Elles De Yeager
-

Defense Sanctions Target US Firms Over Taiwan Arms
China imposed defense sanctions on 20 U.S. companies and 10 executives after Washington approved over $10 billion in Taiwan arms sales. Beijing froze assets and banned business transactions.
-

Trust Wallet Browser Extension Poisoned via Shai-Hulud NPM Attack, $8.5M in Crypto Drained from 2,596 Users
Attackers exploited the Shai-Hulud NPM supply chain attack to leak Trust Wallet developer GitHub secrets, including the Chrome Web Store API key. Using this key, they uploaded a malicious version of Trust Wallet’s extension that harvested private keys and seed phrases, draining $8.5 million from 2,596 crypto wallets. The attack shows how compromised credentials eliminate…
-

Roundcube CVE-2025-68461: SVG XSS Vulnerability Enables Silent Email Account Takeover Through Malicious Animate Tags
Roundcube Webmail contains a Cross-Site Scripting vulnerability (CVE-2025-68461, CVSS 7.2) that enables attackers to hijack email accounts by sending malicious SVG files. The flaw exploits improper sanitization of SVG animate tags to execute JavaScript in victim browsers, granting full account access without credentials. Security patches are available for versions 1.5.12 and 1.6.12, but deployment lags…
-

Researchers Uncover Lazarus APT’s Remote-Worker Infiltration Scheme
In a significant breakthrough, a joint investigation has revealed North Korea’s Lazarus Group, specifically its Famous Chollima division, is actively infiltrating global companies. The APT group is posing as remote IT workers to breach organizations, primarily targeting the finance, crypto, healthcare, and engineering sectors. This investigation serves as a critical warning to companies and hiring…
-

Russia Shutters Poland’s Consulate in Irkutsk in Tit-for-Tat Measure
Russia’s Foreign Ministry has announced the closure of Poland’s consulate in Irkutsk, a tit-for-tat measure responding to Warsaw’s recent decision to shut down one of Russia’s consulates. This leaves both nations with only one diplomatic mission each in their respective capitals.
-

Belgian data trader fined for illegal resale of data
The Belgian data trader Infobel has been hit with a €40,000 fine by the Belgian Data Protection Authority (GBA) for illegally reselling personal data for marketing purposes. The GBA found Infobel lacked proper consent from individuals, violating GDPR and emphasizing specific, active consent for data use.
-

U.S. B-52 bombers join expanded Caribbean security push
U.S. B-52H Stratofortress bombers recently conducted a “Bomber Attack Demonstration” over the Caribbean Sea as part of Operation Southern Spear, highlighting an expanded security push in the region to counter transnational criminal networks.
-

Ex-Officer Gets Suspended Sentence for Selling Police Files to Journalist Nephew
A former police officer in Yekaterinburg has received a four-year suspended sentence after admitting to selling confidential police files. The court press service confirmed the ruling on Tuesday. Andrei Karpov, the ex-officer, pleaded guilty to charges of bribery and abuse of power. He sold criminal reports, including personal data and pre-trial information, to his nephew,…


