The headline, and the text that follows, is a machine translation of an article by Brice Le Borgne that appeared in Liberation on November 1, 2025: “The museum’s security systems did not fail,” insisted Culture Minister Rachida Dati shortly after the spectacular burglary at the Louvre Museum on October 19. Ten days later, the tone had changed. On…
NoMusica reports: Google has confirmed that it has removed more apps from the Play Store after researchers discovered a dangerous malware targeting Android users. Security company Zscaler reported that the malware, known as Anatsa or TeaBot, was hidden inside apps on the Play Store. The malware steals banking login details, tracks keystrokes, and enables fraudulent transactions. According to Zscaler’s……
Cybersecurity researchers have uncovered three malicious packages in the npm registry that masquerade as a popular Telegram bot library but harbor SSH backdoors and data exfiltration capabilities. The packages in question are listed below – node-telegram-utils (132 downloads) node-telegram-bots-api (82 downloads) node-telegram-util (73 downloads) According to supply chain
A widespread data theft campaign has allowed hackers to breach sales automation platform Salesloft to steal OAuth and refresh tokens associated with the Drift artificial intelligence (AI) chat agent. The activity, assessed to be opportunistic in nature, has been attributed to a threat actor tracked by Google Threat Intelligence Group and Mandiant, tracked as UNC6395….
Today’s reminder that even when the government audits school districts and issues recommendations, they don’t necessarily implement them fully, leaving them still vulnerable. In September 2023, DataBreaches noted a June 2023 audit report on the Hilton Central School District in New York. This month, NYS Comptroller Thomas P. DiNapoli published the results of a follow-up……
Old Playbook, New Scale: While defenders are chasing trends, attackers are optimizing the basics The security industry loves talking about “new” threats. AI-powered attacks. Quantum-resistant encryption. Zero-trust architectures. But looking around, it seems like the most effective attacks in 2025 are pretty much the same as they were in 2015. Attackers are exploiting the same…
The House Select Committee on China has formally issued an advisory warning of an “ongoing” series of highly targeted cyber espionage campaigns linked to the People’s Republic of China (PRC) amid contentious U.S.–China trade talks. “These campaigns seek to compromise organizations and individuals involved in U.S.-China trade policy and diplomacy, including U.S. government agencies, U.S….
