Cyber Bites

* Singapore Orders Apple, Google to Prevent Government Spoofing on Messaging Platforms

* Massive Cyberattack Targets Real Estate Loan Vendor, Exposing Customer Data of Major Banks

* Beware of Android TV Streaming Boxes Linked to Cybercrime Activities

* The Rise of Agentic Bots and the Need for Robust Bot Management

* FBI Warns of Soaring Account Takeover Fraud Ahead of Holiday Shopping Season

* WhatsApp Vulnerability Exposes User Phone Numbers, Enabling Large-Scale Enumeration Attacks

* Critical Vulnerability Discovered in W3 Total Cache WordPress Plugin Enabling PHP Command Injection

* Azure Experiences Largest-Ever DDoS Attack, Highlighting Ongoing Threat to Cloud Infrastructure

* Optus Fined $826,000 for Vulnerability That Enabled Scammers to Steal Phone Numbers and Access Bank Accounts

* Malicious NPM Packages Leverage Adspect Redirects to Evade Security and Lure Victims to Cryptocurrency Scams

* Mozilla Bolsters Firefox’s Anti-Fingerprinting Defences to Enhance User Privacy

* Dangerous runC Vulnerabilities Expose Docker and Kubernetes Containers to Potential Escape Attacks

* Swiss Authorities Warn of Phishing Scam Targeting Lost iPhone Owners

* Malicious NuGet Packages Deployed with Disruptive ‘Time Bomb’ Payloads

* OWASP Unveils AI Vulnerability Scoring System (AIVSS) to Assess AI-Powered Threats

* Australia and US Impose Sanctions on North Korean Cyber Operations

* Researchers Uncover Vulnerabilities in ChatGPT that Enable Data Leaks and Malicious Behaviour

* Threat Actors Ramp Up Malicious Use of AI Tools, Posing Escalating Risks

* Researchers Uncover Vulnerabilities in FIA’s Driver Categorisation System, Exposing F1 Drivers’ Sensitive Data

* Louvre Heist Exposes Shocking Security Vulnerabilities, as Password to Video Surveillance System Was Simply “Louvre”

* Microsoft 365 Copilot Vulnerability Allows Data Exfiltration

* Malicious “Claude” Code Package Discovered on Popular Open-Source Platforms

* Vulnerabilities Discovered in OpenAI’s Atlas Agentic Browser

* Tasmanian Government Agencies Hit by Cyber Attack

* AFP Building AI to Decipher ‘Crimefluencers’ Online Slang and Emojis

* Cyber Breach at Western Sydney University Exposes Sensitive Student Data

* Meta Introduces New Anti-Scam Tools for WhatsApp and Messenger Users

* Ransomware Attack on Muji Supplier Disrupts Online Sales in Japan

* Alarming Study Reveals Only 250 Documents Need to Poison LLMs of Any Size

* Prosper Marketplace Suffers Major Data Breach, Exposing Sensitive Customer Information

Special thanks to Yong Hwee Wee for contribution to this week’s articles.

* Qantas Customer Data Breach: What Affected Customers Need to Know

* Court Injunctions: The Ineffective “Thoughts and Prayers” of Data Breach Response

* Australia’s Annual Cyber Threat Report 2024-2025: Evolving Challenges and Increased Risks

* Mozilla Experimenting Built-In Firefox VPN for Enhanced User Privacy

* MANGO Discloses Customer Data Breach Linked to Marketing Vendor Compromise

* Cyber Threats Evolving Rapidly, Putting Australian Companies at Risk

* LinkedIn Scam Leaves Job Seeker Defrauded of $4,300

* The Dark Side of Data: How Cybercrime is Thriving in the Digital Age

* Docker Empowers Small Businesses with Hardened Images Catalog

* Qantas Targeted by Infamous Hacker Group in Extortion Attempt

Special Thanks to Justin Butterfield for contributing to this week’s Cyber Bites

* Cyber Security Awareness Month: Building a Cyber-Safe Culture in Australia

* Google Drive Enhances Security with AI-Powered Ransomware Detection

* Industrial Cellular Routers in Australia Abused for Smishing Attacks

* Asahi Group Reels from Crippling Cyberattack

* Malicious MCP Server Exposes Enterprises to Widespread Email Theft

* Cyberattack Disrupts Operations at European Airports

* Cybercriminals Target Python Developers in Widespread PyPI Phishing Attacks

* Gartner Survey Reveals Surge in Generative AI-Powered Cyberattacks

* Open Source Infrastructure Doesn’t Run on Thoughts and Prayers: The Urgent Need to Fund Open Source Infrastructure

* Safeguarding the npm Supply Chain: GitHub’s Plan for Stronger Security