Tech News

1. AI Security:

   • Researchers have discovered vulnerabilities in AI inference engines from Meta, Nvidia, and Microsoft due to the unsafe use of ZeroMQ (ZMQ) and Python's pickle deserialization. 👉 thehackernews.com

2. Data Breaches:

   • DoorDash has disclosed another data breach in October, where user information was exposed. 👉 bleepingcomputer.com
   • Washington Post notifies nearly 10,000 employees and contractors that their personal and financial data was exposed in the Oracle data theft attack. 👉 bleepingcomputer.com
   • Logitech has confirmed a cybersecurity breach where an intruder exploited a zero-day in a third-party software platform and copied internal data. 👉 nerds.xyz 👉 bleepingcomputer.com

3. Ransomware and Extortion:

   • The Qilin gang claims responsibility for the Cornerstone Staffing ransomware attack, which leaked 120,000 resumes. 👉 cybernews.com
   • The Akira ransomware operation has extorted $250 million in ransomware proceeds. 👉 cybernews.com
   • UK financial technology company Checkout.com will donate a ransom instead of paying hackers after a data breach by the ShinyHunters group. 👉 bleepingcomputer.com
   • Kraken ransomware benchmarks systems for optimal encryption choice. 👉 bleepingcomputer.com
   • Scattered LAPSUS$ Hunters has launched a website threatening to publish data stolen from Fortune 500 firms if they refuse to pay a ransom. 👉 krebsonsecurity.com

4. Malware and Botnets:

   • A new ‘IndonesianFoods’ worm floods npm with 100,000 packages. 👉 bleepingcomputer.com
   • A malicious Chrome extension named "Safery" steals Ethereum wallet seed phrases using the Sui blockchain. 👉 thehackernews.com
   • CISA warns of Akira ransomware Linux encryptor targeting Nutanix VMs. 👉 bleepingcomputer.com
   • The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical security flaw impacting WatchGuard Fireware to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. 👉 thehackernews.com
   • Europol and Eurojust dismantled malware families like Rhadamanthys Stealer, Venom RAT, and the Elysium botnet in a global crackdown. 👉 thehackernews.com

5. Nation-State Attacks:

   • Five people have plead guilty to helping North Koreans infiltrate US firms as remote IT workers. 👉 bleepingcomputer.com 👉 techcrunch.com
   • Iranian hackers have launched a ‘SpearSpecter’ spy operation on defense & government targets. 👉 thehackernews.com
   • Chinese spies are using AI to target government agencies. 👉 cybernews.com
   • The White House says Alibaba is helping the Chinese military target the US, according to the Financial Times. 👉 ft.com^$

6. Vulnerabilities and Patches:

   • Microsoft's November Patch Tuesday fixes 1 zero-day and 63 flaws. 👉 bleepingcomputer.com
   • Fortinet confirms silent patch for FortiWeb zero-day exploited in attacks. 👉 bleepingcomputer.com
   • ASUS warns of critical auth bypass flaw in DSL series routers. 👉 bleepingcomputer.com
   • Cisco warns of a new firewall attack exploiting CVE-2025-20333 and CVE-2025-20362. 👉 thehackernews.com
   • Security researchers are warning that a critical authentication bypass vulnerability in Fortinet Fortiweb WAF could allow an attacker to take over admin accounts. 👉 thehackernews.com (1 day ago)
   • The ImunifyAV malware scanner for Linux server, is vulnerable to a remote code execution vulnerability that could be exploited to compromise the hosting environment. 👉 bleepingcomputer.com (1 day ago)
   • CISA warns of a WatchGuard Fireware flaw, CVE-2025-9242, that exposes 54,000 Fireboxes to no-login attacks. 👉 thehackernews.com (1 day ago)

