← Cybersecurity Headlines
Cybersecurity Headlines
FCC to torch Salt Typhoon rules, Group claims Danish party website hits, MI5 warns Chinese spies are on LinkedIn
00:07:35
Loading summary
Transcript3 lines
- [00:00]
A
From the CISO series it's Cybersecurity Headlines.
- [00:07]
B
These are the cybersecurity headlines for Wednesday, November 19, 2025. I'm Sara Lane. FCC to torch rules from Salt Typhoon the FCC is set to vote on scrapping former cybersecurity rules imposed after the 2024 salt typhoon attacks, which required telecoms to implement basic security controls like MFA role based access and patching. The FCC under the current administration argues the rules were legally overreaching and ineffective, favoring a collaborative, voluntary approach with industry and federal agencies. Instead, Salt Typhoon, a China linked cyber espionage campaign compromised US Government, telecom and university networks, affecting sensitive data from millions globally. Group claims hits on Danish party websites Pro Russian group Noname 05716 briefly knocked several Danish political party sites offline with DDoS attacks ahead of local elections, but officials say voting was unaffected because ballots are counted by hand. Targets included the Conservatives, Moderates, Social Democrats, Red Green alliance and the Copenhagen Post. Danish authorities reported a broader spike in nuisance style DDoS attacks from Russian aligned groups in the week before the vote, mirroring similar activity seen during elections in Moldova, Poland and Romania. MI5 warns Chinese spies are using LinkedIn Britain's domestic intelligence service issued a warning that Chinese operatives are trying to recruit and cultivate UK lawmakers and policy influencers through LinkedIn headhunters and front companies tied to China's Ministry of State Security. The alert names two suspected recruiters and says economists, think tank staff and government officials have also been approached. It comes as the UK faces criticism over a collapsed spying case involving two men accused of aiding China and follows earlier warnings about Chinese political interference, cyber espionage and theft of tech secrets. Teams Users can report messages wrongly flagged as threats Microsoft is adding a new option in Teams that lets users report messages that were incorrectly flagged as malicious. The feature, first introduced back in September, is rolling out globally by the end of November and and will be enabled by default for organizations using Microsoft Defender for Office 365, Plan 2 or Defender XDR. Users on desktop, mobile and web will be able to flag false positives and admins can manage the setting in the Teams admin center. The new option arrives alongside other recent safety updates, including malicious link alerts and screen capture blocking. Huge thanks to our sponsor Know before. Your email gateway isn't catching everything, and cybercriminals know that. That's why there's KnowBe4's Cloud Email Security platform. It's not just another filter, it's a dynamic AI powered layer of defense that detects and stops advanced threats before they reach your users inboxes. Request a demo of KnowBe4's Cloud Email Security at knowbe4.com or or visit them this week at Microsoft Ignite booth 5532 npm packages abuse adspec in crypto scam socket Researchers found seven malicious npm packages using adspec cloaking to filter victims from security researchers before redirecting users to crypto themed scam sites. The packages, uploaded by a threat actor called Dino Reborn, collect detailed device and browser fingerprints, send them through a proxy to ADSpect, and decide whether to show a fake captcha that leads to a malicious crypto site or a decoy page meant to fool analysts. All packages have been removed from NPM, but researchers warn this cloaking plus open source distribution method will likely reappear under new names. Sneaky2FA phishing kit adds bitby pop ups the Sneaky2FA phishing as a Service kit now uses browser in the browser, also known as Bitby popups, to mimic Microsoft login pages, tricking victims into giving credentials and session data. The attacks employ bot protection, conditional loading and obfuscation to evade detection. Researchers warn that phishing resistant methods like passkeys can be bypassed via malicious browser extensions or downgrade attacks. Push security emphasizes that identity based attacks remain the leading cause of breaches and urges users and orgs to exercise caution and enforce conditional access policies to prevent account takeovers. Google Chrome bug exploited as a zero day Google issued emergency patches for two high severity Chrome zero days in the V8 JavaScript engine, a type confusion flaw and actively being exploited in the wild. Both can allow arbitrary code execution and potential full system compromise. The first was discovered by Clement Lessing of Google Tag and the second by Google's Big Sleep tool. Users are urged to update immediately to prevent exploitation. If you're keeping track, and I know you are, These are the 7th and 8th Chrome 0 days patched in 2025. Pas en Pleis reports data breach Posen plots France's Social Security Service for parents and home based childcare workers says a breach discovered on November 14 may have exposed data on more than 1.2 million people. The stolen information could include names, birthplaces, postal addresses, Social Security numbers, banking institutions and internal identifiers. Though no ibans, emails, phone numbers or passwords seem to be accessed, the service warns affected individuals to watch for targeted phishing attempts. Hey you, Be sure you're subscribed to the CISO series YouTube channel we've been posting daily shorts. There's always something new to enjoy. Plus, you can get notified when we're going live with the Department of Knowledge. You can see original interviews and demos and a lot more. Just search for CISO series on YouTube and then subscribe. If you have thoughts on the news from today or about our show in general, be sure to reach out to us@feedbackisoseries.com we really want to hear from you. I'm Sarah Lane, reporting for the CISO series. Stay Classy. Planet Earth.
- [07:20]
A
Cybersecurity headlines are available every weekday. Head to cisoseries.com for the full stories. Behind the headlines lines.