November 23rd, 2025

• Can your people keep secrets secret?
• Fired Techie Sabotaged Employer; Caused Nearly $1 Million in Damage
• The AI Gold Rush is Creating Computer Parts Shortages
• CMMC Q&A
• Fortinet Fortiweb Flaw Massively Exploited, Silently Patched by Fortinet
• Cloudflare Outage Affected A Lot of the Internet
• Airlines Deal Feds a Blow – Won’t Sell Them Your Data Without a Warrant
• German Court Says OpenAI Violated German Copyright Law; Must Pay Damages
• Proton to Expose Breach Coverups
• Washington Post Hacked for 1.8 Million Files
• Police in Massachusetts and Oklahoma Hit by Ransomware

Security News for the week ending November 21, 2025

This week’s news bites: denial of service attacks keep getting bigger, CISA says: with a 40%
vacancy in many departments, it can’t fulfill its national security mission, in-the-wild-exploit of
7-zip highlights risk of not patching apps, Canadian privacy watchdog says schools to blame for
ed tech breach and two Amazon delivery drones crash into a crane.

Read details here.

Are you a defense contractor? Or a supplier to one? Can you attest that you are CMMC
Level One compliant? Every contractor MUST do this, even if they have no CUI. If you
are not sure what this means or need assistance, please contact us.

Mitch
www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com
[email protected]

November 16th, 2025

• CMMC Q&A
• Nevada Says Ransomware Response That Cost Them 4,000 Hours of Overtime Was a Success
• Fortinet Fortiweb Flaw with Public Proof of Concept to Create Admin Users
• Feds Seize $15 Billion of Crypto, Sanction Cambodian Conglomerate
• Democratic Support to Renew FISA Section 702 Surveillance will be Harder Next Year
• Google Wants AI Data Centers in Space
• AI Prompt Injection Attacks Make System Logs Useless for Forensics
• Anthropic Joins Competitors in Spending billions for Data Centers
• Document Tech Firm Hackers Begins Leaking 1.2 Million Patient Records

Security News for the week ending November 14th, 2025

This week’s news bites: DoD Cyber Command 2.0, as prez charges $100k for H-1B visas,
China rolls out red carpet, Google launches civil lawsuit over text message phishing, SAP
pushes patch for bug rated 9.9, AI powered balloons are photographing homes for insurance
risk assessments.

Read details here.

Nevada says response to cyber attack cost them 4,000 hours of overtime to deal with,
allowed them to recover 90 percent of their data and took them out of service for a
month. Somehow, they call this a success. If your breach response cost you 4,000 hours of
overtime, you didn’t get all of your data back and it took you a month, you would likely be out of
business. If you are not confident in your breach response capability, please contact us.

Mitch
www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com
[email protected]

November 9th, 2025

• Amazon Sues Perplexity AI Over Agentic AI Browser
• What Could Possibly Go Wrong? Password to Louvre Video Surveillance is LOUVRE
• CMMC Q&A
• OpenAI Signs $38 Billion Deal With Amazon for Compute
• AMD WILL Patch Bug That Lets Random Function Return Zero as Answer
• Microsoft Won’t Patch .LNK File Exploit Which is Being Used
• Your AI Prompts Are Now Discoverable
• President Says “I Know Nothing About The Guy” That he Pardoned
• Floating Data Centers and Power Plants
• Another Day, Another Crypto Hack – Balancer – At Least $110 Million
• Yes, Another Day, Another Crypto Hack – Stream Finance HALTS After $493 Mil Loss
• South Korean Telecom Giant Breach Causes 90% Drop in Profits
• Ernst & Young Leaves 4 Terabyte SQL Database UNPROTECTED

Security News for the week ending November 7, 2025

This week’s news bites: Florida woman uses AI – to make false assault claim, third party risk is a
major risk, Toyota says “subscription required” to use some car features, Microsoft, others to
build massive AI data centers in authoritarian UAE and clickfix attacks now target Macs as well
as Windows.

Read details here.

Assuming you don’t read this tonight, by the time you read this, CMMC will be fully in
effect. While not required yet by the Pentagon, some primes say that you must get CMMC
certified by a third party now. Are you ready to keep accepting contracts? If you are not fully
ready, and most contractors are not, please contact us now.

Mitch
www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com
[email protected]

November 2nd, 2025

• Deepfakes – Rewriting the Rules of Geopolitics
• Senator Angus King Says Government Cyber Cuts Have Weakened US Cybersecurity
• CMMC Q&A
• Why Did the US Not Sign the UN Cybercrime Treaty
• Microsoft Allows Enterprise and Education Customers to Uninstall Crapware
• OpenAI SaysVoice Authentication is as Secure as Leaving Your Front Door Unlocked
• Source of SonicWall Breach – Careless Engineer
• President Pardons Former Binance CEO
• US Sanctions Against Huawei Backfires
• China Mimicks US “Port Fee”, Raising Costs for Businesses and Consumers
• Russia Hacks Two Texas Electric Cooperatives
• Defense Contractor Insider Pleads Guilty to Stealing Zero-days Worth Millions

Security News for the week ending October 31, 2025

This week’s news bites: Mondelez uses AI to reduce marketing content generation costs by
30-50%, politically correct Elon Musk says “if she is a 10, you are an asset”, US gov Cyber
Talent Corps crashes under president’s watch, iRobot faces bankruptcy – turning smart vacuums
into dumb ones and if Google is blocking 10 billion scam messages a month, how many are
being sent.

Read details here.

If the incredible speed of AI innovation is making you very nervous, you are not alone
and it should make you nervous. If you need assistance in getting up to speed on AI and
figuring out how to use it in your business, please contact us.

Mitch
www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com
[email protected]