India orders online IM apps to link user accounts to a SIM card
India has ordered smartphone makers to pre-install the government's Sanchar Saathi app. The app is available for Android and iOS and allows users to report fraud and spam. https://www.pib.gov.in/PressReleasePage.aspx?PRID=2197140&reg=3&lang=2
Cato Networks has discovered HashJack, an indirect prompt injection technique that conceals malicious instructions after the # in legitimate URLs. This attack works when AI agents have to parse links inside documents or emails.
Europol has seized the domain of the Cryptomixer cryptocurrency mixing service. The site was allegedly responsible for helping criminal groups launder funds. Officials also seized €25 million worth of assets. image
A threat actor has breached and pushed a malicious update to SmartTube, an app typically used on Android-based smart TVs
Threat actors are now exploiting an XSS bug in the OpenPLC ScadaBR code editor, typically used for programming SCADA/PLC stuff
The FCC says hackers hijacked Barix studio-transmitter link (STL) equipment to broadcast obscene materials via state emergency systems https://www.fcc.gov/document/fcc-urges-broadcasters-follow-cybersecurity-best-practices
Hackers exploited a bug in the wallet system of South Korean cryptocurrency exchange Upbit to steal over $37 million worth of Solana tokens
According to a study from the Dutch government, most teen hackers abandon their cybercrime careers and choices by their twenties
"A Russian citizen suspected of hacking IT systems of Polish companies was arrested in Krakow, Polish Interior Minister Marcin Kierwinski said on Thursday." https://www.reuters.com/world/poland-arrests-russian-suspected-hacking-polish-companies-2025-11-27/