Frontview Mirror: 2025 Edition | Daniel Miessler
UL Member Content Table of Contents As with every piece in this series, I won’t pretend I can see what’s coming. Because I can’t—and nobody…
Author: Cybernoz
NX Build Tool Hacked with Malware That Checks for Claude or Gemini to Find Wallets and Secrets
Over 1,400 developers discovered today that a malicious post-install script in the popular NX build kit silently created a repository named s1ngularity-repository in their GitHub…
Using dMSAs for Credential Theft and Lateral Movement in AD
Akamai researchers evaluated Microsoft’s patch for the BadSuccessor vulnerability (CVE-2025-53779) to determine its scope and limitations. While the update effectively blocks the original direct escalation…
U.S. Treasury Sanctions DPRK IT-Worker Scheme, Exposing $600K Crypto Transfers and $1M+ Profits
Aug 28, 2025Ravie LakshmananArtificial Intelligence / Malware The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) announced a fresh round of sanctions…
UK cyber security centre helps expose China-based cyber campaign
Chinese technology companies have been linked to targeting governments and critical networks with malicious cyber attacks since 2021. Working with 12 international partners, GCHQ’s National…
NSA Warns Of Chinese Cyber Threat To Global Infrastructure
A coalition of cybersecurity and intelligence agencies from across the globe, including the United States National Security Agency (NSA), has issued a joint advisory revealing…
CISA Issues Alert on Citrix NetScaler 0-Day RCE Exploited in the Wild
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert after detecting active exploitation of a critical zero-day remote code execution (RCE) vulnerability…
Key Government And Private Partners Meet To Eradicate DPRK’s IT Work Fraud Scheme
The U.S. State Department in collaboration with Japan, South Korea, and private cybersecurity partners met in Tokyo, last week, to draw plans for combating North…
China linked UNC6384 targeted diplomats by hijacking web traffic
China linked UNC6384 targeted diplomats by hijacking web traffic Pierluigi Paganini August 27, 2025 The China-linked APT group UNC6384 targeted diplomats by hijacking web traffic…
Reality With Filters | Daniel Miessler
I clearly see the merits of both sides, similar to the end-to-end encryption discussion. The last few years have given me some clarity on where…
New TamperedChef Attack Uses Weaponized PDF Editor to Steal Sensitive Data and Login Credentials
Cybersecurity researchers at Truesec have uncovered a sophisticated malware campaign distributing a weaponized PDF editor under the guise of “AppSuite PDF Editor.” This operation, which…
UNC6395 targets Salesloft in Drift OAuth token theft campaign
UNC6395 targets Salesloft in Drift OAuth token theft campaign Pierluigi Paganini August 28, 2025 Hackers breached Salesloft to steal OAuth/refresh tokens for Drift AI chat;…