[SPONSOREDNUBIVANCE]
Know a small business winging it on security?
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it alongCybersecurity
General cybersecurity news and analysis
PickleScan Exclusive: Critical Flaws Rock AI Supply Chains
Researchers disclosed three critical PickleScan zero-days that let attackers stealthily swap or tamper with local AI models—injecting misinformation, bias, or even exfiltrating data from Python/PyTorch model runners. Exploitable via drive-by browser-origin attacks against assumed-safe local admin endpoints, these flaws show how our trusted AI tooling can become the weakest link in the supply chain.
ShadyPanda Stunning Scheme Damages 4.3M Chrome & Edge
Think twice before clicking Add to Chrome—a sprawling campaign called ShadyPanda used dozens of seemingly helpful browser extensions to secretly siphon data from an estimated 4.3 million Chrome and Edge users. By cloning listings and routing telemetry to shared command-and-control endpoints, attackers turned legit marketplaces into a stealth distribution network that slipped past detection.
SecAlerts Exclusive: Fast, Easy Vulnerability Tracking
Cut through the noise with SecAlerts: fast, easy vulnerability tracking that flags the risks that matter and helps your team patch them before they become problems.
Google Exclusive: Critical Android Zero-Day Patch Released
Heads-up: Google has released an urgent patch for a critical Android zero-day vulnerability after evidence of limited, targeted exploitation. If you keep sensitive conversations or data on your phone, update now to protect yourself.
ICO Exclusive Audit: Mobile Games Deemed Concerning
A childs tap on a free game can hand companies a trove of data, payments and attention—and the ICOs new probe into the mobile gaming sector shows why that should make parents and players sit up and take notice.
State-Sponsored Cyber Attacks: Exclusive Critical Threat
State-sponsored cyber attacks are escalating — learn how nation-backed hackers target organizations and practical steps you can take to stay one step ahead.
Google Exclusive Patch Fixes 107 Android Flaws, Critical
Google’s latest monthly Android update patches 107 vulnerabilities — including two already exploited in the wild — so this isn’t optional maintenance anymore. If you manage devices, accelerate testing and push updates now before fragmentation leaves users exposed.
Banning VPNs: Exclusive Report on Severe Risks
Curbing access to virtual private networks in the name of “protecting kids” sounds simple — until you remember VPNs are vital privacy and safety tools for everyday users, journalists, and activists. Bans could cripple those protections, introduce new security and consumer risks, and chill speech well beyond their intended reach.
Cybersecurity Exclusive: M&A Makes AI Security Stronger
When cybersecurity giants snap up AI‑security specialists, November 2025s M&A wave became a fast lane to protect models, training data and inference pipelines — reshaping defenses as vendors race to bake AI security into every stack.
Weekly Recap: Exclusive Critical CVEs, npm Worm, M365 Raid
When the tools we rely on become the battering ram for attackers, the damage is quiet, efficient, and far-reaching. This week’s critical CVEs, a resurgent npm worm, and a mass Microsoft 365 raid show how supply‑chain risks turn everyday convenience into serious compromise.
Europol Exclusive: Costly Crypto Mixer Crushed
Think crypto leaves no trail? Europol’s takedown of Cryptomixer shows how cross‑border police work plus on‑chain forensics can unmask cryptocurrency mixers and cripple the networks that hide criminal proceeds.
Australian Man Gets Seven Years in Stunning Harsh Sentence
A Western Australia man was sentenced to seven years after weaponizing public Wi‑Fi networks to steal intimate data — a stunning verdict that spotlights how vulnerable our everyday connections are and why you should avoid sensitive activity on open networks.
CISA Exclusive: Critical XSS in OpenPLC ScadaBR
CISA has added an actively exploited XSS (CVE‑2021‑26829) in OpenPLC ScadaBR to its KEV catalog — a stark reminder that even “moderate” web bugs can let attackers hijack operator sessions and issue commands to PLCs. If you run OpenPLC/ScadaBR, prioritize assessment and mitigation now.
Legacy Python Bootstrap Scripts: Stunning PyPI Threat
Legacy zcbuildout scripts left in projects can become silent attack vectors—if a referenced domain lapses and an attacker reclaims it, builds can pull and execute malicious code that reaches PyPI. ReversingLabs’ findings show how a tiny oversight in old bootstrap helpers can enable wide supply‑chain compromise, so it’s time to find, update, or remove those scripts.
North Korean Hackers: Exclusive Dire OtterCookie Attack
Discover how North Korean hackers unleashed the elusive Dire OtterCookie attack in our exclusive investigation — get the inside scoop on their methods, motives, and the practical steps you can take to stay protected.
Prompt Injection Through Poetry: Exclusive Best Defenses
What if a poem could fool the guard? New research shows adversarial verse — and even $5 expired-domain hijacks — can cheaply and reliably bypass model guardrails, turning style and supply-chain trust into a dangerous new attack surface.
[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Threat Actors Use Stunning, Dangerous Calendar Subs
Think that calendar invite is safe? Threat actors are weaponizing calendar subscriptions—slipping phishing links, malware, or hidden instructions into benign-seeming invites hosted on trusted services, turning everyday convenience into a stealthy breach vector.
Black Friday Exclusive: 3 Dangerous Scams to Avoid
Black Friday scams are getting smarter—learn the three dangerous tricks scammers use and the simple steps you can take to protect your wallet and personal info.
RPAM Must-Have: Effortless Gains for Modern Firms
Perimeters are gone — Remote Privileged Access Management (RPAM) delivers effortless gains by shifting control to identity and devices, combining MFA, short‑lived credentials, secrets management and session recording into a cloud‑native control plane. The outcome: consistent, least‑privilege access and full auditability for admins, contractors and machine identities wherever they work.
MS Teams Guest Access Exclusive Critical Defender Risk
Think twice before you add guests to Microsoft Teams: when someone joins as a guest, their protections are set by the host tenant — a Teams guest access gap attackers can exploit to bypass Defender for Office 365. Patch immediately, rotate credentials, and hunt sign‑in logs to stop a small convenience from becoming a major breach.
Bloody Wolf: Exclusive Dangerous Java RAT Hits Central Asia
Think your monitoring keeps you safe? Bloody Wolf has been quietly delivering NetSupport RAT across Kyrgyzstan and Uzbekistan via a Java-based loader and DLL sideloading — a stealthy, modular campaign that evades signature scanners and forces defenders to rely on behavioral monitoring and active threat hunting.
Microsoft Exclusive: Critical Entra ID Script Block 2026
Microsoft is tightening the Content Security Policy for Entra ID so login.microsoftonline.com will only run JavaScript from Microsoft-owned domains — a strong move to block unauthorized script injection that helps protect tokens and credentials. Rolling out in about a year, it’s a heads-up for admins: tighter security, but likely compatibility pain for third‑party integrations.
Asahi Exclusive: Alarming Cyberattack Hits 1.5M
Up to 1.5 million Asahi customers are asking, Were my records exposed? after a September ransomware attack that disrupted deliveries and may have accessed customer databases. Investigators and law enforcement are still probing what was taken as the company grapples with a growing privacy and trust crisis.
OpenAI Warns: Exclusive Critical Mixpanel Breach
OpenAI is urging users to rotate keys and audit integrations after a Mixpanel breach that may have exposed leaked API keys and telemetry — a wake‑up call that third‑party analytics can become an attack vector overnight.