Lmst

⭐📰 New Starred Article! 📰⭐

4 issues holding back CISOs’ security agendas

https://www.csoonline.com/article/4117010/4-issues-holding-back-cisos-security-agendas.html

Hacker arrested for KMSAuto malware campaign with 2.8 million downloads https://www.bleepingcomputer.com/news/security/hacker-arrested-for-kmsauto-malware-campaign-with-28-million-downloads/

Cybersecurity researchers have disclosed details of what has been described as a "sustained and targeted" spear-phishing campaign that has published over two dozen packages to the npm registry to facilitate credential theft.

27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials https://thehackernews.com/2025/12/27-malicious-npm-packages-used-as.html

#Cybersecurity #NPM #Phishing

Top 5 Ransomware Attacks of 2025: Biggest Fallouts, Biggest Lessons https://www.cm-alliance.com/cybersecurity-blog/top-5-ransomware-attacks-of-2025-biggest-fallouts-biggest-lessons

#Cybersecurity #Ransomware

Horrible news for all those Firefox users.

Mozilla’s New CEO Confirms Firefox Will Become an “AI Browser” https://www.omgubuntu.co.uk/2025/12/mozilla-new-ceo-firefox-ai-browser-strategy

#Firefox #AI #Browsers

CachyOS Wants to Improve Your Server Performance Now https://itsfoss.com/news/cachyos-server-edition-plans/

beardedtechguy just liked 💙

🎶 'Tonight, Tonight' by Stephen Wilson Jr. on Last.fm. 🎶

https://www.last.fm/music/Stephen+Wilson+Jr./_/Tonight,+Tonight

#LastFM #Music

From yesterday: More than 10,000 Docker Hub container images expose data that should be protected, including live credentials to production systems, CI/CD databases, or LLM model keys.

Over 10,000 Docker Hub images found leaking credentials, auth keys https://www.bleepingcomputer.com/news/security/over-10-000-docker-hub-images-found-leaking-credentials-auth-keys/

#cybersecurity #docker

From yesterday:

React2Shell Exploitation Delivers Crypto Miners and New Malware Across Multiple Sectors https://thehackernews.com/2025/12/react2shell-exploitation-delivers.html

Another Chrome zero-day under attack: update now https://www.malwarebytes.com/blog/news/2025/12/another-chrome-zero-day-under-attack-update-now

#chrome #cybersecurity

Hackers exploit unpatched Gogs zero-day to breach 700 servers https://www.bleepingcomputer.com/news/security/unpatched-gogs-zero-day-rce-flaw-actively-exploited-in-attacks/

#cybersecurity #zeroday

⭐📰 New Starred Article! 📰⭐

Crowdsourced Penetration Testing: Understanding the Risks for Better Decision-Making

https://levelblue.com/blogs/security-essentials/crowdsourced-penetration-testing-understanding-the-risks-for-better-decision-making

This is why you always check the url!