CyberNetSecIO

🇸🇪 Sweden's power grid operator, Svenska kraftnät, confirms data breach after Everest ransomware gang claims theft of 280GB of data. The attack was limited to an external system; power grid unaffected. ⚡ #Everest #Ransomware #DataBreach #Sweden

📈 Europe is now the #2 global target for ransomware, says new CrowdStrike report. Attacks are accelerating, with some deployments taking just 24 hours. Geopolitical tensions from Russia, China & DPRK are fueling the fire. #Ransomware #ThreatIntel

🤖 Novel 'SesameOp' backdoor discovered by Microsoft uses the OpenAI Assistants API for C2 communications. This espionage tool hides malicious traffic within legitimate API calls, making detection a major challenge. #Malware #OpenAI #C2 #Espionage

⚖️ China amends its Cybersecurity Law, massively increasing fines for non-compliance up to 10x for critical infrastructure operators. The new rules, effective Jan 1, 2026, also introduce a new clause on AI governance. #CyberLaw #China #Compliance

💸 Financial fallout: SK Telecom's operating profit drops 90% due to a data breach affecting 27M customers. The breach went undetected for 3 years and resulted in a $96.5M fine. A stark reminder of the cost of cyber incidents. #DataBreach #SKTelecom

🚨 Unbelievable insider threat: Two cybersecurity pros from incident response & negotiation firms indicted for using ALPHV/BlackCat ransomware to extort U.S. companies. Nearly $1.3M stolen from one victim. #Ransomware #InsiderThreat #BlackCat

CISA adds critical Motex LANSCOPE RCE flaw (CVE-2025-61932) to its KEV catalog. ⚠️ The bug is actively exploited to drop backdoors. Federal agencies must patch by Nov 12. #KEV #CISA #Vulnerability #CyberSecurity

T-Mobile is launching a credit card with Capital One, entering the financial services market. 💳 The partnership creates a new, complex data ecosystem, raising significant questions about data privacy and cybersecurity. #Fintech #CyberSecurity #Privacy

🐧 openSUSE has patched three moderate-severity vulnerabilities in the xorg-x11-server for Tumbleweed. The flaws could lead to DoS or privilege escalation. Update your systems! #openSUSE #Linux #Security #Xorg

Samsung's November 2025 security update is here! 🛡️ It patches 45 vulnerabilities, including Google's critical zero-click RCE (CVE-2025-48593) and flaws in Exynos chips. Update your Galaxy device now! #Samsung #Android #Security #PatchTuesday

🚨 Malicious VS Code extension 'SleepyDuck' found in Open VSX! 🦆 The RAT uses an Ethereum smart contract for a resilient C2 infrastructure. Targets developers via a trojanized Solidity extension. #Malware #SupplyChain #Crypto #DevSecOps

🚨 CRITICAL ANDROID FLAW! Google patches a zero-click RCE vulnerability (CVE-2025-48593). No user interaction needed for exploitation. Affects Android 13, 14, 15 & 16. Update your devices NOW! #Android #CyberSecurity #PatchNow

🇵🇱 Poland confirms "very serious" data breach at loan platform SuperGrosz. Attackers stole national IDs (PESEL), bank info & more. Customers urged to secure accounts & block PESEL numbers. #DataBreach #Poland #Finance

⚠️ University of Pennsylvania suffers massive data breach! Hacker claims to have stolen 1.2M donor records after compromising an employee SSO account. Sensitive personal & financial data exposed. #DataBreach #HigherEd #CyberSecurity

Multiple data breaches reported: Toys 'R' Us Canada, Japanese retailer Askul (hit by ransomware), and security firm Verisure have all exposed customer data, including PII and SSNs. 🛒🔐 #DataBreach #CyberAttack #Retail

⛓️ New "Airstalk" malware in suspected nation-state supply chain attack! Abuses VMware Workspace ONE API for covert C2 and uses a stolen code-signing certificate to evade detection. #SupplyChain #Malware #ThreatIntel #VMware

🇦🇺 Australia's ASD warns of 'BADCANDY' malware attacks on Cisco IOS XE devices. Hackers are exploiting critical flaw CVE-2023-20198 to take over routers. 150+ devices infected in October alone. #Cisco #CyberSecurity #BADCANDY #PatchNow

☣️ New 'KYBER' ransomware discovered! Uses advanced post-quantum crypto (Kyber1024) and AES-256. Threatens to leak stolen data, targeting Aerospace & Defense and tech firms. Shows signs of evolving into a major RaaS threat. #Ransomware #KYBER #Cyber...

⚖️ Ukrainian national Oleksii Lytvynenko, an alleged affiliate of the notorious Conti ransomware group, has been extradited from Ireland to the US. He faces up to 25 years for attacks that extorted over $150M globally. #Conti #Ransomware #Cybercrime

💻 Akira ransomware claims it has breached Apache OpenOffice, alleging theft of 23GB of sensitive data including financial records and employee PII. The Apache Software Foundation has not yet confirmed the attack. #Ransomware #Akira #DataBreach

⚠️ China-linked hackers (UNC6384) exploit unpatched Windows flaw CVE-2025-9491 to spy on EU diplomats. Attacks use malicious LNK files to deploy PlugX RAT. Microsoft has declined to patch the vulnerability. #CyberEspionage #ZeroDay #PlugX

Multiple data breaches reported: Toys 'R' Us Canada, Japanese retailer Askul (hit by ransomware), and security firm Verisure have all exposed customer data, including PII and SSNs. 🛒🔐 #DataBreach #CyberAttack #Retail

⛓️ New "Airstalk" malware in suspected nation-state supply chain attack! Abuses VMware Workspace ONE API for covert C2 and uses a stolen code-signing certificate to evade detection. #SupplyChain #Malware #ThreatIntel #VMware

🇦🇺 Australia's ASD warns of 'BADCANDY' malware attacks on Cisco IOS XE devices. Hackers are exploiting critical flaw CVE-2023-20198 to take over routers. 150+ devices infected in October alone. #Cisco #CyberSecurity #BADCANDY #PatchNow

☣️ New 'KYBER' ransomware discovered! Uses advanced post-quantum crypto (Kyber1024) and AES-256. Threatens to leak stolen data, targeting Aerospace & Defense and tech firms. Shows signs of evolving into a major RaaS threat. #Ransomware #KYBER #Cyber...

⚖️ Ukrainian national Oleksii Lytvynenko, an alleged affiliate of the notorious Conti ransomware group, has been extradited from Ireland to the US. He faces up to 25 years for attacks that extorted over $150M globally. #Conti #Ransomware #Cybercrime

💻 Akira ransomware claims it has breached Apache OpenOffice, alleging theft of 23GB of sensitive data including financial records and employee PII. The Apache Software Foundation has not yet confirmed the attack. #Ransomware #Akira #DataBreach

⚠️ China-linked hackers (UNC6384) exploit unpatched Windows flaw CVE-2025-9491 to spy on EU diplomats. Attacks use malicious LNK files to deploy PlugX RAT. Microsoft has declined to patch the vulnerability. #CyberEspionage #ZeroDay #PlugX

⚠️ Massive data breach at government contractor Conduent exposes personal & medical info of over 10 MILLION people. Data includes SSNs & health details. Unauthorized access occurred from Oct 2024 to Jan 2025. #DataBreach #Conduent #PII

Canada issues national alert as hacktivists breach internet-accessible Industrial Control Systems (ICS). Water, food & manufacturing sectors targeted. Urgent call for defensive measures. 🇨🇦 #ICS #OTsecurity #CriticalInfrastructure #Hacktivism