Daily CyberSecurity

NetSupport RAT Campaign Abuses ClickFix to Infect Hosts; 3 Threat Clusters Use RMM for Covert Access

• Malware

NetSupport RAT Campaign Abuses ClickFix to Infect Hosts; 3 Threat Clusters Use RMM for Covert Access

Do Son October 27, 2025 0

eSentire exposed a surge in NetSupport RAT campaigns using the ClickFix social engineering tactic. Three threat clusters leverage a PowerShell loader to bypass AV and gain full remote access via the RMM tool.

Critical Dell Storage Manager Flaw (CVE-2025-43995, CVSS 9.8) Allows Unauthenticated API Bypass

• Vulnerability Report

Critical Dell Storage Manager Flaw (CVE-2025-43995, CVSS 9.8) Allows Unauthenticated API Bypass

Do Son October 27, 2025 0

Dell patched three flaws in Storage Manager, including a Critical (CVSS 9.8) Auth Bypass (CVE-2025-43995) that allows remote, unauthenticated access to the Data Collector’s APIProxy.war component.

Agenda Ransomware Bypasses EDR by Deploying Linux Binary on Windows via Splashtop; Steals Veeam Credentials

• Malware

Agenda Ransomware Bypasses EDR by Deploying Linux Binary on Windows via Splashtop; Steals Veeam Credentials

Do Son October 27, 2025 0

Trend Research has uncovered a highly sophisticated ransomware campaign by the Agenda group, also known as Qilin,...

Read More Read more about Agenda Ransomware Bypasses EDR by Deploying Linux Binary on Windows via Splashtop; Steals Veeam Credentials

Google Exposes UNC6229 “Fake Career” Campaign Hacking Advertising Accounts with Fake Job Lures

• Cybercriminals

Google Exposes UNC6229 “Fake Career” Campaign Hacking Advertising Accounts with Fake Job Lures

Do Son October 27, 2025 0

Google exposed UNC6229, a Vietnam-based group running "Fake Career" phishing on job boards. They use fake lures to compromise digital advertising accounts and corporate credentials for profit.

Ubiquiti Patches Critical CVSS 10 Flaw in UniFi Access That Exposed Management API Without Authentication

• Vulnerability

Ubiquiti Patches Critical CVSS 10 Flaw in UniFi Access That Exposed Management API Without Authentication

Do Son October 27, 2025 0

Ubiquiti issued an urgent patch for a Critical Auth Bypass flaw in UniFi Access. Attackers with network access can fully take over door management systems.

YouTube Ghost Network Exposed: Coordinated Channels Spread Infostealer Malware via Game/Software Cracks

• Malware

YouTube Ghost Network Exposed: Coordinated Channels Spread Infostealer Malware via Game/Software Cracks

Do Son October 27, 2025 0

Check Point exposed the YouTube Ghost Network, a coordinated op using 3,000+ videos (Game/Software Cracks) to spread Rhadamanthys/Lumma infostealers via fake engagement and external file hosts.

Smishing Triad Uncovered: 194,000+ Malicious Domains Power Global Phishing-as-a-Service Campaign

• Cybercriminals

Smishing Triad Uncovered: 194,000+ Malicious Domains Power Global Phishing-as-a-Service Campaign

Do Son October 27, 2025 0

Unit 42 exposed the Smishing Triad, a PhaaS network that registered 194K+ malicious domains for global smishing. The group impersonates postal/banking services and uses Telegram for its underground market.

OpenWrt Patches ubusd RCE Flaw (CVE-2025-62526) and Kernel Memory Leak (CVE-2025-62525) in DSL Driver

• Vulnerability Report

OpenWrt Patches ubusd RCE Flaw (CVE-2025-62526) and Kernel Memory Leak (CVE-2025-62525) in DSL Driver

Do Son October 27, 2025 0

OpenWrt released v24.10.4 to fix two high-severity flaws: CVE-2025-62526 allows RCE via a heap buffer overflow in ubusd, and CVE-2025-62525 leaks kernel memory via a DSL driver.

China-Aligned APTs Launch “Premier Pass-as-a-Service,” Sharing Access in Coordinated Global Espionage

• Cyber Security

China-Aligned APTs Launch “Premier Pass-as-a-Service,” Sharing Access in Coordinated Global Espionage

Do Son October 27, 2025 0

Trend exposed "Premier Pass-as-a-Service," a model where Earth Estries (access broker) and Earth Naga (APT36) share compromised network access to deploy ShadowPad in a coordinated espionage campaign.

Python RAT Disguised as Minecraft Client Uses Telegram Bot API for Cross-Platform Command & Control

• Malware

Python RAT Disguised as Minecraft Client Uses Telegram Bot API for Cross-Platform Command & Control

Do Son October 27, 2025 0

Netskope exposed a Python RAT (Nursultan Client) disguised as a Minecraft tool. It uses the Telegram Bot API for C2 to steal Discord tokens, credentials, and capture screenshots on Windows, Linux, and macOS.

