![Cybersecurity News | Daily Recap [14 Jun 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [14 Jun 2025]")
Recent cybersecurity updates highlight critical vulnerabilities in VMware Spring Framework, Microsoft Defender, and Acer Control Center, urging prompt patching to prevent remote code execution and data breaches. Meanwhile, malware campaigns exploiting Discord invite links and infecting thousands of websites continue to threaten users, and geopolitical moves in Denmark aim to enhance digital sovereignty through open-source adoption. #SpringFlaw #DefenderFlaw #AcerFlaw #DiscordMalware #JSFireTruck
Vulnerabilities & Exploits
- A critical CVE-2025-41234 flaw in VMware’s Spring Framework allows remote code execution via manipulated Content-Disposition headers, urging immediate updates – Spring Flaw
- Microsoft Defender vulnerability CVE-2025-26685 enables attackers to hijack Net-NTLM hashes risking Active Directory compromise, patched in May 2025 – Defender Flaw
- Acer Control Center suffers CVE-2025-5491 allowing remote code execution with SYSTEM privileges via Windows Named Pipes; patches are available – Acer Flaw
- Amazon Cloud Cam end-of-life devices vulnerable to CVE-2025-6031 allowing man-in-the-middle attacks by bypassing SSL pinning, risking credential theft – Cloud Cam Flaw
- Apple patches critical zero-click CVE-2025-43200 exploited in Paragon Graphite spyware attacks targeting European journalists, underscoring spyware risks – Apple Patch
Malware & Cyberattacks
- Discord invite system exploited through hijacked expired or deleted links to deliver AsyncRAT and Skuld Stealer malware targeting crypto wallets and evading detection in multi-stage campaigns – Discord Malware, Discord Invite Hijack
- Stealthy campaign infects over 269,000 websites with JSFireTruck JavaScript malware using obfuscation, fingerprinting, and dynamic hosting to hijack sites and deliver scams – JSFireTruck Campaign
- GitHub OAuth 2.0 Device Code Flow exploited through sophisticated phishing scams to hijack developer tokens and threaten supply chain security – GitHub Phishing
- Hospitality software firm Episource suffers data breach leaking thousands of patients’ sensitive medical and insurance info amid rising ransomware attacks in healthcare – Episource Breach
- Cyberattacks disrupt government offices in North Carolina and Georgia, causing operational outages and highlighting vulnerabilities in municipal and judicial systems – US Gov Cyberattacks
Policy & Digital Sovereignty
- Denmark’s government agency transitions from Microsoft software to open source like LibreOffice to boost digital sovereignty amid geopolitical tensions and market concerns – Denmark Digital Shift
- Harry Coker, Jr., reflects on his role as U.S. National Cyber Director, stressing apolitical leadership, interagency collaboration, and national cybersecurity strategy for economic prosperity and security – Cyber Leadership