Daily CyberSecurity

Water Saci Campaign Uses LLMs to Convert Malware to Python, Spreads Banking Trojan Via WhatsApp Worm

• Malware

Water Saci Campaign Uses LLMs to Convert Malware to Python, Spreads Banking Trojan Via WhatsApp Worm

Do Son December 4, 2025 0

Trend Micro exposed Water Saci, a campaign using LLMs to convert malware from PowerShell to Python, accelerating its spread via a WhatsApp worm. The multi-stage attack deploys a trojan capable of VNC mirroring and overlay attacks.

High-Severity Vim for Windows Flaw (CVE-2025-66476) Risks Arbitrary Code Execution from Compromised Folders

• Vulnerability Report

High-Severity Vim for Windows Flaw (CVE-2025-66476) Risks Arbitrary Code Execution from Compromised Folders

Do Son December 4, 2025 0

A High-severity Vim for Windows flaw (CVE-2025-66476) allows arbitrary code execution. The editor executes malicious binaries in the current working directory instead of safe system paths when running commands like :grep.

AWS Nova Forge: Open-Training Platform Enables Deep Customization of Nova 2 Models

• Technology

AWS Nova Forge: Open-Training Platform Enables Deep Customization of Nova 2 Models

Do Son December 4, 2025 0

AWS Nova Forge allows deep customization of Nova 2 models via open-training (pre-, mid-, post-training). This ensures reliable AI outputs aligned with enterprise operational constraints.

Android 16 Update: AI Notification Summaries & Gemini-Powered Accessibility Suite

• Android

Android 16 Update: AI Notification Summaries & Gemini-Powered Accessibility Suite

Do Son December 4, 2025 0

Android 16's second update brings AI notification summaries and anti-scam tools. Accessibility gains Gemini-powered TalkBack and Expressive Captions for enhanced user experience.

Raspberry Pi Price Hike: AI Boom Forces Price Increases on Pi 4 and Pi 5 Models

• Technology

Raspberry Pi Price Hike: AI Boom Forces Price Increases on Pi 4 and Pi 5 Models

Do Son December 4, 2025 0

Raspberry Pi raised prices on Pi 4 and Pi 5 models by up to $25, citing AI-driven memory demand. It simultaneously launched a new $45, 1GB Pi 5 entry model.

AWS S3 Unleashed: Native Vector Storage & 50 TB Max Object Size for AI/Big Data

• Technology

AWS S3 Unleashed: Native Vector Storage & 50 TB Max Object Size for AI/Big Data

Do Son December 4, 2025 0

At re:Invent 2025, AWS announced a sweeping set of enhancements to its flagship storage service, Amazon S3,...

Read More Read more about AWS S3 Unleashed: Native Vector Storage & 50 TB Max Object Size for AI/Big Data

AWS Frontier Agents: Autonomous AI ‘Team Members’ Take Over Dev, Security, and Ops

• Technology

AWS Frontier Agents: Autonomous AI ‘Team Members’ Take Over Dev, Security, and Ops

Do Son December 4, 2025 0

AWS launched Frontier Agents, a new class of autonomous AI agents (Kiro, Security Agent, DevOps Agent) capable of long-running, independent software engineering tasks.

AWS Unveils Nova 2 AI Model Family with Multimodal Omni & Agentic Nova Act

• Technology

AWS Unveils Nova 2 AI Model Family with Multimodal Omni & Agentic Nova Act

Do Son December 4, 2025 0

AWS launched the Nova 2 model family (Lite, Pro, Omni) and Nova Act, an agent platform achieving 90% reliability in web-browsing tasks, with Nova Forge for deep customization.

AWS AI Factories: Bringing Full Cloud AI Infrastructure On-Prem for Data Sovereignty

• Technology

AWS AI Factories: Bringing Full Cloud AI Infrastructure On-Prem for Data Sovereignty

Do Son December 3, 2025 0

AWS launched AI Factories, deploying its full AI stack (NVIDIA/Trainium) into customer data centers to create private AWS regions for compliance and data sovereignty.

AWS Unleashes Trainium3 Chip: 4.4x Faster AI Performance for EC2 UltraServers

• Technology

AWS Unleashes Trainium3 Chip: 4.4x Faster AI Performance for EC2 UltraServers

Do Son December 3, 2025 0

AWS launched the Trainium3 chip in EC2 UltraServers, offering 4.4x performance for AI training and 40% better efficiency, supporting massive 1M-chip clusters.

AWS Bedrock Unleashed: 18 New AI Models, AgentCore Upgrades, and Enhanced Security

• Technology

AWS Bedrock Unleashed: 18 New AI Models, AgentCore Upgrades, and Enhanced Security

Do Son December 3, 2025 0

AWS Bedrock unveiled 18 new models (including Mistral/Nova 2), AgentCore with memory/policies, and GuardDuty/Security Hub upgrades to enhance AI-driven threat detection.

