Cyber Threat Feeds
@montxt.bsky.social
Daily noteworthy threat feeds. Filtering through noises.
Iranian Hackers Use DEEPROOT and TWOSTROKE Malware in Aerospace and Defense Attacks https://thehackernews.com/2025/11/iranian-hackers-use-deeproot-and.html
November 18, 2025 at 3:47 PM
Iranian Hackers Use DEEPROOT and TWOSTROKE Malware in Aerospace and Defense Attacks https://thehackernews.com/2025/11/iranian-hackers-use-deeproot-and.html
Morphisec Thwarts Sophisticated Tuoni C2 Attack on U.S. Real Estate Firm https://www.morphisec.com/blog/morphisec-thwarts-sophisticated-tuoni-c2-attack-on-us-real-estate-firm/
November 18, 2025 at 1:47 PM
Morphisec Thwarts Sophisticated Tuoni C2 Attack on U.S. Real Estate Firm https://www.morphisec.com/blog/morphisec-thwarts-sophisticated-tuoni-c2-attack-on-us-real-estate-firm/
Critical Fortinet FortiWeb WAF Bug Exploited in the Wild https://www.darkreading.com/application-security/critical-fortinet-fortiweb-waf-bug-exploited-in-wild
November 17, 2025 at 9:47 PM
Critical Fortinet FortiWeb WAF Bug Exploited in the Wild https://www.darkreading.com/application-security/critical-fortinet-fortiweb-waf-bug-exploited-in-wild
Pennsylvania attorney general says SSNs stolen during August ransomware attack https://therecord.media/pennsylvania-attorney-general-office-data-breach-ssns
November 17, 2025 at 8:48 PM
Pennsylvania attorney general says SSNs stolen during August ransomware attack https://therecord.media/pennsylvania-attorney-general-office-data-breach-ssns
Cyberattack leaves Jaguar Land Rover short of £680 million https://therecord.media/jaguar-land-rover-quarterly-loss-cyberattack
November 17, 2025 at 1:47 PM
Cyberattack leaves Jaguar Land Rover short of £680 million https://therecord.media/jaguar-land-rover-quarterly-loss-cyberattack
Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT https://thehackernews.com/2025/11/dragon-breath-uses-roningloader-to.html
November 17, 2025 at 12:47 PM
Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT https://thehackernews.com/2025/11/dragon-breath-uses-roningloader-to.html
Akira RaaS Targets Nutanix VMs, Threatens Critical Orgs https://www.darkreading.com/threat-intelligence/akira-raas-nutanix-vms-critical-orgs
November 14, 2025 at 10:48 PM
Akira RaaS Targets Nutanix VMs, Threatens Critical Orgs https://www.darkreading.com/threat-intelligence/akira-raas-nutanix-vms-critical-orgs
New Security Tools Target Growing macOS Threats https://www.darkreading.com/vulnerabilities-threats/new-security-tools-target-growing-macos-threats
November 14, 2025 at 9:48 PM
New Security Tools Target Growing macOS Threats https://www.darkreading.com/vulnerabilities-threats/new-security-tools-target-growing-macos-threats
Fortinet finally cops to critical make-me-admin bug under active exploitation https://go.theregister.com/feed/www.theregister.com/2025/11/14/fortinet_active_exploit_cve_2025_64446/
November 14, 2025 at 8:47 PM
Fortinet finally cops to critical make-me-admin bug under active exploitation https://go.theregister.com/feed/www.theregister.com/2025/11/14/fortinet_active_exploit_cve_2025_64446/
Crims poison 150K+ npm packages with token-farming malware https://go.theregister.com/feed/www.theregister.com/2025/11/14/selfreplicating_supplychain_attack_poisons_150k/
November 14, 2025 at 6:48 PM
Crims poison 150K+ npm packages with token-farming malware https://go.theregister.com/feed/www.theregister.com/2025/11/14/selfreplicating_supplychain_attack_poisons_150k/
North Korean Hackers Turn JSON Services into Covert Malware Delivery Channels https://thehackernews.com/2025/11/north-korean-hackers-turn-json-services.html
November 14, 2025 at 6:48 PM
North Korean Hackers Turn JSON Services into Covert Malware Delivery Channels https://thehackernews.com/2025/11/north-korean-hackers-turn-json-services.html
Cyberattack on Russian port operator aimed to disrupt coal, fertilizer shipments https://therecord.media/cyberattack-on-russian-port-operator
November 14, 2025 at 4:48 PM
Cyberattack on Russian port operator aimed to disrupt coal, fertilizer shipments https://therecord.media/cyberattack-on-russian-port-operator
Chinese spies told Claude to break into about 30 critical orgs. Some attacks succeeded https://go.theregister.com/feed/www.theregister.com/2025/11/13/chinese_spies_claude_attacks/
November 13, 2025 at 11:47 PM
