Patrick C Miller

Reporters Without Borders Targeted by Russian Hackers The state-sponsored hackers relied on phishing emails to deliver a malicious payload to Reporters Without Borders (RSF).

Reporters Without Borders Targeted by Russian Hackers www.securityweek.com/reporters-wi...

Inotiv Says Personal Information Stolen in Ransomware Attack Hackers stole the names, addresses, Social Security numbers, and financial and medical information of 9,542 people.

Inotiv Says Personal Information Stolen in Ransomware Attack www.securityweek.com/inotiv-says-...

Cybersecurity M&A Roundup: 30 Deals Announced in November 2025 Significant cybersecurity M&A deals announced by Arctic Wolf, Bugcrowd, Huntress, Palo Alto Networks, and Zscaler.

Cybersecurity M&A Roundup: 30 Deals Announced in November 2025 www.securityweek.com/cybersecurit...

India Rolls Back Order to Preinstall Cybersecurity App on Smartphones The Ministry of Communications on had asked smartphone makers to install the government’s “Sanchar Saathi” app within 90 days and to prevent users from disabling it.

India Rolls Back Order to Preinstall Cybersecurity App on Smartphones www.securityweek.com/india-rolls-...

Aisuru Botnet Powers Record DDoS Attack Peaking at 29 Tbps Cloudflare recently mitigated a new record-breaking Aisuru attack that peaked at 14.1 Bpps.

Aisuru Botnet Powers Record DDoS Attack Peaking at 29 Tbps www.securityweek.com/aisuru-botne...

US Organizations Warned of Chinese Malware Used for Long-Term Persistence Warp Panda has been using the BrickStorm, Junction, and GuestConduit malware in attacks against US organizations.

US Organizations Warned of Chinese Malware Used for Long-Term Persistence www.securityweek.com/us-organizat...

A New Anonymous Phone Carrier Lets You Sign Up With Nothing but a Zip Code Privacy stalwart Nicholas Merrill spent a decade fighting an FBI surveillance order. Now he wants to sell you phone service—without knowing almost anything about you.

A New Anonymous Phone Carrier Lets You Sign Up With Nothing but a Zip Code www.wired.com/story/new-an...

Cloudflare Has Blocked 416 Billion AI Bot Requests Since July 1 Cloudflare CEO Matthew Prince claims the internet infrastructure company’s efforts to block AI crawlers are already seeing big results.

Cloudflare Has Blocked 416 Billion AI Bot Requests Since July 1 www.wired.com/story/big-in...

Huge Trove of Nude Images Leaked by AI Image Generator Startup’s Exposed Database An AI image generator startup’s database was left accessible to the open internet, revealing more than 1 million images and videos, including photos of real people who had been “nudified.”

Huge Trove of Nude Images Leaked by AI Image Generator Startup’s Exposed Database www.wired.com/story/huge-t...

Global security agencies issue joint guidance to help critical infrastructure integrate AI into OT systems - Industrial Cyber Global cybersecurity agencies issue joint guidance to help critical infrastructure systems integrate AI into OT systems.

Global security agencies issue joint guidance to help critical infrastructure integrate AI into OT systems industrialcyber.co/cisa/global-...

Chinese Hackers Exploiting React2Shell Vulnerability AWS has seen multiple China-linked threat groups attempting to exploit the React vulnerability CVE-2025-55182.

Chinese Hackers Exploiting React2Shell Vulnerability www.securityweek.com/chinese-hack...

Chinese hackers exploiting React2Shell bug impacting countless websites, Amazon researchers say The bug, tagged as CVE-2025-55182 and referred to colloquially as React2Shell, was reported to Meta by researcher Lachlan Davidson on November 29 and publicly disclosed on Wednesday, when a fix was…

Chinese hackers exploiting React2Shell bug impacting countless websites, Amazon researchers say therecord.media/chinese-hack...

AWS: Beijing-linked hackers hammering max-severity React bug : State-backed attackers started poking flaw as soon as it dropped – anyone still unpatched is on borrowed time

Beijing-linked hackers are hammering max-severity React bug, AWS warns www.theregister.com/2025/12/05/a...

