CybernewsPH
@cybernewsph.com
Philippine and global cybersecurity and data privacy news. Daily edition, breach alerts and community scam reports. Web: cybernewsph.com Community: community.cybernewsph.com
“The data of So-net and Plala customers in Japan was exposed, along with 54,401 email account passwords and 16 bank account records”, SecurityWeek reports. #cybersecurity
Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net
The data of So-net and Plala customers in Japan was exposed, along with 54,401 email account passwords and 16 bank account records. The post Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net appeared first on SecurityWeek.
cybernewsph.com
“‘The firewall inspects both metadata requests and package downloads for signs of malicious activity, acting as an install-time policy gate,’ GitHub said”, The Hacker News reports. #cybersecurity
GitHub Launches npm Firewall to Block Malicious Packages Before Installation
GitHub has announced that it's introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time. "The firewall inspects both metadata requests and package downloads for signs of malicious activity, acting as an…
cybernewsph.com
“Cisco has released security updates that address a critical vulnerability in the Remote Access SSL VPN service on its Secure Firewall Adaptive Security Appliance (ASA) and Threat Defense (FTD) software”, GBHackers reports. #cybersecurity
Cisco Patches Actively Exploited SSL VPN Vulnerability Affecting ASA and FTD Firewalls
Cisco has released security updates that address a critical vulnerability in the Remote Access SSL VPN service on its Secure Firewall Adaptive Security Appliance (ASA) and Threat Defense (FTD) software. This vulnerability, tracked as CVE-2026-76418, lets unauthenticated…
cybernewsph.com
“Hackers stole personal information and iRhythm account and device data from third-party-hosted business applications”, SecurityWeek reports. #cybersecurity
HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million
Hackers stole personal information and iRhythm account and device data from third-party-hosted business applications. The post HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million appeared first on SecurityWeek.
cybernewsph.com
“Kaspersky researchers analyze a complex targeted attack employing NetamLoader, a sophisticated malicious framework and targeting a customized government OS”, Securelist reports. #cybersecurity
Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia
Kaspersky researchers analyze a complex targeted attack employing NetamLoader, a sophisticated malicious framework and targeting a customized government OS.
cybernewsph.com
“Researchers can't quite explain why cyber threats look so different in Italy compared to everywhere else”, Dark Reading reports. #cybersecurity
Cyber Vulnerabilities Besiege Italy, Absent Clear Cause
Researchers can't quite explain why cyber threats look so different in Italy compared to everywhere else.
cybernewsph.com
“The published agenda also covered hypervisor exploitation, Windows privilege escalation, Linux kernel techniques, and AI-assisted security research”, GBHackers reports. #cybersecurity
Security Researchers Demonstrate Chrome Sandbox Escapes, Telegram Zero-Click Attacks and iOS Zero-Day Research
Security researchers at OffensiveCon Japan 2026 explored topics including Chrome sandbox escapes, zero-click attack surfaces in Telegram, and newly discovered iOS zero-day vulnerabilities. This two-day program took place on October 27–28. The published agenda also covered…
cybernewsph.com
“The Russian-speaking cybercrime storefront was among the most active bulletproof hosting providers this year to date, receiving almost one-fifth of all illicit-attributed inflow tracked by researchers”, CyberScoop reports. #cybersecurity
Officials seize domain of top bulletproof hosting provider Virtualine
The Russian-speaking cybercrime storefront was among the most active bulletproof hosting providers this year to date, receiving almost one-fifth of all illicit-attributed inflow tracked by researchers. The post Officials seize domain of top bulletproof hosting provider…
cybernewsph.com
“The Department of Peace group shared it with Swiss hacker/journalist maia arson crimew and DDoSecrets put it online”, CyberScoop reports. #cybersecurity
Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists
The Department of Peace group shared it with Swiss hacker/journalist maia arson crimew and DDoSecrets put it online. The post Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists appeared first on CyberScoop.
