Tech News

1. Cybercrime:

   • Iranian hacker group MuddyWater targeted over 100 government entities using the Phoenix backdoor to gather intelligence. 👉 thehackernews.com
   • Ukraine aid groups were targeted in a spear-phishing campaign called PhantomCaptcha, delivering a remote access trojan. 👉 thehackernews.com 👉 bleepingcomputer.com
   • Canada fined Cryptomus, a cybercrime-friendly platform, $176M for anti-money laundering failures. 👉 krebsonsecurity.com
   • Financial crime watchdog FINTRAC has imposed a monetary penalty of $176,960,190 on Xeltox Enterprises Ltd. 👉 fintrac-canafe.canada.ca
   • Social media giant Meta launched new anti-scam tools for WhatsApp and Messenger users. 👉 bleepingcomputer.com 👉 thehackernews.com

2. Vulnerabilities and Exploits:

   • Pwn2Own Ireland 2025 Day 2 saw hackers exploit 56 zero-day vulnerabilities for $790,000. 👉 bleepingcomputer.com
   • CISA confirmed that hackers are exploiting a Server Side Request Forgery (SSRF) flaw, tracked as CVE-2025-61884, in Oracle E-Business Suite (EBS) software and added it to its Known Exploited Vulnerabilities Catalog. 👉 bleepingcomputer.com
   • Researchers discovered a high-severity TARmageddon flaw in the async-tar Rust library that enables RCE attacks. 👉 thehackernews.com 👉 bleepingcomputer.com
   • TP-Link patched four Omada gateway flaws, two of which allow remote code execution. 👉 thehackernews.com 👉 bleepingcomputer.com
   • A new botnet, PolarEdge, is targeting Cisco, ASUS, QNAP, and Synology routers, exploiting CVE-2023-20118. 👉 thehackernews.com
   • Microsoft's October Patch Tuesday addresses 172 security holes, including two actively exploited zero-day vulnerabilities. 👉 krebsonsecurity.com

3. Data Breaches and Extortion:

   • A student loan breach exposed 2.5 million records, potentially leading to further issues. 👉 threatpost.com
   • Scattered LAPSUS$ Hunters, a cybercrime group, is extorting Salesforce customers and claiming responsibility for a Red Hat server breach. 👉 krebsonsecurity.com

4. AI and Security:

   • More than 1,100 public figures, including Prince Harry and Steve Wozniak, have signed a statement calling for a prohibition on the development of superintelligence. 👉 superintelligence-statement.org 👉 nbcnews.com
   • Google's quantum computer achieved the first verifiable quantum advantage, running a new algorithm 13,000 times faster than a top supercomputer, with applications in drug discovery and materials science. 👉 blog.google 👉 nytimes.com^$
   • Meta is cutting approximately 600 jobs from its Superintelligence Lab, including its FAIR unit. 👉 axios.com
   • Researchers detailed systemic vulnerabilities in AI agentic browsers, related to indirect prompt injection attacks. 👉 brave.com
   • The UK CMA designates Apple and Google with “strategic market status” in each of their mobile platforms, imposing stricter rules on them to improve competition. 👉 t.co 👉 gov.uk
   • Tinder plans to expand its facial verification feature to all new US users in the coming months, following its rollout in seven countries and in California. 👉 techcrunch.com
   • A new study found that 45% of responses from top AI assistants misrepresented news content with at least one significant issue. 👉 reuters.com 👉 bbc.co.uk
   • General Motors plans to roll out Google Gemini in its vehicles starting in 2026 and plans an advanced driver-assistance system with eyes-off driving capabilities in 2028. 👉 cnbc.com

5. General Tech News:

   • The Trump administration is considering barring exports of products made with US software to China in response to the country's rare earth restrictions. 👉 reuters.com
   • Sources say Apple has cut production orders for the iPhone Air to levels near “end of production” but increased those for the iPhone 17 and iPhone 17 Pro. 👉 asia.nikkei.com

