Author | Lightnews

Steve Puluka @spuluka.bsky.social · 20h

The upgrade to SafeBrowsing v5 is now in the nightly releases of Firefox browser for testing. This helps improve real time detection phishing and malware on the web.

attackanddefense.dev/2025/10/28/f...

Firefox Security & Privacy Newsletter 2025 Q3

Welcome to the Q3 2025 edition of the Firefox Security and Privacy newsletter!

attackanddefense.dev

Steve Puluka @spuluka.bsky.social · 1d

The Canadian Cyber authorities have noted lessons learned for CISOs from three recent industrial control systems breaches this year.

www.cyber.gc.ca/en/alerts-ad...

AL25-016 Internet-accessible industrial control systems (ICS) abused by hacktivists - Canadian Centre for Cyber Security

AL25-016 Internet-accessible industrial control systems (ICS) abused by hacktivists

www.cyber.gc.ca

Steve Puluka @spuluka.bsky.social · 2d

New tool called Find-WSUS that assists in discovering WSUS servers with configurations susceptible to the CVE-2025-59287 attacks. Thanks to @mubix.com Rob Fuller

github.com/mubix/Find-W...

GitHub - mubix/Find-WSUS: Helps defenders find their WSUS configurations in the wake of CVE-2025-59287

Helps defenders find their WSUS configurations in the wake of CVE-2025-59287 - mubix/Find-WSUS

github.com

1

Steve Puluka @spuluka.bsky.social · 3d

Australia is suing Microsoft claiming they are basically forcing customers to pay for #AI features in the M365 subscriptions.

www.theguardian.com/australia-ne...

Microsoft sued for allegedly misleading millions of Australians with its AI pricing

Tech giant faces hefty fines from consumer watchdog for allegedly trying to convince customers to pay more than needed for their Microsoft 365 subscription

www.theguardian.com

2

Steve Puluka @spuluka.bsky.social · 4d

Looking forward to getting updates next week.

Steve Puluka @spuluka.bsky.social · 4d

The CAPTACHA feature is now in GA for Azure hosting sites to help cut down on bots crawling web sites.

techcommunity.microsoft.com/blog/azurene...

General Availability of CAPTCHA in Azure Front Door WAF | Microsoft Community Hub

We are excited to announce the General Availability (GA) of the Azure Web Application Firewall (WAF) CAPTCHA challenge for Azure Front Door, empowering...

techcommunity.microsoft.com

Steve Puluka @spuluka.bsky.social · 5d

The data he actually saw is just the logs on usage so this is more creepy than detrimental currently. But the aggressive turn off option makes it detrimental all by itself. That move says the company comes first not the customer using the tool they paid for.

1 1

Steve Puluka @spuluka.bsky.social · 5d

For a change the security issues at F5 are affecting revenue for at least the next two quarters according to their latest filings. I’m not sure why this set of vulnerabilities finally matters in a world that normally ignores them.

www.axios.com/2025/10/27/f...

Cybersecurity firm F5 anticipates revenue hit after attack

The company anticipates customers will slow their purchasing decisions as they respond to the incident.

www.axios.com

Steve Puluka @spuluka.bsky.social · 6d

The good news from the latest Ransomware report by Coveware is that payment rates have dropped below 25% in the 3rd quarter, scoring a win for blue teams and law enforcement as fewer are needing to pay out for recovery.

www.coveware.com/blog/2025/10...

Insider Threats Loom while Ransom Payment Rates Plummet

The percentage of companies choosing to pay ransoms dropped significantly, while threat actors shift their tactics in response to decreasing profits.

www.coveware.com

Steve Puluka @spuluka.bsky.social · 7d

In the continued crack down on internet scam centers the Thailand government is working to revoke the naturalized citizenship of one of the scam center leaders.

bangkokpost.com/thailand/general/3125874/thailandrevokes-citizenship-ofcambodiatycoon-on-scam-activity

Thailand revokes citizenship of Cambodia tycoon on scam activity

Thailand’s government revoked citizenship of a Cambodian high-ranking businessman after he was accused of being involved with cyber-scam operations and human trafficking networks.

bangkokpost.com

Steve Puluka @spuluka.bsky.social · 8d

So it appears that Starlink is the major internet provider for scam compounds in Myanmar.

www.france24.com/en/live-news...

Myanmar scam cities booming despite crackdown -- using Musk's Starlink

They said they had smashed them. But fraud factories in Myanmar blamed for scamming Chinese and American victims out of billions of dollars are still in business and bigger than ever, an AFP investiga...

www.france24.com

Steve Puluka @spuluka.bsky.social · 9d

Interesting report from Epic shows an upward trend of US state AG laughing more privacy protection lawsuits with over 1200 cases between 2020-2024.

epic.org/state-ag-pri...

State Attorneys General & Privacy: Enforcement Trends, 2020-2024

epic.org

Steve Puluka @spuluka.bsky.social · 10d

Four companies are facing lawsuits from Reddit over data scraping from the site in what looks like a continuation of their attempt to monetize content in the #AI era.

www.reuters.com/world/reddit...

www.reuters.com

Steve Puluka @spuluka.bsky.social · 11d

If you ever wondered why those creepy ads follow you around the internet this provides a pretty good deep dive on the browser survaliance state.

www.wired.com/story/what-i...

