InfoSecBulletin Cybersecurity for mankind
Hacker specially target on the 2025 holiday season and that has seen a surge in cyber threats, as attackers utilize advanced infrastructure to take advantage of increased online shopping. This year, criminals are using automated tools to expand their deceptive digital operations across various merchant categories.
These campaigns mainly use fake websites that imitate real retailers to collect sensitive consumer information during busy shopping times. Over 18,000 holiday-themed domains have been registered in the last three months, highlighting a major sign of the pre-holiday push.
Daily Cyber security update for 14.11. 2026
Huge European telecom leak exposes clients of Swedbank, SEB, airBaltic, and other companies
PHP2Shell attack exploited a Check Point 0-day to deploy malware
North Korean hackers steal more than $400 million using video images, FBI says
Microsoft’s November 2026 Patch Tuesday addresses 1,093 flaws, with Outlook zero-day
Barracuda ESG flaws exploited, gaining root access
Apple, SAP, and Ivanti Patch Critical flaws Affecting Messaging, Bluetooth, and Enterprise Systems
Jailbroken DeepSeek AI Agent Conducts Two-Week Cyberattack on European Telecom
Daily Cyber security update for 10.11. 2026
IBM fixes 208 API Connect vulnerabilities, 47 critical
Targeting high-traffic keywords such as “Christmas,” “Black Friday,” and “Flash Sale,” these domains serve as the backbone for phishing schemes and fraudulent storefronts.
Many of these sites resemble well-known brands with small URL changes, making them hard to tell apart for busy shoppers. Many of these domains are inactive to avoid detection, but hundreds are already used for gift card scams and payment theft.
Fortinet analysts discovered a vast network of malicious infrastructure that enables successful SEO poisoning. Attackers boost the rankings of harmful URLs to make their fake sites show up with real results during busy times.
Researchers reported a concerning increase in credential theft, with over 1.57 million login accounts from major e-commerce sites being sold on underground markets.
These “stealer logs” contain browser-stored passwords, cookies, and session tokens, enabling rapid account takeovers that bypass traditional login defenses .
