Endpoint Protection | OpenText Cybersecurity Community

Feds Seize Password Database Used in Massive Bank Account Takeover Scheme

The cybercriminals attempted to steal $28 million from compromised bank accounts through phishing. December 23, 2025 By Eduard KovacsThe US Justice Department announced on Monday the seizure of a web domain and a password database used by a cybercrim

1 day ago

Jasper_The_RasperModerator

Fake MAS Windows activation domain used to spread PowerShell malware

December 24, 2025 By Bill Toulas A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell scripts that infect Windows systems with the 'Cosmali Loader'.BleepingComputer has found that

60

1 day ago

TripleHelixModerator

Vulnerability Vault

Alert CISA Releases One Industrial Control Systems Advisory Release Date December 23, 2025

CISA released one Industrial Control Systems (ICS) Advisory. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-177-01 Mitsubishi Electric Air Conditioning Systems (Update

80

Microsoft security update summary's for December 2025

TripleHelixModerator

Vulnerability Vault

CVEs have been published or revised in the Security Update GuideDecember 5, 2025These common vulnerabilities and exposures (CVEs) were recently published or revised in the Microsoft Security Update Guide:CVE-2025-13630Title: Chromium: CVE-2025-13630

568

Jasper_The_RasperModerator

Sprawling 'Operation Sentinel' Neutralizes African Cybercrime Syndicates

Interpol said law enforcement across 19 countries made 574 arrests and recovered $3 million, against a backdrop of spiraling cybercrime in the region, including business email compromise, digital extortion, and ransomware schemes. December 23, 2025

Jasper_The_RasperModerator

21K Nissan customers' data stolen in Red Hat raid

Automaker's third security snafu in three years December 23, 2025 By Jessica Lyons Thousands of Nissan customers are learning that some of their personal data was leaked after unauthorized access to a Red Hat-managed server, according to the Japanese

30

WebRAT malware spread via fake vulnerability exploits on GitHub

Jasper_The_RasperModerator

Vulnerability Vault

December 23, 2025 By Bill Toulas The WebRAT malware is now being distributed through GitHub repositories that claim to host proof-of-concept exploits for recently disclosed vulnerabilities.Previously spread through pirated software and cheats for gam

70

Jasper_The_RasperModerator

US insurance giant Aflac says hackers stole personal and health data of 22.6 million people

See Also - Aflac discloses breach amidst Scattered Spider insurance attacks December 23, 2025 By Lorenzo Franceschi-Bicchierai In June, U.S. insurance giant Aflac disclosed a data breach where hackers stole customers’ personal information, including

30

Jasper_The_RasperModerator

3.5 Million Affected by University of Phoenix Data Breach

The University of Phoenix is one of the many victims of the recent Oracle EBS hacking campaign attributed to the Cl0p ransomware group. December 23, 2025 By Eduard KovacsThe University of Phoenix has admitted that millions of individuals are affected

Jasper_The_RasperModerator

Hacktivists claim near-total Spotify music scrape

December 23, 2025 By Pieter Arntz Hacktivist group Anna’s Archive claims to have scraped almost all of Spotify’s catalog and is now seeding it via BitTorrent, effectively turning a streaming platform into a roughly 300 TB pirate “preservation archiv