Android’s integration of Rust significantly enhances memory safety and accelerates development cycles, with a notable reduction in vulnerabilities. Rust’s adoption is also improving stability, review efficiency, and expanding its use in kernels, firmware, and apps. #Rust #AndroidSecurity…
Category: Cyber Security News
The Kraken ransomware targets multiple systems including Windows, Linux, and VMware ESXi, using innovative techniques to optimize encryption speed without overloading machines. It conducts big-game hunting attacks involving data theft and utilizes a new cybercrime forum for secure communication. #HelloKitty #KrakenRansomware
A critical path traversal vulnerability in Fortinet FortiWeb is actively exploited to create unauthorized administrative users without authentication. Users are advised to update to version 8.0.2, check for suspicious activity, and restrict access to management interfaces. #FortiWebVulnerability #PathTraversal #FortinetExploit
DoorDash disclosed a data breach caused by a social engineering scam that compromised user information, affecting customers, Dashers, and merchants. The incident highlights ongoing cybersecurity challenges faced by the platform, marking its third major breach since 2019. #DoorDash #DataBreach
![Cybersecurity News | Daily Recap [13 Nov 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [13 Nov 2025]")
Daily Recap, Law enforcement dismantled global botnets including Rhadamanthys, VenomRAT, and Elysium across 1,025 seized servers, marking a coordinated takedown. The drive highlights cross-border operations and ongoing efforts to curb botnet-led cybercrime. #Rhadamanthys #VenomRAT #Elysium
The Amazon Threat Intelligence team has identified a sophisticated cyberattack exploiting multiple zero-day vulnerabilities in Cisco ISE and Citrix systems, showing an increased focus on critical identity and access infrastructure. The attackers used custom malware and targeted unpatched systems across the internet, highlighting the severity of the threat. #CiscoISE #CitrixSystems…
A self-spreading npm package campaign named ‘IndonesianFoods’ has published over 100,000 packages, creating a massive volume of junk that could threaten the supply chain. Although initially not malicious, this attack’s scale and automation pose a significant risk for future malware injection. #IndonesianFoods #npmattack
US government agencies warn that the Akira ransomware operation has expanded its encryption capabilities to Nutanix AHV virtual machines, targeting their disk files. Recent investigations reveal that Akira now directly encrypts Nutanix VM disk files with minimal platform interaction, indicating evolving tactics. #AkiraRansomware #NutanixAHV
A Russian-speaking hacking group has registered over 4,300 domains this year to conduct a sophisticated phishing campaign targeting hotel guests through fake booking sites. The campaign employs customized, multi-language fake pages that mimic major travel brands to steal credit card information and personal data. #Booking #Expedia #Agoda #Airbnb #PhishingKit…
U.S. and European governments have issued updated warnings about the Akira ransomware gang, revealing new tactics and vulnerabilities exploited in attacks on organizations like hospitals, schools, and businesses. Akira has ties to the defunct Conti group and has stolen over $244 million, targeting sectors such as healthcare, manufacturing, and education. #Akira…
The U.S. CISA warns that the Akira ransomware group poses an imminent threat to critical infrastructure and uses various exploits and tactics for initial access and persistence. The group has accumulated over $244 million in ransom payments and continues to exploit known vulnerabilities to execute attacks. #AkiraRansomware #Vulnerabilities #CISA…
Kerberoasting is a persistent threat that exploits the Kerberos authentication protocol to escalate privileges within Active Directory environments. Strengthening password policies, encryption, and cybersecurity hygiene can effectively prevent these attacks. #Kerberoasting #ActiveDirectory #ServiceAccounts
The Washington Post suffered a data breach affecting nearly 10,000 employees due to a zero-day vulnerability in Oracle E-Business Suite exploited by the Clop ransomware group. Multiple organizations, including Harvard and American Airlines’ subsidiary, were also affected by the same security flaw. #OracleEBS #Clop #DataBreach #ZeroDayVulnerability
The ImunifyAV malware scanner for Linux servers is vulnerable to a remote code execution flaw that could allow attackers to fully compromise affected systems. CloudLinux has released a fix in version 32.7.4.0, urging users to update immediately. #ImunifyAV #AI-bolit #CloudLinux
Cybersecurity experts have identified a malicious Chrome extension masquerading as a legitimate Ethereum wallet that secretly steals seed phrases through encoding and microtransactions. Users are urged to only use trusted wallet extensions and monitor unusual blockchain activity. #ChromeExtension #EthereumWallet #SeedPhraseTheft…