-Myanmar blows up KK Park scam compound -Yanluowang ransomware IAB pleads guilty -US CBO hacked by foreign APT -Singapore to punish scammers with cane beatings -Chrome will remove XSLT support for security reasons -Hungary opposition party hacked, blamed on Russians -WaPo breach linked to Oracle zero-day -Tinder to rummage through your photos -Akamai reports disruptions in Russia -ICC, Austria replace MSFT software Podcast:

Risky Bulletin: Myanmar scam compound goes boom! - Risky Business Media

Myanmar starts demolishing the KK Park scam compound, the US Congressional Budget Office gets hacked by a foreign APT, Chrome will remove [Read More]

Newsletter:

Risky.Biz

Risky Bulletin: Yanluowang ransomware IAB pleads guilty

In other news: US CBO hacked by foreign APT; Singapore to punish scammers with cane beatings; Chrome will remove XSLT support for security reasons.

Two weeks ago, there were weird reports online of explosions at KK Park, Myanmar's largest scam compound, and people fleeing the streets. I thought some internal military groups were fighting for control, but it appears the junta is demolishing the park outright https://www.irrawaddy.com/news/myanmars-crisis-the-world/myanmar-junta-dynamites-scam-hub-in-pr-move-as-global-pressure-grows.html

Singapore passes law to punish scammers and money mules with cane beatings :))

The Straits Times

Law passed for scammers, mules to be caned after victims in Singapore lose almost $4b since 2020

Scammers face between six and 24 strokes of the cane, while mules face a discretionary 12 strokes. Read more at straitstimes.com. Read more at stra...

Australia sanctions North Korean hackers (one person and four entities) -Park Jin Hyok (WannaCry dude) -Kimsuky -Lazarus Group -Andariel -Chosun Expo Presser: https://www.foreignminister.gov.au/minister/penny-wong/media-release/sanctions-cyber-criminals-funding-north-korean-weapons-mass-destruction Sanction details: https://www.dfat.gov.au/news/news/one-person-and-four-entities-listed-under-autonomous-sanctions-regulations-2011-democratic-peoples-republic-korea

Singaporean authorities have sentenced three Chinese nationals to 2 years and 4 months prison for hacking-related charges The three hacked into online gambling sites to cheat on games and steal personal data

Singapore Police Force

Three Men Sentenced For Offences In Relation To Illegal Cyber Activities

On 5 November 2025, three Chinese nationals, Yan Peijian (“Yan”), 39, Huang Qinzheng (“Huang”), 37, and Liu Yuqi (“Liu”), 33, were conv...

Microsoft has discovered a side-channel attack (Whisper Leak) on the network communications between AI chatbots and their backend LLMs

Microsoft Security Blog

​​Whisper Leak: A novel side-channel attack on remote language models | Microsoft Security Blog

Understand the risks of encrypted AI traffic exposure and explore practical steps users and cloud providers can take to stay secure. Learn more.

Konni APT wipes victims' Android smartphones via the Google find my device hub

State-Sponsored Remote Wipe Tactics Targeting Android Devices

The Konni APT campaign has caused damage by remotely resetting Google Android-based devices, resulting in the unauthorized deletion of personal data.

"Akamai is aware of content and connectivity filtering within Russia. Although we have not yet seen wholesale blocking of our platform for users, Russian network operator actions and actions by the Russian government may impact delivery to some users within some networks." https://www.akamai.com/blog/edge/2025/nov/internet-connectivity-issues-in-russia

Google Chrome will deprecate and remove XSLT support (the XML CSS thing) by late-2026 Cites security reasons

Chrome for Developers

Removing XSLT for a more secure browser | Web Platform | Chrome for Developers

Prepare for Chrome deprecating and removing XSLT from the browser.

Creeper alert: Tinder to use AI to get to know users, tap into their Camera Roll photos

TechCrunch

Tinder to use AI to get to know users, tap into their Camera Roll photos | TechCrunch

Tinder is testing a feature called Chemistry that will get to know users through questions and, with permission, will access Camera Roll photos on ...