Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Google Uncovers PROMPTFLUX Malware That Uses Gemini AI to Rewrite Its Code Hourly
Published: 2025-11-05
Google discovered the PROMPTFLUX malware, written in VBScript, which interacts with the Gemini AI model API to request obfuscation techniques for self-modification and evasion of detection.
2. Researchers Find ChatGPT Vulnerabilities That Let Attackers Trick AI Into Leaking Data
Published: 2025-11-05
Tenable researchers disclosed seven vulnerabilities in OpenAI’s GPT-4o and GPT-5 models, including indirect prompt injection attacks, that could be exploited to steal personal information from users’ memories and chat histories.
3. Mysterious ‘SmudgedSerpent’ Hackers Target U.S. Policy Experts Amid Iran–Israel Tensions
Published: 2025-11-05
The UNK_SmudgedSerpent threat actor conducted cyber attacks targeting academics and foreign policy experts between June and August 2025, using domestic political lures related to Iran and the IRGC.
4. U.S. Sanctions 10 North Korean Entities for Laundering $12.7M in Crypto and IT Fraud
Published: 2025-11-05
The U.S. Treasury sanctioned eight individuals and two entities in North Korea for laundering money from cybercrime, IT worker fraud, and other schemes to fund the regime’s nuclear program.
5. CISA Adds Gladinet and CWP Flaws to KEV Catalog Amid Active Exploitation Evidence
Published: 2025-11-05
CISA added CVE-2025-11371 in Gladinet and CVE-2025-48703 in Control Web Panel to its KEV catalog due to active exploitation, with the latter enabling unauthenticated remote code execution.
6. A Cybercrime Merger Like No Other — Scattered Spider, LAPSUS$, and ShinyHunters Join Forces
Published: 2025-11-04
The Scattered LAPSUS$ Hunters collective, combining Scattered Spider, LAPSUS$, and ShinyHunters, created 16 Telegram channels since August 2025 for data extortion attacks including extortion-as-a-service.
7. European Authorities Dismantle €600 Million Crypto Fraud Network in Global Sweep
Published: 2025-11-04
Authorities arrested nine people in Cyprus, Spain, and Germany for running a crypto money laundering network that defrauded €600 million through fake investment platforms.
8. Ernst & Young (EY) Data Exposure
Published: 2025-11-05
A major cloud misconfiguration exposed 4TB of EY data, including a SQL Server database backup with sensitive information such as user data, API keys, credentials, authentication tokens, and database schemas, discovered on Microsoft Azure.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider adopting cloud security best practices along with AI-assisted threat hunting to safeguard your operations. Stay safe online!