Daily CyberSecurity

APT-C-60 Targets Japan: New SpyGlace Malware Uses VHDX LNK and GitHub Tasking for Persistent Espionage

• Cyber Security
• Malware

APT-C-60 Targets Japan: New SpyGlace Malware Uses VHDX LNK and GitHub Tasking for Persistent Espionage

Do Son November 6, 2025 0

The JPCERT/CC Incident Response Group, led by malware analyst Yuma, has published a detailed report on a...

Read More Read more about APT-C-60 Targets Japan: New SpyGlace Malware Uses VHDX LNK and GitHub Tasking for Persistent Espionage

CISA Warns: Critical Survision LPR Camera Flaw (CVE-2025-12108, CVSS 9.8) Allows Unauthenticated Takeover

• Vulnerability Report

CISA Warns: Critical Survision LPR Camera Flaw (CVE-2025-12108, CVSS 9.8) Allows Unauthenticated Takeover

Do Son November 6, 2025 0

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an advisory warning about a critical vulnerability affecting...

Read More Read more about CISA Warns: Critical Survision LPR Camera Flaw (CVE-2025-12108, CVSS 9.8) Allows Unauthenticated Takeover

Android Debut: OpenAI Launches Sora AI Video Generator with Audio Mixing & Voiceover

• Technology

Android Debut: OpenAI Launches Sora AI Video Generator with Audio Mixing & Voiceover

Do Son November 5, 2025 0

OpenAI’s popular AI-powered video generation tool, Sora, has officially launched its Android version on November 4, 2025,...

Read More Read more about Android Debut: OpenAI Launches Sora AI Video Generator with Audio Mixing & Voiceover

Chromebook Killer? Apple Prepares Affordable MacBook Air (J700) for 2026 Launch

• Technology

Chromebook Killer? Apple Prepares Affordable MacBook Air (J700) for 2026 Launch

Do Son November 5, 2025 0

There have long been rumors suggesting that Apple is preparing to launch a more affordable line of...

Read More Read more about Chromebook Killer? Apple Prepares Affordable MacBook Air (J700) for 2026 Launch

Orbital AI: Google Unveils Project Suncatcher to Launch TPU Data Centers into Space

• Technology

Orbital AI: Google Unveils Project Suncatcher to Launch TPU Data Centers into Space

Do Son November 5, 2025 0

Earlier, a technology company attempted to send NVIDIA AI accelerator cards into space, conducting tests powered by...

Read More Read more about Orbital AI: Google Unveils Project Suncatcher to Launch TPU Data Centers into Space

Dev Oversight: Apple Accidentally Leaked Entire App Store Web Source Code via SourceMap

• Data Leak

Dev Oversight: Apple Accidentally Leaked Entire App Store Web Source Code via SourceMap

Do Son November 5, 2025 0

Yesterday, Apple unveiled its redesigned Apple App Store web version, marking a significant overhaul from the previous...

Read More Read more about Dev Oversight: Apple Accidentally Leaked Entire App Store Web Source Code via SourceMap

Five-Year Support: Ubuntu Unveils Final Release Schedule for 26.04 LTS Edition

• Linux

Five-Year Support: Ubuntu Unveils Final Release Schedule for 26.04 LTS Edition

Do Son November 5, 2025 0

The popular desktop operating system Ubuntu has officially unveiled the release schedule for its upcoming Long-Term Support...

Read More Read more about Five-Year Support: Ubuntu Unveils Final Release Schedule for 26.04 LTS Edition

False Alarm: Microsoft Fixes Bug Incorrectly Warning Windows 10 LTSC & ESU Users That Support Ended

• Windows

False Alarm: Microsoft Fixes Bug Incorrectly Warning Windows 10 LTSC & ESU Users That Support Ended

Do Son November 5, 2025 0

In October 2025, Microsoft officially ended security update support for Windows 10 version 22H2. Users who still...

Read More Read more about False Alarm: Microsoft Fixes Bug Incorrectly Warning Windows 10 LTSC & ESU Users That Support Ended

Finally Independent: WhatsApp Launches Native Apple Watch App with Voice Messages

• Technology

Finally Independent: WhatsApp Launches Native Apple Watch App with Voice Messages

Do Son November 5, 2025 0

Meta has officially announced the launch of a native WhatsApp app for Apple Watch, marking a major...

Read More Read more about Finally Independent: WhatsApp Launches Native Apple Watch App with Voice Messages

Critical CVE-2025-11749 Flaw in AI Engine Plugin Exposes WordPress Sites to Full Compromise

• Vulnerability Report

Critical CVE-2025-11749 Flaw in AI Engine Plugin Exposes WordPress Sites to Full Compromise

Do Son November 5, 2025 0

Researchers at Wordfence have disclosed a critical vulnerability (CVE-2025-11749, CVSS 9.8) in the popular AI Engine WordPress...

Read More Read more about Critical CVE-2025-11749 Flaw in AI Engine Plugin Exposes WordPress Sites to Full Compromise

Microsoft Teams Flaws Exposed: Attackers Could Impersonate Executives and Forge Caller Identity

• Vulnerability Report

Microsoft Teams Flaws Exposed: Attackers Could Impersonate Executives and Forge Caller Identity

Do Son November 5, 2025 0

Researchers at Check Point Research (CPR) have disclosed four critical vulnerabilities in Microsoft Teams that could have...

