Local branch had diverged from origin/master (sibling commits on the same base). Rewrote local history linearly on top of origin/master, folding in all local content: exa/hot-platform discovery hunters, leaks ledger, nightly sweep orchestrator, updated .gitignore and skill docs, plus the latest hunt output and vault state. Remote-only files (vault keys, channel scripts) were restored rather than dropped, so the resulting tree is a full union of both sides.
1 line
44 KiB
JSON
1 line
44 KiB
JSON
{"repo": "apmatlock/apmatlock.github.io", "files": {"cybersecnews/2025-11-28.html": {"029d7f51e6a740cd1f7095e6bf4b01f0d254e59a": {"t": 1786068556.175541, "n": 43488, "h": "d90587005c723685", "c": "<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"UTF-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n<title>matlock.ca // THREAT INTELLIGENCE — 2025-11-28</title>\n<link rel=\"stylesheet\" href=\"/style.css\">\n<link rel=\"alternate\" type=\"application/rss+xml\" title=\"THREAT INTELLIGENCE\" href=\"https://matlock.ca/cybersecnews/feed.xml\">\n\n<script>\n let _activeHours = null;\n\n function toggleSection(headerEl) {\n const sec = headerEl.closest('.cat-section');\n sec.classList.toggle('collapsed');\n headerEl.querySelector('.section-toggle').textContent =\n sec.classList.contains('collapsed') ? '[+]' : '[−]';\n }\n\n function expandAll() {\n document.querySelectorAll('.cat-section').forEach(s => {\n s.classList.remove('collapsed');\n const t = s.querySelector('.section-toggle');\n if (t) t.textContent = '[−]';\n });\n }\n\n function collapseAll() {\n document.querySelectorAll('.cat-section').forEach(s => {\n s.classList.add('collapsed');\n const t = s.querySelector('.section-toggle');\n if (t) t.textContent = '[+]';\n });\n }\n\n function applyFilters() {\n const inp = document.getElementById('searchInput');\n const qLow = inp ? inp.value.trim().toLowerCase() : '';\n const now = Date.now();\n\n document.querySelectorAll('.cat-section').forEach(sec => {\n let visible = 0;\n sec.querySelectorAll('.headline').forEach(row => {\n const titleOk = !qLow || (row.dataset.title || '').includes(qLow);\n let timeOk = true;\n if (_activeHours) {\n const d = row.dataset.date;\n timeOk = d ? new Date(d + 'T23:59:59').getTime() >= now - _activeHours * 3600000 : false;\n }\n const show = titleOk && timeOk;\n row.style.display = show ? '' : 'none';\n if (show) visible++;\n });\n if (qLow || _activeHours) {\n sec.style.display = visible > 0 ? '' : 'none';\n if (visible > 0 && qLow && sec.classList.contains('collapsed')) {\n sec.classList.remove('collapsed');\n const t = sec.querySelector('.section-toggle');\n if (t) t.textContent = '[−]';\n }\n } else {\n sec.style.display = '';\n }\n });\n }\n\n function filterTime(hours, btn) {\n _activeHours = hours;\n document.querySelectorAll('.time-filter-btn').forEach(b => b.classList.remove('active'));\n btn.classList.add('active');\n applyFilters();\n }\n\n window.addEventListener('scroll', () => {\n const btn = document.getElementById('jumpTopBtn');\n if (btn) btn.style.display = window.scrollY > 400 ? 'block' : 'none';\n });\n</script>\n</head>\n<body>\n<header class=\"site-header\">\n <a class=\"brand\" href=\"/\">MATLOCK<span class=\"dot\">.</span>CA</a>\n <nav class=\"primary\">\n <a href=\"/\">Home</a>\n <a href=\"/claudeblog/\">Walkthroughs</a>\n <a href=\"/cybersecnews/index.html\" class=\"current\">Threat Intel</a>\n <a href=\"/blog/\">Blog</a>\n <a href=\"https://www.linkedin.com/in/paulmatlock/\" target=\"_blank\" rel=\"noopener\">LinkedIn</a>\n <a href=\"/cybersecnews/feed.xml\">RSS</a>\n </nav>\n</header>\n\n<nav class=\"subnav\">\n <span class=\"nav-label\">// JUMP</span>\n<a href=\"archive.html\">Archive</a>\n<a href=\"2026-05-23.html\">23 May</a>\n<a href=\"index.html\">Today</a>\n<a href=\"2026-05-21.html\">Yesterday</a>\n<a href=\"2026-05-20.html\">20 May</a>\n<a href=\"2026-05-19.html\">19 May</a>\n<a href=\"2026-05-18.html\">18 May</a>\n<a href=\"2026-05-17.html\">17 May</a>\n\n</nav>\n<main class=\"container wide\">\n\n <div class=\"stats-bar\">\n <div class=\"stat\"><span class=\"stat-value\">50</span><span class=\"stat-label\">Articles</span></div>\n <div class=\"stat\"><span class=\"stat-value\">6</span><span class=\"stat-label\">Categories</span></div>\n <div class=\"stat\"><span class=\"stat-value\">2025-11-28</span><span class=\"stat-label\">Date</span></div>\n </div>\n <div class=\"search-wrap\">\n <label for=\"searchInput\">// SEARCH</label>\n <input type=\"text\" id=\"searchInput\" class=\"search-input\" placeholder=\"filter articles by title...