-Russia uses African freelancers for anti-US and anti-French disinfo -US prepares to let contractors run cyber operations -Germany blames Russia for air traffic control agency hack -Apple patches two WebKit zero-days -Hama Film exposes everyone's photos -700Credit suffers data breach -Home Depot had a leak for a year -A game's USBs spread malware -Breach at the French Interior Ministry -South Korea to introduce breach fines Newsletter:
Risky.Biz
African freelancers behind anti-US and anti-French disinfo campaigns
In other news: US prepares to let contractors run cyber operations; Germany blames Russia for air traffic control agency hack; Apple patches two We...
 Podcast:
Risky Bulletin: African freelancers behind anti-US and anti-French disinfo campaigns - Risky Business Media
Russia is hiring African freelancers for disinformation campaigns, the US is preparing to let contractors run offensive cyber operations, [Read More]
 image
The Pope involves himself in Italy's spy scandal and asks intel officials not to respect people's privacy and not leak data and smear people with hacked data https://www.reuters.com/world/pope-tells-italian-spies-not-smear-politicians-or-journalists-2025-12-12/
The GNOME project has banned developers from including AI-generated code in its shell extensions
AI and GNOME Shell Extensions – GNOME Shell Extensions
Why we have added a new rule to the EGO review guidelines. So the packages with unnecessary code that indicate they are AI-generated will be rejected.
Meta finds that the state government of the autonomous region of Gagauzia, in Moldova, has directly sponsored Kremlin propaganda in the country
Meta’s threat disruptions | Transparency Center
This list provides a deep dive into our work to detect and counter security threats on our platform, broken down by year. We will continue to updat...
 image
Google is now tracking at least five Chinese cyber-espionage groups that are exploiting the React2Shell vulnerability for initial access. The groups are UNC6600, UNC6586, UNC6588, UNC6603, and UNC6603. This is up from two at the beginning. https://cloud.google.com/blog/topics/threat-intelligence/threat-actors-exploit-react2shell-cve-2025-55182/
A report on Weyhro C2, a new offensive toolkit advertised on underground forums. The toolkit appears to be the work of the individual behind the (now-failed) Weyhro ransomware from March this year. https://lumma-labs.com/weyhro-c2-because-ransomware-wasnt-paying-the-bills-anymore-b136fd7ef100
An activist was charged with destruction of evidence after resetting his phone to factory settings https://www.techspot.com/news/110560-man-arrested-allegedly-wiping-google-pixel-before-cbp.html
The Dutch NCSC on the Notepad++ update hijack attacks: "Currently, as far as is known, only organizations with interests in East Asia are victims of targeted attacks" cc: @npub17lgy...9uux
Kwetsbaarheid Notepad ++
Er is een kwetsbaarheid in Notepad++ gevonden waarmee het mogelijk is om malafide updates naar gebruikers te pushen. Momenteel zijn voor zover beke...
Arena Breakout is giving out 10-year bans for cheating image
"Germany has accused Russia of a cyber-attack on air traffic control and attempted electoral interference, and summoned the Russian ambassador. "
Germany accuses Russia of 2024 cyber attack and election disinformation campaign
The Russian ambassador is summoned over a cyber-attack on air traffic control and attempted electoral interference.