kahmed

Dark Web News Analysis A new cyberespionage campaign by the Iranian state-sponsored group MuddyWater (aka Mango Sandstorm, Static Kitten, TA450) has been identified by ESET Research. Active between September 2024 and March 2025, this campaign specifically targets Israeli entities across academia, engineering, local government, and utilities, alongside a technology firm ...

Public Breach Analysis Coupang, South Korea’s largest e-commerce retailer, has confirmed a massive data breach exposing the personal information of 33.7 million customers—accounting for roughly two-thirds of the country’s population. The company initially reported a much smaller incident affecting 4,500 accounts on November 18, 2025, but subsequent investigations revealed the ...

Public Breach Analysis The University of Pennsylvania (Penn) has officially confirmed a new data breach resulting from a cyberattack on its Oracle E-Business Suite (EBS) servers. This incident is part of the massive global campaign attributed to the Clop ransomware gang. Incident Timeline & Scope: Context: This is the second ...

Public Policy & Privacy Analysis The Indian government, through the Department of Telecommunications (DoT), has issued a controversial order mandating that Apple and other smartphone manufacturers pre-install a state-owned “security” app called Sanchar Saathi on all devices sold in the country. The Mandate (November 28 Order): The Standoff: As predicted, ...

Public Breach Analysis Y.A.C. Holdings Co., Ltd. (Tokyo Stock Exchange Prime: 6298) has issued an official notice confirming that its consolidated subsidiary, YAC GARTER CO., LTD., suffered a ransomware attack. Incident Timeline: Brinztech Analysis: This incident targets a critical node in the semiconductor and electronics supply chain. YAC Garter is ...

Public Threat Analysis As the Black Friday 2025 shopping season peaks, Amazon has issued a critical security alert to its estimated 310 million active users worldwide. In an email distributed on November 24, 2025, the retail giant warned of a surge in sophisticated impersonation scams designed to steal personal and ...

Dark Web News Analysis A threat actor has claimed unauthorized access to the internal network of Riyadh Airports Company (RAC), the operator of King Khalid International Airport (RUH). The claim, which surfaced in late November 2025, is substantiated by leaked video footage and screenshots that appear to show a live, ...

Web News Analysis A massive new cyber-fraud campaign dubbed “HackOnChat” has been uncovered by cybersecurity firm CTM360. The campaign targets WhatsApp users globally by deploying thousands of malicious URLs hosted on inexpensive domains. The “HackOnChat” Vector (Phishing & Session Hijacking): This campaign exploits the trust users place in the “WhatsApp ...

Public Policy Analysis The European Union Agency for Cybersecurity (ENISA) has been officially designated as a “Root” in the global Common Vulnerabilities and Exposures (CVE) Program. This elevation from its previous role as a CVE Numbering Authority (CNA) marks a pivotal shift in Europe’s cybersecurity strategy, granting the agency centralized ...