\" autocomplete=\"off\" oninput=\"applyFilters()\">\n <button class=\"time-filter-btn\" onclick=\"expandAll()\">EXPAND ALL</button>\n <button class=\"time-filter-btn\" onclick=\"collapseAll()\">COLLAPSE ALL</button>\n </div>\n<div class=\"cat-section\" id=\"cat-cisa-kev\">\n <div class=\"section-title cat-section-header\" style=\"border-left:4px solid rgba(255,51,0,0.7);\" onclick=\"toggleSection(this)\">🚨 CISA KEV <span class=\"filter-count\">1</span><span class=\"section-toggle\">[−]</span></div>\n <div class=\"cat-section-body headlines\">\n<div class=\"headline\" data-title=\"cisa adds one known exploited vulnerability to catalog\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov <span class=\"kev-badge\">KEV</span></span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.cisa.gov/news-events/alerts/2025/11/28/cisa-adds-one-known-exploited-vulnerability-catalog\" target=\"_blank\" rel=\"noopener\">CISA Adds One Known Exploited Vulnerability to Catalog</a><span class=\"article-summary\">CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2021-26829 OpenPLC ScadaBR Cross-site Scripting Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber…</span></span><span class=\"headline-source\">CISA.GOV</span></div>\n </div>\n</div>\n<div class=\"cat-section\" id=\"cat-vulnerability-disclosure\">\n <div class=\"section-title cat-section-header\" style=\"border-left:4px solid rgba(255,140,0,0.5);\" onclick=\"toggleSection(this)\">⚠️ VULNERABILITY DISCLOSURE <span class=\"filter-count\">16</span><span class=\"section-toggle\">[−]</span></div>\n <div class=\"cat-section-body headlines\">\n<div class=\"headline\" data-title=\"security researchers caution app developers about risks in using google antigravity\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.csoonline.com/article/4097698/security-researchers-caution-app-developers-about-risks-in-using-google-antigravity.html\" target=\"_blank\" rel=\"noopener\">Security researchers caution app developers about risks in using Google Antigravity</a><span class=\"article-summary\">Google’s Antigravity development tool for creating artificial intelligence agents has been out for less than 11 days and already the company has been forced to update the known issues pages after security researchers discovered what they say are vulnerabilities. According to a bl…</span></span><span class=\"headline-source\">CSOONLINE.COM</span></div>\n<div class=\"headline\" data-title=\"eu ‘chat control’ proposals should be red flag to businesses everywhere\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.csoonline.com/article/4097728/eu-chat-control-proposals-should-be-red-flag-to-businesses-everywhere.html\" target=\"_blank\" rel=\"noopener\">EU ‘Chat Control’ proposals should be red flag to businesses everywhere</a><span class=\"article-summary\">Data privacy campaigners have warned that any celebration of the news that the European Union (EU) has abandoned its plans to break end-to-end encryption in mobile messaging apps could be short-lived. According to one expert, this announcement should be a “red flag” to organizati…</span></span><span class=\"headline-source\">CSOONLINE.COM</span></div>\n<div class=\"headline\" data-title=\"espionage and intelligence - what cybersecurity professionals can learn\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://cybersecuritytoday.libsyn.com/espionage-and-intelligence-what-cybersecurity-professionals-can-learn\" target=\"_blank\" rel=\"noopener\">Espionage and Intelligence - What Cybersecurity Professionals Can Learn</a><span class=\"article-summary\">The Intersection of Espionage Techniques and Cybersecurity Threats This episode explores the parallels between espionage and cybersecurity, particularly focusing on social engineering tactics used in both domains. Hosted by Jim Love, the podcast features insights from Neil Bisson…</span></span><span class=\"headline-source\">CYBERSECURITYTODAY.LIBSYN.COM</span></div>\n<div class=\"headline\" data-title=\"london councils hit by cyberattack, disrupts it and telephone lines\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://gbhackers.com/london-councils-hit-by-cyberattack/\" target=\"_blank\" rel=\"noopener\">London Councils Hit by Cyberattack, Disrupts IT and Telephone Lines</a><span class=\"article-summary\">The Royal Borough of Kensington and Chelsea (RBKC), Westminster City Council, and Hammersmith and Fulham Council confirmed they were targeted in the incident that began on Monday, November 24. The attack has forced officials to shut down systems as a precautionary measure while t…</span></span><span class=\"headline-source\">GBHACKERS.COM</span></div>\n<div class=\"headline\" data-title=\"kawaiigpt: a free wormgpt clone using deepseek, gemini, and kimi-k2 models\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://gbhackers.com/kawaiigpt-a-free-wormgpt-clone-powered/\" target=\"_blank\" rel=\"noopener\">KawaiiGPT: A Free WormGPT Clone Using DeepSeek, Gemini, and Kimi-K2 Models</a><span class=\"article-summary\">A new open-source tool called KawaiiGPT has surfaced on GitHub, positioning itself as a “cute” but unrestricted version of artificial intelligence. Developed by a user known as MrSanZz (along with contributors Shoukaku07 and FlamabyX5), the project is attracting atten…</span></span><span class=\"headline-source\">GBHACKERS.COM</span></div>\n<div class=\"headline\" data-title=\"empathetic policy engineering: the secret to better security behavior and awareness\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.csoonline.com/article/4092639/empathy-meets-it-security-the-path-to-active-compliance.html\" target=\"_blank\" rel=\"noopener\">Empathetic