Daily Cyber Security News

We unpack an old Instagram API bug that leaked 17M accounts, Telegram s new Detector404 AI for scam detection, Microsoft s anti spoofing policies with mandatory MFA, the Ledger Global e breach fueling crypto phishing, and Truebit s 26M DeFi exploit.

An overview of cybersecurity anomaly detection, focussing on overview

This episode unpacks Apple WebKit zero day exploits bypassing Safari defenses, MacSync data stealer, supply chain compromise of Trust Wallet s Chrome extension, Telegram crypto crime vulnerabilities, and ZachXBT s cross chain wallet drains totaling over 100K.

An overview of cybersecurity Adaptive Multi Factor Authentication, focussing on Adaptive MFA Overview

Kaspersky reveals Stealka stealer in pirated mods, warns of a 2025 financial crime surge, and details Evasive Panda DNS poisoning. We also cover the La Poste DDoS outage, Spotify s 300 TB library scrape, Telegram phishing and infra flaw, plus the Christmas day Trust Wallet Chrome extension supply chain hack.

An overview of cybersecurity homomorphic encryption, focussing on homomorphic encryption overview

Highlights include Amazon s keyboard lag impostor catch, AWS GuardDuty cryptomining and GRU edge campaigns, Kindle eBook and plugin flaws, plus a critical Cisco AsyncOS SEG zero day under active Chinese APT exploitation. Also covered Google Chrome patches and React2Shell abuse, Microsoft OAuth phishing and RC4 deprecation, and the 94 GB ShinyHunters Pornhub Premium data breach.

An overview of cybersecurity extension supply chain attack, focussing on overview of extension supply chain attacks

Apple releases fixes for critical buffer overflows and zero days across macOS, iOS and other platforms. Binance s co CEO WeChat was hijacked to fuel a meme token pump and dump. Over 100 urgent Linux kernel CVEs demand immediate patching and reboots.

An overview of cybersecurity Attack surface discovery, focussing on introduction attack surface

Highlights Cloudflare s record 29.7 Tbps DDoS defense, an emergency React remote code exec flaw that brought down major sites, Telegram s hack and fortify cycle with a fresh zero day, and Ubuntu s sweeping kernel and toolchain patch blitz.

An overview of cybersecurity Deception Technology, focussing on introduction to deception technology

Covers Android malware purge, Antigravity IDE exploit, OAuth and Chrome patch alerts, Mixpanel fallout, AI driven ransomware, Telegram phishing wave, and Upbit s 30M Solana wallet breach.

An overview of cybersecurity MITRE ATT&CK Framework, focussing on framework overview

Anthropic disrupted the first large scale AI driven espionage campaign linked to a China backed group Linux admins race to patch dozens of critical kernel flaws across media, fs, networking and drivers Telegram scrambles to contain malware bots, data leaks and fake update scams.

An overview of cybersecurity Shadow AI, focussing on shadow ai overview

This episode dissects Balancer v2 s 116 128M multi chain exploit via a tiny batch swap rounding bug, then shifts to Cisco s AI driven threat detection demo, urgent UCCX RCE and ASA FTD firewall patches, and the launch of Security Cloud Control.

An overview of cybersecurity Active Directory security, focussing on active directory security fundamentals

CISA has ordered U.S. agencies to immediately patch a VMware Tools zero day under active China linked exploitation, added critical WSUS and ICS flaws to its KEV list, and flagged live attacks on a Linux kernel bug. Meanwhile, Google enforces HTTPS defaults, Microsoft battles fresh zero days and AI powered phishing, and organizations scramble on encrypted DNS, BEC scams and AI defense strategies.

An overview of cybersecurity quantum safe cryptography, focussing on quantum threat

An out of bounds write in the Fireware VPN module lets unauthenticated attackers gain remote code execution on Firebox appliances. Over 75K devices exposed apply the patch now.

An overview of cybersecurity BGP hijacking, focussing on bgp basics

A deep dive into Cisco s critical SNMP Zero Disco flaw CVE 2025 20352 used to deploy stealth Linux rootkits, plus high severity IOS ASA bugs under scrutiny. We also cover Google Workspace M365 phishing, Android 16 s defenses vs. the new Pixnapping timing attack, the EtherHiding crypto theft malware, and Telegram s upgraded 2FA and anti phishing shields.

An overview of cybersecurity deepfake social engineering, focussing on overview of deepfake social engineering

Discord s age verification contractor Zendesk was compromised for 58 hours, exposing up to 70k ID images and user data in a high impact third party breach. Google rushed out emergency Chrome patches for critical WebAssembly and memory bugs, launched an AI only bug bounty for Gemini, and warned of Cl0p exploiting an Oracle EBS zero day CVE 2025 61882 .