The City of Middletown is gradually restoring its cybersecurity systems after a major attack, with utility billing resuming in December and other services returning by early 2026. The ongoing investigation seeks to determine if resident data was compromised, while system recovery continues with support from cybersecurity experts. #MiddletownCyberattack #UtilityRestoration…
Category: Cyber Security News
Cybersecurity risks are soaring ahead of the 2025 Las Vegas Grand Prix, with threats like phishing, QR code scams, and malware targeting attendees and residents. Experts advise caution and strong security practices to prevent data theft and cyberattacks during this high-profile event. #QRCodeScams #PhishingAttacks…
A significant data breach at Italy’s FS Italiane Group and its IT services provider Almaviva led to the leak of 2.3 terabytes of sensitive information. The leaked data includes internal documents, contracts, and technical data, raising concerns about cybersecurity in critical infrastructure sectors. #Almaviva #FSItalianeGroup
Salesforce has identified and responded to unusual activity involving Gainsight-published applications, which may have led to unauthorized access of customer data. The company is actively investigating, revoking tokens, and removing the apps from the AppExchange while reassuring that no platform vulnerabilities were exploited. #ShinyHunters #OAuthTokens…
The SEC has decided to dismiss its lawsuit against SolarWinds and its CISO, related to the 2020 supply chain attack attributed to Russian threat actor APT29. This development follows court dismissals of initial allegations, highlighting ongoing legal and cybersecurity debates. #SolarWinds #APT29…
A critical vulnerability in Asus DSL-series routers (CVE-2025-59367) allows remote attackers to bypass authentication and gain full control over affected devices. CERT-In recommends immediate firmware updates and security best practices to mitigate risks affecting home and small office networks. #CVE-2025-59367 #AsusRouterVulnerability…
Cyber resilience is crucial for organizations integrating GenAI, emphasizing preparation, prevention, and quick recovery from disruptions. As GenAI becomes ubiquitous across industries, implementing strong governance, regular risk assessments, and multi-model strategies are key to maintaining stability and trust. #GenAI #CyberResilience…
![Cybersecurity News | Daily Recap [20 Nov 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [20 Nov 2025]")
Daily Recap, The latest cyber threats span Android banking trojans like Sturnus hijacking devices across Europe, PhaaS kits such as Sneaky2FA, and HijackOnChat/Eternidade Worm targeting WhatsApp. Vulnerabilities from 7-Zip CVE-2025-11001 to W3 Total Cache PHP injections are being actively exploited, while ASUS WrtHug hijacks over 50,000 routers and sanctions hit Russian bulletproof hosting providers. #Sturnus #TamperedChef #Sneaky2FA #HijackOnChat #EternidadeWorm #7Zippercve #WrtHug #HostingSanctions #Photocall #ARCDataSale
China-linked APT24 hackers have been using the sophisticated and previously undocumented BadAudio malware in a three-year espionage campaign targeting Windows systems. Their methods evolved over time, including spearphishing, supply-chain compromises, and website injections to evade detection and conduct targeted espionage activities. #APT24 #BadAudio #CobaltStrike
The FBI does not purchase continuous real-time location data from service providers but does use historical location data from commercial brokers like Babel Street. The agency primarily relies on open-source information during initial counterterrorism investigations, which is considered less intrusive but still carries some privacy risks. #BabelStreet #CounterterrorismInvestigation…
Salesforce alerted customers about a potential data breach involving third-party app Gainsight after detecting unusual activity. The hackers behind the incident are linked to known cybercriminal groups, and affected organizations include numerous industries. #Gainsight #ScatteredSpider #ShinyHunter #SalesforceDataBreach…
The UK’s National Crime Agency uncovered a vast Russian money laundering network linked to drug trafficking, espionage, and sanctions evasion, including activities connected to the Kremlin’s intelligence services. The investigation revealed how illicit funds support Russia’s war economy, including bypassing sanctions through bank networks like Keremet Bank. #Russia #MoneyLaundering…
An exploitation campaign has emerged, targeting a recent RCE vulnerability in Microsoft Windows Server Update Services (WSUS) to distribute the ShadowPad backdoor used by Chinese state-aligned APT groups. Immediate patching and security measures are crucial to prevent further breaches. #CVE202559287 #ShadowPad…
A suspected Russian hacker involved in cyberattacks against U.S. and European government agencies was arrested in Phuket, Thailand. The suspect, potentially Denis Obrezko, is awaiting extradition, with authorities seizing electronic devices and digital wallets. #DenisObrezko #PhuketCyberattackers…
Salesforce is investigating potential unauthorized access to customer data via the Gainsight platform, linked to the threat group Scattered LAPSUS$ Hunters. The incident is similar to a previous breach involving Salesloft Drift, affecting hundreds of organizations including Gainsight. #ScatteredLAPSUS$Hunters #SalesloftDrift…