Author | Lightnews

Sexualized surveillance: experts warn against using ChatGPT erotica

HorXi @horxi.bsky.social · 4d

Chatbots allowing users to engage in raunchy conversations can be a powerful tool of surveillance, comparable to espionage through intimate partners, an expert says.

cybernews.com/ai-news/chat...

Experts say a new ChatGPT version providing erotica to age-verified adult users can be used as an effective tool for sexualized surveillance.

Qilin ransomware by the numbers

HorXi @horxi.bsky.social · 4d

Comparitech researchers have looked into Qilin, which is a Russia-based group that first appeared in 2022.

cybernews.com/cybercrime/q...

Qilin has claimed responsibility for its 700th ransomware attack of 2025 – but who are they and how do they operate?

Newly Patched Critical Microsoft WSUS Flaw Comes Under Active Exploitation

HorXi @horxi.bsky.social · 5d

Microsoft on Thursday released out-of-band security updates to patch a critical-severity Windows Server Update Service (WSUS) vulnerability with a proof-of-concept (Poc) exploit publicly available and has come under active exploitation in the wild.

thehackernews.com/2025/10/micr...

Microsoft releases urgent fix for critical WSUS flaw CVE-2025-59287 under active exploitation.

Smishing Triad Linked to 194,000 Malicious Domains in Global Phishing Operation

HorXi @horxi.bsky.social · 5d

The threat actors behind a large-scale, ongoing smishing campaign have been attributed to more than 194,000 malicious domains since January 1, 2024, targeting a broad range of services across the world

thehackernews.com/2025/10/smis...

Smishing Triad used 194,000 domains in 2025 to target global users, earning over $1B through scams

ChatGPT Atlas Browser Can Be Tricked by Fake URLs into Executing Hidden Commands

HorXi @horxi.bsky.social · 5d

The newly released OpenAI ChatGPT Atlas web browser has been found to be susceptible to a prompt injection attack where its omnibox can be jailbroken by disguising a malicious prompt as a seemingly harmless URL to visit.

thehackernews.com/2025/10/chat...

Researchers expose Atlas browser flaw letting malicious URLs trigger AI actions and redirect users.

Qilin Ransomware Combines Linux Payload With BYOVD Exploit in Hybrid Attack

HorXi @horxi.bsky.social · 5d

The ransomware group known as Qilin (aka Agenda, Gold Feather, and Water Galura) has claimed more than 40 victims every month since the start of 2025

thehackernews.com/2025/10/qili...

Qilin ransomware strikes 84 victims monthly, exploiting RMM tools, BYOVD attacks, and backup systems.

The Cybersecurity Perception Gap: Why Executives and Practitioners See Risk Differently

HorXi @horxi.bsky.social · 6d

This disconnect matters. Small differences in perception today can evolve into major blind spots tomorrow.

thehackernews.com/2025/10/the-...

Bitdefender 2025 report exposes a widening cybersecurity perception gap between executives and frontline teams.

Newly Patched Critical Microsoft WSUS Flaw Comes Under Active Exploitation

HorXi @horxi.bsky.social · 6d

Microsoft on Thursday released out-of-band security updates to patch a critical-severity Windows Server Update Service (WSUS) vulnerability with a proof-of-concept (Poc) exploit publicly available

thehackernews.com/2025/10/micr...

Microsoft releases urgent fix for critical WSUS flaw CVE-2025-59287 under active exploitation.

Smishing Triad Linked to 194,000 Malicious Domains in Global Phishing Operation

HorXi @horxi.bsky.social · 6d

The threat actors behind a large-scale, ongoing smishing campaign have been attributed to more than 194,000 malicious domains since January 1, 2024, targeting a broad range of services across the world

thehackernews.com/2025/10/smis...

Smishing Triad used 194,000 domains in 2025 to target global users, earning over $1B through scams

US ‘slipping’ on cybersecurity, annual Cyberspace Solarium Commission report concludes

HorXi @horxi.bsky.social · 7d

The annual implementation report recommends reversing Trump administration budget cuts, empowering the national cyber director and other steps.

cyberscoop.com/cyberspace-s...

The annual implementation report recommends reversing Trump administration budget cuts, empowering the national cyber director and other steps.

cyberscoop.com

HorXi @horxi.bsky.social · 7d

India's government on Wednesday proposed that artificial intelligence and social media firms should clearly label AI-generated content to tackle the spread of deepfake and misinformation, prompted by similar moves by the European Union and China.

www.reuters.com/business/med...

India proposes strict rules to label AI content citing growing risks

India's government on Wednesday proposed that artificial intelligence and social media firms should clearly label AI-generated content to tackle the spread of deepfake and misinformation, prompted by similar moves by the European Union and China.

www.reuters.com

3 9

HorXi @horxi.bsky.social · 8d

While everyone is seemingly racing to integrate AI into their browsers, Tor Browser is ripping it out.

cybernews.com/privacy/tor-...

Tor Browser’s latest release cuts “inherently un-auditable” Mozilla AI features

The Tor Project has taken a firm stance against integrating AI systems into its privacy-focused browser, while major companies like Microsoft and Google are doing the opposite.

Xubuntu website compromised, hackers targeting users with fake downloads

HorXi @horxi.bsky.social · 8d

Users attempting to download Xubuntu, a lightweight Linux distribution derived from Ubuntu, are reporting getting malware instead.

cybernews.com/security/xub...

Users are reporting that the Xubuntu website has been compromised, leading to malware instead of the OS.

AWS outage leaves users at risk for phishing attacks

HorXi @horxi.bsky.social · 8d

Over six million individuals are reported to have been impacted by Monday’s AWS outage, leaving affected users ripe for scam attacks.

cybernews.com/security/aws...

Over six million individuals are reported to have been impacted by Monday’s AWS outage, leaving affected users ripe for targeted scam and phihsing attacks.

AWS outage: when senior engineers leave, let’s not act surprised

HorXi @horxi.bsky.social · 8d

The Amazon Web Services (AWS) outage on Monday doesn’t seem to have been caused by a cyberattack. But critics are already pointing to the fact that Amazon has laid off at least 27,000 employees, including – surprise – senior engineers, since 2022.

cybernews.com/news/aws-out...

It took too long for AWS engineers to go from “things are breaking” to identifying a single service endpoint as the problem – why?