"U.S. sanctioned North Korean bankers for laundering funds linked to cyberattacks and peapons program."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 05 November 2025, 2055 UTC.

Content and Source:  Email subscription from https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fsecurityaffairs.co%2Fwordpress%2Ffeed

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecuritjournal.net).

Security Affairs

76K followers27 articles per week

#security#tech

12

Today

U.S. sanctioned North Korea bankers for laundering funds linked to cyberattacks and peapons program

US sanctions North Korean cybercriminals

•

by Pierluigi Paganini / 36min

U.S. sanctions North Korea bankers and firms accused of laundering cybercrime funds used to finance the country’s nuclear weapons program. The U.S. Government has imposed sanctions on several North Korea bankers, financial institutions, and individuals accused of laundering funds obtained from cybercrime operations. According to the U.S. Treasury Department, these illicit financial activities dir

Former cybersecurity employees attempted to extort five U.S. companies in 2023 using BlackCat ransomware attacks

Cybersecurity workers indicted for extortion

•

by Pierluigi Paganini / 9h

U.S. prosecutors charged three Florida men for using BlackCat ransomware to hack and extort five U.S. companies in 2023. U.S. prosecutors charged Ryan Clifford Goldberg, Kevin Tyler Martin, and another Florida-based accomplice (aka “Co-Conspirator 1”) for using BlackCat ransomware to hack and extort five U.S. companies in 2023. According to Federal prosecutors, the attacks occurred between May an

Yesterday

U.S. CISA adds Gladinet CentreStack, and CWP Control Web Panel flaws to its Known Exploited Vulnerabilities catalog

2 TTPs

•

by Pierluigi Paganini / 12h

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Gladinet CentreStack, and CWP Control Web Panel flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added XWiki Platform, and Gladinet CentreStack, and CWP Control Web Panel flaws to its Known Exploited Vulnerabilities (KEV) catalog . Below are the flaws added to th

Nine arrested in €600M crypto laundering bust across Europe

€600 million crypto fraud ring dismantled

•

by Pierluigi Paganini / 13h

A coordinated Eurojust-led operation led to nine arrests in Cyprus, Spain, and Germany for laundering €600M in crypto fraud. Authorities in France, Belgium, and Cyprus arrested nine people in a coordinated Eurojust-led operation against a crypto money laundering ring that stole over €600 million. The group ran dozens of fake crypto investment sites that promised high returns and lured victims thr

Google fixed a critical remote code execution in Android

by Pierluigi Paganini / 1d

Google’s November 2025 Android update fixes two flaws in the System component, including a critical remote code execution issue. Google’s November 2025 Android security updates addressed two vulnerabilities impacting the System component. The fixes are included in the 2025-11-01 security patch level, the only patch level released this month by the IT giant. “The most severe vulnerability in this

SesameOp: New backdoor exploits OpenAI API for covert C2

16 TTPs

•

by Pierluigi Paganini / 1d

•

SesameOp malware exploits OpenAI API

Microsoft found a new backdoor, SesameOp, using the OpenAI Assistants API for stealthy command-and-control in hacked systems. Microsoft uncovered a new backdoor, named SesameOp, that abuses the OpenAI Assistants API for command-and-control, allowing covert communication within compromised systems. Microsoft Incident Response – Detection and Response Team (DART) researchers discovered the backdoor

Google Big Sleep found five vulnerabilities in Safari

CVE-2025-43430 & 3 others

•

by Pierluigi Paganini / 1d

Google’s AI agent, Big Sleep, helped Apple discover five WebKit flaws in Safari that could lead to browser crashes or memory corruption. Google’s AI agent Big Sleep helped Apple discover five WebKit flaws in Safari that could lead to browser crashes or memory corruption if exploited. Big Sleep is an AI agent developed by Google DeepMind and Project Zero to automate the discovery of real-world sof

Nov 3, 2025

Crooks exploit RMM software to hijack trucking firms and steal cargo

7 TTPs

•

by Pierluigi Paganini / 1d

•

Cybercriminals target trucking cargo theft

Hackers target trucking firms with RMM tools to steal freight, teaming with organized crime to loot goods, mainly food and beverages. Cybercriminals are targeting trucking and logistics firms with RMM tools (remote monitoring and management software) to steal freight. Active since June 2025, the group works with organized crime to loot goods, mainly food and beverages. Crooks infiltrate logistics

Jabber Zeus developer ‘MrICQ’ extradited to US from Italy

4 TTPs

•

by Pierluigi Paganini / 2d

•

MrICQ extradited to US

Ukrainian Yuriy Rybtsov, aka MrICQ, a suspected Jabber Zeus developer, was extradited from Italy to the US to face cybercrime charges. Ukrainian national Yuriy Igorevich Rybtsov (41), aka MrICQ, an alleged Jabber Zeus developer, was arrested in Italy, lost his extradition appeal, and has been sent to the US to face cybercrime charges. After a decade-long global manhunt, “MrICQ,” is now in a Nebra

Chrome 142 Released: Two high-severity V8 flaws fixed, $100K in rewards paid

by Pierluigi Paganini / 2d

Google released Chrome 142, fixing 20 flaws, including two high-severity V8 bugs, and awarded $100,000 in bug bounties. Google addressed 20 flaws in Chrome version 142, including high-severity bugs that impact the V8 engine. The IT giant awarded $100,000 in bounties for two issues in the V8 JavaScript engine. The two vulnerabilities are tracked as CVE-2025-12428 and CVE-2025-12429. The high-sever

Android Apps misusing NFC and HCE to steal payment data on the rise

IoC > 163 IPs, 20 domains, and 771 hashes

•

by Pierluigi Paganini / 2d

•

NFC card theft surge reported

Zimperium zLabs found 760+ Android apps abusing NFC and HCE to steal payment data, showing a surge in NFC relay fraud since April 2024. Zimperium zLabs researchers spotted over 760 Android apps abusing Near-Field Communication (NFC) and Host Card Emulation (HCE) to steal payment data and commit fraud, showing rapid growth in NFC relay attacks since April 2024. Malware NFC targets banks, payment s

Nov 2, 2025

Conduent January 2025 breach impacts 10M+ people

Collection (Enterprise TA0009)

•

by Pierluigi Paganini / 2d

•

Conduent data breach affects millions

Conduent January 2025 breach exposed personal data of 10M+ people, including names, addresses, DOBs, SSNs, and health and insurance info. Conduent January 2025 breach exposed the personal data of over 10M people, including names, addresses, DOBs, SSNs, and health and insurance info. In April 2025, the business services provider Conduent revealed that personal information, including names and Soci

End of feed