Cyber News & Updates
Breaking news, security alerts, and trending stories from across the cybersecurity landscape.
-

Chinese Travel Bookings to Russia Surge Amid Visa-Free Talks and Japan Tensions
Chinese travel bookings to Russia have surged dramatically, with some metrics showing increases of up to 400%, driven by President Vladimir Putin’s pledge for visa-free travel and escalating tensions between Beijing and Tokyo. This shift is also fueled by a diplomatic spat between Japan and China.
-

French government advises against biometric phone security
The French government is advising against using biometric security, like facial scans or fingerprints, to unlock phones, as detailed in a new advisory document from ANSSI, the national agency for information system security. Instead, ANSSI recommends using end-to-end encrypted chat apps for sensitive communication and disabling automatic MMS reception to prevent spyware attacks. They also…
-

Russia Shutters Poland’s Consulate in Irkutsk in Tit-for-Tat Measure
Russia’s Foreign Ministry has announced the closure of Poland’s consulate in Irkutsk, a tit-for-tat measure responding to Warsaw’s recent decision to shut down one of Russia’s consulates. This leaves both nations with only one diplomatic mission each in their respective capitals.
-

Belgian data trader fined for illegal resale of data
The Belgian data trader Infobel has been hit with a €40,000 fine by the Belgian Data Protection Authority (GBA) for illegally reselling personal data for marketing purposes. The GBA found Infobel lacked proper consent from individuals, violating GDPR and emphasizing specific, active consent for data use.
-

ThreatsDay Bulletin: AI Malware, Voice Bot Flaws, Crypto Laundering, IoT Attacks — and 20 More Stories
This week’s cybersecurity bulletin highlights the re-emergence of Mirai-based botnets targeting IoT devices, a surge in sophisticated phishing attacks leveraging AI, and efforts by Singapore to curb government impersonation scams. It also covers privacy upgrades to the Tor Project, new malware techniques, and a major money laundering network takedown.
-

OpenAI leaks personal data and metadata of API users
OpenAI has disclosed a data leak affecting an undisclosed number of API users, with personal data and metadata exposed after an attack on its analytics provider, Mixpanel. The compromised data includes names, email addresses, location details, operating systems, browsers, referring websites, and user/organization IDs linked to API accounts.
-

Denmark is pleased with the adopted chat control proposal, but wanted to go further
Denmark welcomes the EU’s voluntary chat control proposal, though it initially sought broader, mandatory measures. Critics, including former MEP Patrick Breyer, warn the proposal is a ‘Trojan horse’ that could lead to mass surveillance and the end of online anonymity through age verification, with several countries opposing it due to privacy concerns.
-

Microsoft to Block Unauthorized Scripts in Entra ID Logins with 2026 CSP Update
Microsoft is enhancing security for Entra ID authentication by blocking unauthorized script injection attacks, starting in late 2026. This move involves updating their Content Security Policy (CSP) for the “login.microsoftonline.com” sign-in experience, allowing only scripts from trusted Microsoft domains to execute, thereby preventing malicious code.