policy engineering: The secret to better security behavior and awareness</a><span class=\"article-summary\">In many companies, IT security guidelines encounter resistance because employees perceive them as obstructive or impractical. This makes implementation difficult, undermines effectiveness, and strains collaboration between the security department and business units. As a result, …</span></span><span class=\"headline-source\">CSOONLINE.COM</span></div>\n<div class=\"headline\" data-title=\"scattered lapsus$ hunters target zendesk users with fake domains\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.csoonline.com/article/4097846/scattered-lapsus-hunters-target-zendesk-users-with-fake-domains.html\" target=\"_blank\" rel=\"noopener\">Scattered Lapsus$ Hunters target Zendesk users with fake domains</a><span class=\"article-summary\">Scattered Lapsus$ Hunters targeted Zendesk users through more than 40 fake domains designed to steal credentials and install malware, security researchers said. The fake domains, registered over the past six months, had the same setup as the one used in the cybercrime group’s Aug…</span></span><span class=\"headline-source\">CSOONLINE.COM</span></div>\n<div class=\"headline\" data-title=\"romcom tries dropping a not-so-romantic payload on ukraine-linked us firms\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.csoonline.com/article/4097944/romcom-tries-dropping-a-not-so-romantic-payload-on-ukraine-linked-us-firms.html\" target=\"_blank\" rel=\"noopener\">RomCom tries dropping a not-so-romantic payload on Ukraine-linked US firms</a><span class=\"article-summary\">US firms with ties to projects supporting Ukraine are being targeted by the Russia-aligned RomCom group, which is using fake software updates to drop the Mythic Agent onto victim systems. In September 2025, Arctic Wolf Labs detected a campaign against a US engineering firm that h…</span></span><span class=\"headline-source\">CSOONLINE.COM</span></div>\n<div class=\"headline\" data-title=\"google-antigravity-lücke: ki-coding-tool anfällig für angriffe\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.csoonline.com/article/4097974/google-antigravity-lucke-ki-coding-tool-anfallig-fur-angriffe.html\" target=\"_blank\" rel=\"noopener\">Google-Antigravity-Lücke: KI-Coding-Tool anfällig für Angriffe</a><span class=\"article-summary\">Eine Sicherheitslücke in Googles KI-Coding-Tool Antigravity erlaubt es Angreifern, Schadcode einzuschleusen. Koshiro K – shutterstock.com Anfang November brachte Google sein KI-gestütztes Coding-Tool Antigravity an den Start. Doch bereits nach 24 Stunden (?) sind Forscher des Sec…</span></span><span class=\"headline-source\">CSOONLINE.COM</span></div>\n<div class=\"headline\" data-title=\"prompt injection through poetry\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.schneier.com/blog/archives/2025/11/prompt-injection-through-poetry.html\" target=\"_blank\" rel=\"noopener\">Prompt Injection Through Poetry</a><span class=\"article-summary\">In a new paper, “ Adversarial Poetry as a Universal Single-Turn Jailbreak Mechanism in Large Language Models ,” researchers found that turning LLM prompts into poetry resulted in jailbreaking the models: Abstract : We present evidence that adversarial poetry functions…</span></span><span class=\"headline-source\">SCHNEIER.COM</span></div>\n<div class=\"headline\" data-title=\"cybercriminals register 18,000 holiday-themed domains to launch seasonal scams\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://gbhackers.com/holiday-themed-domains/\" target=\"_blank\" rel=\"noopener\">Cybercriminals Register 18,000 Holiday-Themed Domains to Launch Seasonal Scams</a><span class=\"article-summary\">The holiday season has always been a magnet for increased online activity, but 2025 marks a new high-water mark in cybercrime intensity. FortiGuard Labs’ latest research spotlights a dramatic surge in the volume and sophistication of attacks targeting retailers, e-commerce provid…</span></span><span class=\"headline-source\">GBHACKERS.COM</span></div>\n<div class=\"headline\" data-title=\"poland arrests suspected russian hacker targeting local organizations’ networks\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://gbhackers.com/poland-arrests-suspected-russian-hacker-targeting-local-organizations-networks/\" target=\"_blank\" rel=\"noopener\">Poland Arrests Suspected Russian Hacker Targeting Local Organizations’ Networks</a><span class=\"article-summary\">Polish authorities have made a significant move in their cybercrime enforcement efforts by detaining a Russian national suspected of conducting unauthorized cyber attacks against local organizations. The arrest, made on November 16, 2025, marks a significant development in intern…</span></span><span class=\"headline-source\">GBHACKERS.COM</span></div>\n<div class=\"headline\" data-title=\"gainsight verifies token breach linked to salesforce advisory, issues new