"WhatsApp 'Eternidade' Trojan self-propagates through Brazil."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 20 November 2025, 1447 UTC.

Content and Source:  "Dark Reading" via email subscription from https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.darkreading.com%2Frss%2Fall.xml

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Dark Reading

147K followers28 articles per week

#security#tech

17

Today

WhatsApp 'Eternidade' Trojan Self-Propagates Through Brazil

Eternidade Stealer spreads via WhatsApp

•

by Nate Nelson, Contributing Writer / 42min

The infostealer specifically targets Brazilian Portuguese speakers and combines malware designed to phish banking credentials and steal data, a worm, and some uniquely Brazilian quirks.

Yesterday

US Creates 'Strike Force' to Take Out SE Asian Scam Centers

US forms Scam Center Strike Force

•

by Robert Lemos, Contributing Writer / 12h

The collaborative effort combines multiple federal departments, along with private companies to reduce, if not eliminate, billions lost annually to fraud.

Fortinet Woes Continue With Another WAF Zero-Day Flaw

by Rob Wright / 16h

A second zero-day vulnerability in its web application firewall (WAF) line has come under attack, raising more questions about the vendor's disclosure practices.

Do National Data Laws Carry Cyber-Risks for Large Orgs?

by Nate Nelson, Contributing Writer / 16h

When international corporations have to balance competing cyber laws from different countries, the result is fragmented, potentially vulnerable systems.

The AI Attack Surface: How Agents Raise the Cyber Stakes

by Alexander Culafi / 16h

Researcher shows how agentic AI is vulnerable to hijacking to subvert an agent's goals and how agent interaction can be altered to compromise whole networks.

Cloudflare Blames Outage on Internal Configuration Error

Cloudflare outage caused by database change

•

by Elizabeth Montalbano, Contributing Writer / 22h

Initially though to be a DDoS attack, the incident was actually due to a routine change in permissions that caused widespread software failure.

How We Ditched the SaaS Status Quo for Time-Series Telemetry

by Peter Albert / 1d

Free the logs! Behind the scenes at InfluxData, which turned to its own in-house security monitoring platform, DiSCO, to protect its supply chain after its third-party tool was breached.

Critical Railway Braking Systems Open to Tampering

by Nate Nelson, Contributing Writer / 1d

It only takes recycled cans, copper, and cheap gadgets off the Web to trick a train conductor into doing something dangerous.

Nov 18, 2025

New Startup Mate Launches With AI-Driven Security Operations Platform

Mate secures 15.5M seed funding

•

by Dark Reading Staff / 1d

Security teams can combat alert fatigue, high rates of false positives, and reduce time spent on manual data collection with Mate's SOC platform, which utilizes AI agents to autonomously investigate and resolve alerts.

Iran-Nexus Threat Actor UNC1549 Takes Aim at Aerospace

by Alexander Culafi / 1d

Researchers say Israel remains a central focus, with UNC1549 targeting aerospace and defense entities in the US, the UAE, Qatar, Spain, and Saudi Arabia.

Cloud Break: IoT Devices Open to Silent Takeover Via Firewalls

by Nate Nelson, Contributing Writer / 1d

IoT devices can be compromised, thanks to gaps in cloud management interfaces for firewalls and routers, even if they're protected by security software or not online.

Can a Global, Decentralized System Save CVE Data?

by Robert Lemos, Contributing Writer / 1d

As vulnerabilities in the Common Vulnerabilities and Exposures ecosystem pile up, one Black Hat Europe presenter hopes for a global, distributed alternative.

Bug Bounty Programs Rise as Key Strategic Security Solutions

by Elvia Finalle / 1d

Bug bounty programs create formal channels for organizations to leverage external security expertise, offering researchers legal protection and financial incentives for ethical vulnerability disclosure.

US Citizens Plead Guilty to Aiding North Korean IT Worker Campaigns

Five plead guilty in North Korea scheme

•

by Rob Wright / 1d

Four individuals admitted to assisting foreign IT workers in gaining employment at US companies by providing false identities and remote access to employer-owned laptops.

Malicious Npm Packages Abuse Adspect Cloaking in Crypto Scam

by Elizabeth Montalbano, Contributing Writer / 1d

A malware campaign presents fake websites that can check if a visitor is a potential victim or a security researcher, and then proceed accordingly to defraud or evade.

Nov 17, 2025

Critical Fortinet FortiWeb WAF Bug Exploited in the Wild

Fortinet FortiWeb flaw exposes admin access

•

by Alexander Culafi / 2d

The vulnerability could allow an unauthenticated attacker to remotely execute administrative commands.

Cursor Issue Paves Way for Credential-Stealing Attacks

by Elizabeth Montalbano, Contributing Writer / 2d

Researchers discovered a security weakness in the AI-powered coding tool that allows malicious MCP server to hijack Cursor's internal browser.

End of feed