Cyber Threat Feeds
@montxt.bsky.social
Daily noteworthy threat feeds. Filtering through noises.
Russia-Linked Hackers Use Microsoft 365 Device Code Phishing for Account Takeovers https://thehackernews.com/2025/12/russia-linked-hackers-use-microsoft-365.html
December 19, 2025 at 7:48 PM
Russia-Linked Hackers Use Microsoft 365 Device Code Phishing for Account Takeovers https://thehackernews.com/2025/12/russia-linked-hackers-use-microsoft-365.html
University of Sydney reports data breach affecting over 20,000 staff, affiliates https://therecord.media/university-of-sydney-reports-data-breach
December 19, 2025 at 7:48 PM
University of Sydney reports data breach affecting over 20,000 staff, affiliates https://therecord.media/university-of-sydney-reports-data-breach
Cracked Software and YouTube Videos Spread CountLoader and GachiLoader Malware https://thehackernews.com/2025/12/cracked-software-and-youtube-videos.html
December 19, 2025 at 3:48 PM
Cracked Software and YouTube Videos Spread CountLoader and GachiLoader Malware https://thehackernews.com/2025/12/cracked-software-and-youtube-videos.html
Ministers confirm breach at UK Foreign Office but details remain murky https://go.theregister.com/feed/www.theregister.com/2025/12/19/uk_foreign_office_hack/
December 19, 2025 at 11:48 AM
Ministers confirm breach at UK Foreign Office but details remain murky https://go.theregister.com/feed/www.theregister.com/2025/12/19/uk_foreign_office_hack/
New China-linked hacker group spies on governments in Southeast Asia, Japan https://therecord.media/china-linked-hacker-group-spied-on-asian-govs
December 18, 2025 at 8:47 PM
New China-linked hacker group spies on governments in Southeast Asia, Japan https://therecord.media/china-linked-hacker-group-spied-on-asian-govs
Crypto crooks co-opt stolen AWS creds to mine coins https://go.theregister.com/feed/www.theregister.com/2025/12/18/crypto_crooks_use_stolen_aws/
December 18, 2025 at 7:47 PM
Crypto crooks co-opt stolen AWS creds to mine coins https://go.theregister.com/feed/www.theregister.com/2025/12/18/crypto_crooks_use_stolen_aws/
NHS tech supplier probes cyberattack on internal systems https://go.theregister.com/feed/www.theregister.com/2025/12/18/nhs_tech_supplier_cyberattack/
December 18, 2025 at 1:47 PM
NHS tech supplier probes cyberattack on internal systems https://go.theregister.com/feed/www.theregister.com/2025/12/18/nhs_tech_supplier_cyberattack/
React2Shell exploitation spreads as Microsoft counts hundreds of hacked machines https://go.theregister.com/feed/www.theregister.com/2025/12/18/react2shell_exploitation_spreads_as_microsoft/
December 18, 2025 at 12:47 PM
React2Shell exploitation spreads as Microsoft counts hundreds of hacked machines https://go.theregister.com/feed/www.theregister.com/2025/12/18/react2shell_exploitation_spreads_as_microsoft/
BlindEagle Targets Colombian Government Agency with Caminho and DCRAT https://www.zscaler.com/blogs/security-research/blindeagle-targets-colombian-government-agency-caminho-and-dcrat
December 16, 2025 at 11:47 PM
BlindEagle Targets Colombian Government Agency with Caminho and DCRAT https://www.zscaler.com/blogs/security-research/blindeagle-targets-colombian-government-agency-caminho-and-dcrat
China's Ink Dragon hides out in European government networks https://go.theregister.com/feed/www.theregister.com/2025/12/16/chinas_ink_dragon_hides_out/
December 16, 2025 at 11:47 PM
China's Ink Dragon hides out in European government networks https://go.theregister.com/feed/www.theregister.com/2025/12/16/chinas_ink_dragon_hides_out/
Russia’s GRU hackers targeting misconfigured network edge devices in attacks on energy sector, Amazon says https://therecord.media/russia-gru-hackers-target-energy-sector-sandworm
December 16, 2025 at 10:48 PM
Russia’s GRU hackers targeting misconfigured network edge devices in attacks on energy sector, Amazon says https://therecord.media/russia-gru-hackers-target-energy-sector-sandworm
Russia Hits Critical Orgs Via Misconfigured Edge Devices https://www.darkreading.com/endpoint-security/russian-apt-attacking-critical-orgs-around-world
December 16, 2025 at 8:47 PM
Russia Hits Critical Orgs Via Misconfigured Edge Devices https://www.darkreading.com/endpoint-security/russian-apt-attacking-critical-orgs-around-world