Agreed. It’s not number one on my list of concerns.

Officials investigating false earthquake alert in Northern California and Nevada | StateScoop Officials said a recent false alarm issued by the region's Shake Alert system represents a unique technical error not previously seen.

Officials investigating false earthquake alert in Northern California and Nevada statescoop.com/california-n...

Critical React Server Components Vulnerability Business

Critical React Server Components Vulnerability CVE-2025-55182: What Security Teams Need to Know www.trendmicro.com/en_us/resear...

PRC State-Sponsored Actors Use BRICKSTORM Malware Across Public Sector and Information Technology Systems www.cisa.gov/news-events/...

CISA, NSA sound alarm on Brickstorm backdoor used by China-linked actors targeting VMware, Windows systems - Industrial Cyber CISA, NSA sound alarm on Brickstorm backdoor used by China-linked actors targeting VMware and Windows systems.

CISA, NSA sound alarm on Brickstorm backdoor used by China-linked actors targeting VMware, Windows systems industrialcyber.co/cisa/cisa-ns...

Principles for the Secure Integration of Artificial Intelligence in Operational Technology | CISA www.cisa.gov/resources-to...

Fraudulent gambling network may actually be something more nefarious Researchers say there’s more to the network, which has operated for 14 years.

Fraudulent gambling network may actually be something more nefarious arstechnica.com/security/202...

Satellites keep photobombing the Hubble telescope, and it’s getting worse Overcrowded orbits are making astronomers’ jobs harder.

Satellites keep photobombing the Hubble telescope, and it’s getting worse

UK Ransomware Payment Ban to Come with Exemptions The UK government’s proposed ransomware payment ban for public sector and critical infrastructure will come with national security exemptions

UK Ransomware Payment Ban to Come with Exemptions, Security Minster Say www.infosecurity-magazine.com/news/uk-rans...

Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code Execution Critical RSC flaws in React and Next.js enable unauthenticated remote code execution; users should update to patched versions now.

Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code Execution thehackernews.com/2025/12/crit...

Three Years to Rebuild the Internet or Lose the AI Race COMMENTARY | The nation that builds Cloud 2.0 first will shape the innovation economy for decades.

Three Years to Rebuild the Internet or Lose the AI Race www.nextgov.com/ideas/2025/1...

Leading surveillance camera vendor signs CISA’s product-security pledge Axis Communications is the first major surveillance camera maker to vow to adhere to CISA’s security guidelines.

Leading surveillance camera vendor signs CISA’s product-security pledge www.cybersecuritydive.com/news/surveil...

Planned satellite constellations may swamp future orbiting telescopes Planned orbital observatories would see satellites cross nearly all of their images.

Planned satellite constellations may swamp future orbiting telescopes arstechnica.com/science/2025...

Why wireless monitoring belongs in every utility’s security plan Monitoring the radio frequency spectrum closes blind spots, supports critical infrastructure protection and speeds incident response, writes Brett Walkenhorst of Bastille, a security company for…

Why wireless monitoring belongs in every utility’s security plan www.utilitydive.com/news/wireles...

U.S. data center power demand could reach 106 GW by 2035: BloombergNEF The forecast is 36% higher than its April estimate. Other experts warn that an AI bubble or speculative data center proposals could be fueling excessive load growth projections.

U.S. data center power demand could reach 106 GW by 2035: BloombergNEF www.utilitydive.com/news/us-data...

Get poetic in prompts and AI will break its guardrails 25 frontier proprietary and open-weight models yielded high attack success rates when prompted in verse, indicating a deeper, underlying problems in their ability to process ambiguity veiled in…

Get poetic in prompts and AI will break its guardrails www.infoworld.com/article/4099...

Picklescan Bugs Allow Malicious PyTorch Models to Evade Scans and Execute Code Picklescan flaws allowed attackers to bypass scans and execute hidden code in malicious PyTorch models before the latest patch.

Picklescan Bugs Allow Malicious PyTorch Models to Evade Scans and Execute Code thehackernews.com/2025/12/pick...