Lightnews — Scholar-powered news

Patrick C Miller @patrickcmiller.bsky.social · 24m

Too salty to handle: Exposing cases of CSS abuse for hidden text salting blog.talosintelligence.com/too-salty-to...

Too salty to handle: Exposing cases of CSS abuse for hidden text salting

A simple yet effective tactic, known as hidden text salting, is increasingly used by cybercriminals over the past few months to evade even the most advanced email security solutions, including those…

blog.talosintelligence.com

Patrick C Miller @patrickcmiller.bsky.social · 54m

AI is making cybercriminal workflows more efficient too, OpenAI finds www.zdnet.com/article/ai-i...

AI is making cybercriminal workflows more efficient too, OpenAI finds

A new OpenAI report explores current trends in cybercrime and how threat actors are weaponizing AI tools, including ChatGPT.

www.zdnet.com

1

Patrick C Miller @patrickcmiller.bsky.social · 1h

Millions in UK at risk of cyber-attacks as Windows 10 ends updates, Which? finds www.theguardian.com/technology/2...

Millions in UK at risk of cyber-attacks as Windows 10 ends updates, Which? finds

Survey shows one in four users intend to keep using system as it is phased out, despite increased virus and malware risk

www.theguardian.com

Patrick C Miller @patrickcmiller.bsky.social · 1h

New Chaos-C++ Ransomware Targets Windows by Wiping Data, Stealing Crypto

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

hackread.com

Patrick C Miller @patrickcmiller.bsky.social · 2h

Logitech will brick its $100 Pop smart home buttons on October 15 arstechnica.com/gadgets/2025...

Logitech will brick its $100 Pop smart home buttons on October 15

Logitech’s interest in the smart home has appeared to wane in recent years.

arstechnica.com

Patrick C Miller @patrickcmiller.bsky.social · 2h

CVEs Targeting Remote Access Technologies in 2025 www.hackmageddon.com/2025/10/07/c...

CVEs Targeting Remote Access Technologies in 2025

The exploitation of vulnerabilities targeting remote access technologies to gain initial access is continuing relentlessly also during 2025, with initial access brokers, and in general opportunistic and...

www.hackmageddon.com

Patrick C Miller @patrickcmiller.bsky.social · 3h

Chinese Hackers Breached Law Firm Williams & Connolly via Zero-Day www.securityweek.com/chinese-hack...

Chinese Hackers Breached Law Firm Williams & Connolly via Zero-Day

The company said there is no evidence that confidential client data was stolen from its systems.

www.securityweek.com

Patrick C Miller @patrickcmiller.bsky.social · 3h

Enhancing cybersecurity before the attackers in an AGI world | World Economic Forum

www.weforum.org

Patrick C Miller @patrickcmiller.bsky.social · 4h

New Research: AI Is Already the #1 Data Exfiltration Channel in the Enterprise thehackernews.com/2025/10/new-...

New Research: AI Is Already the #1 Data Exfiltration Channel in the Enterprise

LayerX finds AI tools now drive most enterprise data leaks, with 77% of sensitive data pasted via personal accounts.

thehackernews.com

1

Patrick C Miller @patrickcmiller.bsky.social · 4h

A New 'Nanoparticle Vaccine' Prevented Cancer In Mice, Study Says www.404media.co/a-new-nanopa...

A New 'Nanoparticle Vaccine' Prevented Cancer In Mice, Study Says

The vast majority of mice that received the vaccine warded off repeated exposure to cancer cells, but the applications for humans are still not known.

www.404media.co

Patrick C Miller @patrickcmiller.bsky.social · 5h

Apple and Google reluctantly comply with Texas age verification law arstechnica.com/tech-policy/...

Apple and Google reluctantly comply with Texas age verification law

Texas requires sensitive info just to check weather and sports scores, Apple says.

arstechnica.com

1

Patrick C Miller @patrickcmiller.bsky.social · 5h

RustRedOps – Rust Native Offensive Toolkit Collection for Red Teams www.darknet.org.uk/2025/10/rust...

RustRedOps - Rust Native Offensive Toolkit Collection for Red Teams

RustRedOps is a collection of Rust-based offensive security modules for post-exploitation, process injection and payload staging, useful for red teams and penetration testers.

www.darknet.org.uk

Patrick C Miller @patrickcmiller.bsky.social · 6h

Your Shipment Notification Is Now a Malware Dropper hackread.com/your-shipmen...

