November 30, 2025
Dark Light

Blog Post

Cyber Intelligence > One Minute Roundup
Asia-based Cybercrime Syndicates Go Global – July 23rd

Asia-based Cybercrime Syndicates Go Global – July 23rd

Asian cybercrime syndicates based in China and Southeast Asia have caused approximately $37 billion in losses in East and Southeast Asia. The
Brazilian IT worker arrested over $100 million theft – July 8th

Brazilian IT worker arrested over $100 million theft – July 8th

Brazilian IT worker João Roque has been arrested in connection with a $100 million theft through payment system PIX. Roque
Companies pay $1 Million in Ransomware attacks – July 7th

Companies pay $1 Million in Ransomware attacks – July 7th

Sophos has reported that almost half of companies targeted by ransomware attacks paid to regain access to their data, with
Swissquote Under Pressure For Rising Cybercrime Risks – July 1st

Swissquote Under Pressure For Rising Cybercrime Risks – July 1st

The Swiss financial regulator is urging SwissQuote to improve its cybersecurity measures due to increasing cybercrime risks, emphasizing the importance
Programmer Innovates With Cybersecurity System for US Infrastructure – June 30th

Programmer Innovates With Cybersecurity System for US Infrastructure – June

Filipino-American cybersecurity researcher Francis Mendoza has invented a new radical defensive architecture that may change how governments protect their power
Germany Seeks Cybersecurity Partnership with Israel – July 2nd

Germany Seeks Cybersecurity Partnership with Israel – July 2nd

Germany seeks to strengthen its cybersecurity collaboration with Israel in light of the recent escalation between Iran and Israel. Initiative
Pro-Iran Hackers Likely to Target the US – June 24th

Pro-Iran Hackers Likely to Target the US – June 24th

The US Department of Homeland Security warns the public that hacktivists and Iranian government-affiliated actors will likely target US networks,
Cyble Announces Partnership with Fintech Australia – June 23rd

Cyble Announces Partnership with Fintech Australia – June 23rd

Global AI-native cybersecurity solutions company Cybel has announced a partnership with Fintech Australia, aiming to strengthen cyber resilience across Australia’s
16 Billion Passwords Breached – June 20th

16 Billion Passwords Breached – June 20th

The Cybernews research team discovered a record-breaking breach of over 16 billion passwords worldwide, including Facebook, Google, and Apple credentials.
Lenovo Announces Chinese Cybersecurity Collab – June 19th

Lenovo Announces Chinese Cybersecurity Collab – June 19th

Lenovo PCCW Solutions is collaborating with leading Chinese cybersecurity firm Qi An Xin Technology to launch the first Security Operation
Japan Pushes Proactive Cyber Laws – June 17th

Japan Pushes Proactive Cyber Laws – June 17th

Japan Prime Minister Shigeru Ishiba implements a new cybersecurity defense law ahead of national elections to take proactive measures against
EU Launches Free Railway Cybersecurity Courses – June 16th

EU Launches Free Railway Cybersecurity Courses – June 16th

The International Union of Railways is launching cybersecurity courses specifically for the transport industry. Developed by industry specialists, the CYRUS
Geopolitical Tensions are Changing the Cybersecurity Landscape – June 13th

Geopolitical Tensions are Changing the Cybersecurity Landscape – June 13th

Political tensions are prompting nations to re-strategize cybersecurity. Countries that once sought international cooperation and joint strategies are now prioritizing
UK backs AI and intelligence modernization – June 12th

UK backs AI and intelligence modernization – June 12th

The UK government has announced its plans to invest in digital and artificial intelligence (AI) in public services, including the
Cyera secures $540 million in funding – June 11th

Cyera secures $540 million in funding – June 11th

Cybersecurity firm Cyera has raised $540 million in a Series E funding round, bringing its total to over $1.3 billion.
Honeywell kicks off AI tools to accelerate industrial autonomy – June 10th

Honeywell kicks off AI tools to accelerate industrial autonomy –

Honeywell has debuted a series of AI-powered tools that intend to boost industrial autonomy, introducing a suite of AI cybersecurity
Trump Doubles Down on Cybersecurity Sanctions – June 9th