Read More Read more about Microsoft Teams Flaws Exposed: Attackers Could Impersonate Executives and Forge Caller Identity

Coordinated Cryptojacking Blitz: Hackers Exploit ThinkPHP and PHP RCE Flaws to Maximize Mining Profit

• Cybercriminals
• Vulnerability Report

Coordinated Cryptojacking Blitz: Hackers Exploit ThinkPHP and PHP RCE Flaws to Maximize Mining Profit

Do Son November 5, 2025 0

Analysts at GreyNoise Intelligence have reported a sharp, coordinated surge in attacks exploiting vulnerabilities across PHP and...

Read More Read more about Coordinated Cryptojacking Blitz: Hackers Exploit ThinkPHP and PHP RCE Flaws to Maximize Mining Profit

NGate NFC Malware Steals Cash from ATMs by Relaying EMV Data and PINs from Victim’s Phone

• Malware

NGate NFC Malware Steals Cash from ATMs by Relaying EMV Data and PINs from Victim’s Phone

Do Son November 5, 2025 0

The national incident response team CERT Polska has uncovered a new strain of Android-based NFC relay malware,...

Read More Read more about NGate NFC Malware Steals Cash from ATMs by Relaying EMV Data and PINs from Victim’s Phone

Trustwave Confirms ‘Trinity of Chaos’ Alliance: Scattered LAPSUS$ Hunters Form EaaS Supergroup

• Cybercriminals

Trustwave Confirms ‘Trinity of Chaos’ Alliance: Scattered LAPSUS$ Hunters Form EaaS Supergroup

Do Son November 5, 2025 0

Researchers from Trustwave SpiderLabs’ Cyber Threat Intelligence team have identified the formation of a new federated threat...

Read More Read more about Trustwave Confirms ‘Trinity of Chaos’ Alliance: Scattered LAPSUS$ Hunters Form EaaS Supergroup

CISA KEV Alert: Two Critical Flaws Under Active Exploitation, Including Gladinet LFI/RCE and CWP Admin Takeover

• Vulnerability Report

CISA KEV Alert: Two Critical Flaws Under Active Exploitation, Including Gladinet LFI/RCE and CWP Admin Takeover

Do Son November 5, 2025 0

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities—CVE-2025-11371 in Gladinet CentreStack and...

Read More Read more about CISA KEV Alert: Two Critical Flaws Under Active Exploitation, Including Gladinet LFI/RCE and CWP Admin Takeover

Google Translate Debuts Gemini-Powered “Advanced” Mode for Higher Accuracy Translations

• Technology

Google Translate Debuts Gemini-Powered “Advanced” Mode for Higher Accuracy Translations

Do Son November 5, 2025 0

Google has begun introducing deeper Gemini model integration into its Google Translate service. In the latest version...

Read More Read more about Google Translate Debuts Gemini-Powered “Advanced” Mode for Higher Accuracy Translations

Global Spies Use ZipperDown and Android Zero-Days for 1-Click Email Client RCE and Account Takeover

• Cyber Security
• Vulnerability Report

Global Spies Use ZipperDown and Android Zero-Days for 1-Click Email Client RCE and Account Takeover

Do Son November 5, 2025 0

The RedDrip team at QiAnXin Threat Intelligence Center has released a new report detailing a multi-year series...

Read More Read more about Global Spies Use ZipperDown and Android Zero-Days for 1-Click Email Client RCE and Account Takeover

Critical React Native CLI Flaw (CVE-2025-11953, CVSS 9.8) Allows Unauthenticated RCE via Exposed Metro Server

• Vulnerability Report

Critical React Native CLI Flaw (CVE-2025-11953, CVSS 9.8) Allows Unauthenticated RCE via Exposed Metro Server

Do Son November 5, 2025 0

A newly disclosed critical vulnerability (CVE-2025-11953, CVSS 9.8) in the React Native Community CLI exposes developers to...

Read More Read more about Critical React Native CLI Flaw (CVE-2025-11953, CVSS 9.8) Allows Unauthenticated RCE via Exposed Metro Server

Critical WooCommerce Plugin Flaw (CVE-2025-12493, CVSS 9.8) Allows Unauthenticated RCE, 100,000+ Sites Affect

• Vulnerability Report

Critical WooCommerce Plugin Flaw (CVE-2025-12493, CVSS 9.8) Allows Unauthenticated RCE, 100,000+ Sites Affect

Do Son November 5, 2025 0

A critical-severity Local File Inclusion (LFI) flaw in the popular WordPress plugin ShopLentor – WooCommerce Builder for...

Read More Read more about Critical WooCommerce Plugin Flaw (CVE-2025-12493, CVSS 9.8) Allows Unauthenticated RCE, 100,000+ Sites Affect

Bob Flores, Former CTO of the CIA, Joins Brinker

• Press Release

Bob Flores, Former CTO of the CIA, Joins Brinker

cybernewswire November 4, 2025 0

Delaware, United States, 4th November 2025, CyberNewsWire

Read More Read more about Bob Flores, Former CTO of the CIA, Joins Brinker