Your Shipment Notification Is Now a Malware Dropper

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

hackread.com

Patrick C Miller @patrickcmiller.bsky.social · 6h

Active Directory Security Tip #13: Kerberos Delegation adsecurity.org?p=4784

Active Directory Security Tip #13: Kerberos Delegation

Review the membership of groups for accounts and groups from another Active Directory forest (technically another domain, but using forest here). These are called "Foreign Security Principals" (FSPs)…

adsecurity.org

Patrick C Miller @patrickcmiller.bsky.social · 7h

Cybersecurity is no longer just a technical challenge – it's a leadership one | World Economic Forum

www.weforum.org

1

Patrick C Miller @patrickcmiller.bsky.social · 7h

Risks of cyber fraud allegations remain high for companies subject to government requirements www.nextgov.com/ideas/2025/1...

Risks of cyber fraud allegations remain high for companies subject to government requirements

COMMENTARY | Stricter government cybersecurity requirements present elevated risk to companies due to increased enforcement pressure and additional bases for allegations of cybersecurity fraud.

www.nextgov.com

Patrick C Miller @patrickcmiller.bsky.social · 8h

All SonicWall Cloud Backup Users Had Firewall Configurations Stolen www.securityweek.com/all-sonicwal...

All SonicWall Cloud Backup Users Had Firewall Configurations Stolen

In early September, hackers stole the firewall configuration backup files stored using the MySonicWall service.

www.securityweek.com

Patrick C Miller @patrickcmiller.bsky.social · 8h

New Android spyware ClayRat imitates WhatsApp, TikTok, YouTube www.bleepingcomputer.com/news/securit...

New Android spyware ClayRat imitates WhatsApp, TikTok, YouTube

A new Android spyware called ClayRat is luring potential victims by posing as popular apps and services like WhatsApp, Google Photos, TikTok, and YouTube.

www.bleepingcomputer.com

Patrick C Miller @patrickcmiller.bsky.social · 9h

LockBit, Qilin & DragonForce Form Ransomware 'Cartel' www.darkreading.com/cyberattacks...

LockBit, Qilin & DragonForce Form Ransomware 'Cartel'

The three extortion gangs also invited other e-crime attackers to join their collaboration to share attack information and resources.

www.darkreading.com

Patrick C Miller @patrickcmiller.bsky.social · 9h

GitHub Copilot 'CamoLeak' AI Attack Exfiltrates Data www.darkreading.com/application-...

GitHub Copilot 'CamoLeak' AI Attack Exfiltrates Data

GitHub is comparatively advanced in how it protects its built-in AI. Still, a researcher came up with a workaround for exfiltrating code and secrets.

www.darkreading.com

1

Patrick C Miller @patrickcmiller.bsky.social · 10h

SonicWall breach hit every cloud backup customer, not 5% www.theregister.com/2025/10/09/s...

SonicWall breach hit every cloud backup customer, not 5%

: Affects users regardless of when their backups were created

www.theregister.com

Patrick C Miller @patrickcmiller.bsky.social · 10h

ICO’s £7.5m Clearview AI Fine a Step Closer After Legal Victory www.infosecurity-magazine.com/news/icos-75...

ICO’s £7.5m Clearview AI Fine a Step Closer After Legal Victory

The ICO has won an Upper Tribunal appeal against Clearview AI over its intention to fine the company

www.infosecurity-magazine.com

Patrick C Miller @patrickcmiller.bsky.social · 11h

Cyber risk a growing priority among insurance and asset management firms www.cybersecuritydive.com/news/cyber-r...

Cyber risk a growing priority among insurance and asset management firms

A report by Moody’s shows an emphasis on board-level oversight and spending in order to boost cyber resilience.

www.cybersecuritydive.com

Patrick C Miller @patrickcmiller.bsky.social · 11h

AI models can acquire backdoors from surprisingly few malicious documents arstechnica.com/ai/2025/10/a...

AI models can acquire backdoors from surprisingly few malicious documents

Anthropic study suggests “poison” training attacks don’t scale with model size.

arstechnica.com

Patrick C Miller @patrickcmiller.bsky.social · 12h

Fake Teams Installers Dropping Oyster Backdoor (aka Broomstick) hackread.com/fake-teams-i...

Fake Teams Installers Dropping Oyster Backdoor (aka Broomstick)

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

hackread.com

1