Breaking News – Cyber Threats (last 6h)
Generated: 2025-12-12 12:00 PST
- Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads
The Hacker News • 2025-12-12 10:50 • thehackernews.com
Cybersecurity researchers are calling attention to a new campaign that’s leveraging GitHub-hosted Python repositories to distribute a previously undocumented JavaScript-based Remote Access Trojan (RAT) dubbed PyStoreRAT.
“These repositories, often themed as development utilities or OSINT tools, contain only a few lines of code responsible for silently downloading a remote HTA file and executing
https://thehackernews.com/2025/12/fake-osint-and-gpt-utility-github-repos.html - Coupang data breach traced to ex-employee who retained system access
BleepingComputer • 2025-12-12 10:28 • www.bleepingcomputer.com
A data breach at Coupang that exposed the information of 33.7 million customers has been tied to a former employee who retained access to internal systems after leaving the company. […]
https://www.bleepingcomputer.com/news/security/coupang-data-breach-traced-to-ex-employee-who-retained-system-access/ - Fake ‘One Battle After Another’ torrent hides malware in subtitles
BleepingComputer • 2025-12-12 09:12 • www.bleepingcomputer.com
A fake torrent for Leonardo DiCaprio’s ‘One Battle After Another’ hides malicious PowerShell malware loaders inside subtitle files that ultimately infect devices with the Agent Tesla RAT malware. […]
https://www.bleepingcomputer.com/news/security/fake-one-battle-after-another-torrent-hides-malware-in-subtitles/ - Kali Linux 2025.4 released with 3 new tools, desktop updates
BleepingComputer • 2025-12-12 07:27 • www.bleepingcomputer.com
Kali Linux has released version 2025.4, its final update of the year, introducing three new hacking tools, desktop environment improvements, the preview of Wifipumpkin3 in NetHunter, and enhanced Wayland support. […]
https://www.bleepingcomputer.com/news/security/kali-linux-20254-released-with-3-new-tools-desktop-updates/ - Shadow spreadsheets: The security gap your tools can’t see
BleepingComputer • 2025-12-12 07:01 • www.bleepingcomputer.com
When official systems can’t support everyday workflows, employees turn to spreadsheets — creating “shadow spreadsheets” that circulate unchecked. Grist shows how these spreadsheets expose sensitive data, create version sprawl, and remove the audit trails security teams depend on. […]
https://www.bleepingcomputer.com/news/security/shadow-spreadsheets-the-security-gap-your-tools-cant-see/ - New Advanced Phishing Kits Use AI and MFA Bypass Tactics to Steal Credentials at Scale
The Hacker News • 2025-12-12 06:04 • thehackernews.com
Cybersecurity researchers have documented four new phishing kits named BlackForce, GhostFrame, InboxPrime AI, and Spiderman that are capable of facilitating credential theft at scale.
BlackForce, first detected in August 2025, is designed to steal credentials and perform Man-in-the-Browser (MitB) attacks to capture one-time passwords (OTPs) and bypass multi-factor authentication (MFA). The kit
https://thehackernews.com/2025/12/new-advanced-phishing-kits-use-ai-and.html
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