From pr0n to playlists and paperclips, trio of breaches spills data of millions https://go.theregister.com/feed/www.theregister.com/2025/12/16/trio_of_breaches/
December 16, 2025 at 12:48 PM
From pr0n to playlists and paperclips, trio of breaches spills data of millions https://go.theregister.com/feed/www.theregister.com/2025/12/16/trio_of_breaches/
Fortinet FortiGate Under Active Attack Through SAML SSO Authentication Bypass https://thehackernews.com/2025/12/fortinet-fortigate-under-active-attack.html
December 16, 2025 at 11:47 AM
Fortinet FortiGate Under Active Attack Through SAML SSO Authentication Bypass https://thehackernews.com/2025/12/fortinet-fortigate-under-active-attack.html
Nearly 20 million affected by Prosper, 700Credit data breaches https://therecord.media/data-breaches-affecting-20-million-prosper-700credit
December 15, 2025 at 2:48 PM
Nearly 20 million affected by Prosper, 700Credit data breaches https://therecord.media/data-breaches-affecting-20-million-prosper-700credit
Jaguar Land Rover confirms staff data stolen in cyberattack https://therecord.media/jaguar-land-rover-confirms-staff-data-stolen-cyberattack
December 15, 2025 at 1:48 PM
Jaguar Land Rover confirms staff data stolen in cyberattack https://therecord.media/jaguar-land-rover-confirms-staff-data-stolen-cyberattack
Phantom Stealer Spread by ISO Phishing Emails Hitting Russian Finance Sector https://thehackernews.com/2025/12/phantom-stealer-spread-by-iso-phishing.html
December 15, 2025 at 10:48 AM
Phantom Stealer Spread by ISO Phishing Emails Hitting Russian Finance Sector https://thehackernews.com/2025/12/phantom-stealer-spread-by-iso-phishing.html
Multiple Threat Actors Exploit React2Shell (CVE-2025-55182) https://cloud.google.com/blog/topics/threat-intelligence/threat-actors-exploit-react2shell-cve-2025-55182/
December 13, 2025 at 3:47 AM
Multiple Threat Actors Exploit React2Shell (CVE-2025-55182) https://cloud.google.com/blog/topics/threat-intelligence/threat-actors-exploit-react2shell-cve-2025-55182/
Hamas-affiliated APT targeting government agencies in the Middle East, Morocco https://therecord.media/hamas-apt-targeting-government-agencies
December 12, 2025 at 9:47 PM
Hamas-affiliated APT targeting government agencies in the Middle East, Morocco https://therecord.media/hamas-apt-targeting-government-agencies
React2Shell Exploits Flood the Internet as Attacks Continue https://www.darkreading.com/threat-intelligence/react2shell-exploits-flood-internet-attacks-continue
December 12, 2025 at 8:47 PM
React2Shell Exploits Flood the Internet as Attacks Continue https://www.darkreading.com/threat-intelligence/react2shell-exploits-flood-internet-attacks-continue
Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads https://thehackernews.com/2025/12/fake-osint-and-gpt-utility-github-repos.html
December 12, 2025 at 7:47 PM
Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads https://thehackernews.com/2025/12/fake-osint-and-gpt-utility-github-repos.html
Supply Chain Attacks Targeting GitHub Actions Increased in 2025 https://www.darkreading.com/application-security/supply-chain-attacks-targeting-github-actions-increased-in-2025
December 12, 2025 at 7:47 PM
Supply Chain Attacks Targeting GitHub Actions Increased in 2025 https://www.darkreading.com/application-security/supply-chain-attacks-targeting-github-actions-increased-in-2025
New Advanced Phishing Kits Use AI and MFA Bypass Tactics to Steal Credentials at Scale https://thehackernews.com/2025/12/new-advanced-phishing-kits-use-ai-and.html
December 12, 2025 at 2:47 PM
New Advanced Phishing Kits Use AI and MFA Bypass Tactics to Steal Credentials at Scale https://thehackernews.com/2025/12/new-advanced-phishing-kits-use-ai-and.html
React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency Mitigation https://thehackernews.com/2025/12/react2shell-exploitation-escalates-into.html
December 12, 2025 at 9:47 AM
React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency Mitigation https://thehackernews.com/2025/12/react2shell-exploitation-escalates-into.html
Hamas-Linked Hackers Probe Middle Eastern Diplomats https://www.darkreading.com/cyberattacks-data-breaches/hamas-hackers-middle-eastern-diplomats
December 12, 2025 at 7:47 AM
Hamas-Linked Hackers Probe Middle Eastern Diplomats https://www.darkreading.com/cyberattacks-data-breaches/hamas-hackers-middle-eastern-diplomats