Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Russian Hackers Create 4,300 Fake Travel Sites to Steal Hotel Guests’ Payment Data
Published: 2025-11-13
Russian-speaking threat actors have registered over 4,300 domains to create fake travel sites targeting hotel guests via phishing emails to steal payment data.
2. Fake Chrome Extension “Safery” Steals Ethereum Wallet Seed Phrases Using Sui Blockchain
Published: 2025-11-13
A malicious Chrome extension named “Safery: Ethereum Wallet” steals users’ Ethereum seed phrases by encoding them into Sui addresses and broadcasting microtransactions.
3. When Attacks Come Faster Than Patches: Why 2026 Will be the Year of Machine-Speed Security
Published: 2025-11-13
With 50-61% of vulnerabilities exploited within 48 hours, attackers use AI and automation to outpace defenders in patching, highlighting the need for machine-speed security.
4. Operation Endgame Dismantles Rhadamanthys, Venom RAT, and Elysium Botnet in Global Crackdown
Published: 2025-11-13
Europol-led Operation Endgame has disrupted Rhadamanthys Stealer, Venom RAT, and Elysium botnet, arresting a suspect and seizing servers and domains.
5. ThreatsDay Bulletin: Cisco 0-Days, AI Bug Bounties, Crypto Heists, State-Linked Leaks and 20 More Stories
Published: 2025-11-13
This week’s bulletin covers Cisco zero-days, AI bug bounties, cryptocurrency heists, state-linked leaks, and other major cybersecurity developments.
6. CISA Flags Critical WatchGuard Fireware Flaw Exposing 54,000 Fireboxes to No-Login Attacks
Published: 2025-11-13
CISA has added a critical out-of-bounds write vulnerability in WatchGuard Fireware to its KEV catalog due to active exploitation.
7. Over 67,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack
Published: 2025-11-13
A spam campaign has flooded the npm registry with 67,579 fake packages using a worm-like propagation mechanism and Indonesian-themed names.
8. Google Sues China-Based Hackers Behind $1 Billion Lighthouse Phishing Platform
Published: 2025-11-12
Google has sued China-based hackers operating the Lighthouse PhaaS platform, which has stolen over $1 billion through large-scale SMS phishing attacks.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor your systems for vulnerabilities and automate protections. Stay safe online!