A malicious PyPI typosquat (spellcheckers) infected 950+ users. The package deploys an XOR-encrypted Python RAT via a hidden index file, granting full remote execution (exec()) and is linked to crypto scams.

A Critical (CVSS 10.0) RCE flaw (CVE-2025-65108) in md-to-pdf allows arbitrary JavaScript code execution via malicious front-matter. Over 47K weekly downloads are affected. Update to v5.2.5.

Trustwave exposed Eternidade Stealer, a sophisticated Brazilian Trojan. The Python WhatsApp worm steals contact lists and uses IMAP email for covert C2 retrieval to launch banking overlays.

K7 Labs exposed a Python malware using multi-layer encoding (Base64/BZ2/Zlib) and a PNG-disguised RAR archive. The payload executes in memory and achieves stealth by injecting into cvtres.exe.

Wscan is a new open-source web scanner using Machine Learning for fully automated, personalized penetration testing, aiming for high efficiency, accuracy, and low false positives.

A new GRUB2 patch fixes six critical flaws (like CVE-2025-61661) that could bypass UEFI Secure Boot. Full boot chain rebuild and SBAT support are required.

The UK's NCA dismantled the financial network that bankrolled a spy ring linked to Jan Marsalek, exposing a sophisticated crypto-laundering scheme that moved billions.

Cyberattacks on universities (Princeton, Harvard, UPenn) surge globally. Experts warn that AI-augmented hacking and complex infrastructure make the sector highly vulnerable.

NSO Group is appealing a federal injunction banning it from using WhatsApp's infrastructure to deploy Pegasus spyware, arguing the order could force the company to shut down.

Microsoft released out-of-band update KB5072753 for Windows 11 25H2 to fix a bug where the previous KB5068966 hotfix was being repeatedly reinstalled on affected systems.

NVIDIA released GeForce Hotfix Driver 581.94 to mitigate significant game performance drops (FPS) caused by Microsoft's recent October Windows 11 update KB5066835.

The UNC2891 campaign against Indonesian banks used a Raspberry Pi and the CAKETAP rootkit to bypass ATM verification protocols, orchestrating cash-outs via a mule network.

Recent outages at AWS, Azure, and Cloudflare show that internal configuration errors, not attacks, are the new single point of failure in hyper-automated global cloud infrastructure.

PHP 8.5 brings major updates, including the long-awaited Pipe operator for cleaner code chaining and a new URL library for standards-compliant, reliable data handling.

INC Ransom claims to have stolen 1 TB of internal data from NAFFCO, a major Middle East fire safety contractor for critical infrastructure like the Burj Khalifa.

Salesforce revoked all Gainsight app tokens after a breach, potentially exposing customer data. ShinyHunters claims responsibility, threatening to leak data from ~1,000 organizations.

Almaviva, a key contractor for Italy's national railway (FS Italiane), confirmed a breach resulting in a massive 2.3 terabyte leak of internal and confidential documents on the dark web.

Apple will forgo major new features in iOS 27 and macOS 27 to focus on performance, bug fixes, and stability—a return to the foundational 'Snow Leopard' strategy.

X is rolling out "About this account," a new feature that publicly reveals an account's creation location and handle history to increase transparency and curb fake profiles.

Reports suggesting Tim Cook will step down as Apple CEO in early 2026 are "simply false," according to Mark Gurman. Cook is expected to remain until at least 2029.