Do Son A Critical DLL Hijacking flaw (CVE-2025-13051) in ASUSTOR Backup Plan/EZSync allows local attackers to gain SYSTEM privileges by planting a malicious DLL in a user-writable path. Update immediately.
A Critical DoS flaw (CVE-2025-65015) in joserfc allows unauthenticated attackers to overwhelm log/SIEM systems by injecting massive JWT payloads into exception messages.
CISA, NSA, and FBI released a guide to dismantle Bulletproof Hosting (BPH) networks. It advises ISPs on precision filtering and stricter vetting to curb infrastructure used by ransomware and phishing campaigns.
A deep-dive on Lazarus’s ScoringMathTea RAT reveals a full reflective DLL injection system, TEA/XTEA C2 encryption, and a polyalphabetic cipher for API hashing—a highly evasive tool for espionage.
A 42-day Akira ransomware attack started with one ClickFix CAPTCHA that deployed SectopRAT. The attackers went undetected despite EDRs, stealing 1 TB and deleting cloud storage backups.
Cybereason exposed The Gentlemen, a new, technically advanced Go-based RaaS using XChaCha20/Curve25519 crypto. The group claimed 48 victims in 3 months, leveraging WMI and PowerShell for propagation.
Akamai exposed a malware that hides RAT C2 traffic by spoofing LLM chat-completion API requests on Tencent Cloud Serverless Functions. The payload is delivered via LNK/Sangfor DLL sideloading.
Trend Research warns that ransomware is shifting to AWS S3, exploiting misconfigured IAM and SSE-C keys in five attack variants to cause irreversible data loss and cloud-native extortion.
Broadcom exposed a group deploying multiple RMM tools (ScreenConnect, LogMeIn, Naverisk) weeks apart to achieve redundant persistence. The likely Initial Access Broker (IAB) prepares systems for resale.
Apache patched a Critical RCE flaw (CVE-2025-64408) in Causeway allowing authenticated attackers to execute arbitrary code via Java deserialization in the ViewModel component. Update to v3.5.0.
Microsoft will introduce a feature for public display systems (digital signage) to hide crash screens (BSOD) after 15 seconds, making the system appear off rather than crashed.
Following major crashes, Microsoft will phase out OEM kernel-level driver privileges, forcing a shift to native drivers or user mode to prevent system-wide operating system failures.
cybernewswire
Tel Aviv, Israel, 19th November 2025, CyberNewsWire
Palo Alto, California, 19th November 2025, CyberNewsWire
Cloudflare CEO Matthew Prince confirmed the global outage was not a DDoS attack but an internal error: a database permission change corrupted a critical Bot Management config file.
Microsoft unveiled Work IQ for Copilot, a cognitive upgrade for proactive assistance. New Agent Mode integrates GPT-5, Sora 2, and Anthropic models across M365 apps.
Apple has, for various reasons, adjusted AirDrop so that it now defaults to receiving content only from...
Dutch police seized 250 servers from a bulletproof hosting provider (CrazyRDP) used by cybercriminals since 2022, facilitating over 80 cybercrime investigations.
Singapore, Singapore, 19th November 2025, CyberNewsWire
Windows 11 is getting new recovery tools: Point-in-Time Restore (default 24-hr snapshots) and Network-Enabled WinRE for automatic driver and internet access.
Google launched Gemini 3, its "most intelligent model yet," alongside the Antigravity platform for agentic development, Generative UI, and deep integration in Search.
Microsoft is investing $10B in Anthropic (and NVIDIA $5B), fueling fears of an AI bubble. Anthropic committed to buying $30B in Azure cloud capacity in the process.