iocs\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://gbhackers.com/gainsight-verifies-token-breach/\" target=\"_blank\" rel=\"noopener\">Gainsight Verifies Token Breach Linked to Salesforce Advisory, Issues New IOCs</a><span class=\"article-summary\">Gainsight, the leading customer success platform, has confirmed that a security incident involving its Salesforce integration compromised customer tokens for a small subset of its client base. The announcement follows a security advisory issued by Salesforce last week, which prom…</span></span><span class=\"headline-source\">GBHACKERS.COM</span></div>\n<div class=\"headline\" data-title=\"french football federation discloses data breach after cyberattack\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.bleepingcomputer.com/news/security/french-football-federation-fff-discloses-data-breach-after-cyberattack/\" target=\"_blank\" rel=\"noopener\">French Football Federation discloses data breach after cyberattack</a><span class=\"article-summary\">The French Football Federation (FFF) disclosed a data breach on Friday after attackers used a compromised account to gain access to administrative management software used by football clubs. [...]</span></span><span class=\"headline-source\">BLEEPINGCOMPUTER.COM</span></div>\n<div class=\"headline\" data-title=\"legacy python bootstrap scripts create domain-takeover risk in multiple pypi packages\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://thehackernews.com/2025/11/legacy-python-bootstrap-scripts-create.html\" target=\"_blank\" rel=\"noopener\">Legacy Python Bootstrap Scripts Create Domain-Takeover Risk in Multiple PyPI Packages</a><span class=\"article-summary\">Cybersecurity researchers have discovered vulnerable code in legacy Python packages that could potentially pave the way for a supply chain compromise on the Python Package Index (PyPI) via a domain takeover attack. Software supply chain security company ReversingLabs said it foun…</span></span><span class=\"headline-source\">THEHACKERNEWS.COM</span></div>\n<div class=\"headline\" data-title=\"gamayun apt exploits msc eviltwin flaw to deploy malicious code\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://sh.itjust.works/post/50639538\" target=\"_blank\" rel=\"noopener\">Gamayun APT Exploits MSC EvilTwin Flaw to Deploy Malicious Code</a><span class=\"article-summary\">submitted by kid to cybersecurity 1 points | 0 comments https://cyberpress.org/gamayun-apt-cyberattack/</span></span><span class=\"headline-source\">SH.ITJUST.WORKS</span></div>\n </div>\n</div>\n<div class=\"cat-section\" id=\"cat-security-advisories\">\n <div class=\"section-title cat-section-header\" style=\"border-left:4px solid rgba(204,170,0,0.5);\" onclick=\"toggleSection(this)\">📢 SECURITY ADVISORIES <span class=\"filter-count\">2</span><span class=\"section-toggle\">[−]</span></div>\n <div class=\"cat-section-body headlines\">\n<div class=\"headline\" data-title=\"why organizations are turning to rpam\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://thehackernews.com/2025/11/why-organizations-are-turning-to-rpam.html\" target=\"_blank\" rel=\"noopener\">Why Organizations Are Turning to RPAM</a><span class=\"article-summary\">As IT environments become increasingly distributed and organizations adopt hybrid and remote work at scale, traditional perimeter-based security models and on-premises Privileged Access Management (PAM) solutions no longer suffice. IT administrators, contractors and third-party v…</span></span><span class=\"headline-source\">THEHACKERNEWS.COM</span></div>\n<div class=\"headline\" data-title=\"geoserver security advisory (av25-789)\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://cyber.gc.ca/en/alerts-advisories/geoserver-security-advisory-av25-789\" target=\"_blank\" rel=\"noopener\">GeoServer security advisory (AV25-789)</a></span><span class=\"headline-source\">CYBER.GC.CA</span></div>\n </div>\n</div>\n<div class=\"cat-section\" id=\"cat-incident-reporting\">\n <div class=\"section-title cat-section-header\" style=\"border-left:4px solid rgba(221,68,68,0.5);\" onclick=\"toggleSection(this)\">🔥 INCIDENT REPORTING <span class=\"filter-count\">6</span><span class=\"section-toggle\">[−]</span></div>\n <div class=\"cat-section-body headlines\">\n<div class=\"headline\" data-title=\"cso in eigener sache: mit smart answers zu mehr information\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.csoonline.com/article/4095215/cso-in-eigener-sache-mit-smart-answers-zu-mehr-information.html\" target=\"_blank\" rel=\"noopener\">CSO in eigener Sache: Mit Smart Answers zu mehr Information</a><span class=\"article-summary\">srcset=\"https://b2b-contenthub.com/wp-content/uploads/2025/11/shutterstock_2642127909.jpg?quality=50&strip=all 5350w, https://b2b-contenthub.com/wp-content/uploads/2025/11/shutterstock_2642127909.jpg?resize=300%2C168&quality=50&strip=all 300w, https://b2b-contenthub.c…</span></span><span class=\"headline-source\">CSOONLINE.COM</span></div>\n<div class=\"headline\" data-title=\"french soccer federation hit by cyberattack, member data stolen\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.securityweek.com/french-soccer-federation-hit-by-cyberattack-member-data-stolen/\" target=\"_blank\" rel=\"noopener\">French Soccer Federation Hit by Cyberattack, Member Data Stolen</a><span class=\"article-summary\">According to the federation, the unauthorized access was carried out using a compromised account. The post French Soccer Federation Hit by Cyberattack, Member Data Stolen appeared first on SecurityWeek .