Fortinet has disclosed a new security vulnerability (CVE-2025-58034) in FortiWeb that is actively exploited in the wild, requiring authentication for an attacker to execute system commands. The company has issued patches for various versions but has not released an advisory, raising concerns about delayed communication and defensive preparedness. #FortiWeb #CVE-2025-58034…
Category: Cyber Security News
Microsoft announced a range of security improvements across its products, primarily focusing on Defender, Sentinel, and AI-driven security tools at Ignite 2025. These enhancements aim to enhance attack detection, threat mitigation, and unified security management for cloud, AI, and serverless environments. #MicrosoftDefender #Sentinel #CyberThreatProtection…
A significant Cloudflare outage on November 18, 2025, was caused by an internal configuration error involving a permissions change in their database, leading to widespread service disruptions. The incident initially raised fears of a cyberattack but was ultimately attributed to internal system malfunctioning. #Cloudflare #ClickHouse #AisuruAttack…
DoorDash experienced a cybersecurity breach caused by a social engineering attack that compromised some user contact information. The company responded quickly by shutting down access, enhancing security, and notifying affected users. #SocialEngineering #DataBreach…
A nationwide hacking operation in India compromised over 50,000 CCTV systems, including hospital, residential, and commercial feeds, exposing sensitive footage. This case highlights critical vulnerabilities in surveillance security protocols and raises concerns about privacy, especially for women. #GujaratHacking #CCTVBreach…
![Cybersecurity News | Daily Recap [18 Nov 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [18 Nov 2025]")
The recap highlights a Chrome 142 zero-day that was exploited in the wild, ongoing state-backed campaigns, ransomware incidents, and high-profile breaches affecting major organizations. It also notes law-enforcement disruption of infrastructure, widespread vulnerability disclosures, and notable DDoS and supply-chain abusing campaigns impacting vendors and public services. #ChromeZeroDay #SpearSpecter #RoningLoader #UnderArmour #LogitechBreach #PennsylvaniaAG #PrincetonBreach #JaguarLandRover #AkiraRansomware #EVALUSION #Aisuru
A major airline-owned data broker plans to cease selling hundreds of millions of travel records to government agencies amid legal and ethical concerns. The move follows lawmakers’ criticism over unauthorized access to Americans’ travel data and the violation of privacy laws by the IRS. #ARC #TravelIntelligenceProgram…
UNC1549, a threat group possibly linked to Iran, has expanded its cyber-espionage activities across aerospace, aviation, and defense sectors using sophisticated techniques and customized malware. The group employs dual attack strategies, exploiting trusted third-party vendors and launching targeted spear-phishing campaigns for long-term intelligence gathering. #UNC1549 #IranThreatGroup…
Microsoft will integrate Sysmon directly into Windows 11 and Windows Server 2025, eliminating the need for standalone installation. This integration simplifies deployment and enhances security monitoring capabilities, supporting advanced event filtering and threat detection. #Sysmon #WindowsIntegrations
Fortinet has issued security updates to fix a zero-day vulnerability in FortiWeb (CVE-2025-58034) that hackers are actively exploiting. This flaw allows authenticated attackers to execute unauthorized code through crafted HTTP requests, emphasizing the need for immediate patching. #FortiWeb #CVE-2025-58034
Microsoft introduces new Windows 11 recovery features, Cloud Rebuild and Point-in-Time Restore (PITR), to help reduce downtime and enhance system recovery. These features are part of the Windows Resiliency Initiative and will be integrated into Microsoft Intune by 2026. #Windows11 #Resiliency #CloudRebuild #PITR
ShadowRay 2.0 is a cyberattack campaign exploiting a known flaw to hijack Ray Clusters for cryptomining, data theft, and DDoS attacks. This campaign highlights the ongoing danger of unpatched vulnerabilities and the use of AI-generated payloads in cyber threats. #CVE-2023-48022 #ShadowRay
Thunderbird 145 now offers full native support for Microsoft Exchange using the EWS protocol, eliminating the need for third-party add-ons. This enhances seamless message synchronization, folder management, and simplifies migrating from Outlook to Thunderbird. #MicrosoftExchange #EWS
Cybercriminals are increasingly using Browser-in-the-Browser (BitB) and other advanced techniques to enhance phishing attacks, especially targeting services like Microsoft accounts. These innovations showcase the ongoing evolution of phishing Tactics and phishing-as-a-Service ecosystems. #BitB #Sneaky2FA…
Pro-Russian hackers, specifically the group NoName057(16), targeted Danish political and government websites with DDoS attacks before local elections, but no voting was affected. These cyber incidents are part of a broader pattern of increased pro-Russian cyber activity across Europe, targeting electoral and governmental infrastructure. #NoName057(16) #DanishElectionAttacks…