InfoSec News Nuggets 10/30/2025

Multiple notable incidents: (1) Ribbon Communications, a key US telco services provider, suffered nation-state breach with attackers maintaining access for nearly a year undetected (initial access December 2024, discovered September 2025). The company facilitates voice/data communications between platforms. (2) Google and Amazon's $1.2B Israeli government cloud deal included a secret 'winking mechanism'—a code allowing Israel to sidestep legal obligations in foreign jurisdictions to prevent law enforcement from accessing data via standard legal requests. (3) Researchers flagged AI-targeted cloaking attacks where websites serve different content to AI crawlers (ChatGPT, Perplexity) vs browsers—enabling context poisoning of LLM training data. (4) Canadian Cyber Centre reported hacktivists breaching water treatment, oil & gas, and agriculture ICS systems causing operational disruptions. (5) UK lottery (People's Postcode Lottery) exposed customer data to other users for 17 minutes—each page refresh showed different user's name, address, email, DOB.

📂 Industry News

InfoSec Roundup: Nation-State Breach at Ribbon Communications, Israel's Cloud Winking Mechanism