</span></span><span class=\"headline-source\">SECURITYWEEK.COM</span></div>\n<div class=\"headline\" data-title=\"shinyhunters develop sophisticated new ransomware-as-a-service tool\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://gbhackers.com/ransomware-as-a-service-tool/\" target=\"_blank\" rel=\"noopener\">ShinyHunters Develop Sophisticated New Ransomware-as-a-Service Tool</a><span class=\"article-summary\">In a significant escalation of the global cyber threat landscape, the notorious threat group ShinyHunters appears to be transitioning from data theft to full-scale ransomware operations. Cybersecurity researchers have identified an early build of a new Ransomware-as-a-Service (Ra…</span></span><span class=\"headline-source\">GBHACKERS.COM</span></div>\n<div class=\"headline\" data-title=\"comcast fined $1.5 million to settle fcc probe tied to vendor data breach\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://gbhackers.com/comcast-fined-1-5-million/\" target=\"_blank\" rel=\"noopener\">Comcast Fined $1.5 Million to Settle FCC Probe Tied to Vendor Data Breach</a><span class=\"article-summary\">Comcast has agreed to a $1.5 million settlement with the Federal Communications Commission (FCC) following a data breach at a third-party vendor that exposed the personal information of hundreds of thousands of its customers. The breach has raised concerns about the security of c…</span></span><span class=\"headline-source\">GBHACKERS.COM</span></div>\n<div class=\"headline\" data-title=\"french football federation suffers data breach\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://sh.itjust.works/post/50636676\" target=\"_blank\" rel=\"noopener\">French Football Federation Suffers Data Breach</a><span class=\"article-summary\">submitted by kid to cybersecurity 3 points | 0 comments https://www.infosecurity-magazine.com/news/french-football-federation-data/</span></span><span class=\"headline-source\">SH.ITJUST.WORKS</span></div>\n<div class=\"headline\" data-title=\"this month in security with tony anscombe – november 2025 edition\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-november-2025/\" target=\"_blank\" rel=\"noopener\">This month in security with Tony Anscombe – November 2025 edition</a><span class=\"article-summary\">Data exposure by top AI companies, the Akira ransomware haul, Operation Endgame against major malware families, and more of this month's cybersecurity news</span></span><span class=\"headline-source\">WELIVESECURITY.COM</span></div>\n </div>\n</div>\n<div class=\"cat-section\" id=\"cat-threat-intelligence\">\n <div class=\"section-title cat-section-header\" style=\"border-left:4px solid rgba(170,68,221,0.5);\" onclick=\"toggleSection(this)\">🕵️ THREAT INTELLIGENCE <span class=\"filter-count\">20</span><span class=\"section-toggle\">[−]</span></div>\n <div class=\"cat-section-body headlines\">\n<div class=\"headline\" data-title=\"news alert: one identity earns visionary ranking as pam shifts toward automation, ai and simplicity\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.lastwatchdog.com/news-alert-one-identity-earns-visionary-ranking-as-pam-shifts-toward-automation-ai-and-simplicity/\" target=\"_blank\" rel=\"noopener\">News alert: One Identity earns Visionary ranking as PAM shifts toward automation, AI and simplicity</a><span class=\"article-summary\">ALISA VIEJO, Calif., Nov. 27, 2025, CyberNewswire — Gartner has recognized One Identity as a Visionary in the 2025 Gartner Magic Quadrant for Privileged Access Management (PAM) . In a rapidly transforming market, innovation and demonstrated performance continue to shape … (…</span></span><span class=\"headline-source\">LASTWATCHDOG.COM</span></div>\n<div class=\"headline\" data-title=\"microsoft blocks external scripts in entra id logins to boost security\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://gbhackers.com/microsoft-blocks-external-scripts-in-entra-id-logins/\" target=\"_blank\" rel=\"noopener\">Microsoft Blocks External Scripts in Entra ID Logins to Boost Security</a><span class=\"article-summary\">Microsoft has announced a significant security change to the Microsoft Entra ID sign-in experience that will block external scripts from running during user logins. The update is designed to stop unauthorized or injected code from executing on the login page. It is part of Micros…</span></span><span class=\"headline-source\">GBHACKERS.COM</span></div>\n<div class=\"headline\" data-title=\"black friday scammers are impersonating major brands to steal your