SecurityWeek Briefing

"Nissan confirms impact from Red Hat Data Breach."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 23 December 2025, 1422 UTC.

Content and Source:  Email subscription to "SecurityWeek Briefing" from https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

94K followers36 articles per week

#security#tech

140

Today

Nissan Confirms Impact From Red Hat Data Breach

by Ionut Arghire / 1h

The personal information of 21,000 customers was stolen after hackers compromised Red Hat’s GitLab instances. The post appeared first on SecurityWeek .

Feds Seize Password Database Used in Massive Bank Account Takeover Scheme

FBI seizes domain in fraud scheme

•

by Eduard Kovacs / 2h

The cybercriminals attempted to steal $28 million from compromised bank accounts through phishing. The post appeared first on SecurityWeek .

NPM Package With 56,000 Downloads Steals WhatsApp Credentials, Data

Malicious NPM package steals WhatsApp data

•

by Ionut Arghire / 3h

The package provides legitimate functionality to evade detection, while stealing users’ data and deploying a backdoor. The post appeared first on SecurityWeek .

Italy Antitrust Agency Fines Apple $116 Million Over Privacy Feature; Apple Announces Appeal

Apple fined 98 million euros

•

by Associated Press / 4h

Italy’s antitrust authority fined Apple $116 million after determining that operating one of its privacy features restricted App Store competition. The post appeared first on SecurityWeek .

Yesterday

574 Arrested, $3 Million Seized in Crackdown on African Cybercrime Rings

Africa cybercrime crackdown arrests 574

•

by Ionut Arghire / 4h

Authorities in Senegal, Ghana, Benin, and Cameroon dismantled BEC, ransomware, and other cyber-fraud networks. The post appeared first on SecurityWeek .

3.5 Million Affected by University of Phoenix Data Breach

Clop ransomware breaches University of Phoenix

•

by Eduard Kovacs / 6h

The University of Phoenix is one of the many victims of the recent Oracle EBS hacking campaign attributed to the Cl0p ransomware group. The post appeared first on SecurityWeek .

Cyberattack Disrupts France’s Postal Service and Banking During Christmas Rush

Cyberattack disrupts France's postal services

•

by Associated Press / 8h

A cyberattack knocked France’s national postal service offline, blocking and delaying package deliveries and online payments. The post appeared first on SecurityWeek .

Rising Tides: When Cybersecurity Becomes Personal – Inside the Work of an OSINT Investigator

by Jennifer Leggio / 22h

Shannon Miller shares her approach to creating domestic safety and a call to the cyber community to help reduce harm. The post appeared first on SecurityWeek .

ATM Hackers Using ‘Ploutus’ Malware Charged in US

by Eduard Kovacs / 1d

The Department of Justice charged 54 individuals, including leaders and members of the Venezuelan crime syndicate Tren de Aragua. The post appeared first on SecurityWeek .

MacSync macOS Malware Distributed via Signed Swift Application

by Ionut Arghire / 1d

A recent MacSync Stealer version no longer requires users to directly interact with the terminal for execution. The post appeared first on SecurityWeek .

Gambit Cyber Raises $3.4 Million in Seed Funding

by Ionut Arghire / 1d

The cybersecurity startup will use the funds to accelerate platform improvements, global expansion, and partnerships. The post appeared first on SecurityWeek .

Ukrainian Nefilim Ransomware Affiliate Pleads Guilty in US

by Eduard Kovacs / 1d

Artem Stryzhak pleaded guilty to conspiracy to commit computer fraud after he was extradited earlier this year. The post appeared first on SecurityWeek .

Dec 21, 2025

WatchGuard Patches Firebox Zero-Day Exploited in the Wild

WatchGuard Firebox flaw under attack

•

by Ionut Arghire / 1d

The critical-severity bug in the Fireware OS’s iked process leads to unauthenticated remote code execution. The post appeared first on SecurityWeek .

UK Government Acknowledges It Is Investigating Cyber Incident After Media Reports

UK Foreign Office cyberattack confirmed

•

by Associated Press / 1d

The British government is investigating a “cyber incident” following news reports that hackers linked to China have gained access to thousands of confidential documents. The post appeared first on SecurityWeek .

Dec 19, 2025

Thailand Conference Launches International Initiative to Fight Online Scams

Global partnership against online scams

•

by Associated Press / 3d

Similar pledges to fight scam networks were made by members of the Association of Southeast Asian Nations in the months leading up to the Bangkok conference. The post appeared first on SecurityWeek .

