Google has released a security patch for the Chrome browser to fix a high-severity zero-day vulnerability actively exploited in the wild. The flaw is likely a memory corruption issue that could enable remote code execution or sandbox escape, often targeted in government espionage campaigns. #ChromeZeroDay #V8JavaScriptEngine…
Category: Cyber Security News
Google fixed a critical zero-click security flaw in Gemini Enterprise that allowed silent data exfiltration via indirect prompt injection. The vulnerability exploited trust boundaries in AI-driven search, highlighting the need for enhanced AI security measures. #GeminiJack #NomaSecurity…
A former government contractor manager, Danielle Hillmer, faces charges of fraud and obstruction for misrepresenting a cloud platform’s security compliance to federal agencies. The case underscores concerns about cybersecurity standards and oversight in government contracting. #FedRAMP #DoDImpactLevels5…
OpenAI warns about the increasing cybersecurity risks posed by advanced AI models, which could develop zero-day exploits or aid in stealthy cyber intrusions. They are implementing multi-layered safety measures and collaborating with security experts to prevent misuse. #OpenAI #AImodels #CyberThreats #ZeroDayExploits #RedTeaming…
![Cybersecurity News | Daily Recap [10 Dec 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [10 Dec 2025]")
Daily Recap, Microsoft released its December security updates addressing 56–57 flaws, including 3 zero-days and active exploits, while Adobe patched nearly 140 vulnerabilities and SAP and other vendors issued urgent fixes. Threat actors and incidents highlighted include North Korea-linked React2Shell operators exploiting to deploy new EtherRAT variants, CastleLoader/CastleRAT under GrayBravo expanding its infrastructure targeting logistics and transport, Storm-0249’s stealthy ransomware tactics, and high-profile breaches and investigations involving Coupang, HSE, and the Khashoggi spyware allegations. #EtherRAT #CastleLoader
A coalition led by the FBI, CISA, and NSA warns of increased opportunistic attacks by pro-Russia hacktivist groups targeting critical infrastructure through basic security lapses. These groups exploit poor VNC security to cause physical damage, with links to Russian state entities. #CARR #NoName05716…
A highly sophisticated cyber-espionage campaign, WARP PANDA, has infiltrated major U.S. organizations using advanced techniques targeting virtualization infrastructure. The group demonstrates stealth, long-term persistence, and a focus on intelligence gathering aligned with Chinese strategic interests. #WARP_PANDA #BRICKSTORM…
A new Android malware named DroidLock can lock screens for ransom, steal sensitive data, and take full control of infected devices. It primarily targets Spanish-speaking users and spreads through malicious websites and fake applications. #DroidLock #VNC #AndroidThreats
A new cyberattack campaign exploits Google search ads to direct users to malicious AI chats that install the AMOS macOS infostealer malware. This campaign uses poisoned ChatGPT and Grok conversations to trick users into executing malicious commands, leading to potential data theft and device compromise. #AMOS #Grok #ChatGPT #macOS #Infostealer
This December’s Patch Tuesday includes critical updates for Windows, Notepad++, Fortinet, Ivanti, and more, addressing vulnerabilities actively exploited or publicly known. Timely application of these patches is essential to prevent privilege escalation, remote code execution, and credential bypass attacks. #CVE202562221 #Notepad++V8.8.9…
Recent research reveals vulnerabilities in the .NET Framework, enabling remote code execution through exploitation primitives like SOAPwn. Major affected products include Barracuda Service Center RMM and Ivanti Endpoint Manager, emphasizing the widespread risk of such flaws in enterprise applications. #SOAPwn #WSDL #PowerShell #NTLMrelaying…
React2Shell threat actors are exploiting a critical vulnerability in React Server Components to deliver malware payloads, including cryptocurrency miners and Linux backdoors. Organized campaigns target various sectors globally, with automated tools supporting extensive exploitation efforts. #ReactServerComponents #PeerBlight…
Recent incidents in Cambridge, Massachusetts, and Eugene, Oregon, reveal that Flock Safety’s ALPR cameras continued operating despite official orders to deactivate them. These events raise concerns about vendor trust and data security in automated license plate reader systems. #FlockSafety #ALPRbreach…
U.S. agencies have issued warnings about cyberattacks against critical infrastructure by Russian-backed groups such as CARR and NoName057(16). These groups have targeted sectors like water, energy, and food, with some attacks causing physical damage and operational disruptions. #CARR #NoName057(16)…
Ring’s new facial recognition feature, Familiar Faces, may retain users’ biometric data indefinitely, raising privacy concerns. Lawmakers criticize Amazon for lacking sufficient protections and transparency regarding data deletion and privacy standards. #FamiliarFaces #BiometricDataProtection…