InfoSecBulletin Cybersecurity for mankind
Hacker specially target on the 2025 holiday season and that has seen a surge in cyber threats, as attackers utilize advanced infrastructure to take advantage of increased online shopping. This year, criminals are using automated tools to expand their deceptive digital operations across various merchant categories.
These campaigns mainly use fake websites that imitate real retailers to collect sensitive consumer information during busy shopping times. Over 18,000 holiday-themed domains have been registered in the last three months, highlighting a major sign of the pre-holiday push.
Citrix NetScaler SAML 0-Day Flaw Under Attack
Major Danish university breached, 200,000 users at risk
Microsoft’s X account hijacked to promote Clippy crypto scam
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
Targeting high-traffic keywords such as “Christmas,” “Black Friday,” and “Flash Sale,” these domains serve as the backbone for phishing schemes and fraudulent storefronts.
Many of these sites resemble well-known brands with small URL changes, making them hard to tell apart for busy shoppers. Many of these domains are inactive to avoid detection, but hundreds are already used for gift card scams and payment theft.
Fortinet analysts discovered a vast network of malicious infrastructure that enables successful SEO poisoning. Attackers boost the rankings of harmful URLs to make their fake sites show up with real results during busy times.
Researchers reported a concerning increase in credential theft, with over 1.57 million login accounts from major e-commerce sites being sold on underground markets.
These “stealer logs” contain browser-stored passwords, cookies, and session tokens, enabling rapid account takeovers that bypass traditional login defenses .
