Proofpoint has spotted a new Iranian APT group—UNK_SmudgedSerpent. The group's TTPs overlap with many other Iranian groups, showing some sort of collaboration, personnel movement, or similar training/contractors. https://www.proofpoint.com/us/blog/threat-insight/crossed-wires-case-study-iranian-espionage-and-attribution

Two US senators have introduced a bill that would require US companies and federal agencies to report the number of workers they fired and replaced with AI technology. The data would be compiled by the Dept. of Labor and released via a public report.

Mark R. Warner

Warner, Hawley to Introduce Bipartisan Legislation to Track Number of Jobs Lost to AI

WASHINGTON –Today, U.S. Sens. Mark R. Warner (D-VA) and Josh Hawley (R-MO) announced they will introduce the AI-Related Job Impacts Clarity A...

NVISO has linked VShell to UNC5174, a cyber contractor for the Chinese MSS

NVISO

NVISO analyzes VShell post-exploitation tool

NVISO has actively tracked VShell for months, a Chinese-language intrusion tool used in espionage campaigns. NVISO has actively tracked VShell for ...

Repeat after me: Do not fill in and sync your government ID data to your Google account

Google

Chrome now helps you fill in passport, driver’s license, vehicle information and more.

Chrome already saves you time every day by securely filling in your addresses, passwords and payment information. Today, we’re making it even mor...

CISA's election day monitoring room was not stood up yesterday for the first time in years According to Bloomberg, remaining CISA election security staff, who have not been fired, have been "prohibited" from contacting state election officials.

Bloomberg.com

US Elections Face Security Test as DHS Cuts Local Cyber Support

As voters across the US from New York City to New Jersey and Virginia prepare to cast ballots Tuesday, election officials are operating with sharpl...

-US indicts two rogue cybersecurity employees for ransomware attacks -Hackers extort massage parlor visitors -Balancer hacked for $128 million -Cargo thieves use hackers to go after trucking and freight companies -UPenn hack gets feisty -Major breach in Poland, at SuperGrosz -Australia expands kids social media ban to Reddit and Kick -SMS blaster detained in Cambodia -Scammers arrested in Europe Podcast:

Risky Bulletin: US indicts two rogue cybersecurity employees for ransomware attacks - Risky Business Media

The US indicts two cybersecurity employees over ransomware attacks, hackers extort customers of South Korean massage parlors, another cryp [Read More]

Newsletter:

Risky.Biz

US indicts two rogue cybersecurity employees for deploying ransomware

In other news: Hackers extort massage parlor visitors; Balancer hacked for $128 million; cargo thieves use hackers to go after trucking and freight...

iOS security updates:

Apple Support

Apple security releases - Apple Support

This document lists security updates and Rapid Security Responses for Apple software.

Android security updates:

Android Open Source Project

Android Security Bulletin—November 2025 | Android Open Source Project

Start patching!