The Federal Bureau of Investigation has issued a new advisory warning people about a growing extortion tactic in which criminals take photos posted online, manipulate them, and present the edited images as supposed evidence during fake kidnapping attempts. The…
Ransomware keeps widening its reach
Ransomware keeps shifting into new territory, pulling in victims from sectors and regions that once saw fewer attacks. The latest Global Threat Briefing for H2 2025 from CyberCube shows incidents spreading in ways that make it harder for security leaders…
LLM privacy policies keep getting longer, denser, and nearly impossible to decode
People expect privacy policies to explain what happens to their data. What users get instead is a growing wall of text that feels harder to read each year. In a new study, researchers reviewed privacy policies for LLMs and traced…
What 35 years of privacy law say about the state of data protection
Privacy laws have expanded around the world, and security leaders now work within a crowded field of requirements. New research shows that these laws provide stronger rights and duties, but the protections do not always translate into reductions in harm.…
Firewalla Orange brings zero trust anywhere
Firewalla announced Firewalla Orange, a portable multi-gigabit cybersecurity firewall and Wi-Fi 7 router designed to reset expectations for how networks should be protected. Firewalla Orange delivers more than 2 gigabits of packet processing performance and brings enterprise grade zero trust…
Swissbit adds HID Seos to iShield Key 2
Swissbit is expanding its portfolio of multi-application security keys with the launch of the iShield Key 2, introducing a new variant featuring HID Seos, one of the most widely used credential technologies for physical access control. Following the addition of…
CISA Flags Actively Exploited GeoServer XXE Flaw in Updated KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a high-severity security flaw impacting OSGeo GeoServer to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation in the wild. The vulnerability in question is CVE-2025-58360…
React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency Mitigation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has urged federal agencies to patch the recent React2Shell vulnerability by December 12, 2025, amid reports of widespread exploitation. The critical vulnerability, tracked as CVE-2025-55182 (CVSS score: 10.0), affects the React Server…
New React RSC Vulnerabilities Enable DoS and Source Code Exposure
The React team has released fixes for two new types of flaws in React Server Components (RSC) that, if successfully exploited, could result in denial-of-service (DoS) or source code exposure. The team said the issues were found by the security…
Securing GenAI in the Browser: Policy, Isolation, and Data Controls That Actually Work
The browser has become the main interface to GenAI for most enterprises: from web-based LLMs and copilots, to GenAI‑powered extensions and agentic browsers like ChatGPT Atlas. Employees are leveraging the power of GenAI to draft emails, summarize documents, work on…
South Korean Police Raid Coupang Over Data Breach as CEO Resigns
The Coupang South Korean unit’s response will be spearheaded by an executive based in the US This article has been indexed from www.infosecurity-magazine.com Read the original article: South Korean Police Raid Coupang Over Data Breach as CEO Resigns
ICO Fines LastPass £1.2m After 2022 Breach
The UK’s data protection regulator has fined password manager provider LastPass £1.2m after 2022 data breach This article has been indexed from www.infosecurity-magazine.com Read the original article: ICO Fines LastPass £1.2m After 2022 Breach
NCSC Plugs Gap in Cyber-Deception Guidance
The National Cyber Security Centre has released new learnings from a cyber deception pilot This article has been indexed from www.infosecurity-magazine.com Read the original article: NCSC Plugs Gap in Cyber-Deception Guidance
‘DroidLock’ demands ransom, Google fixes secret Chrome 0-day, UK fines LastPass over 2022 breach
‘DroidLock’ malware demands ransom Google fixes secret Chrome 0-day UK fines LastPass over 2022 breach Huge thanks to our episode sponsor, Adaptive Security This episode is brought to you by Adaptive Security, the first cybersecurity company backed by OpenAI. Security…
New Vulnerabilities in React Server Components Allow DoS Attacks and Source Code Leaks
Less than a week after addressing a critical Remote Code Execution (RCE) vulnerability, the React team has disclosed three additional security flaws affecting React Server Components (RSC). Security researchers discovered these new issues while attempting to bypass the mitigations for…
Trump Signs Executive Order to Block State AI Regulations
Members of Congress from both parties have pushed for more regulations on AI, saying there is not enough oversight for the powerful technology. The post Trump Signs Executive Order to Block State AI Regulations appeared first on SecurityWeek. This article…
IT Security News Hourly Summary 2025-12-12 03h : 3 posts
3 posts were published in the last hour 2:4 : ISC Stormcast For Friday, December 12th, 2025 https://isc.sans.edu/podcastdetail/9736, (Fri, Dec 12th) 2:4 : Crypto-crasher Do Kwon jailed for 15 years over $40bn UST bust 2:4 : Behavioral Analysis of AI…
ISC Stormcast For Friday, December 12th, 2025 https://isc.sans.edu/podcastdetail/9736, (Fri, Dec 12th)
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Friday, December 12th, 2025…
Crypto-crasher Do Kwon jailed for 15 years over $40bn UST bust
Judge said his fraud was on ‘epic, generational scale’ Terraform Labs founder Do Kwon will spend 15 years in jail after pleading guilty to committing fraud.… This article has been indexed from The Register – Security Read the original article:…
Behavioral Analysis of AI Models Under Post-Quantum Threat Scenarios.
Explore behavioral analysis techniques for securing AI models against post-quantum threats. Learn how to identify anomalies and protect your AI infrastructure with quantum-resistant cryptography. The post Behavioral Analysis of AI Models Under Post-Quantum Threat Scenarios. appeared first on Security Boulevard.…
News alert: INE sees surge in Q4 budget shifts as enterprises embrace hands-on training for AI roles
CARY, N.C., Dec. 11, 2025, CyberNewswire — With 90% of organizations facing critical skills gaps (ISC2) and AI reshaping job roles across cybersecurity, cloud, and IT operations, enterprises are rapidly reallocating L&D budgets toward hands-on training that delivers measurable, real-world…
SHADOW-VOID-042 Targets Multiple Industries with Void Rabisu-like Tactics
In November, a targeted spear-phishing campaign was observed using Trend Micro-themed lures against various industries, but this was quickly detected and thwarted by the Trend Vision One™ platform. This article has been indexed from Trend Micro Research, News and Perspectives…
IT Security News Hourly Summary 2025-12-12 00h : 19 posts
19 posts were published in the last hour 23:4 : Over 600K Sites Exposed to Critical React Server Components Flaw 23:4 : Spiderman Phishing Kit Lets Attackers Clone European Banks in Seconds 22:55 : IT Security News Daily Summary 2025-12-11…
Over 600K Sites Exposed to Critical React Server Components Flaw
Over 644,000 domains are exposed to a critical React flaw now under active exploitation. The post Over 600K Sites Exposed to Critical React Server Components Flaw appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read…