Cybercriminals are exploiting browser notifications as a new phishing vector using the Matrix Push C2 platform to deliver malicious links and commands. This browser-native, fileless approach allows cross-platform, stealthy attacks that bypass traditional security controls. #MatrixPushC2 #Velociraptor #Phishing…
Category: Cyber Security News
![Cybersecurity News | Daily Recap [21 Nov 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [21 Nov 2025]")
Write 2 sentences summarizing the content (Cybersecurity News ‘Daily’ Recap). At the end, add hashtags for specific keywords mentioned in the article—such as names of malware, threat actors, or affected organizations/systems. Avoid general terms like #malware, #ransomware, or #cybersecurity. Use this format: #Keyword1 #Keyword2. Start with ‘Daily Recap, ‘
Daily Recap, The recap highlights ongoing third-party app risks with Gainsight tied to Salesforce after unusual OAuth activity, and tracks a large-scale state-backed espionage campaign by APT24 using BadAudio against Taiwan. It also covers Android backdoors like Baohuo and Sturnus targeting messaging apps, critical flaws and active exploitation in WSUS and network devices, plus financial crime, legal actions, and policy shifts shaping the broader cybersecurity landscape. #Gainsight #APT24 #BadAudio #Baohuo #Sturnus #WSUS #ShadowPad #ICAM365 #AsusRouter #DIR-878 #SamouraiWallet #Almaviva #NSO
CISA warns government agencies to urgently patch the Oracle Identity Manager vulnerability (CVE-2025-61757), which has been exploited in attacks potentially as a zero-day. This flaw allows remote code execution through an authentication bypass in REST APIs, emphasizing the need for prompt updates. #CISA #OracleVulnerability
Nvidia has released a beta hotfix driver to resolve gaming performance issues caused by recent Windows 11 updates. These fixes are rapidly deployed, but users should note that the drivers are optional and not fully QA-tested. #Nvidia #GeForceHotfixDriver
Cyberattacks have targeted local law enforcement agencies in Oklahoma and Massachusetts, affecting their IT systems but not public safety. Authorities are working with cybersecurity experts to resolve the incidents while maintaining emergency operations. #RansomwareOklahoma #CyberattackMassachusetts…
Two individuals accused of being members of the Scattered Spider threat group plead not guilty to charges related to a major cyberattack on Transport for London in 2024. The case involves allegations of unauthorized system access, significant financial damage, and potential data breaches, with connections to other cybercriminal activities by the…
Two British teenagers linked to the Scattered Spider hacking group have pleaded not guilty to charges related to the August 2024 TfL data breach that caused significant disruption and exposed customer information. The case highlights increasing cyber threats targeting critical infrastructure and the growing cybercriminal activities across the UK and the US. #ScatteredSpider #TfLDataBreach
The FCC has reversed a previous cybersecurity regulation aimed at U.S. telecom carriers following lobbying from industry firms. This rollback comes after severe Salt Typhoon hacking incidents linked to Chinese espionage, which compromised sensitive government and corporate data. #SaltTyphoon #FCC #CybersecurityReversal
CrowdStrike confirmed that a malicious insider leaked screenshots to hackers but assured that their systems and customer data remained secure. Threat groups like ShinyHunters, Scattered Spider, and Lapsus$ are actively targeting organizations, engaging in extortion and data breaches. #ShinyHunters #ScatteredSpider #Lapsus$
Grafana Labs has issued a security warning for a high-severity vulnerability (CVE-2025-41115) affecting its Enterprise platform, which could lead to privilege escalation or impersonation when SCIM provisioning is enabled. The issue is mitigated in cloud services but requires self-managed users to update their software or disable SCIM. #GrafanaLabs #CVE-2025-41115
Microsoft released the KB5072753 out-of-band update to fix a recurring reinstall issue caused by the November 2025 KB5068966 hotpatch on Windows 11 25H2. The update also includes security improvements and supersedes previous patches, ensuring smoother update management. #KB5068966 #KB5072753 #Windows11
Google has enhanced its Quick Share to support cross-platform file sharing with Apple’s AirDrop, ensuring secure and efficient transfers between Android and iOS devices. The feature emphasizes strong security measures, including memory-safe programming and no server routing, while expanding its availability in future Android devices. #AirDrop #QuickShare…
Grafana has issued security updates to fix a severe vulnerability (CVE-2025-41115) affecting versions 12.0.0 to 12.2.1, which could enable privilege escalation or user impersonation. The flaw resides in the SCIM component used for automated user management, and exploitation requires specific configuration settings. #Grafana #CVE2025-41115…
The SEC has voluntarily dismissed its 2023 lawsuit against SolarWinds and its CISO, citing discretion in the decision. SolarWinds expressed satisfaction with the outcome, which follows a court ruling that dismissed most charges for relying on hindsight. #SolarWinds #CISO #Cyberattack2020 #RussianHackers #SEC…
A hacking group linked to China, APT31, infiltrated Russia’s tech sector undetected for years, stealing data from government and system integration companies. The group used sophisticated techniques, including social media routing and timing their operations with holidays, to evade detection and continue their espionage activities. #APT31 #Zirconium #JudgementPanda #RussianCyberThreats…