Latest

Cyberwarfare / Nation-State Attacks

Brickstorm Malware Hits US Critical Systems, CISA Warns

Chris Riotta  •  December 4, 2025

U.S. and Canadian cyber authorities say Chinese state-backed actors used a backdoor dubbed BRICKSTORM to maintain long-term access into critical infrastructure, exploiting VMware environments to exfiltrate credentials and evade detection through encrypted covert channels.

Geo Focus: The United Kingdom

UK Government Considers Computer Misuse Act Revision

Akshaya Asokan  •  December 4, 2025

The U.K. government is considering amending its three-decade-old hacking law to include a "statutory defense" cover for security researchers. The announcement comes amid concerns that the law penalizes white hat hackers for essential security practices.

Cybercrime

Breach Roundup: React Flaw Incites Supply Chain Risk

Pooja Tikekar  •  December 4, 2025

This week, the React flaw, a belated Windows fix, Defense Secretary Pete Hegseth's Signal group posed operational risk, more North Korean npm packages. An Australian jailed for Wi-Fi "evil twin" crimes. The US FTC will send $15.3 million to Avast users. A London council said attackers stole data.

Artificial Intelligence & Machine Learning

US, Allies Warn AI in OT May Undermine System Safety

Chris Riotta  •  December 4, 2025

The U.S. cyber defense agency warned that machine learning and large language model deployments can introduce new attack surfaces across critical infrastructure sectors in a document setting out principles for safely integrating AI into operational technology.

Blockchain & Cryptocurrency

Cryptohack Roundup: Authorities Shutter Cryptomixer

Rashmi Ramesh  •  December 4, 2025

This week, authorities shutter Cryptomixer, Anthropic warns about autonomous AI exploits, U.K. plans ban on crypto political donations, Do Kwon seeks leniency, Lazarus Group suspected in Upbit theft, Balancer's post-exploit plans and Yearn recovers some hacked amount.

Critical Infrastructure Security

Utilities Warn US Grid at Risk as Federal Cyber Funds Dry Up

Chris Riotta  •  December 3, 2025

Cybersecurity leaders told Congress that U.S. energy systems are already compromised by state-backed actors - chiefly China - and warned that shrinking federal support for grid security programs threatens to worsen exposure as utilities face escalating threats with limited resources.

Agentic AI

Codex Bug Let Repo Files Execute Hidden Commands

Rashmi Ramesh  •  December 3, 2025

OpenAI patched a command injection flaw in its Codex CLI tool that let attackers run arbitrary commands on developer machines by hiding malicious configuration files inside code repositories. Hackers could turn ordinary repository files into execution vectors.

Artificial Intelligence & Machine Learning

China Skirts US Attempts to Restrict AI Exports

Rashmi Ramesh  •  December 3, 2025

Washington spent years constructing export barriers around America's most sensitive artificial intelligence technology. Witnesses told the U.S. Senate Foreign Relations Committee that China is finding ways to move around them. Where one pathway closes, Beijing opens another.

Recruitment & Reskilling Strategy

When ERP Systems Become the Attack Surface

Brandy Harris  •  December 3, 2025

When a critical vulnerability surfaces in ERP systems such as the Oracle E-Business Suite flaw, attackers can go well beyond a single compromised server. The flaw exposed the need for cyber professionals who understand enterprise architecture, secure configuration and vulnerability interpretation.

Critical Infrastructure Security

US Telecoms Reject Regulation as Answer to Chinese Hacking

Chris Riotta  •  December 2, 2025

U.S. telecommunications networks are still vulnerable to foreign intrusion, national security and industry panelists told senators during a Tuesday hearing, warning that China and other adversaries are refining long-term access into American infrastructure.

Iran Hackers Take Inspiration From Snake Video Game

David Perera  •  December 2, 2025

Iranian nation-state hackers took inspiration from a mobile phone time-killing mainstay, say security researchers who spotted hackers downloading malware masquerading as the Snake video game. A callback to the game isn't nostalgia, say researchers at Eset.

Agentic AI

Scaling AI From Copilots to Agentic Workflows

Brian Pereira  •  December 2, 2025

Organizations are adopting agentic artificial intelligence as the next phase of AI. Kim Basile, CIO of Kyndryl, explains how organizations can prepare teams to work with agentic AI, emphasizing culture, training and governance as the crucial drivers of AI readiness and adoption.