InfoSec News Nuggets 11/26/2025

Threat Actors Exploit Blender Files to Deploy StealC V2 Infostealer Researchers have tracked a long running campaign in which attackers hide StealC V2 infostealer inside weaponized Blender project files shared on popular 3D asset marketplaces. When victims open these .blend files with auto run Python scripts enabled, embedded code silently launches a multistage infection chain that targets 3D artists and game developers who routinely import community models.   New ClickFix wave infects users with hidden…
Read More

InfoSec News Nuggets 11/24/2025

Another major airline hacked, customer data exposed Iberia is notifying customers after a supplier breach exposed names, email addresses, and loyalty card IDs, while a separate threat actor claims to be selling 77 GB of Iberia internal data, including technical aircraft and maintenance files. This is a live example of third party compromise plus possible deeper internal intrusion, so DFIR teams should watch for Iberia related phishing, loyalty account abuse, and any overlap with their…
Read More