6. Breaches and Hacks:

   • A deepfake video appearing to show Catherine Connolly withdrawing from Ireland's presidential election was removed from Facebook after gaining almost 30,000 views. 👉 irishtimes.com
   • A report estimates that the Jaguar Land Rover hack cost the UK economy $2.5 billion. 👉 reuters.com 👉 ft.com^$
   • A fake Nethereum NuGet package used a homoglyph trick to steal crypto wallet keys. 👉 thehackernews.com
   • Sources say Sequoia COO Sumaiya Balbale resigned after the firm refused to discipline partner Shaun Maguire over his comments calling Zohran Mamdani “an Islamist”. 👉 ft.com^$

7. Malware and Threat Actors:

   • Researchers identified the PassiveNeuron APT using the Neursite and NeuralExecutor malware to target organizations across multiple continents. 👉 thehackernews.com
   • Iranian hackers MuddyWater targeted over 100 government orgs with Phoenix backdoor (1 day ago). 👉 bleepingcomputer.com 👉 thehackernews.com
   • A 'PhantomCaptcha' ClickFix attack targeted Ukraine war relief orgs (1 day ago). 👉 bleepingcomputer.com 👉 thehackernews.com
   • Vidar Stealer 2.0 adds multi-threaded data theft and better evasion techniques (1 day ago). 👉 bleepingcomputer.com
   • A botnet, Aisuru, is now drawing a majority of its firepower from compromised IoT devices hosted on U.S. ISPs and is being blamed for a series of increasingly massive and disruptive attacks (1 day ago). 👉 krebsonsecurity.com
   • Russian hackers evolve malware pushed in "I am not a robot" captchas (1 day ago). 👉 bleepingcomputer.com
   • Chinese threat actors exploit ToolShell SharePoint flaw weeks after Microsoft's July patch (1 day ago). 👉 thehackernews.com 👉 bleepingcomputer.com
   • The financial crime watchdog FINTRAC has imposed a monetary penalty of $176,960,190 on Xeltox Enterprises Ltd. (1 day ago). 👉 fintrac-canafe.canada.ca

8. Software and Hardware:

   • Samsung unveils the Galaxy XR headset, with Android XR, 4K micro-OLED displays, a Snapdragon XR2+ Gen 2 chip, and an external battery pack, available for $1,800. 👉 bloomberg.com^$ 👉 thehackernews.com
   • Microsoft fixes bug preventing users from opening classic Outlook (1 day ago). 👉 bleepingcomputer.com

9. General Motors and Tech:

   • GM plans to roll out Google Gemini in its vehicles starting in 2026 and plans an advanced driver-assistance system with eyes-off driving capabilities in 2028. 👉 cnbc.com
   • GM will ditch Apple CarPlay and Android Auto on all its cars, not just EVs (1 day ago). 👉 theverge.com

10. Social Media and Entertainment:

    • Meta removes an AI video designed to look like RTÉ news bulletin that falsely showed Irish presidential candidate Catherine Connolly withdrawing from the race (1 day ago). 👉 irishtimes.com

11. Other:

    • The World Health Organization warns that difficult-to-treat bacterial diseases represent a growing threat (3 days ago). 👉 wired.com
    • Uber is offering grants of $4,000 for drivers to swap their gas-guzzlers for zero-tailpipe emission vehicles (3 days ago). 👉 theverge.com
    • As Diwali fireworks combined with farming fires, air pollution in New Delhi hit a five-year high this week (3 days ago). 👉 semafor.com
    • YouTube has added a new Shorts feature that makes it easier to manage how much time you're spending watching videos (3 days ago). 👉 theverge.com
    • Reuters reports that coal use hit a record high around the world last year despite efforts to switch to clean energy (3 days ago). 👉 theguardian.com
    • OpenBSD 7.8 has been released, adding Raspberry Pi 5 support, enhanced AMD Secure Encrypted Virtualization (SEV-ES) capabilities, and expanded hardware compatibility including new Qualcomm, Rockchip, and Apple ARM drivers (3 days ago). 👉 phoronix.com
    • Google is migrating all its internal workloads to run on both x86 and its custom Axion Arm chips, with major services like YouTube, Gmail, and BigQuery already running on both architectures (3 days ago). 👉 theregister.com
    • A new report notes that AI assistants routinely misrepresent news content no matter which language, territory, or AI platform is tested (3 days ago). 👉 bbc.co.uk
    • Reuters reports that Reddit sued AI startup Perplexity, accusing it of unlawfully scraping its data to train its AI-based search engine (3 days ago). 👉 reuters.com

1761178200000