Security Industry News

Version 143.0.3650.66: December 4, 2025Fixed various bugs and performance issues, feature updates, policy updates, and web platform release notes.Stable channel security updates are listed here. https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnote-stable-channel Webroot SecureAnywhere users make sure to re-add back in the Privacy Protection area after every update. Click on GIF to see full size! 

December 4, 2025 By Bill Toulas The Predator spyware from surveillance company Intellexa has been using a zero-click infection mechanism dubbed “Aladdin,” which compromised specific targets by simply viewing a malicious advertisement.This powerful and previously unknown infection vector is meticulously hidden behind shell companies spread across multiple countries, now uncovered in a new joint investigation by Inside Story, 

And then they asked an AI to help cover their tracks December 4, 2025 By Jessica Lyons Vetting staff who handle sensitive government systems is wise, and so is cutting off their access the moment they're fired. Prosecutors say a federal contractor learned this the hard way when twin brothers previously convicted of hacking-related offenses allegedly used lingering access to delete nearly 100 government databases, including systems tied to Homeland Security and other agencies, within minutes of being terminated.The siblings allegedly hatched the plan during the call in which they were being fired, and asked an AI to help them cover their tracks.Brothers Muneeb and Sohaib Akhter, both 34, of Alexandria, Virginia, were indicted on November 13 for conspiring to delete databases used to store US government information. They both worked as federal contractors for a company that's identified as "company 1"

Related topics:Incident Detection, Response, and Prevention, Cyber Threats and Advisories, Malware, Phishing, and Ransomware 

December 3, 2025 By Lawrence Abrams Financial software provider Marquis Software Solutions is warning that it suffered a data breach that impacted dozens of banks and credit unions across the US.Marquis Software Solutions provides data analytics, CRM tools, compliance reporting, and digital marketing services to over 700 banks, credit unions, and mortgage lenders.In data breach notifications filed with US Attorney General offices, Marquis says it suffered a ransomware attack on August 14, 2025, after its network was breached through its SonicWall firewall.This allowed the hackers to steal "certain files from its systems" during the attack."The review determined that the files contained personal information received from certain business customers," reads a notification filed with Maine's AG office."The p

December 4, 2025 By Lorenzo Franceschi-Bicchierai Spyware maker Intellexa had remote access to some of its government customers’ surveillance systems, giving company staffers the ability to see the personal data of people whose phones had been hacked with its Predator spyware, according to new evidence published by Amnesty International. On Thursday, Amnesty and a coalition of media partners, including Israeli newspaper Haaretz, Greek news site 

Hackers stole the names, addresses, Social Security numbers, and financial and medical information of 9,542 people. December 4, 2025 By Ionut Arghire Pharmaceutical company Inotiv is notifying over 9,500 individuals that their personal information was stolen in a data breach resulting from a ransomware attack.The incident occurred on August 8 and was blamed for causing disruptions to certain business operations and for preventing access to certain networks and systems, including internal data storage.In a December 3 filing with the US Securities and Exchange Commission (SEC), the company revealed that it has restored access to its network and systems, and that its investigation into the matter has concluded.“Between approximately August 5-8,

December 4, 2025 By Sergiu Gatlan The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned network defenders of Chinese hackers backdooring VMware vSphere servers with Brickstorm malware.In a joint malware analysis report with the National Security Agency (NSA) and Canada's Cyber Security Centre, CISA says it analyzed eight Brickstorm malware samples.These samples were discovered on networks belonging to victim organizations, where the attackers specifically targeted VMware vSphere servers to create hidden rogue virtual machines to evade detection and steal cloned virtual machine snapshots for further credential theft.As noted in the advisory, Brickstorm uses multi

By Cara Lin | December 04, 2025 Affected Platforms: Microsoft WindowsImpacted Users: Microsoft WindowsImpact: The stolen information can be used for future attacksSeverity Level: High UDPGangster is a UDP-based backdoor associated with the MuddyWater threat group, which is known for its cyber espionage operations across the Middle East and neighboring regions. This malware enables remote control of compromised systems by allowing attackers to execute commands, exfiltrate files, and deploy additional payloads—all communicated through UDP channels designed to evade traditional network defenses.FortiGuard Labs recently observed multiple UDPGangster campaigns targeting users in Turkey, 

Dec 04, 2025 Ravie Lakshmanan Cybersecurity / Hacking NewsThink your Wi-Fi is safe? Your coding tools? Or even your favorite financial apps? This week proves again how hackers, companies, and governments are all locked in a nonst

Dec 04, 2025 Ravie Lakshmanan Cybercrime / Mobile SecurityCybercriminals associated with a financially motivated group known as GoldFactory have been observed staging a fresh round of attacks targeting mobile users in

December 3, 2025 By Bill Toulas In just three months, the massive Aisuru botnet launched more than 1,300 distributed denial-of-service attacks, one of them setting a new record with a peak at 29.7 terabits per second.Aisuru is a huge botnet-for-hire service that provides an army of routers and IoT devices compromised via known vulnerabilities or through brute-forcing weak credentials.Internet management and infrastructure company Cloudflare estimates that the botnet uses between one and four million infected hosts across the world.Cybercriminals can rent from distributors parts of the Aisuru botnet to launch distributed denial-of-service (DDoS) attacks.The largest hyper-volumetric attack from Aisuru-controlled devices occurred in the third quarter of 202

