![Cybersecurity News | Daily Recap [25 Oct 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [25 Oct 2025]")
Daily Recap, Critical WSUS flaw in Windows Server is being actively exploited prompting an emergency patch and urgent mitigation guidance; OpenAI Atlas Omnibox vulnerability and Shadow Escape 0-click exploit raise concerns over AI assistants exposing data stores. Compromised YouTube accounts distribute an infostealer and a large YouTube malware network was taken down by Google and Check Point; a global smishing triad tied to 194,000 malicious domains fuels phishing campaigns. #WSUS #AtlasOmnibox #ShadowEscape #YouTubeInfostealer #SmishingTriad
Vulnerabilities & Exploits
- Critical WSUS flaw in Windows Server is being actively exploited, prompting an emergency patch and urgent mitigation guidance – WSUS Patch, WSUS Exploit
- Attackers are mass-targeting sites by exploiting outdated WordPress plugins in widespread automated campaigns – WP Plugin Attacks
AI & LLM Risks
- OpenAI Atlas Omnibox is vulnerable to jailbreaks and a related Shadow Escape 0-click exploit demonstrates how AI assistants could expose vast data stores – Atlas Omnibox, Shadow Escape
Malware & Phishing Campaigns
- Compromised YouTube accounts were used to distribute an infostealer, and a separate massive YouTube malware network was taken down by Google and Check Point – YouTube Infostealer, YouTube Takedown
- A global smishing operation tied to a smishing triad has been connected to 194,000 malicious domains used in phishing campaigns – Smishing Triad
Ransomware
- Ransomware attacks have surged in 2025, with new actor groups and shifting tactics pushing incident counts higher and reshaping the threat landscape – Ransomware Surge
Security Research & Disclosure
- A withdrawn Pwn2Own attempt left only low-risk bugs disclosed to Meta, derailing a $1M WhatsApp exploit prize and raising questions about contest outcomes – WhatsApp Flop
Policy & Oversight
- The US will attend the UN cybercrime treaty signing in Hanoi despite industry concerns about the agreement’s implications – UN Treaty
- Republican lawmakers have demanded information from the company behind TeaOnHer after describing some content as “seemingly illegal” and seeking oversight details – TeaOnHer Probe
Cloud & Availability
- An AWS outage traced to a major DNS failure in DynamoDB disrupted services globally, prompting remediation and reliability commitments from Amazon – AWS Outage