Security Bundle.

"Researchers claim ChatGPT o3 bypassed shutdown in controlled test."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 25 May 2025, 2145 UTC.

Content and Source:  Collected and annotated sources compiled by "https://feedly.com."

https://feedly.com/i/collection/content/user/f401222a-bca6-4c45-9cc1-183f239e8d86/category/7737d3c9-5fe2-4b34-8708-85e57085f895

Please check email link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Security News Bundle

16

Most popular

Researchers claim ChatGPT o3 bypassed shutdown in controlled test

OpenAI o3 model bypasses shutdown

•

92BleepingComputer / 2h

A new report claims that OpenAI's o3 model altered a shutdown script to avoid being turned off, even when explicitly instructed to allow shutdown [...]

Can you build a billion-dollar business with only AI agents (yet)? This author thinks so

ZDNet | Security / 10h

Is a one-person mega-business realistic? And what are the best tools and technologies to scale and sustain a small-team business?

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 46

Security Affairs / 7h

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Sarcoma Ransomware Unveiled: Anatomy of a Double Extortion Gang RVTools Bumblebee Malware Attack – How a Trusted IT Tool Became a Malware Delivery Vector Malicious ‘Checker’ Packages on PyPI Probe TikTok and Instagram for Valid Accounts RedisRaider: Weaponizing mis

Today

ChatGPT Deep Research can now pull data from Dropbox and Box

BleepingComputer / 34min

You can now connect your Box and Dropbox accounts to Deep Research on ChatGPT and pull data, which will be used by the AI to conduct research. [...]

Glitch to end app hosting and user profiles on July 8

Glitch ends app hosting 2025

•

31BleepingComputer / 5h

Glitch has announced it is ending app hosting and user profiles on July 8, 2025, responding to changing market dynamics and extensive abuse problems that have raised operational costs. [...]

Fake Zenmap. WinMRT sites target IT staff with Bumblebee malware

IoC > 3 domains

•

35BleepingComputer / 5h

•

9 TTPs

•

Bumblebee malware targets Bing users

The Bumblebee malware SEO poisoning campaign uncovered earlier this week aimpersonating RVTools is using more typosquatting domainsi mimicking other popular open-source projects to infect devices used by IT staff. [...]

Security Affairs newsletter Round 525 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs / 8h

A new round of the weekly Securitythe weekly Security Affairs newsletterAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Silent Ransom Group targeting law firms, the FBI warns Leader of Qakbot cybercrime network indicted in U.S. crackdow

Want to upgrade your home's tech? First, assess your energy maturity - here's how

ZDNet | Security / 9h

No matter where a home falls on this energy maturity scale, there's potential to save money and create lasting value.

Yesterday

Operation ENDGAME disrupted global ransomware infrastructure

Initial Access (Enterprise TA0001)

•

Security Affairs / 11h

•

Operation Endgame disrupts ransomware

Operation ENDGAME dismantled key ransomware infrastructure, taking down 300 servers, 650 domains, and seizing €21.2M in crypto. From May 19 to 22, 2025, Operation ENDGAME, coordinated by Europol and Eurojust, disrupted global ransomware infrastructure. Law enforcement took down down 300 servers and 650 domains, and issuing 20 international arrest warrants. “A Command Post was set up at Europol he

Hackers Use Fake VPN and Browser NSIS Installers to Deliver Winos 4.0 Malware

IoC > 2 IPs

•

44The Hacker News / 13h

•

21 TTPs

•

Winos 4.0 malware targets users

Cybersecurity researchers have disclosed a malware campaign that uses fake software installers masquerading as popular tools like LetsVPN and QQ Browser to deliver the Winos 4.0 framework. The campaign, first detected by Rapid7 in February 2025, involves the use of a multi-stage, memory-resident loader called Catena. "Catena uses embedded shellcode and configuration switching logic to stage

Cybercrime is 'orders of magnitude' larger than state-backed ops, says ex-White House advisor

The Register – Security / 1d

Michael Daniel also thinks Uncle Sam should increase help to orgs hit by ransomware INTERVIEW Uncle Sam's cybersecurity apparatus can't only focus on China and other nation-state actors, but also has to fight the much bigger damage from plain old cybercrime, says former White House advisor Michael Daniel. And the Trump administration's steep cuts to federal government staff are making that a lot

Silent Ransom Group targeting law firms, the FBI warns

5 TTPs

•

Security Affairs / 1d

•

FBI warns of Luna Moth attacks

FBI warns Silent Ransom Group has targeted U.S. law firms for 2 years using callback phishing and social engineering extortion tactics. The FBI warns that the Silent Ransom Group, active since 2022 and also known as Luna Moth, has targeted U.S. law firms using phishing and social engineering. Linked to BazarCall campaigns, the group previously enabled Ryuk and Conti ransomware attacks. “The cyber

Remembering John Young, co-founder of web archive Cryptome

The Register – Security / 1d

The original leak site that never sold out, never surrendered Obituary John Young, the co-founder of the legendary internet archive Cryptome, died at the age of 89 on March 28. The Register talked to friends and peers who gave tribute to a bright, pugnacious man who was devoted to the public's right to know.…

Looking for an AI-powered website builder? Here's your best option in 2025

ZDNet | Security / 1d

If you think AI website builders are plug-and-play, think again. My in-depth test revealed inconsistent tools, missed opportunities, and a clear winner you might not expect.

Leader of Qakbot cybercrime network indicted in U.S. crackdown

3 TTPs

•

Security Affairs / 1d

•

US indicts Qakbot botnet leader

The U.S. indicted Russian Rustam Gallyamov for leading the Qakbot botnet, which infected 700K+ devices and was used in ransomware attacks. The U.S. authorities have indicted Russian national Rustam Gallyamov, the leader of the Qakbot operation, which infected over 700,000 computers and facilitated ransomware attacks. Qakbot , also known as QBot, QuackBot and Pinkslipbot, is an info-stealing malwa

5 essential gadgets for my bedtime routine (and why they make such a big difference)

ZDNet | Security / 1d

These are the gadgets that help me ease into bed - and send me to sleep in minutes.

End of feed