Cyber Threat Feeds
@montxt.bsky.social
Daily noteworthy threat feeds. Filtering through noises.
Iran-Nexus Threat Actor UNC1549 Takes Aim at Aerospace https://www.darkreading.com/cybersecurity-operations/iran-nexus-threat-actor-unc1549-takes-aim-aerospace
November 18, 2025 at 10:48 PM
Iran-Nexus Threat Actor UNC1549 Takes Aim at Aerospace https://www.darkreading.com/cybersecurity-operations/iran-nexus-threat-actor-unc1549-takes-aim-aerospace
Self-replicating botnet attacks Ray clusters https://go.theregister.com/feed/www.theregister.com/2025/11/18/selfreplicating_botnet_ray_clusters/
November 18, 2025 at 10:48 PM
Self-replicating botnet attacks Ray clusters https://go.theregister.com/feed/www.theregister.com/2025/11/18/selfreplicating_botnet_ray_clusters/
LG battery subsidiary says ransomware attack targeted overseas facility https://therecord.media/lg-energy-solution-ransomware-incident-battery-maker
November 18, 2025 at 8:48 PM
LG battery subsidiary says ransomware attack targeted overseas facility https://therecord.media/lg-energy-solution-ransomware-incident-battery-maker
Pro-Russian group claims hits on Danish party websites as voters head to polls https://therecord.media/denmark-election-political-government-websites-ddos-incidents
November 18, 2025 at 6:47 PM
Pro-Russian group claims hits on Danish party websites as voters head to polls https://therecord.media/denmark-election-political-government-websites-ddos-incidents
Malicious Npm Packages Abuse Adspect Cloaking in Crypto Scam https://www.darkreading.com/application-security/malicious-npm-packages-adspect-cloaking-crypto-scam
November 18, 2025 at 5:47 PM
Malicious Npm Packages Abuse Adspect Cloaking in Crypto Scam https://www.darkreading.com/application-security/malicious-npm-packages-adspect-cloaking-crypto-scam
Iranian Hackers Use DEEPROOT and TWOSTROKE Malware in Aerospace and Defense Attacks https://thehackernews.com/2025/11/iranian-hackers-use-deeproot-and.html
November 18, 2025 at 3:47 PM
Iranian Hackers Use DEEPROOT and TWOSTROKE Malware in Aerospace and Defense Attacks https://thehackernews.com/2025/11/iranian-hackers-use-deeproot-and.html
Morphisec Thwarts Sophisticated Tuoni C2 Attack on U.S. Real Estate Firm https://www.morphisec.com/blog/morphisec-thwarts-sophisticated-tuoni-c2-attack-on-us-real-estate-firm/
November 18, 2025 at 1:47 PM
Morphisec Thwarts Sophisticated Tuoni C2 Attack on U.S. Real Estate Firm https://www.morphisec.com/blog/morphisec-thwarts-sophisticated-tuoni-c2-attack-on-us-real-estate-firm/
Critical Fortinet FortiWeb WAF Bug Exploited in the Wild https://www.darkreading.com/application-security/critical-fortinet-fortiweb-waf-bug-exploited-in-wild
November 17, 2025 at 9:47 PM
Critical Fortinet FortiWeb WAF Bug Exploited in the Wild https://www.darkreading.com/application-security/critical-fortinet-fortiweb-waf-bug-exploited-in-wild
Pennsylvania attorney general says SSNs stolen during August ransomware attack https://therecord.media/pennsylvania-attorney-general-office-data-breach-ssns
November 17, 2025 at 8:48 PM
Pennsylvania attorney general says SSNs stolen during August ransomware attack https://therecord.media/pennsylvania-attorney-general-office-data-breach-ssns
Cyberattack leaves Jaguar Land Rover short of £680 million https://therecord.media/jaguar-land-rover-quarterly-loss-cyberattack
November 17, 2025 at 1:47 PM
Cyberattack leaves Jaguar Land Rover short of £680 million https://therecord.media/jaguar-land-rover-quarterly-loss-cyberattack
Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT https://thehackernews.com/2025/11/dragon-breath-uses-roningloader-to.html
November 17, 2025 at 12:47 PM
Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT https://thehackernews.com/2025/11/dragon-breath-uses-roningloader-to.html
Akira RaaS Targets Nutanix VMs, Threatens Critical Orgs https://www.darkreading.com/threat-intelligence/akira-raas-nutanix-vms-critical-orgs
November 14, 2025 at 10:48 PM
Akira RaaS Targets Nutanix VMs, Threatens Critical Orgs https://www.darkreading.com/threat-intelligence/akira-raas-nutanix-vms-critical-orgs
New Security Tools Target Growing macOS Threats https://www.darkreading.com/vulnerabilities-threats/new-security-tools-target-growing-macos-threats
November 14, 2025 at 9:48 PM
