Lightnews — Scholar-powered news

CyberInsider @cyberinsider.bsky.social · 11h

ZDI Drops 13 Unpatched Ivanti Zero-Days Enabling Remote Code Execution

ZDI has publicly disclosed 13 unpatched vulnerabilities in Ivanti Endpoint Manager, including 12 RCE flaws and one local privilege escalation.

cyberinsider.com

CyberInsider @cyberinsider.bsky.social · 14h

Microsoft to Remove Offline Windows 11 Setup Option in Upcoming Release

Microsoft will eliminate the option of local user accounts during Windows 11 setup, mandating internet access and an account moving forward.

cyberinsider.com

CyberInsider @cyberinsider.bsky.social · 1d

Firefox to Roll Out Streamlined Profile Management with Data Isolation

Starting October 14, Mozilla will begin rolling out a redesigned Firefox profile management system that maintains a fully separate data silo.

cyberinsider.com

CyberInsider @cyberinsider.bsky.social · 1d

Surfshark Launches Speed Benchmark-Setting 100 Gbps VPN Servers

Surfshark announced the deployment of 100 Gbps servers, marking a significant upgrade from the VPN industry’s prevailing 10 Gbps standard.

cyberinsider.com

CyberInsider @cyberinsider.bsky.social · 1d

Tor’s Rust Rewrite Arti Gets Smarter and Safer in 1.6.0 Update

The Tor Project has released Arti 1.6.0, introducing new features aimed at improving privacy and resilience against side-channel attacks.

cyberinsider.com

CyberInsider @cyberinsider.bsky.social · 1d

1Password Users Targeted by Fake Breach Alerts for Password Theft

A phishing campaign targeting a Malwarebytes employee used a fake data breach alert from 1Password in an attempt to steal vault credentials.

cyberinsider.com

CyberInsider @cyberinsider.bsky.social · 2d

Signal Vows to Leave European Market if Chat Control Becomes Law

Signal warned that it will exit the European Union if the proposed “Chat Control” regulation mandating client-side scanning is adopted.

cyberinsider.com

CyberInsider @cyberinsider.bsky.social · 2d

Optical Mice Turned into Covert Eavesdropping Devices in 'Mic-E-Mouse' Attacks

A novel and practical side-channel attack, dubbed Mic-E-Mouse, uses everyday optical mouse sensors to recover intelligible human speech.

cyberinsider.com

CyberInsider @cyberinsider.bsky.social · 2d

Unity Flaw Exposes Millions of Gamers to Code Execution Risk

A new bug in Unity Runtime allows attackers to execute arbitrary code on systems running Unity-built apps across Android, Windows, and macOS.

cyberinsider.com

CyberInsider @cyberinsider.bsky.social · 2d

Clop Ransomware Exploits Oracle EBS Zero-Day in Data Theft Campaign

The Clop ransomware gang has launched a new wave of mass exploitation attacks targeting Oracle E-Business Suite (EBS).

cyberinsider.com

CyberInsider @cyberinsider.bsky.social · 4d

Discord Informs Users of Data Breach That Exposed Sensitive Information

Discord has disclosed a data breach involving a 3rd-party customer service provider, resulting in the exposure of support-related user data.

cyberinsider.com

CyberInsider @cyberinsider.bsky.social · 5d

Renault UK Notifies Customers of Data Breach via Third-Party Provider

Renault UK warns customers of a third-party data breach exposing personal and vehicle details, though no financial data was compromised.

cyberinsider.com

CyberInsider @cyberinsider.bsky.social · 5d

Scattered LAPSUS$ Hunters Open Extortion Portal With High-Profile Data Leaks

Scattered LAPSUS$ Hunters have published a dedicated online portal where they published data samples from recent Salesforce breaches.

cyberinsider.com

CyberInsider @cyberinsider.bsky.social · 5d

Comet AI Browser Vulnerable to Full Data Exfiltration via Malicious URLs

A flaw in Comet browser allows attackers to exfiltrate emails, calendar data, and other sensitive user data using a single malicious URL.

cyberinsider.com

CyberInsider @cyberinsider.bsky.social · 5d

Gmail Now Lets You Send Fully Encrypted Emails Across the Open Web

Google has expanded Gmail's end-to-end encryption capabilities, allowing enterprise users to send encrypted emails to any recipient.

cyberinsider.com

CyberInsider @cyberinsider.bsky.social · 5d

Signal Adds Post-Quantum “Triple Ratchet” Protocol for Stronger Security

Signal is adding a new cryptographic layer designed to defend against future quantum computing threats on the protocol's security.

cyberinsider.com

1

CyberInsider @cyberinsider.bsky.social · 6d

UK Government Reportedly Pressures Apple Again for a Backdoor

The UK government has reportedly renewed its push on Apple to create a backdoor into its encrypted iCloud backups, targeting only UK users.

cyberinsider.com

CyberInsider @cyberinsider.bsky.social · 6d

Netherlands Rejects “Chat Control” Proposal Which Threatens Encryption

The Dutch government has rejected the latest version of the EU’s controversial "ChatControl" proposal over communication privacy concerns.

cyberinsider.com

CyberInsider @cyberinsider.bsky.social · 6d

Signal Messenger Impersonated in 'ProSpy Android Spyware Campaign

ESET researchers have uncovered two Android spyware campaigns deceiving users by impersonating secure messaging apps Signal and ToTok.

cyberinsider.com

CyberInsider @cyberinsider.bsky.social · 7d

Brave Browser Has Now Surpassed 100 Million Monthly Active Users

Brave browser has crossed 100 million monthly active users, capping off a year of accelerated growth for both the browser and the search engine.

cyberinsider.com

1

CyberInsider @cyberinsider.bsky.social · 7d

ETH Zurich Researchers Unveil Privacy-First Smartphone Architecture

ETH Zurich spin-off Soverli has introduced a smartphone architecture that uses isolated "domains" to grant users full control over their data.

cyberinsider.com

CyberInsider @cyberinsider.bsky.social · 7d

Allianz Life July Data Breach Impacted 1.5 Million Customers

Allianz Life Insurance is notifying 1.5 million individuals across the US that their personal data was compromised in a July 2025 cyberattack.

cyberinsider.com

CyberInsider @cyberinsider.bsky.social · 7d

The Maine Attorney General’s Office reports that 1.2 million individuals were affected.

CyberInsider @cyberinsider.bsky.social · 7d

Imgur Blocks UK Users Amid Ongoing Privacy Investigation by ICO

Imgur has restricted access to its platform for users in the UK, cutting off access to the popular image-hosting service for millions.

cyberinsider.com

CyberInsider @cyberinsider.bsky.social · 8d

WestJet Confirms Data Breach Impacting Passenger Identity Data

WestJet confirmed that a cyberattack led to the theft of personal data from its systems, including passenger data and account details.

cyberinsider.com