Dec 04, 2025 The Hacker NewsWeb Security / Data PrivacyAs 2025 draws to a close, security professionals face a sobering realization: the traditional playbook for web security has become dangerously obsolete. AI-powered attacks, evolving inject

December 3, 2025 By Pierluigi Paganini The University of Pennsylvania and the University of Phoenix confirm they were hit in the Oracle E-Business Suite hacking campaign.The University of Pennsylvania (Penn) and the University of Phoenix confirmed they were hit in the recent cyberattack targeting Oracle E-Business Suite customers.Penn explained that it uses Oracle’s E-Business Suite (EBS) platform for supplier payments, reimbursements, ledger entries, and other business operations. After Oracle announced that the flaw could enable unauthorized access, affecting hundreds of organizations worldwide, Penn launched an imm

December 3, 2025 By Sergiu Gatlan Freedom Mobile, the fourth-largest wireless carrier in Canada, has disclosed a data breach after attackers hacked into its customer account management platform and stole the personal information of an undisclosed number of customers.Founded in 2008 as Wind Mobile by telecommunications provider Globalive, Freedom has over 2,2 million subscribers and now says it provides coverage to 99% of Canadians.Vidéotron, a subsidiary of Canadian telecommunications company Québecor, acquired Freedom in 2023, creating the country's fourth major wireless carrier with more than 3.5 million mobile customers and nearly 7,500 employees.In a data breach notification published to

December 3, 2025 By Hilbert Hagedoorn ASUS may be dealing with a serious security incident after the Everest ransomware group publicly claimed it stole around 1 TB of internal company data. Everest posted directory screenshots to back up the claim, showing what looks like firmware-related folders, development materials, and other engineering files. ASUS hasn’t confirmed anything yet, so for now the situation remains a claimed breach rather than a verified one. Still, the volume and nature of the alleged files have already triggered plenty of discussion among security analysts. Everest states that this was not an encryption-based attack. Instead, the operation focused on extracting data and preparing it for sale. The group is known for exfiltration-driven intrusions where stolen files are monetized without disrupting normal business operations. This tre

Arizona is the latest state to sue Temu and its parent company PDD Holdings over allegations that the Chinese online retailer is stealing customers’ data.   December 3, 2025 By Associated Press Arizona Attorney General Kris Mayes announced Tuesday that Arizona is the latest state to sue Temu and its parent company PDD Holdings Inc. over allegations that the Chinese online retailer is stealing customers’ data.Mayes said the app deceives customers about the quality of its low-cost products and collects what she described as a shocking amount of sensitive data without the consent of users, including GPS locations and a list of other apps on users’ phones.According to the lawsuit, prosecutors are concerned about Temu being subject to laws i

December 2, 2025 The Federal Trade Commission is sending payments totaling nearly $15.3 million to consumers who were affected by deceptively marketed antivirus software from Avast.In February 2024, the FTC alleged that Avast used its browser extensions and antivirus software to collect, store, and sell consumers’ browsing information without adequate notice and without consumer consent. The FTC also alleged that Avast deceived users by claiming that the software would prot

MuddyWater uses a fake Snake game to gain persistence December 3, 2025 By Benedict Collins  An Iranian-aligned group is targeting Israeli and Egyptian infrastructure The group's previous attacks have been noisy and easy to detect New techniques and malware have been deployedAn Iranian-aligned hacking group tracked as 'MuddyWater' has dramatically shifted tactics in attacks against Israeli and Egyptian critical infrastructure.Previous campaigns by the group, observed by ESET Research, were characteristically noisy i

Related topics:Cybersecurity Best Practices, Critical Infrastructure Security and Resilience, Industrial Control Systems CISA and the Austra

Related topics:Cybersecurity Best Practices, Critical Infrastructure Security and Resilience, Industrial Control Systems Artificial intelligence (AI) has

December 3, 2025 By Zeljka Zorz A sprawling network that’s seemingly maintained to serve (illegal) online gambling opportunities and deliver malware to Indonesian citizens is likely also being used to provide threat actors command and control (C2) and anonymity services.“The infrastructure has been active for at least 14 years and currently spans 328,039 domains: 236,433 purchased domains, 90,125 hacked websites, and 1,481 hijacked subdomains, including subdomains of government websites,” says Kobi Ben Naim, CEO and Head of Research at Malanta.The company also discovered thousands of malicious Android applications; 38 GitHub accounts hosting web-shells, templates, and staging artifacts; and 500+ domain lookalikes masquerading as popular organizations (possibly for future credential harvesting) – all of which can be tied to the same long-standing operation, Malanta researchers claim.

Dec 03, 2025 Ravie Lakshmanan Malware / Web3 SecurityCybersecurity researchers have discovered a malicious Rust package that's capable of targeting Windows, macOS, and Linux systems, and features malicious functionality to stealthily exe

Wednesday, November 5, 2025The Stable channel has been updated to 142.0.7444.134/.135 for Windows and 142.0.7444.135 for Mac and 142.0.7444.134 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards