Breaking News – Cyber Threats – 2025-12-24 07:00 PST

Breaking News – Cyber Threats (last 6h)

Generated: 2025-12-24 07:00 PST

• Nomani Investment Scam Surges 62% Using AI Deepfake Ads on Social Media
  The Hacker News • 2025-12-24 05:08 • thehackernews.com
  The fraudulent investment scheme known as Nomani has witnessed an increase by 62%, according to data from ESET, as campaigns distributing the threat have also expanded beyond Facebook to include other social media platforms, such as YouTube.
  The Slovak cybersecurity company said it blocked over 64,000 unique URLs associated with the threat this year. A majority of the detections originated from
  https://thehackernews.com/2025/12/nomani-investment-scam-surges-62-using.html
• Urban VPN Proxy Surreptitiously Intercepts AI Chats
  Schneier on Security • 2025-12-24 04:03 • www.schneier.com

  This is pretty scary:

  Urban VPN Proxy targets conversations across ten AI platforms: ChatGPT, Claude, Gemini, Microsoft Copilot, Perplexity, DeepSeek, Grok (xAI), Meta AI.

  For each platform, the extension includes a dedicated “executor” script designed to intercept and capture conversations. The harvesting is enabled by default through hardcoded flags in the extension’s configuration.

  There is no user-facing toggle to disable this. The only…
  https://www.schneier.com/blog/archives/2025/12/urban-vpn-proxy-surreptitiously-intercepts-ai-chats.html

• Attacks are Evolving: 3 Ways to Protect Your Business in 2026
  The Hacker News • 2025-12-24 03:30 • thehackernews.com
  Every year, cybercriminals find new ways to steal money and data from businesses. Breaching a business network, extracting sensitive data, and selling it on the dark web has become a reliable payday. 
  But in 2025, the data breaches that affected small and medium-sized businesses (SMBs) challenged our perceived wisdom about exactly which types of businesses cybercriminals are targeting.&nbsp
  https://thehackernews.com/2025/12/attacks-are-evolving-3-ways-to-protect.html
• SEC Files Charges Over $14 Million Crypto Scam Using Fake AI-Themed Investment Tips
  The Hacker News • 2025-12-24 01:19 • thehackernews.com
  The U.S. Securities and Exchange Commission (SEC) has filed charges against multiple companies for their alleged involvement in an elaborate cryptocurrency scam that swindled more than $14 million from retail investors.
  The complaint charged crypto asset trading platforms Morocoin Tech Corp., Berge Blockchain Technology Co., Ltd., and Cirkor Inc., as well as investment clubs AI Wealth Inc., Lane
  https://thehackernews.com/2025/12/sec-files-charges-over-14-million.html

Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.