Threat actors are actively exploiting recently disclosed vulnerabilities in Fortinet FortiGate devices to bypass authentication and conduct malicious activities. Organizations are urged to apply patches promptly and limit access to mitigate the ongoing threat. #FortiGate #CVE-2025-59718 #CVE-2025-59719…
Category: Cyber Security News
Threat actors have exploited recently patched vulnerabilities in Fortinet devices within days of their release, leading to unauthorized access and configuration theft. Experts advise immediate action to detect malicious activity and secure systems against further attacks. #FortinetVulnerabilities #FortiOS #FortiWeb…
SoundCloud experienced a cyberattack that resulted in unauthorized access to limited user data, affecting around 20% of its users. The company responded with incident protocols, and while sensitive information was not exposed, users are advised to watch for phishing attempts. #SoundCloud #Cyberattack…
The Indian CBI has dismantled a large-scale phishing SMS factory operated by M/s Lord Mahavira Services India Pvt. Ltd., which sent millions of fraudulent messages daily. This crackdown aims to disrupt the cybercriminal infrastructure fueling loan scams, investment frauds, and transnational cybercrime targeting Indian citizens. #OperationChakraV #CyberFraudInfrastructure…
Recent cybersecurity breaches at Prosper Marketplace and 700Credit have exposed personal and financial data of millions, highlighting the vulnerabilities within the fintech and credit reporting sectors. Authorities are actively investigating these incidents, which underscore the rising threat to financial institutions and consumers. #ProsperMarketplace #700Credit #FinancialServicesCyberattack…
AWS attributes a multi-year cyber espionage campaign targeting critical infrastructure to Russia-linked group Sandworm (APT44). The attackers exploit misconfigured customer devices to gain access, steal credentials, and maintain long-term persistence, emphasizing the importance of securing network edge devices. #Sandworm #APT44…
SantaStealer is a new malware-as-a-service information stealer advertised on Telegram, designed to evade detection by operating in memory. Rapid7’s analysis suggests it is a rebranded version of BluelineStealer with poor operational security and detection capabilities. #SantaStealer #BluelineStealer
Japanese e-commerce company Askul Corporation suffered a ransomware attack by RansomHouse, resulting in data theft and system failures that disrupted shipments. The attack involved compromised credentials and multiple ransomware variants, highlighting cybersecurity vulnerabilities in supply chain management. #RansomHouse #AskulCorporation
SoundCloud experienced a security breach that exposed email addresses and publicly visible profile information of approximately 28 million users, leading to outages and VPN connection issues. The breach was allegedly linked to the ShinyHunters extortion gang, which is now extorting the platform. #SoundCloud #ShinyHunters
Multiple vulnerabilities have been identified in the open-source FreePBX platform, including a critical authentication bypass and security flaws that could lead to remote code execution. These issues have been patched in recent versions, but users are advised to follow specific best practices for mitigation. #FreePBX #AuthBypass…
Texas has filed lawsuits against five major TV manufacturers for using automated content recognition (ACR) technology to track viewers without their consent. The lawsuits allege that the companies deceive consumers with vague disclosures and illegally collect personal viewing data that can be sold to advertisers. #ACR #TexasLawsuit…
A recent SentinelLabs report reveals how the hacking group Salt Typhoon, composed of two former students, has exploited telecommunications infrastructure to conduct extensive espionage. The group has compromised over 80 global telecom providers and breached critical systems used for lawful intercepts, highlighting a significant security threat. #SaltTyphoon #Cyberespionage…
![Cybersecurity News | Daily Recap [15 Dec 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [15 Dec 2025]")
Daily Recap, A relaunch of CyberVolk’s RaaS VolkLocker targets Windows and Linux but carries a hard-coded master key and cryptographic flaws in AES256 that can enable free decryption, with operators distributing the toolkit via Telegram. Other highlights include SHADOW-VOID-042 impersonating Trend Micro in a spear-phishing campaign tied to Void Rabisu, PayPal subscription-billing abuse, Hamas-affiliated Ashen Lepus revealing the AshTag malware suite, and the Asahi Group ransomware incident prompting a shift to a zero-trust security model. #VolkLocker #SHADOWVOID042 #TrendMicro #VoidRabisu #PayPal #AshTag #AshenLepus #AsahiGroup #ZeroTrust #Telegram
Google’s threat intelligence team links five additional Chinese hacking groups to attacks exploiting the critical React2Shell vulnerability (CVE-2025-55182). These exploits have resulted in breaches of numerous organizations globally, with threat actors stealing sensitive data and deploying malware. #React2Shell #CVE-2025-55182 #ChineseHackingGroups #NextjsVulnerability #AWSThreats
Recent Windows 11 security updates have led to VPN connectivity issues, especially affecting enterprise users utilizing Windows Subsystem for Linux (WSL). The problem involves specific updates causing virtual network interfaces to fail ARP requests, impacting VPN applications like Cisco Secure Client and OpenVPN. #Windows11 #WSL #VPN #CiscoSecureClient #OpenVPN