Daily CyberSecurity • Page 148 of 736 • Zero-hour alerts. Unmatched analysis.

EU Launches DMA Probes: Is Gatekeeper Status Next for AWS & Azure Cloud?

Apple Google EU alliance DMA European Commission Breach Trivy Supply Chain Attack Europa.eu Breach EU Cloud Infrastructure EU Cyber Sanctions State-Sponsored Hacking EU 2040 Emissions Target, Europe Climate Leadership AWS Azure DMA Cloud Gatekeeper DSA violation, illegal content Apple DMA Delay, iPhone Mirroring EU EU Age Verification, Google Play Integrity Corning Antitrust, EU Competition Apple EU Digital Markets Act App Store commission European Union cyberattacks - InvestAI EU Targets Musk’s X Digital Markets Act, EU fines

EU Launches DMA Probes: Is Gatekeeper Status Next for AWS & Azure Cloud?

Do Son November 20, 2025

According to the latest announcement from the European Commission, three investigations will be launched into cloud-computing services...

Google Extends FREE AI Pro Subscription for Students Until 2027 Google AI Pro Student Offer

Google Extends FREE AI Pro Subscription for Students Until 2027

Do Son November 20, 2025

In May 2025, Google introduced a one-year Google AI Pro subscription package for university students across the...

Everon OCPP Vulnerability CVE-2026-26288 ASUSTOR ADM Vulnerability CVE-2026-24936 PrismX MX100 Vulnerability Hard-Coded Credentials Advantech Vulnerability CVE-2025-52694 Eaton UPS Companion, CVE-2025-59887 ASUS Router, Authentication Bypass ASUSTOR DLL Hijacking, Privilege Escalation OpenShift AI, Privilege Escalation GoAnywhere vulnerability CVE-2025-10035 LangChainGo, template injection DeepDiff, class pollution ToolShell Sunshine, CSRF Vulnerability KACE SMA, Critical Vulnerabilities Oracle Zero-Days - PDQ Deploy vulnerability

Critical ASUSTOR Flaw (CVE-2025-13051) Allows Local DLL Hijacking for SYSTEM Privilege Escalation

Do Son November 20, 2025

ASUSTOR has issued a security advisory warning of a critical DLL hijacking vulnerability affecting its backup and...

Critical CVE-2025-65015 Vulnerability in joserfc Could Let Attackers Exhaust Server Resources via Oversized JWT Tokens joserfc DoS, JWT Logging Flaw

Critical CVE-2025-65015 Vulnerability in joserfc Could Let Attackers Exhaust Server Resources via Oversized JWT Tokens

Do Son November 20, 2025

A widely used Python library implementing JOSE standards, joserfc, has disclosed a critical uncontrolled resource consumption vulnerability—tracked...

CISA/FBI/NSA Unite to Dismantle Bulletproof Hosting Ecosystem with New Global Defense Guide CISA Bulletproof Hosting, BPH Dismantling Guide

CISA/FBI/NSA Unite to Dismantle Bulletproof Hosting Ecosystem with New Global Defense Guide

Do Son November 20, 2025

In a joint announcement, the Cybersecurity and Infrastructure Security Agency (CISA)—alongside the NSA, FBI, DoD Cyber Crime...

Lazarus Group’s New ScoringMathTea RAT Uses Reflective Plugin Loader and Custom Polyalphabetic Crypto for Espionage axios Supply Chain Attack WAVESHAPER.V2 SnappyBee Malware Salt Typhoon Stately Taurus ScoringMathTea RAT, Lazarus Reflective DLL

axios Supply Chain Attack WAVESHAPER.V2 SnappyBee Malware Salt Typhoon Stately Taurus ScoringMathTea RAT, Lazarus Reflective DLL

Lazarus Group’s New ScoringMathTea RAT Uses Reflective Plugin Loader and Custom Polyalphabetic Crypto for Espionage

Do Son November 20, 2025

A new technical deep-dive by malware researcher 0x0d4y reveals the inner workings of ScoringMathTea, a sophisticated remote...

One Click, 42 Days: Akira Ransomware Used CAPTCHA Decoy to Destroy Cloud Backups and Cripple Storage Firm Akira ClickFix, Cloud Backup Destruction

Akira ClickFix, Cloud Backup Destruction

One Click, 42 Days: Akira Ransomware Used CAPTCHA Decoy to Destroy Cloud Backups and Cripple Storage Firm

Do Son November 20, 2025

A newly released analysis from Unit 42 details how a global data storage and infrastructure company was...

Sophisticated “The Gentlemen” Ransomware RaaS Emerges with XChaCha20 Encryption and 48 Victims in 3 Months The Gentlemen RaaS, XChaCha20 Encryption

The Gentlemen RaaS, XChaCha20 Encryption

Sophisticated “The Gentlemen” Ransomware RaaS Emerges with XChaCha20 Encryption and 48 Victims in 3 Months

Do Son November 20, 2025

The Cybereason Threat Intelligence Team has published an in-depth analysis of a rapidly evolving ransomware group known...

Next-Gen Stealth: Malware Hides C2 Traffic as Fake LLM API Requests on Tencent Cloud Fake LLM API C2, LLM Evasion

Next-Gen Stealth: Malware Hides C2 Traffic as Fake LLM API Requests on Tencent Cloud

Do Son November 20, 2025

The Akamai Hunt team has uncovered a new malware strain that hides its command-and-control (C2) traffic behind...

