns of UNC6040, UNC6395 hackers stealing Salesforce data. 👉 bleepingcomputer.com (2 days ago)
    • New York Times:   👉 nytimes.com^$ (1 day ago)
    • Snap announces Snap OS 2.0 for its Spectacles glasses, updating first-party apps and adding new features like Travel Mode and support for WebXR. 👉 uploadvr.com (1 day ago)
    • A Google executive says users increasingly want “contextual answers and summaries”, but Google is not going to abandon the model that provides “10 blue links”. 👉 theverge.com (1 day ago)
    • 6 Browser-Based Attacks Security Teams Need to Prepare For Right Now. 👉 thehackernews.com (1 day ago)
    • Cybercriminals Are Selling Access to Chinese Surveillance Cameras. 👉 threatpost.com (3 weeks ago)
    • Microsoft reminds of Windows 10 support ending in 30 days. 👉 bleepingcomputer.com (3 days ago)

16. Phishing:

    • A new phishing service named VoidProxy targets Microsoft 365 and Google accounts, including those protected by third-party single sign-on (SSO) providers such as Okta. 👉 bleepingcomputer.com (2 days ago)
    • The market is now transitioning to the convenient USB-C standard. 👉 pocket-lint.com

17. Social engineering:

    • Facebook Security Debacles: 2019 Year in Review. 👉 threatpost.com (5 years ago)

18. Cloud Security:

    • LSEG begins rollout of blockchain-powered Digital Markets Infrastructure Platform. 👉 pymnts.com (1 day ago)
    • Cloud Security: The Forecast for 2022. 👉 threatpost.com (2 years ago)

19. Cybersecurity Advice:

    • The first three things you’ll want during a cyberattack. 👉 bleepingcomputer.com (3 days ago)
    • Security Innovation: Secure Systems Start with Foundational Hardware. 👉 threatpost.com
    • About Apple software updates. 👉 support.apple.com
    • Tips how to prevent attacks on your Apple devices. 👉 theshortcut.com

20. Microsoft:

    • Microsoft says Windows September updates break SMBv1 shares. 👉 bleepingcomputer.com (1 day ago)
    • Microsoft to force install the Microsoft 365 Copilot app in October. 👉 bleepingcomputer.com (1 day ago)
    • Microsoft fixes Windows 11 audio issues confirmed in December. 👉 bleepingcomputer.com (1 day ago)
    • Microsoft reminds of Windows 10 support ending in 30 days. 👉 bleepingcomputer.com (3 days ago)
    • Microsoft: Exchange 2016 and 2019 reach end of support in 30 days. 👉 bleepingcomputer.com (1 day ago)
    • Windows 11 23H2 Home and Pro reach end of support in 60 days. 👉 bleepingcomputer.com (4 days ago)

1757981400000