money\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://gbhackers.com/black-friday-scammers/\" target=\"_blank\" rel=\"noopener\">Black Friday Scammers Are Impersonating Major Brands to Steal Your Money</a><span class=\"article-summary\">Black Friday is supposed to be chaotic, sure, but not this chaotic. Amid genuine doorbusters and flash sales, a large-scale, highly polished scam campaign is hijacking web traffic and pushing shoppers to fake “survey reward” pages impersonating dozens of major brands all to steal…</span></span><span class=\"headline-source\">GBHACKERS.COM</span></div>\n<div class=\"headline\" data-title=\"in other news: hashjack ai browser attack, charming kitten leak, hacker unmasked\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.securityweek.com/in-other-news-hashjack-ai-browser-attack-charming-kitten-leak-hacker-unmasked/\" target=\"_blank\" rel=\"noopener\">In Other News: HashJack AI Browser Attack, Charming Kitten Leak, Hacker Unmasked</a><span class=\"article-summary\">Other noteworthy stories that might have slipped under the radar: Scattered Spider members plead not guilty, TP-Link sues Netgear, Comcast agrees to $1.5 million fine. The post In Other News: HashJack AI Browser Attack, Charming Kitten Leak, Hacker Unmasked appeared first on Secu…</span></span><span class=\"headline-source\">SECURITYWEEK.COM</span></div>\n<div class=\"headline\" data-title=\"dead man's switch - widespread npm supply chain attack driving malware attacks\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://sh.itjust.works/post/50615769\" target=\"_blank\" rel=\"noopener\">Dead Man's Switch - Widespread npm Supply Chain Attack Driving Malware Attacks</a><span class=\"article-summary\">submitted by kid to cybersecurity 2 points | 0 comments https://cybersecuritynews.com/dead-mans-switch-npm-supply-chain-attack/</span></span><span class=\"headline-source\">SH.ITJUST.WORKS</span></div>\n<div class=\"headline\" data-title=\"over 390 abandoned icalendar sync domains could expose ~4 million devices to security risks\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://sh.itjust.works/post/50616075\" target=\"_blank\" rel=\"noopener\">Over 390 Abandoned iCalendar Sync Domains Could Expose ~4 Million Devices to Security Risks</a><span class=\"article-summary\">submitted by kid to cybersecurity 1 points | 0 comments https://cybersecuritynews.com/over-390-abandoned-icalendar-sync-domains-could-expose/</span></span><span class=\"headline-source\">SH.ITJUST.WORKS</span></div>\n<div class=\"headline\" data-title=\"revolutionizing mcp servers: the github approach\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.youtube.com/shorts/XBT8udJV664\" target=\"_blank\" rel=\"noopener\">Revolutionizing MCP Servers: The GitHub Approach</a><span class=\"article-summary\">Curious about how GitHub is shaking up the cybersecurity world? We're breaking down the latest on MCP servers and what it means for your data's safety. Be part of the conversation and stay informed! Subscribe to our podcasts: https://securityweekly.com/subscribe #TechUpdates #Dat…</span></span><span class=\"headline-source\">YOUTUBE.COM</span></div>\n<div class=\"headline\" data-title=\"malicious llms empower inexperienced hackers with advanced tools\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://sh.itjust.works/post/50616408\" target=\"_blank\" rel=\"noopener\">Malicious LLMs empower inexperienced hackers with advanced tools</a><span class=\"article-summary\">submitted by kid to cybersecurity 1 points | 0 comments https://www.bleepingcomputer.com/news/security/malicious-llms-empower-inexperienced-hackers-with-advanced-tools/</span></span><span class=\"headline-source\">SH.ITJUST.WORKS</span></div>\n<div class=\"headline\" data-title=\"asahi confirms 1.5 million customers affected in major cyber-attack - infosecurity magazine\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://sh.itjust.works/post/50616918\" target=\"_blank\" rel=\"noopener\">Asahi Confirms 1.5 Million Customers Affected in Major Cyber-Attack - Infosecurity Magazine</a><span class=\"article-summary\">submitted by kid to cybersecurity 1 points | 0 comments https://www.infosecurity-magazine.com/news/asahi-15-million-customers/</span></span><span class=\"headline-source\">SH.ITJUST.WORKS</span></div>\n<div class=\"headline\" data-title=\"one-size-fits-all security training fits nobody\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://blog.knowbe4.com/one-size-fits-all-security-training-fits-nobody\" target=\"_blank\" rel=\"noopener\">One-Size-Fits-All Security Training Fits Nobody</a><span class=\"article-summary\">Here's a curious thing about people, sometimes we crave the familiar, and sometimes we demand the novel.