Android/BankBot-YNRK malware is targeting users in Indonesia, suppressing alerts and stealing funds from mobile crypto wallets while posing as legitimate apps.

Microsoft released KB5067036 to address the decades-old 'Update and Shut Down' restart issue in Windows 11 and included performance and update naming changes.

Nextgov warns that government 'readiness debt' is constraining AI adoption and calls for modernization to remove legacy obstacles.

Open Systems argues that improved asset visibility and compliance controls are now central to securing cyber-physical systems in operational technology environments.

OPM said it will extend job-finding timelines for CyberCorps students post-shutdown amid concerns about tuition liabilities and limited federal cyber openings.

DHS published a regulatory proposal to expand biometric collection for immigrants and drop age restrictions, and would require biometrics from some US citizens in certain cases.

Cyble reports a sharp rise in hacktivist attacks against industrial control systems and critical infrastructure in Q3, with more disruptive ICS-focused activity and named groups involved.

Peter Williams, a former Trenchant manager, is accused of stealing zero-day exploits from an air-gapped L3Harris network and selling eight exploits to a Russian zero-day broker, per court documents and TechCrunch reporting.

Hackers exploited the Balancer protocol on Nov 3, 2025, draining more than $100 million in cryptocurrency from protocol liquidity pools.

DarkWebInformer published 'Darknet Market Insights #2' with follow-up analysis on illicit market activity and indicators.

DarkWebInformer published 'Darknet Market Insights #1', an intelligence summary of illicit marketplace activity and trends.

Lumen extended Internet On-Demand coverage to over 10 million off-net US business locations, giving customers more ISP choice and greater connectivity resilience.

A BEC campaign named TruffleNet used stolen AWS credentials to send phishing via AWS SES and deploy payloads that led to the compromise of more than 800 hosts.

AWS, Nvidia and CrowdStrike opened applications for a security/AI startup accelerator giving mentorship and investor access; last year's winner later raised $65M.

Ukrainian Yuriy Rybtsov (aka MrICQ) was extradited from Italy to the United States to face cybercrime charges alleging his role developing the Jabber Zeus malware.

DOJ alleges some US ransomware negotiators worked with ALPHV/BlackCat to carry out ransomware intrusions, according to recent indictments.

Sen. Wyden and Rep. Krishnamoorthi request an FTC investigation into Flock Safety over concerns about protection of sensitive user accounts and the company's security practices.

Flashpoint outlines how Echosec combines full-spectrum data and AI-assisted analysis to build proactive, intelligence-led physical security programs for security leaders.

A working paper linking Generative AI to 80% of ransomware incidents drew strong criticism, conflict-of-interest concerns and was removed from public view.

SK Telecom reported a sharp operating profit drop after a large-scale cyberattack that exposed ~27 million customers' personal data and triggered sizable recovery and compensation costs.

Analysis shows cloud misconfigurations remain the leading cause of large data exposures, with enterprises risking tens of millions in losses.

IOC alert: ClickFix payloads delivered using a compromised Shopify template domain are being observed in the wild.

Project Zero details how Linux linear mapping non-randomization and Pixel's static kernel physical load address weaken KASLR protections on arm64 devices.

Malicious Open VSX extension 'juan-bianco.solidity-vlang' delivered a SleepyDuck RAT that uses Ethereum transactions to persist or locate its command server.

OpenAI agreed a large compute supply deal with Amazon to access hundreds of thousands of Nvidia GPUs for model training and inference.

Cloud misconfiguration at a large automotive company exposed 70+ TB of data, hard-coded keys and weak IAM controls.

Kaspersky documents 'Dante' spyware in Operation ForumTroll, linking the tooling to Memento Labs (rebranded Hacking Team) and a Chrome zero-day.

New research shows data poisoning of AI models is easier than previously thought and can lead to malicious outputs or planted backdoors.

Canadian government posted Ubiquiti security advisory AV25-721; administrators should consult the advisory and apply vendor fixes or mitigations.

Three former incident response employees were indicted for alleged involvement in BlackCat/ALPHV ransomware attacks against multiple US companies in 2023.

Zscaler bought Splx to add further AI capabilities to its security product portfolio, following other AI-focused acquisitions.

Practical guidance offering ten tips to help defenders think like attackers and improve hunting, detection and prevention posture.

Microsoft DART uncovered 'SesameOp', a backdoor that uses the OpenAI Assistants API as a command-and-control channel to fetch commands and orchestrate malicious tasks.

Red Canary's CFP tracker lists upcoming security conferences and call-for-papers deadlines for November 2025.

Report finds AI can assist governance, threat detection and SOC automation though executives and technologists differ on priorities.

CISA and NSA released joint best-practice guidance to harden Microsoft Exchange servers against exploitation and improve detection.

Podcast explores OpenAI's stated desire to release erotic content on ChatGPT and the attendant safety, moderation and privacy concerns.

Government advisory AV25-720 for Microsoft Edge published; administrators and users should review vendor fixes and apply updates.

SecurityWeek guidance: development teams must combine governance, upskilling and code-review controls to deploy AI tools safely and ethically.

China Unicom Beijing and Huawei rolled out a high-uplink, AI-enabled 5G-A network to support connectivity and event services at the 2025 Beijing Marathon.

India's draft rules would force social platforms to tag AI-generated content prominently and embed metadata to counter deepfakes and misinformation.

Tata Motors remediated exposed AWS keys and backups in its E-Dukaan portal after a researcher reported admin keys, invoices and database backups that could expose customer and dealer data.

Study finds one-in-four employees use unapproved AI tools, creating privacy and security exposure; recommends inventory, policies and controls.

Microsoft warns attackers increasingly target obsolete Windows 10 systems and unmanaged devices; upgrading and patching urged to reduce ransomware risk.

App stores are flooded with ChatGPT lookalikes; many clones deliver adware or spyware, posing privacy and security risks to users.

An out-of-band WSUS update that fixed an actively exploited vulnerability caused Windows Server 2025 hotpatching to stop working on some devices.

Proofpoint finds threat actors compromise carriers, deploy RMM tools, post fake loads and bid to hijack and steal physical cargo, disrupting supply chains and causing multimillion-dollar losses.