Google Phone App Gets ‘Call Reason’: Mark Calls as Urgent to Ensure a Pick-Up

• Android

Google Phone App Gets ‘Call Reason’: Mark Calls as Urgent to Ensure a Pick-Up

Do Son December 3, 2025 0

The Google Phone app is testing a 'Call Reason' feature, letting users mark urgent calls with a badge to ensure the recipient answers, limiting its use to saved contacts.

Microsoft Update Breaks Dark Mode: File Explorer Now Flashes White on Launch

• Windows

Microsoft Update Breaks Dark Mode: File Explorer Now Flashes White on Launch

Do Son December 3, 2025 0

Windows 11 preview update KB5070311 introduced a bug where File Explorer, Home, and Gallery flash bright white upon launch, severely disrupting the dark mode experience.

Security Tightens: Let’s Encrypt Will Cap Certificate Validity at 45 Days by 2028

• Technology

Security Tightens: Let’s Encrypt Will Cap Certificate Validity at 45 Days by 2028

Do Son December 3, 2025 0

Following Apple's push, Let's Encrypt will cap all certificate validity at 45 days by 2028. Users must ensure automation is compatible with the significantly shorter lifetime.

Red Alert at OpenAI: Ad Plans Dropped to Focus on ChatGPT Quality Amid Gemini Threat

• Technology

Red Alert at OpenAI: Ad Plans Dropped to Focus on ChatGPT Quality Amid Gemini Threat

Do Son December 3, 2025 0

Facing a "red alert" from Google Gemini, OpenAI shelved its ad plans to focus on core ChatGPT quality, speed, and deep personalization to remain competitive.

India Mandates SIM-Binding: WhatsApp and Telegram Users Must Re-verify Every 6 Hours

• Technology

India Mandates SIM-Binding: WhatsApp and Telegram Users Must Re-verify Every 6 Hours

Do Son December 3, 2025 0

India's DoT mandated SIM-binding for all messaging apps (WhatsApp, Telegram, Signal). Users must re-verify every six hours to combat cybercrime and cross-border fraud.

Critical cPanel Flaw (CVSS 9.3) Allows Directory Traversal LPE for Full Server Takeover

• Vulnerability

Critical cPanel Flaw (CVSS 9.3) Allows Directory Traversal LPE for Full Server Takeover

Do Son December 3, 2025 0

A Critical (CVSS 9.3) LPE flaw in cPanel's Team Manager API allows a standard user to break out of their directory via path traversal and compromise the shared hosting server. Update immediately.

Critical ACF Extended Flaw (CVE-2025-13486, CVSS 9.8) Allows Unauthenticated RCE on 100K WordPress Sites

• Vulnerability Report

Critical ACF Extended Flaw (CVE-2025-13486, CVSS 9.8) Allows Unauthenticated RCE on 100K WordPress Sites

Do Son December 3, 2025 0

A Critical (CVSS 9.8) RCE flaw in ACF Extended allows unauthenticated attackers to run arbitrary code via the prepare_form function, risking 100K+ WordPress sites. Update to v0.9.2.

CISA Warns: Critical Longwatch RCE Flaw (CVE-2025-13658, CVSS 9.8) Allows Unauthenticated SYSTEM Takeover of OT Surveillance

• Vulnerability Report

CISA Warns: Critical Longwatch RCE Flaw (CVE-2025-13658, CVSS 9.8) Allows Unauthenticated SYSTEM Takeover of OT Surveillance

Do Son December 3, 2025 0

CISA warned of a Critical RCE flaw (CVE-2025-13658, CVSS 9.8) in Longwatch video surveillance. Unauthenticated attackers can execute arbitrary code with SYSTEM privileges on OT environments. Update to v6.335.

Malicious Rust Package ‘evm-units’ Exposes Crypto Developers to Stealth Attacks

• Malware

Malicious Rust Package ‘evm-units’ Exposes Crypto Developers to Stealth Attacks

Do Son December 3, 2025 0

A malicious Rust package (evm-units) was live on Crates.io for 8 months, hiding RCE in a version check function. The loader uses VBScript and checks for Qihoo360 to compromise crypto developers on Windows/Linux/macOS.

DOJ Seizes Domain of Burma’s Notorious Tai Chang Scam Compound to Disrupt ‘Pig Butchering’ Fraud

• Cybercriminals

DOJ Seizes Domain of Burma’s Notorious Tai Chang Scam Compound to Disrupt ‘Pig Butchering’ Fraud

Do Son December 3, 2025 0

The DOJ seized tickmilleas.com, a domain central to "pig butchering" crypto fraud run from Burma's Tai Chang compound. The action is part of a rapid escalation against transnational organized crime scams.

Chrome 143 Stable Fixes 13 Flaws: High-Severity V8 Type Confusion Earns $11,000 Bounty

• Vulnerability Report

Chrome 143 Stable Fixes 13 Flaws: High-Severity V8 Type Confusion Earns $11,000 Bounty

Do Son December 3, 2025 0

Google rolled out Chrome 143 stable, patching 13 vulnerabilities. Key fixes include a High-severity V8 Type Confusion flaw (CVE-2025-13630) and an Updater vulnerability that risk code execution. Update immediately.