Cyber News 27OCT2025
General
- Jubair/Flowers from Scattered Spider appear in court over TfL hack
- Recent WSUS vulnerability is being exploited
- https://www.bleepingcomputer.com/news/security/hackers-now-exploiting-critical-windows-server-wsus-flaw-in-attacks/
- https://www.cybersecuritydive.com/news/hackers-exploiting-critical-vulnerability-windows-server-update-service/803810/
- https://www.itnews.com.au/news/windows-server-update-services-bug-exploited-in-the-wild-621291
- https://www.cyber.gov.au/about-us/view-all-content/alerts-and-advisories/critical-vulnerability-in-Microsoft-Windows-Server-Update-Service
- LastPass users being phished
- Situation Normal, WordPress plugins getting exploited
- Crims borrowing fake job-interview technique from North Koreans
- Companies appear over-confident in their ability to survive ransomware
- Cheating at Poker, with hacked "Deckmate 2" card shuffling machines
- Yet another BreachForums....do you really trust it?
Getting Techy
- Hacking F1's Licence servers
Privacy
- [AU] Australia and others to sign a cybercrime pact, no carve-outs for legitimate researchers, excessive search rights, overly broad definitions
- [US] ICE Attempting further crackdowns on social media accounts reporting on their movements.
- [US] Meanwhile, DHS is looking for improved surveillance capabilities - trucks they can park and leave, which will alert them to movement
AI
- Phishing using CoPilot...but not through LLM's, modifying the Auth flow to steal the token