</span></span><span class=\"headline-source\">KNOWBE4.COM</span></div>\n<div class=\"headline\" data-title=\"new greynoise ip checker helps users identify botnet activity\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://gbhackers.com/greynoise-ip-checker/\" target=\"_blank\" rel=\"noopener\">New GreyNoise IP Checker Helps Users Identify Botnet Activity</a><span class=\"article-summary\">Cybersecurity firm GreyNoise has launched a new, free utility designed to answer a question most internet users never think to ask: Is my home router secretly attacking other computers? The newly released GreyNoise IP Check is a simple, web-based tool that allows anyone to instan…</span></span><span class=\"headline-source\">GBHACKERS.COM</span></div>\n<div class=\"headline\" data-title=\"phishing campaign uses fake party invites to deliver remote access tools\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://blog.knowbe4.com/phishing-campaign-uses-fake-party-invites-to-deliver-remote-access-tools\" target=\"_blank\" rel=\"noopener\">Phishing Campaign Uses Fake Party Invites to Deliver Remote Access Tools</a><span class=\"article-summary\">A large phishing campaign is using phony seasonal party invites to trick users into installing remote management and monitoring (RMM) tools, according to researchers at Symantec.</span></span><span class=\"headline-source\">KNOWBE4.COM</span></div>\n<div class=\"headline\" data-title=\"north korean hackers deploy 197 npm packages to spread updated ottercookie malware\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://thehackernews.com/2025/11/north-korean-hackers-deploy-197-npm.html\" target=\"_blank\" rel=\"noopener\">North Korean Hackers Deploy 197 npm Packages to Spread Updated OtterCookie Malware</a><span class=\"article-summary\">The North Korean threat actors behind the Contagious Interview campaign have continued to flood the npm registry with 197 more malicious packages since last month. According to Socket, these packages have been downloaded over 31,000 times, and are designed to deliver a variant of…</span></span><span class=\"headline-source\">THEHACKERNEWS.COM</span></div>\n<div class=\"headline\" data-title=\"ms teams guest access can remove defender protection when users join external tenants\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://sh.itjust.works/post/50635681\" target=\"_blank\" rel=\"noopener\">MS Teams Guest Access Can Remove Defender Protection When Users Join External Tenants</a><span class=\"article-summary\">submitted by kid to cybersecurity 1 points | 0 comments https://thehackernews.com/2025/11/ms-teams-guest-access-can-remove.html</span></span><span class=\"headline-source\">SH.ITJUST.WORKS</span></div>\n<div class=\"headline\" data-title=\"automate security backlog\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.youtube.com/shorts/MVm4cKXrg-w\" target=\"_blank\" rel=\"noopener\">Automate Security Backlog</a><span class=\"article-summary\">Transform chaos into clarity with automation! Learn how to effortlessly tackle your top security priorities and leave the endless backlog behind. Dive into a smarter, more efficient way of working today! Subscribe to our podcasts: https://securityweekly.com/subscribe #Automation …</span></span><span class=\"headline-source\">YOUTUBE.COM</span></div>\n<div class=\"headline\" data-title=\"tryhackme races to add women to christmas cyber challenge roster after backlash\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://sh.itjust.works/post/50645548\" target=\"_blank\" rel=\"noopener\">TryHackMe races to add women to Christmas cyber challenge roster after backlash</a><span class=\"article-summary\">submitted by BrikoX to cybersecurity 1 points | 0 comments https://www.theregister.com/2025/11/28/tryhackme_diversity_row/ Training outfit scrambles to fix all-male lineup before December kickoff</span></span><span class=\"headline-source\">SH.ITJUST.WORKS</span></div>\n<div class=\"headline\" data-title=\"friday squid blogging: flying neon squid found on israeli beach\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.schneier.com/blog/archives/2025/11/friday-squid-blogging-flying-neon-squid-found-on-israeli-beach.html\" target=\"_blank\" rel=\"noopener\">Friday Squid Blogging: Flying Neon Squid Found on Israeli Beach</a><span class=\"article-summary\">A meter-long flying neon squid ( Ommastrephes bartramii ) was found dead on an Israeli beach. The species is rare in the Mediterranean.</span></span><span class=\"headline-source\">SCHNEIER.COM</span></div>\n<div class=\"headline\" data-title=\"dealing with loss, phone loss with aaran, doug, and josh - swn #533\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.youtube.com/watch?v=u5_OSnLEE5Q\" target=\"_blank\" rel=\"noopener\">Dealing with loss, phone loss with Aaran, Doug, and Josh - SWN #533</a><span class=\"article-summary\">Are you walking around with a phone in your hand? Probably, are ready for the day when it gets grabbed and disappears. Aaran, Doug, and Josh talk about phone strategies on this episode of the Security Weekly News. Visit https://www.securityweekly.com/swn for all the latest episod…</span></span><span class=\"headline-source\">YOUTUBE.COM</span></div>\n<div class=\"headline\" data-title=\"ai's hidden data leaks\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.youtube.com/shorts/-r-TgSt30wI\" target=\"_blank\" rel=\"noopener\">AI's Hidden Data Leaks</a><span class=\"article-summary\">As