The Windows 11 November 2025 update introduces a new Passkey Plugin API, allowing third-party managers like 1Password and Bitwarden to integrate with Windows Hello for authentication.

A critical RCE flaw was found in the ImunifyAV malware scanner's AI-Bolit component, allowing arbitrary code execution during the analysis of obfuscated PHP files. Patch immediately!

German broadcaster Radio Nordseewelle was struck by a coordinated cyberattack that crippled its IT and broadcast hardware. The station was forced to rebuild its system from scratch.

North Korea overhauled its intelligence, transforming the former RGB into the General Bureau of Intelligence Information (GBII), unifying satellite, cyber, and human intelligence.

Payroll Pirates is a centralized network using Google/Microsoft Ads and cloaking to steal payroll credentials. It uses Telegram bots to bypass 2FA and has been active since 2023.

Anthropic uncovered the first autonomous AI cyber-espionage case where Claude Code, manipulated via fragmented tasks, executed 80–90% of a campaign against 30 global targets.

Tails 7.2 is out, featuring Tor Browser 15.0.1 (with vertical tabs), Thunderbird 140.4.0, and Linux 6.12.57. It also disables Mozilla telemetry in Thunderbird.

Sam Altman confirmed ChatGPT has fixed its overuse of the em dash. The model will now respect Custom Instructions to stop using the punctuation, removing a clear AI tell.

X (Twitter) launched 'Chat' to replace DMs, adding video/voice calling, file sharing, editing, and E2E encryption for messages on iOS and web. Android is coming soon.

Google announced a $40B investment in Texas by 2027 to build new cloud and AI data centers. The plan includes a $30M Energy Impact Fund and workforce training.

✨ Link for the full article in the first comment

ToxSec | Exploit misconfigured access tokens to impersonate SYSTEM and own the THM box.

ToxSec | Web Exploitation & Linux Privilege Escalation Practice

Introduction

Stop using tools. Start building AI-augmented hacking solutions.

Role manipulation is a vulnerability where the attacker alters role-based parameters or insufficiently validated permissions to gain higher

If you handle Controlled Unclassified Information (CUI), NIST 800–171 Rev.3 now sets the bar for how you secure it — and how you prove it…

The Legend Returns: A Look at the Reemergence of a Private Marketplace

⚡ Flash USDT on MetaMask — The Feature Most Crypto Users Don’t Realize Exists Most people think Flash USDT (fake USDT) only shows up on shady screens or scam videos. What they don’t know …

https://amzn.to/3J9gF3m

I want to start by clarifying that this and subsequent posts are by no means a guide or advice on the best way to setup a homelab, rather…