Tech News

1. AI & Security:

   • A new phishing technique, 'CoPhish,' utilizes Microsoft Copilot Studio agents to deliver fraudulent OAuth consent requests via trusted Microsoft domains. 👉 bleepingcomputer.com
   • Experts warn that AI chatbots could rewire young minds in unpredictable ways. 👉 cybernews.com
   • A high school's AI security system confused a Doritos bag for a possible firearm. 👉 techcrunch.com
   • Researchers are hiring a biomolecular engineer to create new interfaces between neurons in the brain and other cells using gene therapy and ultrasound. 👉 sources.news
   • OpenAI is training a music model, potentially since 2020, and may be in legal battles with labels. 👉 theinformation.com

2. Data Breaches & Exploits:

   • Cybercriminals are selling access to Chinese surveillance cameras due to a critical unpatched vulnerability. 👉 threatpost.com (3 days ago)
   • Toys "R" Us Canada has warned customers about a data breach where stolen customer records were leaked. 👉 bleepingcomputer.com
   • LastPass is warning customers of a phishing campaign sending emails with an access request to the password vault as part of a legacy inheritance process. 👉 bleepingcomputer.com

3. Microsoft Security Updates:

   • Microsoft has released out-of-band security updates to patch a critical Windows Server Update Service (WSUS) vulnerability with publicly available proof-of-concept exploit code. 👉 bleepingcomputer.com
   • A critical Windows Server Update Service (WSUS) vulnerability is being exploited in attacks. 👉 bleepingcomputer.com
   • Microsoft has disabled File Explorer preview for downloads to block credential theft attacks via malicious documents. 👉 bleepingcomputer.com

4. Malware & Phishing Campaigns:

   • Hackers are stealing Discord accounts using a RedTiger-based infostealer. 👉 bleepingcomputer.com
   • A new report links a smishing campaign to over 194,000 domains with infrastructure hosted on U.S. cloud services. 👉 thehackernews.com
   • Fake reservation links are preying on travelers, causing more pain due to flight cancellations and overbooked hotels. 👉 threatpost.com (5 days ago)

5. Vulnerabilities & Exploits:

   • Hundreds of Magento stores were hit overnight as hackers are actively exploiting a new Adobe Commerce flaw. 👉 thehackernews.com
   • A critical "SessionReaper" flaw in Adobe Magento is being exploited by hackers. 👉 bleepingcomputer.com

6. Cloud Security:

   • Jingle Thief hackers exploit cloud infrastructure for gift card fraud, targeting organizations in the retail and consumer services sectors. 👉 thehackernews.com
   • The US AI data center boom is consuming capital, power, and people that the rest of the economy needs, and is crowding out Trump's manufacturing revival plans. 👉 bloomberg.com^$ (2 days ago)

7. Financial & Legal:

   • Canadian regulators have levied $176 million in fines against Cryptomus for violating anti-money laundering laws. 👉 krebsonsecurity.com
   • Treasury Secretary Scott Bessent says Trump and Xi will “consummate” a TikTok deal on Thursday in South Korea, confirming a final US-China agreement on the sale. 👉 techcrunch.com

8. Security Research & Events:

   • Hackers earned $1,024,750 for 73 zero-days at Pwn2Own Ireland. 👉 bleepingcomputer.com
   • A Washington Post article profiles Wikipedia co-founder Larry Sanger, whose claims of liberal bias are fueling a right-wing campaign against the site. 👉 washingtonpost.com (2 days ago)

9. AI in Healthcare:

   • Zocdoc CEO discusses the platform's telehealth expansion and their policy against providing medical advice via AI. 👉 theverge.com

10. Cloud Breaches:

    • Microsoft has reported that HP pulled an update that broke Microsoft Entra ID authentication on some AI PCs. 👉 bleepingcomputer.com
    • New rule from the Trump Administration to increase energy loads to data centers to support AI. 👉 gizmodo.com

11. Autonomous Systems:

    • Aurora Innovation, a self-driving truck company, is suing the Transportation Department for denying an exemption to safety regulations regarding warning signals. 👉 reason.com (1 week ago)
    • Seneca, developing autonomous firefighting drones, raised $60M in funding. 👉 forbes.com^$ (3 days ago)

