Cyber News 12NOV2025
General
- Yet another Managed File Transfer system getting pwned.
Nice chain of mis-understood security in the host header, chained with an interesting use of anti-virus path configuration, to gain RCE as SYSTEM. - Rhadamantys info-stealer infrastructure looks to have been seized. Maybe an early strike in Operation Endgame, Season 3?
- Minecraft accounts can be worth serious money
- Bitcoin investment scammer gets 11 years and 8 months in jail.
- 🤦🏻♀️It's 2025, and big companies are still hard-coding credentials. Thanks SAP!
- The impact of legal enforcement impositions on (free) DNS providers
- Employee leaving Intel, steals data on the way out. USB-connected storage was blocked, so switched to using a NAS.
Getting Techy
- OWASP Top 10 2025 hits Release Candidate stage. New for the Top 10 - 'Software Supply Chain Failures' - the XZ backdoor probably helped with that!
- Unit 42 look at Authentication Coercion attacks - getting a compromised machine to send (protected) credentials to an attacker-controlled machine, which are then reversed into usable credentials.
- Reverse-engineering a robot vacuum cleaner, with deliberate anti-privacy mechanisms
- [EU] Five arrested for manufacturing car-theft devices
Geo-Politics
- [UK] The UK has stopped sharing information on drug trafficking vessels in the Caribbean, over concerns with the US's militaristic responses.
Privacy
- Firefox rolls out more browser-fingerprinting protection, making it harder to uniquely identify a user (without resorting to cookies or similar techniques).
- [UK] UK Government and NCSC to look at the security of "Yutong" buses, after a Norwegian investigation (mentioned in an earlier news) found remote telemetry and potentially remote control.