7. Cryptocurrency:

   • The US announces a new strike force targeting Chinese crypto scammers. 👉 bleepingcomputer.com
   • The EU is pushing to let markets regulator ESMA oversee all crypto businesses and authorize new ones, shifting oversight from national regulators. 👉 bloomberg.com^$
   • Tether CEO Paolo Ardoino says the company plans to “dramatically” expand its lending to commodities traders after extending ~$1.5B worth of credit to the sector. 👉 bloomberg.com^$
   • Financial regulators in Canada levied $176 million in fines against Cryptomus, a digital payments platform supporting Russian cryptocurrency exchanges and cybercrime services. 👉 krebsonsecurity.com
   • Executives are turning to a novel structure to fund crypto accumulation vehicles as investor appetite thins, called in-kind contributions. 👉 bloomberg.com^$

8. Google:

   • Google plans to invest $40B through 2027 in three new data centers in Texas, including one co-located with a new solar and battery energy storage plant. 👉 bloomberg.com^$
   • Germany approves legislation granting Interior Ministry new powers to ban Chinese tech suppliers from critical infrastructure sectors like energy and transport. 👉 politico.eu
   • Google to pay german price comparison platform 465mln euros damages, says court. 👉 reuters.com
   • filing berkshire hathaway discloses a $4.3b stake in alphabet in q3, a surprising move given warren buffetts reluctance toward high-growth, tech-driven stocks. 👉 cnbc.com
   • Google proposes ad tech changes to settle a €2.95B EU antitrust fine, including boosting interoperability across its ad tech services, but still plans to appeal. 👉 bloomberg.com^$

9. Artificial Intelligence (AI):

   • OpenAI is piloting group chats in ChatGPT in Japan, New Zealand, South Korea, and Taiwan, allowing up to 20 users to collaborate in a shared space. 👉 openai.com
   • OpenAI says ChatGPT will now ditch em dashes if users tell it to, as em dashes have become telltale signs that supposedly signal text written by AI. 👉 techcrunch.com
   • Internal memo: Meta plans to assess employees on their “AI-driven impact”, which will be a “core expectation” of their performance from 2026. 👉 businessinsider.com^$
   • Executives are turning to a novel structure to fund crypto accumulation vehicles as investor appetite thins, called in-kind contributions. 👉 bloomberg.com^$
   • Elon Musk says Grok 5 would be released “in Q1 sometime”, later than a deadline he previously set of releasing the model by the end of 2025. 👉 theinformation.com
   • X replaces DMs with Chat, a new messaging system that it says is E2EE, supports file sharing, video calling, and more, rolling out first to iOS and the web. 👉 engadget.com
   • Samsung raised memory chip prices by up to 60% since September, according to reports — AI data center build out strangles supply. 👉 tomshardware.com
   • Publicly traded Bitcoin miner Bitfarms will wind down its BTC operations and pivot to AI infrastructure, after reporting Q3 net loss up 92% YoY to $46M. 👉 decrypt.co
   • The Economic Times reports India officially notifies its first data protection law to establish a framework for data processing, protection, and governance, including verifiable consent. 👉 economictimes.indiatimes.com
   • Google offers Ad Tech tweaks in 3 Billion Euro EU Antitrust Fight. 👉 bloomberg.com^$

10. Social Media:

    • X is replacing DMs with Chat, a new messaging system that it says is E2EE, supports file sharing, video calling, and more, rolling out first to iOS and the web. 👉 engadget.com
    • Meta, TikTok, Google, and YouTube sue California over a new law that prohibits personalized feeds for minors without parental consent, claiming it violates 1A. 👉 news.bloomberglaw.com
    • The Verge reports Meta plans to launch WhatsApp third-party app integration in Europe “over the coming months”, which is required by the DMA, starting with BirdyChat and Haiket. 👉 theverge.com

11. Business and Finance:

    • JPMorgan Chase secures deals with fintech middlemen, like Plaid, covering 95%+ of third-party data pulls, and will receive payment for access to customer data. 👉 cnbc.com
    • Filing: Berkshire Hathaway discloses a $4.3B stake in Alphabet in Q3, a surprising move given Warren Buffett's reluctance toward high-growth, tech-driven stocks. 👉 cnbc.com
    • Google plans to invest $40B through 2027 in three new data centers in Texas, including one co-located with a new solar and battery energy storage plant. 👉 bloomberg.com^$
    • Apple unveils Mini Apps Partner Program, offering a reduced 15% commission on IAPs for mini apps, or “self-contained” experiences built with web tech like HTML5. 👉 techcrunch.com
    • The Financial Times reports Tether is in talks to lead a €1B funding round in Neura Robotics, valuing the startup at €8B-€10B, as Tether seeks to expand its investment portfolio. 👉 ft.com^$

