Cyber News

The latest news feeds from the best sites on the web

CISA

Wired

• AI Toys for Kids Talk About Sex, Drugs, and Chinese Propaganda
• Warnings Mount in Congress Over Expanded US Wiretap Powers
• Doxers Posing as Cops Are Tricking Big Tech Firms Into Sharing People’s Private Data
• 2 Men Linked to China’s Salt Typhoon Hacker Group Likely Trained in a Cisco ‘Academy’
• A Complete Guide to the Jeffrey Epstein Document Dumps

Wired Guides

• What Is Quantum Computing? The Complete WIRED Guide
• Data Breaches: The Complete WIRED Guide
• What Defines Artificial Intelligence? The Complete WIRED Guide
• What Is Blockchain? The Complete WIRED Guide
• What is 5G? The Complete Guide to When, Why, and How

Naked Security

• A big finish to 2025 in December’s Patch Tuesday
• React2Shell flaw (CVE-2025-55182) exploited for remote code execution
• Sophos Tops G2 Winter 2026 Reports: #1 Overall in Endpoint, XDR, MDR and Firewall
• GOLD SALEM tradecraft for deploying Warlock ransomware
• Sophos achieves its best-ever results in the MITRE ATT&CK Enterprise 2025 Evaluation

Troy Hunt

• Processing 630 Million More Pwned Passwords, Courtesy of the FBI
• Weekly Update 481
• Why Does Have I Been Pwned Contain "Fake" Email Addresses?
• Weekly Update 480
• Weekly Update 479

The Hacker News

• CISA Adds Actively Exploited Sierra Wireless Router Flaw Enabling RCE Attacks
• Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild
• Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads
• New Advanced Phishing Kits Use AI and MFA Bypass Tactics to Steal Credentials at Scale
• Securing GenAI in the Browser: Policy, Isolation, and Data Controls That Actually Work

CSHub

Graham Cluely

Schneier on Security

• Friday Squid Blogging: Giant Squid Eating a Diamondback Squid
• Building Trustworthy AI Agents
• AIs Exploiting Smart Contracts
• FBI Warns of Fake Video Scams
• AI vs. Human Drivers

Krebs On Security

• Microsoft Patch Tuesday, December 2025 Edition
• Drones to Diplomas: How Russia’s Largest Private University is Linked to a $25M Essay Mill
• SMS Phishers Pivot to Points, Taxes, Fake Retailers
• Meet Rey, the Admin of ‘Scattered Lapsus$ Hunters’
• Is Your Android TV Streaming Box Part of a Botnet?

Dark Reading

We Live Security

• Black Hat Europe 2025: Was that device designed to be on the internet at all?
• Black Hat Europe 2025: Reputation matters – even in the ransomware economy
• Locks, SOCs and a cat in a box: What Schrödinger can teach us about cybersecurity
• Seeking symmetry during ATT&CK® season: How to harness today’s diverse analyst and tester landscape to paint a security masterpiece
• The big catch: How whaling attacks target top executives

Infosec Magazine

• NCSC Plugs Gap in Cyber-Deception Guidance
• ICO Fines LastPass £1.2m After 2022 Breach
• South Korean Police Raid Coupang Over Data Breach as CEO Resigns
• OpenAI Enhances Defensive Models to Mitigate Cyber-Threats
• Malware Discovered in 19 Visual Studio Code Extensions

JISA

• Looking Ahead: 2026 Privacy & Security Trends
• The New Standard: Consent & Data Subject Rights under UAE and GCC Laws
• Top 5 Enterprise Security Trends For 2026
• CryptoBind Secures the Core of National Digital Healthcare Transformation
• November Industry Wrap-Up: Data Privacy Lessons Learned

 Vicente Aceituno  – Medium

• Some Cybersecurity Scandals
• TimeHereNow Demo API
• Cybersecurity at a glance
• Broken Chains of Trust
• Blast from the Past: Trust in Data Attacked

Davinci Forensics

• SIM Pharm Cyber crime Escalates in South Africa
• South Africa Suffering from AI-powered Cybercrime
• Who is Ultimately Responsible for Business Email Compromise?
• WhatsApp Scams: The Latest Way Criminals Attack
• Sophisticated “Smishing” hackers Steal Credit Card Information

Ivan Novikov

• The Hand-y Etiquette of Modern All-Remote Culture
• What is threat modeling ❓ Definition, Methods, Example
• What is an SSL certificate ❓ Meaning and Types
• What is Cross Site Request Forgery CSRF | Example and Methods of protection
• Server side template injection — SSTI vulnerability ⚠️

CISO 2 CISO

• Thinking About Becoming a Licensed Engineer? Start Here.
• Celebrate Hispanic Heritage Month With SWE
• The Critical Role of Sboms (Software Bill of Materials) In Defending Medtech From Software Supply Chain Threats – Source: www.cyberdefensemagazine.com
• Ransomware Tactics Are Shifting. Here’s How to Keep Up – Source: www.cyberdefensemagazine.com
• French Advisory Sheds Light on Apple Spyware Activity – Source: www.darkreading.com

Threat Insight

• Proofpoint Completes Acquisition of Hornetsecurity
• Yippee-ki-yay, cybercriminals!
• Proofpoint Named a Leader in 2025 Gartner Magic Quadrant for Email Security
• Proofpoint Appoints Chief Marketing Officer
• How to Stay Vigilant During End-of-Year Online Scams This Holiday Season

Webroot

• Guarding your family against the latest online threats
• Senior scams topped $4.8 billion in 2024: What to watch out for
• Why your computer will thank you for choosing Webroot Essentials
• Back-to-school cyber safety: Parent checklist
• Tips to make your summer travels cyber safe

ZoneAlarm

• Biggest-Ever Crypto Heist: $1.5B Stolen from Bybit
• Smart Home Data Breach Exposes 2.7 Billion Records
• Sharing Information with AI and Understanding the Risks
• Fake Job Interview Emails Installing Hidden Malware
• Cyber Attack on Japan Airlines Causes Global Disruptions

Upguard

• What is Cybersecurity Risk? A Thorough Definition | UpGuard
• Understanding and Mitigating CVE-2025-55182 (React2Shell) | UpGuard
• Remediation Made Easy: Reducing Risks and Driving Vendor Action | UpGuard
• Vendor Responsiveness Solved: Soothing Your Third-Party Aches | UpGuard
• What is Compliance Management in Cybersecurity? | UpGuard

PCI Security

• The AI Exchange: Innovators in Payment Security Featuring SISA
• Meet the Council’s New Director, Training Programs
• Request for Comments: PCI Key Management Operations (KMO) v1.0 Standard
• PCI SSC Publishes Mobile Payments on COTS (MPoC) Guidance Document
• The AI Exchange: Innovators in Payment Security Featuring Block, Inc.

ZoneAlarm

• Biggest-Ever Crypto Heist: $1.5B Stolen from Bybit
• Smart Home Data Breach Exposes 2.7 Billion Records
• Sharing Information with AI and Understanding the Risks
• Fake Job Interview Emails Installing Hidden Malware
• Cyber Attack on Japan Airlines Causes Global Disruptions

IT Governance