The biggest #cybersecurity and #cyberattack stories of 2025
BleepingComputer
The biggest cybersecurity and cyberattack stories of 2025
2025 was a big year for cybersecurity, with cyberattacks, data breaches, threat groups reaching new notoriety levels, and, of course, zero-day flaw...
New #GlassWorm #malware wave targets Macs with trojanized #crypto wallets
BleepingComputer
New GlassWorm malware wave targets Macs with trojanized crypto wallets
A fourth wave of the "GlassWorm" campaign is targeting macOS developers with malicious VSCode/OpenVSX extensions that deliver trojanized versions o...
 #cybersecurity #Mac #Apple
#DHS Says #REALID, Which DHS Certifies, Is Too Unreliable To Confirm U.S. #Citizenship
Reason.com
DHS says REAL ID, which DHS certifies, is too unreliable to confirm U.S. citizenship
It's the punch line to a bad joke that started 20 years ago when Congress passed the REAL ID Act.
 #privacy #politics
#Trump administration removes three #spyware-linked executives from sanctions list https://www.reuters.com/business/trump-administration-removes-three-spyware-linked-executives-sanctions-list-2025-12-30/ #privacy #cybersecurity #Intellexa #Predator
#France targets #Australia-style #SocialMediaBan for children next year
the Guardian
France targets Australia-style social media ban for children next year
Draft bill to be submitted for legal checks as France aims to follow Australia’s world-first ban on platforms including Facebook, Snapchat and Yo...
 #privacy #IdentityVerification #AgeVerification #politics #Europe #SocialMedia
Hackers drain $3.9M from #UnleashProtocol after multisig hijack
BleepingComputer
Hackers drain $3.9M from Unleash Protocol after multisig hijack
The decentralized intellectual property platform Unleash Protocol has lost around $3.9 million worth of cryptocurrency after someone executed an un...
 #crypto #cybersecurity
#RondoDox #botnet exploits #React2Shell flaw to breach #NextJS servers
BleepingComputer
RondoDox botnet exploits React2Shell flaw to breach Next.js servers
The RondoDox botnet has been observed exploiting the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js servers with malware a...
 #cybersecurity
#NYC Mayoral #Inauguration bans #RaspberryPi and #FlipperZero alongside explosives https://blog.adafruit.com/2025/12/30/nyc-mayoral-inauguration-bans-raspberry-pi-and-flipper-zero-alongside-explosives/ #FOSS #cybersecurity
Fears Mount That #US Federal #Cybersecurity Is Stagnating—or Worse
WIRED
Fears Mount That US Federal Cybersecurity Is Stagnating—or Worse
Government staffing cuts and instability, including this year’s prolonged shutdown, could be hindering US digital defense and creating vulnerabil...
 #politics
#IBM warns of critical #APIConnect auth bypass vulnerability
BleepingComputer
IBM warns of critical API Connect auth bypass vulnerability
IBM urged customers to patch a critical authentication bypass vulnerability in its API Connect enterprise platform that could allow attackers to ac...
 #cybersecurity