news
Security Leftovers and Windows TCO
-
Security Week ☛ Chinese APT Mustang Panda Caught Using Kernel-Mode Rootkit
The threat actor uses a signed driver file containing two user-mode shellcodes to execute its ToneShell backdoor.
-
LWN ☛ Security updates for Tuesday
Security updates have been issued by Debian (openjpeg2, osslsigncode, php-dompdf, and python-django), Fedora (fluidsynth, golang-github-alecthomas-chroma-2, golang-github-evanw-esbuild, golang-github-jwt-5, and opentofu), Mageia (ceph and ruby-rack), and SUSE (anubis, apache2-mod_auth_openidc, dpdk22, kernel, libpng16, and python311-openapi-core).
-
Security Week ☛ Korean Air Data Compromised in Oracle EBS Hack
Roughly 30,000 Korean Air employees had their data stolen by hackers in a breach at former subsidiary KC&D.
-
OpenSSF (Linux Foundation) ☛ What’s in the SOSS? Podcast #48 – S2E25 2025 Year End Wrap Up: Celebrating 5 Years of Open Source Security Impact!
-
Windows TCO
-
Silicon Angle ☛ Former US cybersecurity professionals plead guilty to BlackCat/ALPHV attacks
Two former American cybersecurity professionals have pleaded guilty in federal court for their roles in carrying out ransomware attacks using the notorious ALPHV/BlackCat malware, the very type of threat they were employed to defend against.
-
Tom's Hardware ☛ U.S. cybersecurity experts plead guilty for ransomware attacks, face 20 years in prison each — group demanded up to $10 million from each victim
Two former cybersecurity experts pled guilty to conspiracy to obstruct commerce by extortion for deploying ransomware against several victims. The perpetrators are facing 20 years in prison each, with sentencing set in March 2026.
-
Silicon Angle ☛ New Shai Hulud 3.0 malware variant raises fresh supply chain security concerns [ Ed: TCO or NPM (Microsoft)]
A newly discovered third variant of the Shai Hulud malware is raising fresh concerns about the security of the open-source software supply chain, as researchers warn that the latest version shows more sophistication and improved stealth than earlier campaigns. Shai Hulud is a malware campaign first observed in September targeting the JavaScript ecosystem.
-