AI seamlessly integrates into our daily tools, the risk of data leaks grows. Uncover the hidden pathways of your information and why it's crucial to prioritize security now. Subscribe to our podcasts: https://securityweekly.com/subscribe #AIMysteries #DataLeaks #DigitalSecurit…</span></span><span class=\"headline-source\">YOUTUBE.COM</span></div>\n<div class=\"headline\" data-title=\"we have achieved freebsd 15.0-rel with kde plasma\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://taosecurity.blogspot.com/2025/11/we-have-achieved-freebsd-150-rel-with.html\" target=\"_blank\" rel=\"noopener\">We have achieved FreeBSD 15.0-REL with KDE Plasma</a><span class=\"article-summary\"> Houston, we have installed #FreeBSD 15.0-REL with KDE Plasma 6.4.5 on a Lenovo ThinkPad X1 Carbon Gen 6 laptop. I have come full circle. I used to daily drive FreeBSD 5.x on a Thinkpad a20p in the early 2000s. Today I used the \"technology preview\" method for pkg installati…</span></span><span class=\"headline-source\">TAOSECURITY.BLOGSPOT.COM</span></div>\n </div>\n</div>\n<div class=\"cat-section\" id=\"cat-infosec-news\">\n <div class=\"section-title cat-section-header\" style=\"border-left:4px solid rgba(122,68,34,0.4);\" onclick=\"toggleSection(this)\">📡 INFOSEC NEWS <span class=\"filter-count\">5</span><span class=\"section-toggle\">[−]</span></div>\n <div class=\"cat-section-body headlines\">\n<div class=\"headline\" data-title=\"ms teams guest access can remove defender protection when users join external tenants\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://thehackernews.com/2025/11/ms-teams-guest-access-can-remove.html\" target=\"_blank\" rel=\"noopener\">MS Teams Guest Access Can Remove Defender Protection When Users Join External Tenants</a><span class=\"article-summary\">Cybersecurity researchers have shed light on a cross-tenant blind spot that allows attackers to bypass Microsoft Defender for Office 365 protections via the guest access feature in Teams. \"When users operate as guests in another tenant, their protections are determined entirely b…</span></span><span class=\"headline-source\">THEHACKERNEWS.COM</span></div>\n<div class=\"headline\" data-title=\"spotlight: making the most of multicloud\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://us.resources.csoonline.com/resources/form?placement_id=7f710e0d-983c-4952-b7e2-d5221eb5d1a6&brand_id=32&locale_id=1\" target=\"_blank\" rel=\"noopener\">Spotlight: Making the most of multicloud</a><span class=\"article-summary\">Download the December 2025 issue of the Enterprise Spotlight from the editors of CIO, Computerworld, CSO, InfoWorld, and Network World.</span></span><span class=\"headline-source\">US.RESOURCES.CSOONLINE.COM</span></div>\n<div class=\"headline\" data-title=\"public gitlab repositories exposed more than 17,000 secrets\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.bleepingcomputer.com/news/security/public-gitlab-repositories-exposed-more-than-17-000-secrets/\" target=\"_blank\" rel=\"noopener\">Public GitLab repositories exposed more than 17,000 secrets</a><span class=\"article-summary\">After scanning all 5.6 million public repositories on GitLab Cloud, a security engineer discovered more than 17,000 exposed secrets across over 2,800 unique domains. [...]</span></span><span class=\"headline-source\">BLEEPINGCOMPUTER.COM</span></div>\n<div class=\"headline\" data-title=\"microsoft: windows updates make password login option invisible\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-updates-hide-password-icon-on-lock-screen/\" target=\"_blank\" rel=\"noopener\">Microsoft: Windows updates make password login option invisible</a><span class=\"article-summary\">Microsoft warned users that Windows 11 updates released since August may cause the password sign-in option to disappear from the lock screen options, even though the button remains functional. [...]</span></span><span class=\"headline-source\">BLEEPINGCOMPUTER.COM</span></div>\n<div class=\"headline\" data-title=\"man behind in-flight evil twin wifi attacks gets 7 years in prison\" data-date=\"2025-11-28\"><span class=\"headline-date\">28 Nov</span><span class=\"headline-body\"><a class=\"headline-title\" href=\"https://www.bleepingcomputer.com/news/security/man-behind-in-flight-evil-twin-wifi-attacks-gets-7-years-in-prison/\" target=\"_blank\" rel=\"noopener\">Man behind in-flight Evil Twin WiFi attacks gets 7 years in prison</a><span class=\"article-summary\">A 44-year-old man was sentenced to seven years and four months in prison for operating an \"evil twin\" WiFi network to steal the data of unsuspecting travelers at various airports across Australia. [...]</span></span><span class=\"headline-source\">BLEEPINGCOMPUTER.COM</span></div>\n </div>\n</div>\n\n</main>\n<button class=\"jump-top-btn\" id=\"jumpTopBtn\" onclick=\"window.scrollTo({top:0,behavior:'smooth'})\">▲ TOP</button>\n<footer class=\"site-footer\">\n threat intelligence // 94 sources // generated 2026-05-22 14:12<span class=\"blink\"></span>\n</footer>\n</body>\n</html>"}}}} |