New Security Tools Target Growing macOS Threats https://www.darkreading.com/vulnerabilities-threats/new-security-tools-target-growing-macos-threats
Fortinet finally cops to critical make-me-admin bug under active exploitation https://go.theregister.com/feed/www.theregister.com/2025/11/14/fortinet_active_exploit_cve_2025_64446/
November 14, 2025 at 8:47 PM
Fortinet finally cops to critical make-me-admin bug under active exploitation https://go.theregister.com/feed/www.theregister.com/2025/11/14/fortinet_active_exploit_cve_2025_64446/
Crims poison 150K+ npm packages with token-farming malware https://go.theregister.com/feed/www.theregister.com/2025/11/14/selfreplicating_supplychain_attack_poisons_150k/
November 14, 2025 at 6:48 PM
Crims poison 150K+ npm packages with token-farming malware https://go.theregister.com/feed/www.theregister.com/2025/11/14/selfreplicating_supplychain_attack_poisons_150k/
North Korean Hackers Turn JSON Services into Covert Malware Delivery Channels https://thehackernews.com/2025/11/north-korean-hackers-turn-json-services.html
November 14, 2025 at 6:48 PM
North Korean Hackers Turn JSON Services into Covert Malware Delivery Channels https://thehackernews.com/2025/11/north-korean-hackers-turn-json-services.html
Cyberattack on Russian port operator aimed to disrupt coal, fertilizer shipments https://therecord.media/cyberattack-on-russian-port-operator
November 14, 2025 at 4:48 PM
Cyberattack on Russian port operator aimed to disrupt coal, fertilizer shipments https://therecord.media/cyberattack-on-russian-port-operator
Chinese spies told Claude to break into about 30 critical orgs. Some attacks succeeded https://go.theregister.com/feed/www.theregister.com/2025/11/13/chinese_spies_claude_attacks/
November 13, 2025 at 11:47 PM
Chinese spies told Claude to break into about 30 critical orgs. Some attacks succeeded https://go.theregister.com/feed/www.theregister.com/2025/11/13/chinese_spies_claude_attacks/
Russian Hackers Create 4,300 Fake Travel Sites to Steal Hotel Guests' Payment Data https://thehackernews.com/2025/11/russian-hackers-create-4300-fake-travel.html
November 13, 2025 at 8:47 PM
Russian Hackers Create 4,300 Fake Travel Sites to Steal Hotel Guests' Payment Data https://thehackernews.com/2025/11/russian-hackers-create-4300-fake-travel.html
NHS supplier ends probe into ransomware attack that contributed to patient death https://go.theregister.com/feed/www.theregister.com/2025/11/13/synnovis_qilin_investigation/
November 13, 2025 at 11:47 AM
NHS supplier ends probe into ransomware attack that contributed to patient death https://go.theregister.com/feed/www.theregister.com/2025/11/13/synnovis_qilin_investigation/
Over 46,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack https://thehackernews.com/2025/11/over-46000-fake-npm-packages-flood.html
November 13, 2025 at 6:47 AM
Over 46,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack https://thehackernews.com/2025/11/over-46000-fake-npm-packages-flood.html
Kimsuky APT Takes Over South Korean Androids, Abuses KakaoTalk https://www.darkreading.com/remote-workforce/kimsuky-apt-south-korean-androids-abuses-kakaotalk
November 11, 2025 at 4:48 PM
Kimsuky APT Takes Over South Korean Androids, Abuses KakaoTalk https://www.darkreading.com/remote-workforce/kimsuky-apt-south-korean-androids-abuses-kakaotalk
GootLoader Is Back, Using a New Font Trick to Hide Malware on WordPress Sites https://thehackernews.com/2025/11/gootloader-is-back-using-new-font-trick.html
November 11, 2025 at 3:48 PM
GootLoader Is Back, Using a New Font Trick to Hide Malware on WordPress Sites https://thehackernews.com/2025/11/gootloader-is-back-using-new-font-trick.html
Android Trojan 'Fantasy Hub' Malware Service Turns Telegram Into a Hub for Hackers https://thehackernews.com/2025/11/android-trojan-fantasy-hub-malware.html
November 11, 2025 at 12:48 PM
Android Trojan 'Fantasy Hub' Malware Service Turns Telegram Into a Hub for Hackers https://thehackernews.com/2025/11/android-trojan-fantasy-hub-malware.html
Hitachi-owned GlobalLogic admits data stolen on 10k current and former staff https://go.theregister.com/feed/www.theregister.com/2025/11/11/hitachiowned_globallogic_admits_data_stolen/
November 11, 2025 at 12:48 PM
Hitachi-owned GlobalLogic admits data stolen on 10k current and former staff https://go.theregister.com/feed/www.theregister.com/2025/11/11/hitachiowned_globallogic_admits_data_stolen/