![\"\"\/](\"https:\/\/securityaffairs.com\/wp-content\/themes\/security_affairs\/images\/user-icon.svg\"){kind=icon}
Pierluigi Paganini<\/a>\n\t\t\t\t\t\t\t
![\"\"\/](\"https:\/\/securityaffairs.com\/wp-content\/themes\/security_affairs\/images\/clock-icon.svg\"){kind=icon}
November 30, 2025<\/p>\n\t\t\t\t\t\t![\"\"\/](\"https:\/\/www.newsbeep.com\/us\/wp-content\/uploads\/2025\/11\/newsletter.png\")
<\/p>\n
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box.<\/p>\n
Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.<\/p>\n
International Press \u2013 Newsletter<\/p>\n
Cybercrime
Iberia discloses customer data leak after vendor security breach<\/a><\/p>\n Account Takeover Fraud via Impersonation of Financial Institution Support<\/a>\u00a0\u00a0<\/p>\n OnSolve CodeRED cyberattack disrupts emergency alert systems nationwide<\/a><\/p>\n Investigation Results and Future Measures on Cyberattack Data Exposure<\/a>\u00a0\u00a0<\/p>\n French Soccer Federation Hit by Cyberattack, Member Data Stolen<\/a>\u00a0\u00a0<\/p>\n Malware<\/p>\n Analysis of ShadowPad Attack Exploiting WSUS Remote Code Execution Vulnerability (CVE-2025-59287)<\/a>\u00a0\u00a0<\/p>\n Shai-Hulud 2.0 Supply Chain Attack: 25K+ npm Repos Exposed<\/a><\/p>\n Fake adult websites pop realistic Windows Update screen to deliver stealers via ClickFix<\/a><\/p>\n Shai Hulud Launches Second Supply-Chain Attack: Zapier, ENS, AsyncAPI, PostHog, Postman Compromised<\/a>\u00a0\u00a0<\/p>\n Inside the GitHub Infrastructure Powering North Korea\u2019s Contagious Interview npm Attacks<\/a><\/p>\n Hacking<\/p>\n Stop Putting Your Passwords Into Random Websites (Yes, Seriously, You Are The Problem)<\/a>\u00a0\u00a0<\/p>\n OpenAI User Data Exposed in Mixpanel Hack<\/a>\u00a0\u00a0<\/p>\n B2B Guest Access Creates an Unprotected Attack Vector<\/a><\/p>\n ToddyCat \u2013 Your Hidden Email Assistant. Part 1<\/a><\/p>\n Critical Vulnerabilities in FluentBit Expose Cloud Environments to Remote Takeover<\/a><\/p>\n Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft<\/a><\/p>\n Intelligence and Information Warfare<\/p>\n CrowdStrike Research: Security Flaws in DeepSeek-Generated Code Linked to Political Triggers<\/a>\u00a0<\/p>\n Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications<\/a>\u200b\u00a0<\/p>\n Russian RomCom Utilizing SocGholish to Deliver Mythic Agent to U.S. Companies Supporting Ukraine<\/a><\/p>\n Hackers knock out systems at Moscow-run postal operator in occupied Ukraine<\/a>\u00a0\u00a0<\/p>\n Artificial Intelligence And The Future Of War<\/a>\u00a0\u00a0<\/p>\n Inside the GitHub Infrastructure Powering North Korea\u2019s Contagious Interview npm Attacks<\/a><\/p>\n Bloody Wolf: A Blunt Crowbar Threat To Justice<\/a><\/p>\n Cybersecurity<\/p>\n Root causes of security breaches remain elusive \u2014 jeopardizing resilience<\/a><\/p>\n What organisations can learn from the record breaking fine over Capita\u2019s ransomware incident<\/a>\u00a0\u00a0 \u00a0\u00a0<\/p>\n Harvard University discloses data breach affecting alumni, donors<\/a><\/p>\n London councils hit by \u2018cyber attack\u2019 with data potentially compromised<\/a>\u00a0<\/p>\n Google Starts Sharing All Your Text Messages With Your Employer<\/a>\u00a0\u00a0<\/p>\n Follow me on Twitter:\u00a0@securityaffairs<\/a>\u00a0and\u00a0Facebook<\/a>\u00a0and\u00a0Mastodon<\/a><\/p>\n Pierluigi\u00a0Paganini<\/a><\/p>\n (SecurityAffairs<\/a>\u00a0\u2013\u00a0hacking,\u00a0newsletter)<\/p>\n \t\t\t\t\t\t\t\t\t\t\t