CyberInsider

Signal Users Targeted by Fake Support Messages for Account Hijacks A phishing campaign is targeting Signal users with fake messages posing as the platform’s security support, attempting to hijack accounts.

Signal Users Targeted by Fake Support Messages for Account Hijacks

Samsung Galaxy S25, Philips Hue Fall on Day 2 of Pwn2Own Ireland Day 2 of Pwn2Own Ireland 2025 featured standout compromises of the Samsung Galaxy S25 and the Philips Hue Bridge.

Samsung Galaxy S25, Philips Hue Fall on Day 2 of Pwn2Own Ireland

Meta Rolls Out New Anti-Scam Features on WhatsApp and Messenger Meta has introduced new anti-scam tools for WhatsApp and Messenger aimed at shielding users from sophisticated online fraud attempts.

Meta Rolls Out New Anti-Scam Features on WhatsApp and Messenger

Apple's iOS 26 Update Breaks Ability to Detect Spyware Infections Apple's iOS 26 update introduces a change that erases a vital forensic artifact used to detect infections from Pegasus and Predator spyware.

Apple's iOS 26 Update Breaks Ability to Detect Spyware Infections

183 Million Stolen Credentials from Synthient's Database Added to HIBP A massive trove of stolen credentials, including 183 million unique email and password pairs, has been added to Have I Been Pwned (HIBP).

183 Million Stolen Credentials from Synthient's Database Added to HIBP

OpenAI Launches Agentic AI Browser Atlas with ChatGPT Integration OpenAI has announced ChatGPT Atlas, a new AI-native web browser built around ChatGPT, designed to act as an intelligent assistant.

OpenAI Launches Agentic AI Browser Atlas with ChatGPT Integration

Pwn2Own Ireland Launches With 34 Zero-Days on Smart Devices Day One of Pwn2Own Ireland 2025 had security researchers uncovering 34 zero-day vulnerabilities across a range of smart devices.

Pwn2Own Ireland Launches With 34 Zero-Days on Smart Devices

Vidar Stealer 2.0 Marks Major Evolution in Infostealer Landscape Vidar infostealer released version 2.0, now featuring a complete rewrite in C, multithreading support, and Chrome memory protection bypass.

Vidar Stealer 2.0 Marks Major Evolution in Infostealer Landscape

Google Quietly Dismantles Core of Privacy Sandbox for Chrome Google is sunsetting a large portion of its Privacy Sandbox initiative, just two years after it began rolling it out on Chrome and Android.

Google Quietly Dismantles Core of Privacy Sandbox for Chrome

Mozilla Says It Will Continue to Fully Support Firefox on Windows 10 Mozilla has confirmed it will continue to provide full Firefox support on the Windows 10 operating system "for the foreseeable future."

Mozilla Says It Will Continue to Fully Support Firefox on Windows 10

Widespread AWS Outage Disrupts Alexa, Fortnite, and Many More An outage in Amazon Web Services is currently disrupting a wide range of services, including Amazon Alexa, Fortnite, and Perplexity.

Widespread AWS Outage Disrupts Alexa, Fortnite, and Many More

US Court Blocks Spyware Vendor NSO Group from Targeting WhatsApp Users A US federal judge has permanently banned Israeli spyware vendor NSO Group from accessing or targeting Meta's WhatsApp platform.

US Court Blocks Spyware Vendor NSO Group from Targeting WhatsApp Users

Meta to Shut Down Messenger Desktop Apps on December 15, Redirects Users to Web Meta is discontinuing its standalone Messenger apps for macOS and Windows, with full deprecation scheduled for December 15, 2025.

Meta to Shut Down Messenger Desktop Apps on December 15, Redirects Users to Web

EFF Sues US Government Over AI-Powered Social Media Surveillance The Electronic Frontier Foundation (EFF) has filed a federal lawsuit to stop what they call an unconstitutional online surveillance program.

EFF Sues US Government Over AI-Powered Social Media Surveillance

Nintendo Admits Server Tampering Incident, Denies Data Breach Nintendo acknowledged unauthorized modifications to external servers after claims of a cyberattack by the Crimson Collective hacking group.

