InfoSecBulletin Cybersecurity for mankind
Hacker specially target on the 2025 holiday season and that has seen a surge in cyber threats, as attackers utilize advanced infrastructure to take advantage of increased online shopping. This year, criminals are using automated tools to expand their deceptive digital operations across various merchant categories.
These campaigns mainly use fake websites that imitate real retailers to collect sensitive consumer information during busy shopping times. Over 18,000 holiday-themed domains have been registered in the last three months, highlighting a major sign of the pre-holiday push.
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Massive customer data from India’s Bank of Baroda surfaced online
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
Shinyhunters claimed and set deadline to publish E&Y data
Microsoft, NVIDIA and CrowdStrike Initiate Alliance for Open-Source AI Security
Google Search Results Reportedly Show Claude AI Shared Chats
Targeting high-traffic keywords such as “Christmas,” “Black Friday,” and “Flash Sale,” these domains serve as the backbone for phishing schemes and fraudulent storefronts.
Many of these sites resemble well-known brands with small URL changes, making them hard to tell apart for busy shoppers. Many of these domains are inactive to avoid detection, but hundreds are already used for gift card scams and payment theft.
Fortinet analysts discovered a vast network of malicious infrastructure that enables successful SEO poisoning. Attackers boost the rankings of harmful URLs to make their fake sites show up with real results during busy times.
Researchers reported a concerning increase in credential theft, with over 1.57 million login accounts from major e-commerce sites being sold on underground markets.
These “stealer logs” contain browser-stored passwords, cookies, and session tokens, enabling rapid account takeovers that bypass traditional login defenses .