cybernewsph.com
“Hackers stole passport numbers, frequent flyer numbers, email addresses and phone numbers for about 2,000 customers”, The Record reports. #cybersecurity
Japan Airlines warns of data breach as country grapples with multiple cyber incidents
Hackers stole passport numbers, frequent flyer numbers, email addresses and phone numbers for about 2,000 customers.
cybernewsph.com
“Unit 42 explores key peak shopping season retail cyber threats, from ransomware to AI attacks, and shares how to defend operations and customer trust”, Unit 42 reports. #cybersecurity
Unwrapping Retail Peak Season Cyber Threats
Unit 42 explores key peak shopping season retail cyber threats, from ransomware to AI attacks, and shares how to defend operations and customer trust. The post Unwrapping Retail Peak Season Cyber Threats appeared first on Unit 42.
cybernewsph.com
“Prime Minister Vasile Tofan said the incident may be part of a broader campaign targeting both citizens' personal data and government digital infrastructure, according to local media reports”, The Record reports. #cybersecurity
Moldova investigates possible foreign involvement in major government cyberattack
Prime Minister Vasile Tofan said the incident may be part of a broader campaign targeting both citizens' personal data and government digital infrastructure, according to local media reports.
cybernewsph.com
“Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting high-value systems”, BleepingComputer reports. #cybersecurity
Volt Typhoon hides zero-day attacks using 'Silent Train' framework
Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting high-value systems. [...]
cybernewsph.com
“Belarus-linked hackers are increasingly aligning their cyber operations with Russia's interests in Ukraine, researchers said Wednesday”, The Record reports. #cybersecurity
Belarusian hackers increasingly acting as proxies for Russia amid war in Ukraine
Belarus-linked hackers are increasingly aligning their cyber operations with Russia's interests in Ukraine, researchers said Wednesday.
cybernewsph.com
“This vulnerability, tracked as CVE-2026-97631, affects ICMP error processing during both IPv4 and IPv6 network boot, which exposes the firmware memory to potential writes by attackers”, GBHackers reports. #cybersecurity
Critical UEFI Firmware Flaw Allows Attackers to Execute Malicious Code Before OS Boots
A critical vulnerability in EDK II’s PXE network boot driver could allow unauthenticated attackers to execute malicious code before the operating system loads. This vulnerability, tracked as CVE-2026-97631, affects ICMP error processing during both IPv4 and IPv6 network boot…
cybernewsph.com
“The Federation of Free Farmers (FFF) urged the dismissal of the cyber libel suit filed against former Agriculture Secretary Leonardo Montemayor over his statements questioning Planters Products Inc.’s (PPI) rice imports”, Inquirer.net reports. #cybersecurity #Philippines
Farmers group seeks dismissal of cyber libel case vs ex-DA chief
MANILA, Philippines — The Federation of Free Farmers (FFF) urged the dismissal of the cyber libel suit filed against former Agriculture Secretary Leonardo Montemayor over his statements questioning Planters Products Inc.’s (PPI) rice imports. “We call for the dismissal of this…
cybernewsph.com
“The government has ordered telecom firms in the Philippines to strengthen checks on subscribers with many registered SIM cards to prevent illicit activities like scams”, Inquirer Business reports. #cybersecurity #Philippines
Telcos told to tighten checks on users with multiple SIMs
MANILA, Philippines — The government has ordered telecom firms in the Philippines to strengthen checks on subscribers with many registered SIM cards to prevent illicit activities like scams. In a statement, the National Telecommunications Commission (NTC) said it gave mobile…
cybernewsph.com
“The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization”, SecurityWeek reports. #cybersecurity
China-Linked Hackers Exploit PHP2Shell to Root Firewalls
The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization. The post China-Linked Hackers Exploit PHP2Shell to Root Firewalls appeared first on SecurityWeek.