Next-Gen Ransomware Targets AWS S3: Five Cloud-Native Variants Exploit Misconfigurations for Irreversible Data Destruction S3 Ransomware, Cloud-Native Extortion

Next-Gen Ransomware Targets AWS S3: Five Cloud-Native Variants Exploit Misconfigurations for Irreversible Data Destruction

Do Son November 20, 2025

A new report from Trend Research warns that ransomware operators are rapidly shifting their focus from traditional...

Cybercriminals Shift Tactics: Group Deploys Multiple RMM Tools (ScreenConnect, LogMeIn, Naverisk) for Redundant Persistence and Access Resale

Do Son November 20, 2025

A highly active cybercriminal group has shifted tactics in a long-running campaign that abuses remote monitoring and...

Critical Apache Causeway RCE Flaw (CVE-2025-64408) Allows Authenticated Code Execution via Java Deserialization Apache Causeway RCE, Java Deserialization

Apache Causeway RCE, Java Deserialization

Critical Apache Causeway RCE Flaw (CVE-2025-64408) Allows Authenticated Code Execution via Java Deserialization

Do Son November 20, 2025

Apache Causeway, a popular framework for rapidly developing domain-driven Java applications, has been found vulnerable to a...

No More Public BSODs: Windows 11 Will Hide Crash Screens on Public Displays Windows Public Display Crash BSOD Hiding Windows 11 BSOD, Black Screen of Death

Windows Public Display Crash BSOD Hiding Windows 11 BSOD, Black Screen of Death

No More Public BSODs: Windows 11 Will Hide Crash Screens on Public Displays

Do Son November 20, 2025

For many public venues, large displays are used to show advertisements or important information — airports, for...

C Windows SecureBoot folder KB5089549 Windows 11 BSOD Microsoft Windows, Rust programming WINS Service Deprecation Windows Server DNS Migration Windows Driver Standard OEM Kernel Privileges Windows Agentic OS Task Manager Bug, Windows 11 Performance Windows 11, Microsoft, WinRE, Update Bug, Tech Support Windows 11 OOBE, Microsoft Account Mandatory Windows 11, SSD failures Windows 11 Recovery, Black Screen of Death Windows 11 Update Issue, KB5062324 Windows 11, Indicator Bar

Post-CrowdStrike: Microsoft to Phase Out OEM Kernel-Level Driver Privileges

Do Son November 20, 2025

For years, driver-related failures have appeared with relentless regularity. Whether produced by hardware manufacturers or software vendors,...

Seraphic Becomes the First and Only Secure Enterprise Browser Solution to Protect Electron-Based Applications Seraphic_Logo_1200x720_1_17635498232JW29q8dVu

Seraphic Becomes the First and Only Secure Enterprise Browser Solution to Protect Electron-Based Applications

cybernewswire November 19, 2025

Tel Aviv, Israel, 19th November 2025, CyberNewsWire

Obscure MCP API in Comet Browser Breaches User Trust, Enabling Full Device Control via AI Browsers YOBB_Comet_Allows_AI_Browsers_to_Execute_Local_Com_1763447042u9N8j6696S

YOBB_Comet_Allows_AI_Browsers_to_Execute_Local_Com_1763447042u9N8j6696S

Obscure MCP API in Comet Browser Breaches User Trust, Enabling Full Device Control via AI Browsers

cybernewswire November 19, 2025

Palo Alto, California, 19th November 2025, CyberNewsWire

DDoS Suspected, Internal Bug Found: Cloudflare Outage Caused by Bot Management Config File Cloudflare Internal Outage Bot Management Config File

Cloudflare Internal Outage Bot Management Config File

DDoS Suspected, Internal Bug Found: Cloudflare Outage Caused by Bot Management Config File

Do Son November 19, 2025

Cloudflare CEO Matthew Prince has issued a detailed explanation regarding the recent large-scale outage that took numerous...

Copilot Gets Brains: Microsoft Unveils ‘Work IQ’ & Agent Mode Integration with GPT-5 and Anthropic Microsoft Copilot Agent Mode Work IQ GPT-5

Copilot Gets Brains: Microsoft Unveils ‘Work IQ’ & Agent Mode Integration with GPT-5 and Anthropic

Do Son November 19, 2025

At Microsoft’s recent Ignite 2025 developer conference, the spotlight focused on fully empowering the “AI lifecycle”—from foundational...

AirDrop PIN Pairing Arrives: New iOS Beta Allows 30-Day File Sharing Without Contacts AirDrop PIN Pairing 30-Day AirDrop Trust iOS 26 downgrade iOS 26 battery drain 5G MacBook, Cellular Mac iOS 26, Communication Safety iOS 26, Wi-Fi Synchronization iOS 26, Wi-Fi Synchronization Apple Redesign Apple Public Betas, AirPods Firmware

AirDrop PIN Pairing 30-Day AirDrop Trust iOS 26 downgrade iOS 26 battery drain 5G MacBook, Cellular Mac iOS 26, Communication Safety iOS 26, Wi-Fi Synchronization iOS 26, Wi-Fi Synchronization Apple Redesign Apple Public Betas, AirPods Firmware

AirDrop PIN Pairing Arrives: New iOS Beta Allows 30-Day File Sharing Without Contacts

Do Son November 19, 2025

Apple has, for various reasons, adjusted AirDrop so that it now defaults to receiving content only from...

Major Blow to Cybercrime: Police Seize 250 Servers from Dutch Bulletproof Host Bulletproof Hosting Takedown CrazyRDP Seizure

Major Blow to Cybercrime: Police Seize 250 Servers from Dutch Bulletproof Host

Do Son November 19, 2025

Dutch police recently seized a so-called “bulletproof hosting” provider operating in the Netherlands, confiscating 250 physical servers...

Critical Alert 1 Active Exploit Detected Today