12. Cryptocurrency & Blockchain:

    • Kyrgyzstan has launched a national stablecoin and a CBDC in partnership with Binance, which will also include the BNB token in its cryptocurrency reserve. 👉 reuters.com
    • Rumble plans to roll out a bitcoin tipping feature, developed in partnership with Tether, to its 51M creators in December. 👉 coindesk.com
    • Stablecoin use for payments jumps 70% since US regulation. 👉 bloomberg.com^$

13. Coding & Development:

    • Apple releases Swift SDK preview for Android, allowing developers to build Android apps in Swift. 👉 macrumors.com
    • A self-propagating worm, GlassWorm, is infecting VS Code extensions and stealing credentials in a supply chain attack. 👉 thehackernews.com
    • Canonical officially launched Canonical Academy, a new certification platform designed to help professionals validate their Linux and Ubuntu skills. 👉 news.itsfoss.com

14. Artificial Scarcity:

    • A popular LinkedIn post suggests basic AI adoption is at a "much slower pace" than claimed, and many announcements of layoffs due to AI are simply excuses. 👉 cnbc.com (1 week ago)

15. Political News:

    • Trump is expected to consummate a TikTok deal with Xi. 👉 techcrunch.com
    • It is Trump's casino economy now. 👉 nytimes.com^$
    • Fresh Off His Trump Pardon, Changpeng Zhao Helps Launch Stablecoin in Kyrgyzstan. 👉 gizmodo.com
    • Bloomberg explores how Changpeng Zhao's pardon frees him to refocus on reclaiming ground in the US market. 👉 bloomberg.com^$ (3 days ago)

16. Cyber Espionage:

    • APT36 is targeting Indian government entities with a DeskRAT malware campaign. 👉 thehackernews.com
    • North Korean hackers are targeting European defense companies with fake job offers to steal drone secrets. 👉 thehackernews.com

17. Zero Trust:

    • Zero Trust Has a Blind Spot—Your AI Agents. 👉 bleepingcomputer.com
    • A focus on why Zero Trust can't see, Token Security helps organizations govern AI identities so every agent's access, intent, and action are verified and accountable. 👉 bleepingcomputer.com

18. Ransomware:

    • KrebsOnSecurity detailed the voice phishing attacks to siphon more than a billion records from Salesforce customers earlier this year has launched a website. 👉 krebsonsecurity.com
    • Qilin ransomware by the numbers: a look inside one of the most prolific groups. 👉 cybernews.com
    • A look at ransomware attacks are on the rise. 👉 threatpost.com (3 months ago)
    • Pave Bank, which lets businesses manage both fiat and digital assets in real time, raised a $39M Series A led by Accel, with Tether and others participating. 👉 theblock.co (4 days ago)

19. Internet Outages & Attacks:

    • Amazon says this week’s AWS outage was caused by a major DNS failure. 👉 bleepingcomputer.com
    • A look at reports U.S. AI data center boom is consuming capital, power, and people that the rest of the economy needs, and is crowding out Trump's manufacturing revival plans. 👉 bloomberg.com^$ (3 days ago)
    • DDS botnet aisuru is Blankets U.S. ISPs in Record DDoS. 👉 krebsonsecurity.com

20. Email Abuse:

    • ZenDesk is being abused to flood targeted email inboxes with threatening messages and information. 👉 krebsonsecurity.com

21. Firewall Attacks:

    • Palo Alto Networks' PAN-OS is under active attack, triggering CISA warning. 👉 threatpost.com (4 days ago)

22. New Avatar Reveal:

    • Microsoft unveils Copilot's new Mico avatar. 👉 bleepingcomputer.com

23. Other Security News:

    • New Firefox extensions must disclose data collection practices. 👉 bleepingcomputer.com
    • A look at how to reduce costs with self-service password resets. 👉 bleepingcomputer.com

24. Wealth Management Funding:

• Singapore-based wealth management platform Endowus raised $70M+, bringing its total funding to $130M+, and says the new capital will boost its AI advisory tools. 👉 dealstreetasia.com

25. Defakto Funding:

• Defakto, which lets enterprises secure automated interactions between internal systems and AI agents or other non-human actors, raised a $30.75M Series B. 👉 axios.com (6 days ago)

26. Gaming Security:

• Microsoft says its Gaming Copilot feature, which recently hit Windows 11 as a public beta, uses screenshots to understand in-game events, not to train AI models. 👉 tomshardware.com

1761523800000