Daily Edition · Page 1

THE DAILY INDEX

Technology, AI, software, security, crypto and business

Across today’s newsletters

Today’s Index

OVER 70 DOMAINS USED IN MONTHS-LONG PHISHING SPREE AGAINST US UNIVERSITIES

A coordinated phishing campaign that ran from April to November targeted at least 18 US universities using approximately 70 domains and the Evilginx adversary-in-the-middle toolkit. Attackers sent personalized emails containing TinyURL-shortened links that impersonated university SSO portals to steal MFA-bypassing session cookies. UC Santa Cruz, UC Santa Barbara, University of San Diego, Virginia Commonwealth University, and University of Michigan were among the most heavily targeted. Recommended mitigations include adopting phishing-resistant MFA (FIDO2/WebAuthn) and monitoring unusual session cookie behavior.

US CRYPTO MARKET STRUCTURE TALKS STALL IN SENATE

The House has already passed the Digital Asset Market Clarity Act, but the Senate is juggling competing drafts from the Banking and Agriculture Committees that must reconcile SEC/CFTC jurisdiction, define “ancillary assets,” and set guardrails for DeFi and stablecoin yield. Hopes for a pre-Christmas markup are fading, with some senators citing timeline and White House concerns over ethics and quorum language, plus political noise around President Trump's extensive crypto holdings. Although a stablecoin law is on the books, broader rules for exchanges, tokens, and DeFi are still stuck in committee drama.

TLDR IndexPage 1