Chinese spies told Claude to break into about 30 critical orgs. Some attacks succeeded https://go.theregister.com/feed/www.theregister.com/2025/11/13/chinese_spies_claude_attacks/
Russian Hackers Create 4,300 Fake Travel Sites to Steal Hotel Guests' Payment Data https://thehackernews.com/2025/11/russian-hackers-create-4300-fake-travel.html
November 13, 2025 at 8:47 PM
Russian Hackers Create 4,300 Fake Travel Sites to Steal Hotel Guests' Payment Data https://thehackernews.com/2025/11/russian-hackers-create-4300-fake-travel.html
NHS supplier ends probe into ransomware attack that contributed to patient death https://go.theregister.com/feed/www.theregister.com/2025/11/13/synnovis_qilin_investigation/
November 13, 2025 at 11:47 AM
NHS supplier ends probe into ransomware attack that contributed to patient death https://go.theregister.com/feed/www.theregister.com/2025/11/13/synnovis_qilin_investigation/
Over 46,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack https://thehackernews.com/2025/11/over-46000-fake-npm-packages-flood.html
November 13, 2025 at 6:47 AM
Over 46,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack https://thehackernews.com/2025/11/over-46000-fake-npm-packages-flood.html
Kimsuky APT Takes Over South Korean Androids, Abuses KakaoTalk https://www.darkreading.com/remote-workforce/kimsuky-apt-south-korean-androids-abuses-kakaotalk
November 11, 2025 at 4:48 PM
Kimsuky APT Takes Over South Korean Androids, Abuses KakaoTalk https://www.darkreading.com/remote-workforce/kimsuky-apt-south-korean-androids-abuses-kakaotalk
GootLoader Is Back, Using a New Font Trick to Hide Malware on WordPress Sites https://thehackernews.com/2025/11/gootloader-is-back-using-new-font-trick.html
November 11, 2025 at 3:48 PM
GootLoader Is Back, Using a New Font Trick to Hide Malware on WordPress Sites https://thehackernews.com/2025/11/gootloader-is-back-using-new-font-trick.html
Android Trojan 'Fantasy Hub' Malware Service Turns Telegram Into a Hub for Hackers https://thehackernews.com/2025/11/android-trojan-fantasy-hub-malware.html
November 11, 2025 at 12:48 PM
Android Trojan 'Fantasy Hub' Malware Service Turns Telegram Into a Hub for Hackers https://thehackernews.com/2025/11/android-trojan-fantasy-hub-malware.html
Hitachi-owned GlobalLogic admits data stolen on 10k current and former staff https://go.theregister.com/feed/www.theregister.com/2025/11/11/hitachiowned_globallogic_admits_data_stolen/
November 11, 2025 at 12:48 PM
Hitachi-owned GlobalLogic admits data stolen on 10k current and former staff https://go.theregister.com/feed/www.theregister.com/2025/11/11/hitachiowned_globallogic_admits_data_stolen/
Researchers Detect Malicious npm Package Targeting GitHub-Owned Repositories https://thehackernews.com/2025/11/researchers-detect-malicious-npm.html
November 11, 2025 at 12:48 PM
Researchers Detect Malicious npm Package Targeting GitHub-Owned Repositories https://thehackernews.com/2025/11/researchers-detect-malicious-npm.html
New Browser Security Report Reveals Emerging Threats for Enterprises https://thehackernews.com/2025/11/new-browser-security-report-reveals.html
November 10, 2025 at 1:48 PM
New Browser Security Report Reveals Emerging Threats for Enterprises https://thehackernews.com/2025/11/new-browser-security-report-reveals.html
Hack halts Dutch broadcaster, forcing radio hosts back to LPs https://www.bitdefender.com/en-us/blog/hotforsecurity/hack-halts-dutch-broadcaster-forcing-radio-hosts-back-to-lps
November 10, 2025 at 11:47 AM
Hack halts Dutch broadcaster, forcing radio hosts back to LPs https://www.bitdefender.com/en-us/blog/hotforsecurity/hack-halts-dutch-broadcaster-forcing-radio-hosts-back-to-lps
Data breach at Chinese infosec firm reveals cyber-weapons and target list https://go.theregister.com/feed/www.theregister.com/2025/11/09/asia_tech_news_roundup/
November 10, 2025 at 12:47 AM
Data breach at Chinese infosec firm reveals cyber-weapons and target list https://go.theregister.com/feed/www.theregister.com/2025/11/09/asia_tech_news_roundup/
'Landfall' Malware Targeted Samsung Galaxy Users https://www.darkreading.com/mobile-security/landfall-malware-targeted-samsung-galaxy-users
November 7, 2025 at 9:47 PM
'Landfall' Malware Targeted Samsung Galaxy Users https://www.darkreading.com/mobile-security/landfall-malware-targeted-samsung-galaxy-users