Trump Doubles Down on Cybersecurity Sanctions – June 9th

US President Donald Trump issues a new cybersecurity-related Executive Order, overriding previous orders issued by former presidents Barack Obama and
FBI nails Qakbot offender – August 30th

FBI nails Qakbot offender – August 30th

In today's roundup; FIN8 threat actors exploit gateway risk, the University of Michigan's cyber attack, and the FBI taking down
GhostSec exposes Iran’s surveillance of its citizens – August 28th

GhostSec exposes Iran’s surveillance of its citizens – August 28th

Hackers hold Prospect Medical’s data ‘hostage’ Hacker group Rhysida has been identified as the mastermind behind the recent ransomware attack
Lazarus Group arises with new malware strategy – August 25th

Lazarus Group arises with new malware strategy – August 25th

A new malware strain that gives the location of an infected device has been identified. The Hacker News explains that
Syrian group behind RAT malware – August 24th

Syrian group behind RAT malware – August 24th

The malicious threat actor behind CypherRAT and CraxsRAT malware has been unmasked as the Syrian threat actor, EVLF. These RATS
New XLoader threat and an OfficeNote impersonator – August 23rd

New XLoader threat and an OfficeNote impersonator – August 23rd

In today's roundup; XLoader, OfficeNote copycat hides malicious code, hosting firm refuses to pay ransom, and Cybersmart announces $15 million
Grip Security raises $41M & Duolingo suffers data leak – August 22nd

Grip Security raises $41M & Duolingo suffers data leak –

Popular language learning app Duolingo saw a bug exploited that resulted in a compilation of account information from over 2.6
Weak cyber M&A activity shows significant slowdown  – August 21st

Weak cyber M&A activity shows significant slowdown – August 21st

Crunchbase News reported that “The first seven months of the year saw only 34 cyber startups get acquired,” compared to
Popular hosting service proves less than “bulletproof” – August 11th

Popular hosting service proves less than “bulletproof” – August 11th

Hackers impersonate city’s COO The city of New Haven, Connecticut, reportedly lost more than $ 6 million during a recent
Teachers targeted while popular malware resurfaces – August 10th

Teachers targeted while popular malware resurfaces – August 10th

Interpol forces unite to bring phishing platform down A phishing-as-a-service (PaaS) platform called 16shop, responsible for over 150,000 phishing domains,
Infamous Ransomware Groups Linked – August 9th

Infamous Ransomware Groups Linked – August 9th

Rhysida’s Link to Infamous Ransomware Group Check Point Incident Response Team (CPIRT), in collaboration with Check Point Research (CPR), published
Free Tesla premium features & $100M – August 8th

Free Tesla premium features & $100M – August 8th

Tesla’s Unpatchable “Jailbreak” Unlocks Premoum Features Pay-as-you-go premium features are offered by Tesla for self-driving features, heated seats, and more.
Healthcare Services on Hold Due to Ransomware Attack – August 7th

Healthcare Services on Hold Due to Ransomware Attack – August

Healthcare Services on Hold Due to Ransomware Attack Prospect Medical Holdings, which operates 16 hospitals and more than 165 clinics,
22 Million Sought Vacations, Instead Their Data is at Risk – August 4th

22 Million Sought Vacations, Instead Their Data is at Risk

22 Million Account Details at Risk Cybersecurity researcher Sam Curry and his team discovered threatening security vulnerabilities in Points.com, a
Bangladeshi ‘Hacktivists’ Threaten Critical Infrastructure – August 3rd

Bangladeshi ‘Hacktivists’ Threaten Critical Infrastructure – August 3rd

Bangladeshi ‘Hacktivists’ Threaten Critical Infrastructure Recent reports have announced threats to critical infrastructure in India, Israel, and Australia as a
Rare Sattelite Attack

Rare Sattelite Attack

Dozor-Teleport, a Russian satellite communications provider serving the Russian military, was taken offline by a cyber attack, a rare occurrence,