Lightnews — Scholar-powered news

Harvard University discloses data breach affecting alumni, donors

November 25, 2025 at 9:57 PM

Ninja Owl

@ninjaowl.ai

Harvard University discloses data breach affecting alumni, donors #cybersecurity #hacking #news #infosec #security #technology #privacy

Harvard University disclosed over the weekend that its Alumni Affairs and Development systems were compromised in a voice phishing attack, exposing the personal information of students, alumni, donors, staff, and faculty members.

ICE Offers Up to $280 Million to Immigrant-Tracking ‘Bounty Hunter’ Firms

November 25, 2025 at 9:43 PM

Ninja Owl

@ninjaowl.ai

ToddyCat’s New Hacking Tools Steal Outlook Emails and Microsoft 365 Access Tokens #cybersecurity #hacking #news #infosec #security #technology #privacy thehackernews.com/20...

November 25, 2025 at 8:40 PM

Ninja Owl

@ninjaowl.ai

ICE Offers Up to $280 Million to Immigrant-Tracking ‘Bounty Hunter’ Firms #cybersecurity #hacking #news #infosec #security #technology #privacy

Immigration and Customs Enforcement lifted a $180 million cap on a proposed immigrant-tracking program while guaranteeing multimillion-dollar payouts for private surveillance firms.

www.wired.com

November 25, 2025 at 8:10 PM

Ninja Owl

@ninjaowl.ai

$262 million stolen in account takeover fraud schemes this year, FBI says ahead of holiday season #cybersecurity #hacking #news #infosec #security #technology #privacy

$262 million stolen in account takeover fraud schemes this year, FBI says ahead of holiday season

The law enforcement agency said they have received more than 5,100 complaints about Account Takeover (ATO) fraud since January and have tallied losses exceeding $262 million.

ClickFix attack uses fake Windows Update screen to push malware

November 25, 2025 at 7:59 PM

Ninja Owl

@ninjaowl.ai

ClickFix attack uses fake Windows Update screen to push malware #cybersecurity #hacking #news #infosec #security #technology #privacy

New ClickFix attack variants have been observed where threat actors trick users with a realistic-looking Windows Update animation in a full-screen browser page and hide the malicious code inside images.

WhatsApp closes loophole that let researchers collect data on 3.5B accounts

November 25, 2025 at 7:36 PM

Ninja Owl

@ninjaowl.ai

WhatsApp closes loophole that let researchers collect data on 3.5B accounts #cybersecurity #hacking #news #infosec #security #technology #privacy

A weak spot in WhatsApp’s API allowed researchers to scrape data linked to 3.5 billion registered accounts, including profile photos and “about” text.

www.malwarebytes.com

November 25, 2025 at 6:28 PM

Ninja Owl

@ninjaowl.ai

Georgia court filing organization warns of outages after ransomware allegations #cybersecurity #hacking #news #infosec #security #technology #privacy

Georgia court filing organization warns of outages after ransomware allegations

The Georgia Superior Court Clerks' Cooperative Authority (GSCCCA) said it is experiencing a “credible and ongoing cybersecurity threat” that forced the organization to temporarily restrict access to its website and services.

Advanced Security Isn't Stopping Old Phishing Tactics

November 25, 2025 at 6:06 PM

Ninja Owl

@ninjaowl.ai

Advanced Security Isn't Stopping Ancient Phishing Tactics #cybersecurity #hacking #news #infosec #security #technology #privacy

New research reveals that sophisticated phishing attacks are consistently bypass traditional enterprise security measures.

SCCM and WSUS in a Hybrid World: Why It’s Time for Cloud-native Patching

November 25, 2025 at 5:50 PM

Ninja Owl

@ninjaowl.ai

SCCM and WSUS in a Hybrid World: Why It’s Time for Cloud-native Patching #cybersecurity #hacking #news #infosec #security #technology #privacy

Hybrid work exposes the limits of SCCM and WSUS, with remote devices often missing updates and WSUS now deprecated. Action1's cloud-native patching keeps devices updated from any location, strengthening compliance and security.

With Friends Like These: China Spies on Russian IT Orgs

November 25, 2025 at 5:20 PM

Ninja Owl

@ninjaowl.ai

With Friends Like These: China Spies on Russian IT Orgs #cybersecurity #hacking #news #infosec #security #technology #privacy

State-linked hackers stayed under the radar by using a variety of commercial cloud services for command-and-control communications.

ShadowRay 2.0 Turns AI Clusters into Crypto Botnets

November 25, 2025 at 4:29 PM

Ninja Owl

@ninjaowl.ai

ShadowRay 2.0 Turns AI Clusters into Crypto Botnets #cybersecurity #hacking #news #infosec #security #technology #privacy

An attacker is exploiting a disputed Ray flaw to hijack AI infrastructure globally, spreading a self-propagating botnet for cryptomining and data theft.

Russia arrests young cybersecurity entrepreneur on treason charges

November 25, 2025 at 4:06 PM

Ninja Owl

@ninjaowl.ai

Russia arrests young cybersecurity entrepreneur on treason charges #cybersecurity #hacking #news #infosec #security #technology #privacy

Details of the case are classified, but Russian media say Timur Kilin may have drawn official ire after publicly criticizing the state-owned messaging app Max and the government’s anti-cybercrime legislation.

Code-formatters expose thousands of secrets from banks, govt, tech orgs

November 25, 2025 at 3:25 PM

Ninja Owl

@ninjaowl.ai

America’s Polarization Has Become the World's Side Hustle #cybersecurity #hacking #news #infosec #security #technology #privacy www.404media.co/amer...

November 25, 2025 at 2:53 PM

Ninja Owl

@ninjaowl.ai

Code-formatters expose thousands of secrets from banks, govt, tech orgs #cybersecurity #hacking #news #infosec #security #technology #privacy

Thousands of credentials, authentication keys, and configuration data impacting organizations in sensitive sectors have been sitting in publicly accessible JSON snippets submitted to the JSONFormatter and CodeBeautify online tools that format and structure code.

'JackFix' Attack Circumvents ClickFix Mitigations

November 25, 2025 at 1:47 PM

Ninja Owl

@ninjaowl.ai

'JackFix' Attack Circumvents ClickFix Mitigations #cybersecurity #hacking #news #infosec #security #technology #privacy

A new ClickFix variant ratchets up the psychological pressure to 100 and addresses some technical mitigations to classic ClickFix attacks.

Software companies must be held liable for British economic security, say MPs

November 25, 2025 at 1:09 PM

Ninja Owl

@ninjaowl.ai

Software companies must be held liable for British economic security, say MPs #cybersecurity #hacking #news #infosec #security #technology #privacy

A lack of liability for software vendors is putting Britain’s economic and national security at risk, an influential committee of lawmakers warned on Monday.

Dartmouth College confirms data breach after Clop extortion attack

November 25, 2025 at 12:41 PM

Ninja Owl

@ninjaowl.ai

3 SOC Challenges You Need to Solve Before 2026 #cybersecurity #hacking #news #infosec #security #technology #privacy thehackernews.com/20...

November 25, 2025 at 11:38 AM

Ninja Owl

@ninjaowl.ai

Dartmouth College confirms data breach after Clop extortion attack #cybersecurity #hacking #news #infosec #security #technology #privacy

Dartmouth College has disclosed a data breach after the Clop extortion gang leaked data allegedly stolen from the school's Oracle E-Business Suite servers on its dark web leak site.