Nintendo Admits Server Tampering Incident, Denies Data Breach

Experian Fined €2.7 Million in the Netherlands for Illegal Data Processing The Dutchhave imposed a €2.7 million fine on Experian for unlawfully processing personal data of individuals in the country without consent.

Experian Fined €2.7 Million in the Netherlands for Illegal Data Processing

Tor Browser Rejects AI Over Privacy Concerns in Upcoming 15.0 Release The Tor Project has confirmed that it is removing all of Firefox's artificial intelligence integrations from its browser.

Tor Browser Rejects AI Over Privacy Concerns in Upcoming 15.0 Release

Sotheby’s Confirms Data Breach Exposing Financial Information Sotheby’s has disclosed a data breach from unauthorized access to its internal environment, which exposed clients' financial information.

Sotheby’s Confirms Data Breach Exposing Financial Information

Prosper Data Breach Exposed 17.6 Million People's Information Prosper, a major US-based peer-to-peer lending platform, has suffered a data breach affecting 17.6 million individuals.

Prosper Data Breach Exposed 17.6 Million People's Information

F5 Says Nation-State Actor Breached BIG-IP Development Environment F5 has confirmed a cybersecurity breach by a nation-state actor who maintained persistent access to internal systems for an extended period.

F5 Says Nation-State Actor Breached BIG-IP Development Environment

Mango Notifies Customers of Data Breach via Marketing Provider Mango is notifying customers of a data breach affecting personal information processed by one of its third-party marketing providers.

Mango Notifies Customers of Data Breach via Marketing Provider

LastPass Warns of Impersonation Attacks Using Fake Breach Alerts A phishing campaign impersonating LastPass attempts to steal user credentials by claiming a breach and urging an app update.

LastPass Warns of Impersonation Attacks Using Fake Breach Alerts

Mozilla Begins Testing Free In-Browser VPN Tool for Firefox Mozilla has announced the early development of Firefox VPN, a free, browser-integrated virtual private network designed to secure browsing.

Mozilla Begins Testing Free In-Browser VPN Tool for Firefox

Capita Fined £14M for 2023 Data Breach Exposing 6.6 Million People The UK’s ICO fined Capita a total of £14M for security failures that led to a data breach in 2023, exposing the personal data of 6.6 million.

Capita Fined £14M for 2023 Data Breach Exposing 6.6 Million People

Microsoft October Patch Tuesday for Windows 11 Fixes 175 Flaws Microsoft’s October 2025 Patch Tuesday for Windows 11 addresses 175 bugs, including two zero-day elevation-of-privilege (EoP) flaws.

Microsoft October Patch Tuesday for Windows 11 Fixes 175 Flaws

Dashlane Launches Passwordless Vault Login with YubiKey Integration Dashlane and Yubico introduce passwordless, phishing-resistant login to Dashlane's credential vaults through FIDO2-based YubiKeys.

Dashlane Launches Passwordless Vault Login with YubiKey Integration

UEFI in 200k Framework Laptops Vulnerable to Secure Boot Bypassing A serious firmware security flaw has been discovered affecting around 200,000 Framework laptops, allowing UEFI Secure Boot bypass.

UEFI in 200k Framework Laptops Vulnerable to Secure Boot Bypassing

New Pixnapping Attack Steals Signal Messages and 2FA Codes from Android Devices New Pixnapping attack allows malicious Android apps to covertly capture Signal messages, 2FA codes, emails, and financial information.

New Pixnapping Attack Steals Signal Messages and 2FA Codes from Android Devices

Austrian DPA Finds Microsoft 365 Illegally Tracked Students The Austrian DPA ruled that Microsoft illegally tracked students via its Microsoft 365 Education suite, violating multiple GDPR provisions.

Austrian DPA Finds Microsoft 365 Illegally Tracked Students

Scattered Lapsus$ Hunters Leak First Wave of Salesforce Victim Data The Scattered Lapsus$ Hunters threat group has published the first tranche of stolen Salesforce client data on their dark web site.

Scattered Lapsus$ Hunters Leak First Wave of Salesforce Victim Data