Fortinet reports ongoing exploitation of a five-year-old vulnerability in FortiOS SSL VPN, CVE-2020-12812, which allows bypassing two-factor authentication under specific configurations. Organizations are urged to update their systems and adjust settings to mitigate the risk of unauthorized access. #CVE202012812 #FortiOS…
Category: Cyber Security News
![Cybersecurity News | Daily Recap [24 Dec 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [24 Dec 2025]")
Daily Recap, cybersecurity incidents this week spanned outages in France affecting La Poste and banking services, a Romania ransomware impact on around 1,000 systems, and a disruptive Kuaishou attack that slammed livestreaming and stock prices. It also flags backdoor activity such as the Nezha Trojan, WebRAT distribution via fake GitHub repos, credential-stealing Chrome extensions and a large npm package, plus major enforcement actions, data breaches, a critical n8n flaw, and policy shifts from Microsoft, ServiceNow, the FCC, Japan, and Italy. #LaPoste #Kuaishou #NezhaTrojan #WebRAT #ChromeExtensions #NPMStealer #Frogblight #INTERPOL #FraudDomainSeizure #FakeIDDomains #Nissan #ShinhanCard #UniversityOfPhoenix #n8n #Teams #Armis #FCCDroneBan #JapanStrategy #AppleFine #PasswdWalkthrough #ServiceNowDeal
The U.S. government has seized the ‘web3adspanels.org’ domain and related database used by cybercriminals to host stolen bank login credentials, resulting from phishing campaigns targeting American citizens. The operation uncovered extensive data, including thousands of victims’ credentials, with estimated financial losses of over $14.6 million. #Web3adspanels #PhishingCampaigns
MongoDB has issued an urgent warning for admins to patch a high-severity vulnerability (CVE-2025-14847) that allows for remote code execution and server control. Immediate upgrades to specific versions are necessary to prevent exploitation by unauthenticated attackers. #MongoDB #CVE-2025-14847
Microsoft is introducing a new feature that allows security administrators to block external users from messaging or inviting team members in Microsoft Teams. This enhancement, set to roll out in January 2026, aims to strengthen security against social engineering and cybercrime attacks. #MicrosoftTeams #DefenderforOffice365
A malicious domain mimicking Microsoft’s activation site was exploited to distribute PowerShell scripts that infect Windows with Cosmali Loader. Users mistyping the domain risk infecting their systems, with the malware delivering cryptomining utilities and remote access trojans. #CosmaliLoader #PowerShell #typosquatting #KMSemulation
Cybersecurity researchers have uncovered a new, notarized version of the MacSync information stealer disguised as a messaging app installer, exploiting Apple’s security measures. This campaign demonstrates evolving evasion techniques, including signing, notarization, and embedding large, seemingly legitimate files to evade detection. #MacSync #MacC0de #AppleSecurity…
ServiceNow is acquiring cybersecurity firm Armis for $7.75 billion to enhance its AI-native cybersecurity and vulnerability response capabilities. This strategic deal reflects ServiceNow’s efforts to stay competitive amid major acquisitions in the cybersecurity industry by companies like Google and Palo Alto Networks. #Armis #ServiceNow #Wiz #CyberArkSoftware #Moveworks…
A pro-Russian hacking group claimed responsibility for a DDoS attack that disrupted France’s postal services during the holiday season. The attack is part of a wider pattern of hybrid warfare aimed at destabilizing Western societies and supporting Russia’s geopolitical objectives. #Noname057 #LaPoste…
Hudson Rock has integrated with theHarvester, enhancing open-source intelligence gathering for security professionals. This update allows users to leverage data from Infostealer malware infections without a dedicated API key. #HudsonRock #theHarvester #InfostealerInfections
CISA has added a vulnerability in Digiever DS-2105 Pro NVR devices to its KEV catalog, which could be exploited remotely via command injection. Affected devices running outdated firmware are at risk of full compromise, emphasizing the need for prompt mitigation. #Digiever #CVE202352163…
The SEC has charged multiple companies and individuals involved in a sophisticated cryptocurrency scam that defrauded over $14 million from retail investors. The scam involved fake platforms, social media ads, WhatsApp investment groups, and fictitious AI-generated tips, with proceeds transferred abroad. #CryptoFraud #InvestmentScam…
Cybercriminals are increasingly targeting small and medium-sized businesses in 2025, shifting away from larger corporations due to improved security measures. Key breaches and security strategies highlight the need for SMBs to strengthen their defenses against dark web data leaks and phishing threats. #DataBreaches #SMBThreats…
This article details the rise of the Nomani investment scam, which utilizes advanced AI-generated videos, social media malvertising, and cloaking techniques to deceive victims globally. Despite increased law enforcement efforts, scammers continue to adapt their tactics, leading to fluctuating detection rates. #Nomani #AIDeepfake #SocialMediaFraud…
This initiative aims to enhance cybersecurity protections for rural water utilities across the U.S. by developing a scalable MSSP model tailored to their specific operational challenges. It involves collaboration between cybersecurity experts, federal agencies, and the National Rural Water Association to provide cost-effective, ongoing security services. #DEFCONFranklin #MSSP #RuralWaterUtilities #CybersecurityInitiative…