Dec 11, 2025 Subject: Risky Bulletin: Linux adds PCIe encryption to help secure cloud servers Sender: risky-biz@ghost.ioD Summary: The Linux kernel is introducing PCI Express Link Encryption support in version 6.19, a new security feature developed collaboratively by Intel, AMD, and Arm. This feature encrypts data between CPUs and PCIe-connected
Dec 10, 2025 Subject: Korean authorities raid Coupang HQ amid massive data breach investigation Summary: – Korean police conducted a raid on Coupang’s headquarters to investigate the security breach that compromised personal info of 33.7 million customers. – The breach exposed names, phone numbers, email addresses, delivery details affecting about
Dec 09, 2025 Email 1: Subject: Risky Bulletin: APTs go after the React2Shell vulnerability within hours Summary: – At least two Chinese APT groups, Earth Lamia and Jackpot Panda, have exploited the newly disclosed React2Shell vulnerability (CVE-2025-55182) in the React Server Components framework. – Attacks began within hours of disclosure.
Dec 07, 2025 Email 1: Best infosec-related long reads for the week of 11/29/25 Sender: info@metacurity.com Subject: Best infosec-related long reads for the week of 11/29/25 Content Summary: – Southeast Asian economies are growing dependent on sophisticated cyber scams, notably “pig-butchering” scams that involve cultivating relationships online and defrauding victims
Dec 06, 2025 Email 1 Summary: – Hacker Newsletter Issue #772 (Dec 5, 2025) highlights include enterprise security features shipping by WorkOS, and a variety of favorites, Ask HN, Show HN projects, code, data, design, books, working, learning, watching, startup news, and fun sections. – Topics mentioned include Advent of
Dec 05, 2025 Email from “risky-biz@ghost.io”: Subject: Srsly Risky Biz: When Do Cyber Campaigns Cross a Line? Summary: This newsletter, authored by Tom Uren and edited by Patrick Gray, discusses a new paper from the Germany-based think tank Interface which proposes principles to define when state cyber operations during peacetime
Dec 04, 2025 Subject: Indian government retreats from spy app mandates The Indian Ministry of Communications issued a directive on Nov. 28 requiring phone manufacturers and importers to pre-install the Sanchar Saathi app, intended to combat cyber fraud, on all devices. The mandate initially demanded that the app be readily
Dec 03, 2025 Email 1 Summary: Subject: European authorities dismantle the Cryptomixer service that laundered illicit Bitcoins – Europol and Swiss/German police dismantled Cryptomixer, a cryptocurrency mixing service used by cybercriminals to launder over €1.3 billion since 2016. – Operation Olympia led to seizure of €25 million in bitcoin, servers,
Dec 02, 2025 Email 1: Some ChatGPT customers’ data were exposed by a breach at vendor Mixpanel OpenAI notified some ChatGPT API customers that limited identifying information was exposed due to a breach at analytics provider Mixpanel. Mixpanel experienced a smishing (SMS phishing) attack on Nov 8 affecting a limited
Nov 29, 2025 I just heard about some worrying cybersecurity incidents that really demand immediate attention. One major issue is that OpenAI user data was compromised because of a breach involving Mixpanel, a third-party analytics vendor. This incident exposes a critical weakness in how organizations manage data security when multiple