SecurityWeek Briefing

"Reporters Without Borders targeted by Russian hackers."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 04 December 2025, 1425 UTC.

Content and Source:  "SecurityWeek Briefing" by email subscription from https://feedly.com.

https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

93K followers40 articles per week

#security#tech

25

Today

Reporters Without Borders Targeted by Russian Hackers

by Ionut Arghire / 9min

The state-sponsored hackers relied on phishing emails to deliver a malicious payload to Reporters Without Borders (RSF). The post appeared first on SecurityWeek .

Global Cyber Agencies Issue AI Security Guidance for Critical Infrastructure OT

CISA releases AI integration guidance

•

by Eduard Kovacs / 1h

The 25-page document outlines four principles for securely integrating AI with operational technology. The post appeared first on SecurityWeek .

Personal Information Compromised in Freedom Mobile Data Breach

Freedom Mobile data breach revealed

•

by Ionut Arghire / 2h

Freedom Mobile says hackers stole customers’ personal information from its account management platform. The post appeared first on SecurityWeek .

Marquis Data Breach Impacts Over 780,000 People

CoVantage Credit Union data breach

•

by Ionut Arghire / 3h

The compromised personal and financial information includes names, addresses, Social Security numbers, and card numbers. The post appeared first on SecurityWeek .

React2Shell: In-the-Wild Exploitation Expected for Critical React Vulnerability

CVE-2025-55182

•

by Eduard Kovacs / 4h

A researcher has pointed out that only instances using a newer feature are impacted by CVE-2025-55182. The post appeared first on SecurityWeek .

Yesterday

Niobium Raises $23 Million for FHE Hardware Acceleration

by Ionut Arghire / 1d

The startup will invest the funds in accelerating development of its second-generation fully homomorphic encryption (FHE) platforms. The post appeared first on SecurityWeek .

Critical King Addons Vulnerability Exploited to Hack WordPress Sites

Elementor plugin vulnerability allows takeover

•

by Ionut Arghire / 1d

A critical-severity vulnerability in the King Addons for Elementor plugin for WordPress has been exploited to take over websites. The post appeared first on SecurityWeek .

Arizona Attorney General Sues Chinese Online Retailer Temu Over Data Theft Claims

Arizona sues Temu for fraud

•

by Associated Press / 1d

Arizona is the latest state to sue Temu and its parent company PDD Holdings over allegations that the Chinese online retailer is stealing customers’ data. The post appeared first on SecurityWeek .

ServiceNow to Acquire Identity Security Firm Veza in Reported $1 Billion Deal

by Eduard Kovacs / 1d

Veza Security was recently valued at more than $800 million after raising $108 million in Series D funding. The post appeared first on SecurityWeek .

Penn and Phoenix Universities Disclose Data Breach After Oracle Hack

Penn and Phoenix data breaches

•

by Eduard Kovacs / 1d

The University of Pennsylvania and the University of Phoenix confirm that they are victims of the recent Oracle EBS hacking campaign. The post appeared first on SecurityWeek .

re:Invent 2025: AWS and Security Vendors Unveil New Products and Capabilities

AArete showcases AI at re:Invent

•

by Eduard Kovacs / 1d

AWS and cybersecurity vendors have made several announcements at the cloud giant’s re:Invent 2025 event. The post appeared first on SecurityWeek .

Microsoft Silently Mitigated Exploited LNK Vulnerability

by Ionut Arghire / 1d

Windows now displays in the properties tab of LNK files critical information that could reveal malicious code. The post appeared first on SecurityWeek .

Dec 2, 2025

Chrome 143 Patches High-Severity Vulnerabilities

by Ionut Arghire / 1d

Chrome 143 stable was released with patches for 13 vulnerabilities, including a high-severity flaw in the V8 JavaScript engine. The post appeared first on SecurityWeek .

Zafran Security Raises $60 Million in Series C Funding

Zafran Security raises 60M$ funding

•

by Ionut Arghire / 1d

The cybersecurity startup will use the investment to accelerate product innovation and global expansion. The post appeared first on SecurityWeek .

The Great Disconnect: Unmasking the ‘Two Separate Conversations’ in Security

by Joshua Goldfarb / 1d

When familiar security concepts carry unfamiliar meanings for different audiences, teams talk past each other without even realizing it. This silent disconnect weakens communication, clarity, and outcomes. The post appeared first on SecurityWeek .

Chrome, Edge Extensions Caught Tracking Users, Creating Backdoors

by Ionut Arghire / 2d

The extensions were seen profiling users, reading cookie data to create unique identifiers, and executing payloads with browser API access. The post appeared first on SecurityWeek .

Saporo Raises $8 Million for Identity Security Platform

Saporo raises 7M euros funding

•

by Ionut Arghire / 2d

The Swiss cybersecurity firm will scale its R&D, sales and marketing teams as it pursues expansion across Europe. The post appeared first on SecurityWeek .

Vulnerability in OpenAI Coding Agent Could Facilitate Attacks on Developers

by Eduard Kovacs / 2d

The Codex CLI vulnerability tracked as CVE-2025-61260 can be exploited for command execution. The post appeared first on SecurityWeek .

Personal Information of 33.7 Million Stolen From Coupang

by Ionut Arghire / 2d

Names, addresses, email addresses, and phone numbers were compromised in a five-month-long data breach. The post appeared first on SecurityWeek .

Dec 1, 2025

Android Zero-Days Patched in December 2025 Security Update

by Ionut Arghire / 2d

Google warns that two out of the 107 vulnerabilities patched in Android this month have been exploited in limited, targeted attacks. The post appeared first on SecurityWeek .

Facial Recognition’s Trust Problem

by Kevin Townsend / 2d

Two technologies — one for public safety, one for controlled entry — show why trust in facial recognition must be earned, not assumed. The post appeared first on SecurityWeek .

$29 Million Worth of Bitcoin Seized in Cryptomixer Takedown

Europol shuts down Cryptomixer service

•

by Eduard Kovacs / 2d

Cryptomixer was targeted by law enforcement in Operation Olympia for facilitating cybercrime and money laundering. The post appeared first on SecurityWeek .

New Albiriox Android Malware Developed by Russian Cybercriminals

by Eduard Kovacs / 2d

Albiriox is a banking trojan offered under a malware-as-a-service model for $720 per month. The post appeared first on SecurityWeek .

CISA Warns of ScadaBR Vulnerability After Hacktivist ICS Attack

by Eduard Kovacs / 3d

CISA has added CVE-2021-26829 to its Known Exploited Vulnerabilities (KEV) catalog. The post appeared first on SecurityWeek .

Nov 30, 2025

Australian Man Sentenced to Prison for Wi-Fi Attacks at Airports and on Flights

by Eduard Kovacs / 3d

Michael Clapsis has been sentenced to 7 years and 4 months in prison for stealing sensitive information. The post appeared first on SecurityWeek .

End of feed