cybernewsph.com
“2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution”, SecurityWeek reports. #cybersecurity
Hackers Start Probing Fresh Oracle EBS Vulnerability
CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution. The post Hackers Start Probing Fresh Oracle EBS Vulnerability appeared first on SecurityWeek.
cybernewsph.com
“So-net is a Japanese internet service provider run by Sony Network Communications, part of the Sony Group”, Help Net Security reports. #cybersecurity
Data breach at Sony-owned internet provider compromises 2.6 million customer records
Attackers who broke into the So-net member database made off with personal information belonging to more than 2.58 million current and former customers, along with the email passwords of 54,401 users, Sony Network Communications has disclosed. So-net is a Japanese internet…
cybernewsph.com
“The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a domain associated with a bulletproof hosting provider (BPH) named Virtualine”, The Hacker News reports. #cybersecurity
FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering
The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a domain associated with a bulletproof hosting provider (BPH) named Virtualine. The move was in response to the service being used to commit and facilitate prolific criminal activity, including "the…
cybernewsph.com
“Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation”, The Hacker News reports. #cybersecurity
Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass
Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation. The list of eight vulnerabilities is as follows…
cybernewsph.com
“Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only the root user should be able to touch”, The Hacker News reports. #cybersecurity
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only the root user should be able to touch. The flaws are in how Tailscale SSH forwards network connections, a job the…
cybernewsph.com
“CISA added the Brotli flaw to its KEV catalog, and two honeypot operators logged attempts, including one that used a broken exploit”, SecurityWeek reports. #cybersecurity
CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
CISA added the Brotli flaw to its KEV catalog, and two honeypot operators logged attempts, including one that used a broken exploit. The post CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts appeared first on SecurityWeek.
cybernewsph.com
“The exploits were built in the lab after the model was prompted, not seen in any real attack, and Anthropic reported every flaw to the vendor first, so all of them are already patched”, The Hacker News reports. #cybersecurity
Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, the company said in its latest report. The exploits were built in the lab after the model was prompted, not seen in any…
cybernewsph.com
“Japan's GMO Internet Group is offering up to $1 million in total for tips that help catch the attackers who breached its Onamae.com Desktop Cloud service, after refusing to pay an extortion demand”, The Hacker News reports. #cybersecurity
Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach
Japan's GMO Internet Group is offering up to $1 million in total for tips that help catch the attackers who breached its Onamae.com Desktop Cloud service, after refusing to pay an extortion demand. The reward program opened on October 28 and pays only if a tip helps lead to an…
cybernewsph.com
“The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week”, The Hacker News reports. #cybersecurity
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week. Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root is a server-side…
cybernewsph.com
“Interpol's annual Operation Serengeti, now on its third iteration, led to 1,462 arrests across 20 African countries and the US, recovering $105 million in stolen funds”, Dark Reading reports. #cybersecurity
Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature
Interpol's annual Operation Serengeti, now on its third iteration, led to 1,462 arrests across 20 African countries and the US, recovering $105 million in stolen funds.
cybernewsph.com
“The outage prevents organizations from filing the Federal Election Commission's 24-hour and 48-hour spending reports, which show how much political groups and others are spending on specific races”, Rappler reports. #cybersecurity
Hackers target US FEC system, disrupting campaign finance disclosures days before midterms
The outage prevents organizations from filing the Federal Election Commission's 24-hour and 48-hour spending reports, which show how much political groups and others are spending on specific races
cybernewsph.com
“Nearly seven in ten people affected by data breaches handled by Kroll were exposed through an outside supplier, according to its Data Breach Outlook 2026”, Help Net Security reports. #cybersecurity
Breach victims discover their data was held by companies they’ve never heard of
Nearly seven in ten people affected by data breaches handled by Kroll were exposed through an outside supplier, according to its Data Breach Outlook 2026. Businesses rely on outside providers to store information, process transactions and operate software. A breach at one of…
cybernewsph.com