HashiCorp Patches Vault Flaws: AWS Auth Bypass and Unauthenticated JSON DoS

• Vulnerability Report

HashiCorp Patches Vault Flaws: AWS Auth Bypass and Unauthenticated JSON DoS

Do Son October 27, 2025 0

HashiCorp patched two flaws in Vault: CVE-2025-11621 allows AWS Auth Bypass via IAM role collision, and CVE-2025-12044 allows unauthenticated JSON DoS attack.

CISA Emergency Alert: Critical RCE Flaw (CVSS 10.0) Exposes AutomationDirect PLCs to Unauthenticated Takeover

• Vulnerability Report

CISA Emergency Alert: Critical RCE Flaw (CVSS 10.0) Exposes AutomationDirect PLCs to Unauthenticated Takeover

Do Son October 26, 2025 0

CISA warned of 9 flaws in AutomationDirect PLCs. The Critical RCE (CVE-2025-61934, CVSS 10.0) allows unauthenticated file manipulation on a simulator service. Patch to v4.5.0.x immediately.

Meet Mico: Microsoft Unveils Clippy’s Emotional, AI-Powered Successor for Copilot

• Technology

Meet Mico: Microsoft Unveils Clippy’s Emotional, AI-Powered Successor for Copilot

Do Son October 25, 2025 0

Microsoft unveiled "Mico," a friendly, expressive avatar for Copilot voice mode, and new features like real-time "Groups" collaboration and persistent memory.

EA Partners with Stable Diffusion Creator to Slash Game Development Costs

• Technology

EA Partners with Stable Diffusion Creator to Slash Game Development Costs

Do Son October 25, 2025 0

EA and Stability AI will co-develop generative AI tools for faster asset and texture creation, a move likely aimed at cutting costs amid EA's privatization.

CRITICAL ALERT: Windows Server WSUS Flaw Actively Exploited (CVE-2025-59287, CVSS 9.8)

• Vulnerability Report

CRITICAL ALERT: Windows Server WSUS Flaw Actively Exploited (CVE-2025-59287, CVSS 9.8)

Do Son October 25, 2025 0

Microsoft released an emergency update for a critical WSUS flaw (CVSS 9.8) that allows unauthenticated RCE and is already being actively exploited.

The Memory Tax: OpenAI May Use ChatGPT Memory for Targeted Ads

• Technology

The Memory Tax: OpenAI May Use ChatGPT Memory for Targeted Ads

Do Son October 25, 2025 0

OpenAI is reportedly considering using ChatGPT's memory feature to deliver hyper-personalized targeted advertising, potentially making user conversations a new ad vector.

Critical Rust Coreutils Bug Blocks Automatic Updates on Ubuntu 25.10

• Linux

Critical Rust Coreutils Bug Blocks Automatic Updates on Ubuntu 25.10

Do Son October 25, 2025 0

A bug in Ubuntu 25.10's Rust coreutils prevents automatic system updates on desktop, server, and cloud deployments. Manual patch required.

Apple Loses Landmark UK Antitrust Lawsuit Over ‘Excessive’ App Store Fees

• Technology

Apple Loses Landmark UK Antitrust Lawsuit Over ‘Excessive’ App Store Fees

Do Son October 25, 2025 0

A UK court ruled Apple abused its dominance by charging "excessive and unfair" App Store fees, making it liable for up to £1.5 billion in damages.

OpenAI Buys Mac Automation App to Give ChatGPT System-Level Control

• Technology

OpenAI Buys Mac Automation App to Give ChatGPT System-Level Control

Do Son October 25, 2025 0

OpenAI acquired Software Applications, the team behind the Mac app Sky, to integrate system-level automation and agentic AI capabilities into ChatGPT.

The Domino Effect: AWS Outage Caused by DNS Automation Race Condition

• Technology

The Domino Effect: AWS Outage Caused by DNS Automation Race Condition

Do Son October 25, 2025 0

AWS confirmed its 15-hour US-EAST-1 outage was caused by a DynamoDB DNS automation race condition that wiped out all service IP addresses.

Cloud Gaming for Free: Amazon Luna Relaunches as a Free Prime Perk

• Technology

Cloud Gaming for Free: Amazon Luna Relaunches as a Free Prime Perk

Do Son October 25, 2025 0

Amazon Luna relaunches with a new smartphone-controlled "GameNight" mode and a selection of AAA titles now free for all Amazon Prime members.

The 30% Mandate: How Microsoft’s Unrealistic Profit Goal Crippled Xbox Studios

• Technology

The 30% Mandate: How Microsoft’s Unrealistic Profit Goal Crippled Xbox Studios

Do Son October 25, 2025 0

Microsoft imposed an "unrealistic" 30% profit margin target on Xbox, far above the 17-22% industry average, leading to layoffs and canceled titles.