Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Microsoft Uncovers ‘Whisper Leak’ Attack That Identifies AI Chat Topics in Encrypted Traffic
Published: 2025-11-08
Microsoft has disclosed details of a novel side-channel attack targeting remote language models that could enable a passive adversary with capabilities to observe network traffic to glean details about model conversation topics despite encryption protections under certain circumstances.
2. Samsung Mobile Flaw Exploited as Zero-Day to Deploy LANDFALL Android Spyware
Published: 2025-11-07
A now-patched security flaw in Samsung Galaxy Android devices was exploited as a zero-day to deliver a “commercial-grade” Android spyware dubbed LANDFALL in targeted attacks in the Middle East.
3. US Congressional Budget Office Hit by Cybersecurity Incident
Published: 2025-11-07
The U.S. Congressional Budget Office said it had identified a security incident and acted to contain the breach at the non-partisan agency that provides key financial research data to lawmakers.
4. Trump Budget Cuts Leave Americans and Economy at Greater Risk of Being Hacked, Experts Warn
Published: 2025-11-07
Almost a year into the second Trump administration, public sector leaders and cybersecurity experts say budget cuts and gutting of federal agencies are weakening critical lines of government communication to help companies prepare and respond to cyberattacks, even as AI threats are rising.
5. Vibe-Coded Malicious VS Code Extension Found with Built-In Ransomware Capabilities
Published: 2025-11-07
Cybersecurity researchers have flagged a malicious Visual Studio Code (VS Code) extension with basic ransomware capabilities that appears to be created with the help of artificial intelligence.
6. Google Launches New Maps Feature to Help Businesses Report Review-Based Extortion Attempts
Published: 2025-11-07
Google is rolling out a dedicated form to allow businesses listed on Google Maps to report extortion attempts made by threat actors who post inauthentic bad reviews on the platform and demand ransoms to remove the negative comments.
7. Cisco Warns of New Firewall Attack Exploiting CVE-2025-20333 and CVE-2025-20362
Published: 2025-11-06
Cisco has disclosed that it became aware of a new attack variant that’s designed to target devices running Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software releases that are susceptible to CVE-2025-20333 and CVE-2025-20362.
8. Researchers Find ChatGPT Vulnerabilities That Let Attackers Trick AI Into Leaking Data
Published: 2025-11-05
Cybersecurity researchers have disclosed a new set of vulnerabilities impacting OpenAI’s ChatGPT artificial intelligence (AI) chatbot that could be exploited by an attacker to steal personal information from users’ memories and chat histories without their knowledge.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor and protect your digital assets. Stay safe online!