CISA has added a new vulnerability, CVE-2025-61757, to its KEV Catalog, indicating active exploitation and increasing risks for federal systems. While primarily targeting FCEB agencies, CISA advises all organizations to prioritize remediation efforts against known exploited vulnerabilities. #CVE202561757 #OracleFusionMiddleware…
Category: Cyber Security News
The FBI has issued an alert about a surge in IC3 impersonation scams, where fraudsters deceive victims into sharing sensitive information or making payments. Over 100 cases have been reported recently, highlighting the need for public vigilance against these deceptive tactics. #IC3Impersonation #FBIScamAlert…
![Cybersecurity News | Daily Recap [24 Nov 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [24 Nov 2025]")
Daily Recap, today’s cybersecurity news highlights Shai-Hulud’s second wave that steals npm credentials affecting 25,000+ repositories and leaks secrets to GitHub, along with ShadowPad actively exploiting a WSUS flaw and Grafana SCIM (CVE-2025-41115) enabling privilege escalation. The roundup also covers Microsoft and Windows risks—from agentic AI features and Windows 11 24H2 crashes to migration away from SCCM/WSUS—plus insider incidents, APT24/BADAUDIO activity, a Moscow-run postal outage in occupied Ukraine, and notable breaches like Harvard University and Mazda, plus the Passwork 7 launch. #ShaiHulud #ShadowPad #GrafanaSCIM #CVE-2025-41115 #WSUS #SCCM #APT24 #BADAUDIO #HarvardUniversity #Mazda #Passwork7 #DeepSeekR1 #CrowdStrike #CBI #Windows11_24H2
ClickFix attack variants involve convincing users to execute malicious commands through realistic-looking Windows Update pages and steganographically embedding payloads inside images. These sophisticated tactics enable cybercriminals to deploy infostealers like LummaC2 and Rhadamanthys using multi-stage evasion techniques. #ClickFix #LummaC2 #Rhadamanthys #Steganography #WindowsUpdate
.jpg "Malicious Blender model files deliver StealC infostealing malware"){kind=logo}
A campaign linked to Russia utilizes malicious Blender files on 3D marketplaces to distribute the StealC V2 information stealer malware. Users are advised to disable Auto Run in Blender and trust only verified sources to prevent infection. #StealC #BlenderMalware
Over 70 advocacy groups and experts are demanding an investigation into the UK’s Information Commissioner’s Office (ICO) due to its failure to enforce data protection laws effectively, especially against public sector agencies. The lack of action has led to increased data breaches, notably the 2022 Afghan data leak, and reduced investigations…
CyberArmor’s report reveals a sophisticated espionage campaign named “Autumn Dragon” targeting Southeast Asian governments and media, possibly linked to Chinese threat actors. The campaign employs a complex malware chain involving DLL sideloading, Telegram C2, and encrypted payloads to gather intelligence covertly. #AutumnDragon #ChinaNexus…
A new Shai-Hulud supply chain attack has compromised nearly 500 npm packages, affecting millions of downloads and exposing sensitive data. This sophisticated malware campaign targets major ecosystems and exploits trusted packages to steal secrets and spread further. #ShaiHulud #npmattack…
SitusAMC, a real-estate financing firm serving major banks, experienced a data breach impacting client and customer information. The company assures that business operations remain unaffected and investigations are ongoing. #SitusAMC #DataBreach #Citi #MorganStanley #JPMorganChase
Cybersecurity researchers identified five vulnerabilities in Fluent Bit that could be exploited to take control of cloud infrastructures, allowing remote code execution and data manipulation. These flaws pose significant risks to cloud and Kubernetes environments, emphasizing the importance of updating to the latest versions. #FluentBit #OligoSecurity…
A vulnerability in Oracle Identity Manager (CVE-2025-61757) has been exploited in the wild before it was patched, raising alarms about cyber threats targeting enterprise systems. The breach could allow attackers to execute remote code and escalate privileges, posing a significant security risk. #CISA #OracleIdentityManager…
The U.S. CISA has listed an Oracle Identity Manager vulnerability (CVE-2025-61757) as actively exploited, with attackers leveraging it for remote code execution. Additionally, over 100 organizations have been affected by CL0P ransomware attacks targeting Oracle E-Business Suite, including Mazda and Cox Enterprises. #CISA #CVE202561757 #CL0P #OracleEBS #IdentityManager…
Malware developers are employing advanced evasion techniques such as packing, obfuscation, and multi-stage payloads to bypass detection. The malicious app manipulates native code and encrypted files, making detection and analysis challenging. #MalwareEvasion #AdvancedPersistentThreats…
A recent data breach involving Almaviva has compromised 2.3 TB of sensitive information, including government contracts, personal data, and trade secrets related to Italy’s national railway operator FS Italiane. The attack underscores the significant risks to critical infrastructure and governmental data sharing. #Almaviva #FerrovieDelloStatoItaliana…
Festo has identified a vulnerability in its MSE6 product-family that could allow remote attackers to exploit hidden functions, risking confidentiality, integrity, and availability. Mitigation strategies include network isolation and secure remote access practices. #Festo #CVE-2023-3634…