Here’s What Your Browser is Telling Everyone About You

Your browser sends a lot of information with each website you visit. That can be used to track you across the internet.

www.wired.com

Steve Puluka @spuluka.bsky.social · 12d

Nice overview by Itential on what MCP does and how to use them to interface with #AI agent systems.

www.itential.com/blog/company...

MCP 101: Understanding the Model Context Protocol

Learn how the Model Context Protocol (MCP) standardizes AI tool integration, enabling seamless, secure, and scalable automation across platforms.

www.itential.com

1

Steve Puluka @spuluka.bsky.social · 13d

Interesting story on how the iLife A11 smart vacuum is spying on users and disables if you cut off the phone home feed.

codetiger.github.io/blog/the-day...

The Day My Smart Vacuum Turned Against Me

Would you allow a stranger to drive a camera-equipped computer around your living room? You might have already done so without even realizing it. The Beginning: A Curious Experiment It all started ...

codetiger.github.io

1 1 1

Steve Puluka @spuluka.bsky.social · 14d

According to the Microsoft Annual Digital Defense Report, just 20 ASN are responsible for 80% of all malicious password spraying activity.

blogs.microsoft.com/on-the-issue...

Extortion and ransomware drive over half of cyberattacks

Microsoft launches its sixth annual Digital Defense Report, highlighting trends from July 2024 to June 2025, including that over half of cyberattacks with known motives were driven by extortion or ran...

blogs.microsoft.com

1

Steve Puluka @spuluka.bsky.social · 15d

In my experience the biggest org factor for this is size. The larger the organization and in this case network to be designed and managed, the more likely top positions are no longer hands on. The larger org and network give more employees and thus more ability to deeply segment the roles.

1

Steve Puluka @spuluka.bsky.social · 15d

The Dutch data protection agency has fined Experian 2.7 euros for violations of GDPR collecting and selling personal data for credit checks.

autoriteitpersoonsgegevens.nl/actueel/expe...

Experian krijgt boete van 2,7 miljoen euro voor privacyovertredingen

De AP legt Experian Nederland een boete op van 2,7 miljoen euro. Experian leverde tot 1 januari 2025 kredietbeoordelingen over mensen aan hun klanten.

autoriteitpersoonsgegevens.nl

Steve Puluka @spuluka.bsky.social · 16d

New open source tool from Adversis called MCP Snitch that monitors communications from MCP services on your system monitoring for adverse behavior.

www.adversis.io/blogs/the-mc...

The MCP Security Tool You Probably Need - MCP Snitch

The Model Context Protocol (MCP) has rapidly emerged as the standard for connecting AI agents to external tools and services. However, as the recent GitHub MCP vulnerability demonstrated, the protocol...

www.adversis.io

1

Steve Puluka @spuluka.bsky.social · 17d

The recent Cisco ASA vulnerabilities may move us towards more required information releases. The senate has started a process pushing for more detail that we can hope leads to actual law and policy change and not a one time event.

therecord.media/cisco-asa-vu...

Cisco must share more information about effects of severe bugs on businesses, senator says

Cisco still has work to do in communicating with the private sector about the impact of two vulnerabilities in its Adaptive Security Appliances, Sen. Bill Cassidy says in a letter to the company's CEO...

therecord.media

Steve Puluka @spuluka.bsky.social · 18d

Good news that German and Bulgarian authorities have successfully seized over 1400 websites with various financial scam operations.

www.bafin.de/SharedDocs/V...

Schlag gegen Cyberkriminelle

Die Generalstaatsanwaltschaft Karlsruhe, das Landeskriminalamt Baden-Württemberg und die Finanzaufsicht BaFin informieren über einen Schlag gegen international agierende Cyberkriminelle.

www.bafin.de

1

Steve Puluka @spuluka.bsky.social · 19d

California is the first to pass laws governing the use of #AI with a focus on child protections and age requirements.

www.gov.ca.gov/2025/10/13/g...

Governor Newsom signs bills to further strengthen California’s leadership in protecting children online | Governor of California

www.gov.ca.gov

Steve Puluka @spuluka.bsky.social · 20d

Deep dive by Red Canary into the macOS stealers Atomic, odyssey and Poseidon and how they work.

redcanary.com/blog/threat-...

Distinguishing Atomic, Odyssey, and Poseidon stealers on macOS

Set sail with us as we compare and contrast three of the biggest players in the macOS stealer ecosystem: Atomic, Poseidon, and Odyssey

redcanary.com

Steve Puluka @spuluka.bsky.social · 21d

Interesting report from Infoblox on how pig butchering scam centers can potentially be tracked using DNS data trails.

blogs.infoblox.com/threat-intel...

Pig Butchering Scams: DNS Patterns and Criminal Compounds

DNS analysis reveals how pig butchering scams link to criminal compounds in Southeast Asia, exposing fraud infrastructure and threat actor patterns.

blogs.infoblox.com