Recent cybersecurity incidents reveal a rise in international espionage, targeted hacking campaigns, and vulnerabilities in widely used systems and devices. These stories highlight the ongoing efforts of governments, cybercriminals, and security researchers to adapt and respond to new online threats. #LinkedInEspionage #OracleVulnerability…
Category: Cyber Security News
The US, UK, and Australia have imposed sanctions on Russian BPH service providers, their subsidiaries, and associated individuals for supporting cybercriminal activities such as ransomware and DDoS attacks. These actions aim to disrupt the infrastructure used in cyber threats targeting critical infrastructure and organizations worldwide. #MediaLand #AezaGroup…
A Chinese state-sponsored group has compromised over 50,000 Asus routers worldwide by exploiting known vulnerabilities, establishing a persistent espionage network. This campaign, linked to Operation WrtHug, leverages high-severity bugs in the AiCloud service and involves the installation of long-lasting TLS certificates. #OperationWrtHug #AsusRouterVulnerabilities…
Doppel, an AI-driven social engineering defense provider, has raised $70 million to enhance its threat detection and training capabilities. The company’s platform is used by Fortune 500 firms to combat increasingly sophisticated AI-boosted cyber attacks. #Doppel #AIThreatDetection…
ENISA has achieved CVE Root status within the global CVE Program, elevating its role in coordinating vulnerability management across Europe. This milestone enhances EU-wide cybersecurity efforts, supporting responsible disclosure and vulnerability tracking. #ENISA #CVEProgram…
Cyble and BOCRA have signed an MoU to enhance Botswana’s cybersecurity defenses through advanced threat intelligence and capacity building initiatives. This collaboration aims to improve incident response, reduce cyber risks, and develop a skilled cybersecurity workforce in Botswana. #DarkWebMonitoring #BotswanaCybersecurity…
A new security vulnerability in all previous versions of 7-Zip, CVE-2025-11001, allows remote code execution through malicious archive files. Organizations are urged to update to version 25.00 to prevent potential exploitation. #CVE2025-11001 #7ZipVulnerability…
A new Android banking Trojan called Sturnus can intercept encrypted messages from platforms like Signal, WhatsApp, and Telegram, while taking over the device completely. Its advanced capabilities include decrypting communication, stealing credentials, and performing remote control for malicious activities, posing a serious threat to European users. #Sturnus #AndroidTrojan
The founders of the Samourai Wallet cryptomixer have been sentenced to prison for facilitating the laundering of over $237 million in illicit funds. The operation, which used features like Whirlpool and Ricochet to obfuscate transactions, was taken down with server seizures and app removal. #SamouraiWallet #BitcoinMoneyLaundering
Cybercriminals are using fake installers disguised as legitimate software to spread malware through the ongoing TamperedChef malvertising campaign. The attacks aim to establish persistent backdoors and potentially facilitate financial gain or data theft. #TamperedChef #BaoLoader…
Cyber actors affiliated with Iran are increasingly enabling physical attacks through cyber reconnaissance, blurring the lines between digital and kinetic warfare. Amazon highlights a growing trend where cyber operations directly support real-world military and maritime targets. #ImperialKitten #MuddyWater #IRGC #Houthi #IranianThreats…
Palo Alto Networks is acquiring observability platform provider Chronosphere for $3.35 billion to enhance its AI-driven monitoring and incident detection capabilities. This strategic move aims to improve real-time observability and resilience in AI data centers, building on recent acquisitions like CyberArk and Protect AI. #Chronosphere #PaloAltoNetworks…
SolarWinds has released patches for three critical vulnerabilities in its Serv-U enterprise file transfer solution, addressing issues that could allow attackers with admin privileges to execute arbitrary code. These vulnerabilities are actively tracked and have been exploited or are at risk of exploitation by threat actors. #SolarWinds #ServU #CVE202540549 #CISA…
Black Friday holiday shopping faces a surge in scams, with cybercriminals impersonating major brands and exploiting consumer urgency. Consumers are advised to verify retailer legitimacy, enable security measures, and report suspicious activity to prevent falling victim to scams. #Amazon #FakeCouponOffers…
![Cybersecurity News | Daily Recap [19 Nov 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [19 Nov 2025]")
Daily Recap, Cloudflare faced a global outage due to an internal database permissions/configuration error, not a cyberattack, while Fortinet’s FortiWeb flaws prompted a 7-day patch window per CISA. The recap highlights multiple evolving threat vectors, including AI-assisted intrusions (Tuoni), phishing and MFA bypass, ransomware supply chain activity (ShinySp1d3r, PlushDaemon), and state-sponsored and politically sensitive cyber operations.
#Cloudflare #FortiWeb #Tuoni #Sneaky 2FA #DoorDash Incident #ShinySp1d3r #PlushDaemon #LG Ransomware #W3 Total Cache #WrtHug #ShadowRay #Pajemploi Breach #CCTV Hack #Airline Broker #Meta Bounties #Denmark DDoS #National Cyber Strategy