In Other News: Docker AI Attack, Google Sues Chinese Cybercriminals, Coupang Hacked by Employee

by SecurityWeek News / 3d

Other noteworthy stories that might have slipped under the radar: Trump could use private firms for cyber offensive, China threat to US power grid, RaccoonO365 suspect arrested in Nigeria. The post appeared first on SecurityWeek .

Palo Alto Networks, Google Cloud Strike Multibillion-Dollar AI and Cloud Security Deal

Google Cloud Palo Alto deal $10B

•

by Mike Lennon / 3d

The agreement strengthens technical and commercial ties as Palo Alto migrates workloads and adopts Google’s Vertex AI and Gemini models. The post appeared first on SecurityWeek .

AI Security Firm Ciphero Emerges From Stealth With $2.5 Million in Funding

by Ionut Arghire / 3d

The startup’s solution captures, verifies, and governs all AI interactions within an enterprise’s environment. The post appeared first on SecurityWeek .

Denmark Blames Russia for Cyberattacks Ahead of Elections and on Water Utility

Denmark blames Russia for cyberattacks

•

by Associated Press / 3d

Danish intelligence service said the attacks were part of Russia’s “hybrid war” against the West and an attempt to create instability. The post appeared first on SecurityWeek .

Chinese APT ‘LongNosedGoblin’ Targeting Asian Governments

by Ionut Arghire / 3d

The hacking group has been using Group Policy to deploy cyberespionage tools on governmental networks. The post appeared first on SecurityWeek .

Docker Makes 1,000 Hardened Images Free and Open Source

by Eduard Kovacs / 4d

Millions of developers can now use the secure, production-ready images made by Docker. The post appeared first on SecurityWeek .

US Shuts Down Crypto Exchange E-Note, Charges Russian Administrator

by Ionut Arghire / 4d

The exchange has been allegedly involved in laundering money for ransomware groups and other transnational cybercriminal organizations. The post appeared first on SecurityWeek .

University of Sydney Data Breach Affects 27,000 Individuals

University of Sydney data breach

•

by Ionut Arghire / 4d

Downloaded from a code library, the information pertains to current and former staff and affiliates, and to alumni and students. The post appeared first on SecurityWeek .

‘Kimwolf’ Android Botnet Ensnares 1.8 Million Devices

by Ionut Arghire / 4d

Linked to the Aisuru IoT botnet, Kimwolf was seen launching over 1.7 billion DDoS attack commands and increasing its C&C domain’s popularity. The post appeared first on SecurityWeek .

North Korea’s Digital Surge: $2B Stolen in Crypto as Amazon Blocks 1,800 Fake IT Workers

2 TTPs

•

by Eduard Kovacs / 4d

Data from Chainalysis and Amazon offers a glimpse into North Korea’s cyber activities surrounding cryptocurrency theft and fake IT workers. The post appeared first on SecurityWeek .

Dec 18, 2025

UEFI Vulnerability in Major Motherboards Enables Early-Boot Attacks

by Eduard Kovacs / 4d

ASRock, Asus, Gigabyte, and MSI motherboards are vulnerable to early-boot DMA attacks. The post appeared first on SecurityWeek .

HPE Patches Critical Flaw in IT Infrastructure Management Software

Execution (Enterprise TA0002)

•

by Ionut Arghire / 4d

•

CVE-2025-37164

Tracked as CVE-2025-37164, the critical flaw could allow unauthenticated, remote attackers to execute arbitrary code. The post appeared first on SecurityWeek .

CISA Warns of Exploited Flaw in Asus Update Tool

2 TTPs

•

by Ionut Arghire / 5d

•

CVE-2025-59374

Tracked as CVE-2025-59374, the issue is a software backdoor implanted in Asus Live Update in a supply chain attack. The post appeared first on SecurityWeek .

113,000 Impacted by Data Breach at Virginia Mental Health Authority

Impact (Enterprise TA0040)

•

by Ionut Arghire / 5d

•

Data breach affects 113000 individuals

Threat actors stole names, Social Security numbers, and financial and health information, and deployed ransomware on RBHA’s systems. The post appeared first on SecurityWeek .

IoT Security Firm Exein Raises €100 Million

Exein raises 100 million euros

•

by Eduard Kovacs / 5d

The Italian company has raised nearly $200 million in 2025 for its widely used embedded cybersecurity platform. The post appeared first on SecurityWeek .

France Probes ‘Foreign Interference’ After Remote Control Malware Found on Passenger Ferry

France investigates malware on ferry

•

by Associated Press / 5d

France’s counterespionage agency is investigating a suspected cyberattack plot targeting an international passenger ferry The post appeared first on SecurityWeek .