06 Jan 2026
By Mary

InfoSec News Nuggets 01/06/2026

RondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web Servers Cybersecurity researchers disclosed a persistent nine-month campaign targeting Internet of Things devices and web applications to enroll them into the RondoDox botnet, which has recently weaponized the critical React2Shell vulnerability (CVE-2025-55182, CVSS 10.0). The campaign evolved through three phases starting in March 2025, progressing from reconnaissance to daily mass vulnerability probing of WordPress, Drupal, and IoT devices, and ultimately to hourly automated…
Read More
26 Dec 2025
By Mary

InfoSec News Nuggets 12/26/2025

Critical LangChain Core Vulnerability Exposes Secrets via Serialization Injection A critical vulnerability in LangChain Core (CVE‑2025‑68664) has been disclosed that allows attackers to extract sensitive secrets and manipulate large language model operations through a serialization injection flaw. The issue impacts applications using this core LLM framework and could lead to unauthorized access to credentials and downstream system compromise if exploited.   Two Chrome Extensions Caught Secretly Stealing Credentials from Over 170 Sites Researchers discovered two…
Read More
07 Nov 2023
By Mary

InfoSec News Nuggets 11/07/2023

Microsoft Discovers Chinese Cyber Group Spying on Guam, Other US Locations  Microsoft has discovered a China-based hacking group targeting network systems and credential access in Guam and other US territories. Called Volt Typhoon, the criminals specialize in espionage and associated information-gathering activities aimed against critical infrastructure organizations. Documented exploits by the hackers show that they operate and maintain compromised access “without being detected for as long as possible.” Among the victims of attacks are the government, maritime, communications, manufacturing, transportation,…
Read More
26 Oct 2020
By Mary

InfoSec News Nuggets 10/26/2020

IBM AI model predicts onset of Alzheimer’s disease by analyzing descriptions of a cookie theft A new AI model can predict the onset of Alzheimer’s disease more accurately than standard clinical techniques by analyzing how people describe a picture of a cookie theft, according to a new study. Researchers from IBM and Pfizer trained the model to detect signs of speech impairment in written descriptions of the image, which is frequently used to test for cognitive disorders. The…
Read More
09 Jun 2020
By Mary

InfoSec News Nuggets 6/9/2020

Japan's video gaming grandma, 90, plays her way into record books Every day 90-year-old Japanese grandma Hamako Mori flexes her fingers to keep them nimble. Not for knitting or needlepoint, but to stay in shape for playing video games. The pensioner known as “Gamer Grandma” spends three or more hours a day battling monsters and going on missions in the virtual worlds of her favourite games, and even has a popular YouTube channel for her…
Read More
23 Jan 2020
By Mary

InfoSec News Nuggets 1/23/2020

1 - FBI Warns Job Applicants of Scams Using Spoofed Company Sites FBI's Internet Crime Complaint Center (IC3) today issued a public service announcement to warn about scammers using spoofed company websites and fake job listings to target applicants. "Since early 2019, victims have reported numerous examples of this scam to the FBI. The average reported loss was nearly $3,000 per victim, in addition to damage to the victims’ credit scores," the FBI says. "While hiring…
Read More