Cybersecurity News | Daily Recap [25 Aug 2026]

hendryadrian.com

hendryadrian.com

Platform Security

• WhatsApp rolled out stronger two-step verification and multiple passkeys to improve account protection. – WhatsApp Update, WhatsApp Security
• Attackers are exploiting critical WordPress auth-bypass flaws in the miniOrange SAML 2.0 plugin to forge SAML responses and gain admin access. – miniOrange Flaws
• Microsoft Teams added an admin control to block external bots from meetings, tightening collaboration security. – Teams Bot Block

Exploits & Malware

• More than 270 Zimbra servers were breached in ongoing attacks, adding to a wave of active exploitation against mail systems. – Zimbra Breaches
• CISA warned that an exploited Oracle WebLogic vulnerability is being used in the wild and needs urgent patching. – WebLogic Exploit
• An unpatched Calix flaw lets attackers bypass NAT and expose internal devices to outside access. – Calix NAT Bypass
• The first malware built specifically for car head units is fueling a botnet, expanding the threat surface for connected vehicles. – Car Malware
• WordlistLoader is delivering Amatera via ClickFix, while SynkLoader is phshing Windows passwords in a coordinated malware campaign. – Loader Campaign
• ShinyHunters targeted ReliaQuest in a data-theft attempt that was confirmed but ultimately had limited impact. – ShinyHunters Hit, ReliaQuest Attempt

Threat Campaigns & Weekly Roundups

• A weekly roundup highlighted AI-powered PLC attacks, GitLab attacks, and Stripe key leaks among the most notable recent threats. – Weekly Recap
• Silent patches can hide vulnerabilities from defenders without stopping attackers, leaving organizations blind to active risk. – Silent Patches
• Shipping more AI code than teams can secure is increasing remediation debt and making software harder to defend. – AI Code Risk

Law Enforcement & Policy

• Police arrested dozens of suspects in a global cybercrime crackdown targeting cross-border criminal activity. – Cybercrime Crackdown
• Taiwan charged 9 people over illegal AI server exports to China, including staff tied to Nvidia and Super Micro. – AI Export Charges
• The U.S. Treasury sanctioned alleged Iranian hackers as part of an “economic D-Day” pressure campaign. – Iran Sanctions
• A bipartisan Senate bill aims to prepare the energy sector for Q-Day and broader quantum-era threats. – Quantum Guard

App, Privacy & Conference News

• TikTok agreed to a $400M settlement with the U.S. over COPPA violations involving children’s privacy. – TikTok Settlement
• Hands-on cyber-physical systems training is returning to the ICS cybersecurity conference for industrial defenders. – ICS Training
• SCOTUS tossed one of two injunctions against Trump USPS mail-in ballot rules, keeping part of the dispute alive. – USPS Ruling

Cybersecurity News | Daily Recap – hendryadrian.com