Tootfinder

RE: https://infosec.exchange/@mttaggart/115641161838035136
Broccoli, pre-air fryer era

A critical, currently unpatched bug in Chromium's Blink rendering engine can be abused to crash many Chromium-based browsers within seconds, causing a denial-of-service condition – and, in some tests, freezing the host system.
https://www.theregister.com/2025/10/29/bra

This security hole can crash billions of Chromium browsers, and Google hasn't patched it yet
Exclusive: Edge, Atlas, Brave among those affected

https://www.theguardian.com/technology/2025/dec/29/ransomware-negotiations-extortion-cyber-attacks
“S-RM now claims the UK’s largest cyber-incident response team. Its first-responder service is comprised of about 150 experts world…

‘Why should we pay these criminals?’: the hidden world of ransomware negotiations
Cybersecurity experts reveal what they do for high-profile clients targeted by hackers such as Scattered Spider

Data breach at Korean Air leaks 30,000 employee records
https://koreajoongangdaily.joins.com/news/2025-12-29/business/industry/Data-breach-at-Korean-Air-leaks-30000-employee-records/2488168

Data breach at Korean Air leaks 30,000 employee records
A data breach involving the personal information of Korean Air employees was recently reported — the second such incident in the airline industry following a similar case at Asiana Airlines last week.

The Everest Group is demanding $6 million from Iberia Airlines as a ransom to stop the data it stole from being leaked or sold.
https://www.paddleyourownkanoo.com/2025/11/29…

Hackers Are Now Demanding $6 Million From Spain's Iberia Airline To Stop Leaking Passenger Data From Massive Cyber Breach
Hackers are demanding $6 million from Iberia airline after breaching a database and threatening to leak personal passenger data.

According to AhnLab, the N. Korean Lazarus Group, responsible for the recent massive theft from crypto exchange Upbit, has engaged in 31 cyberattacks, followed by DPRK's Kimsuky, which has launched 27 cyberattacks, over the past year.
https://en.yna.co.kr/view/AEN20251130001000315<…

Chief Constable rebukes Treasury over PSNI data breach money
https://www.bbc.com/news/articles/cx2l7px2y0jo?xtor=AL-72-[partner]-[yahoo.north.america]-[headline]-[news]-[bizd…

PSNI: Chief Constable rebukes Treasury over data breach money
Jon Boutcher has criticised the Treasury for refusing to help cover the cost of compensation for officers affected by a major data breach.

The Korean National Police Agency National Office of Investigation (NOI) said on the 30th it arrested four people who hacked about 120,000 homecam IP cameras and sold the videos to an overseas site for sexual purposes
https://biz.chosun.com/en/en-society/2025/11/3…

Korean police arrest hackers who sold 120,000 IP camera videos
Korean police arrest hackers who sold 120,000 IP camera videos

Does tossing a laptop in the river destroy evidence?
The Coupang hacker allegedly disposed of the laptop used in the breach by throwing it into a river.
https://www.cybersecurity-insiders.com/hacker-…

Hacker Disposes of Coupang Data Breach Laptop in River, initiating $1.2 Billion as compensation
AI is evolving at a rapid pace, and the uptake of Generative AI (GenAI) is revolutionising the way humans interact and leverage this technology. GenAI is

North Korean hacking group Lazarus is suspected to be behind a breach of around 45 billion won ($30.6m) in cryptocurrency from South Korea's largest crypto exchange Upbit. The group was suspected of stealing 58 billion won ($40m) worth of Ethereum from Upbit in 2019.
https://en.yna.co.kr/view/A…