12. Cyber Espionage:

    • Chinese hackers use AI to launch automated cyber espionage campaign. 👉 cybernews.com
    • North Korean hackers turn JSON services into covert malware delivery channels. 👉 thehackernews.com

13. Car Hacking:

    • A Hyundai data breach leaked the personal data of up to 2.7 million customers in February from Hyundai AutoEver, including customer names, driver's license numbers, and social security numbers. 👉 caranddriver.com (10 months ago)

14. Television:

    • TV manufacturers are abandoning their attempts to turn TVs into interactive social devices through smart cameras. 👉 theverge.com (1 week ago)
    • Pay television penetration in American households fell to 50.2% in the third quarter and is projected to drop to 50% or lower by December. 👉 businessinsider.com^$ (1 week ago)

15. Operating Systems:

    • Opera reports an 88% surge in daily active iOS users across Europe in the 12 months ending with October, partly due to the changes mandated by the DMA. 👉 9to5mac.com

16. Data Protection:

    • India officially notifies its first data protection law to establish a framework for data processing, protection, and governance, including verifiable consent. 👉 economictimes.indiatimes.com

17. Telecoms:

    • Russian telecom operators have begun cutting mobile internet access for 24 hours for citizens returning to the country from abroad, in what officials say is an effort to prevent Ukrainian drones from using domestic SIM cards for navigation. 👉 therecord.media (3 days ago)
    • Germany to Ban Huawei From Future 6G Network in Sovereignty Push. 👉 bloomberg.com^$ (3 days ago)

18. Finance:

    • Cryptocurrency companies and fintech startups are applying to open banks in the United States. 👉 msn.com (2 weeks ago)

19. Health:

    • One of the most common viruses in the world could be the cause of lupus, an autoimmune disease with wide-ranging symptoms, according to a new study. 👉 nbcnews.com (3 weeks ago)

20. Brexit:

    • The UK's decision to leave the European Union (Brexit) in 2016 has reduced UK GDP by 6% to 8% by 2025. 👉 nber.org (3 weeks ago)

21. Singapore:

    • Singapore's central bank will hold trials to issue tokenized MAS bills next year and bring in laws to regulate stablecoins as it presses forward with plans to build a scalable and secure tokenised financial ecosystem. 👉 reuters.com (3 days ago)

22. Gaming:

    • PUBG and Subnautica 2 publisher Krafton has launched a voluntary resignation program for its domestic employees weeks after declaring it would be undergoing a "complete reorganization" to become an "AI-first" company. 👉 pcgamer.com (3 weeks ago)

23. Apple:

    • Apple's limited-edition "iPhone Pocket" sold out almost instantly worldwide despite its $150-$230 price tag. 👉 appleinsider.com

24. X Platform

    • X replaces DMs with Chat, a new messaging system with end-to-end encryption, file sharing, and video calling for iOS and web users. 👉 engadget.com

25. AI and Security

    • A state-sponsored Chinese threat actor used Anthropic's Claude Code AI coding tool for cyber espionage, marking a new level of AI exploitation in attacks. 👉 thehackernews.com

26. Web Security:

    • Google is suing individuals involved with the Lighthouse phishing kit, which has affected over a million victims. 👉 krebsonsecurity.com

27. Networking Gear:

    • The U.S. government is preparing to ban the sale of wireless routers and other networking gear from TP-Link Systems due to national security concerns. 👉 krebsonsecurity.com

28. Cybercrime:

    • A Ukrainian man, previously known only by his handle "MrICQ," was arrested in Italy and is now in U.S. custody for conspiring with the Jabber Zeus hacking group to steal millions from U.S. businesses. 👉 krebsonsecurity.com

29. Botnet Activity:

    • The Aisuru botnet, known for large DDoS attacks, is now being used to rent residential proxies, potentially fueling content scraping for AI projects. 👉 krebsonsecurity.com

1763169000000