Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. New TETRA Radio Encryption Flaws Expose Law Enforcement Communications
Published: 2025-08-11
Cybersecurity researchers discovered new security issues in the TETRA communications protocol, including vulnerabilities in its end-to-end encryption that expose it to replay, brute-force attacks, and decryption of encrypted traffic. TETRA is widely used by law enforcement, military, and critical infrastructure operators.
2. Researchers Spot Surge in Erlang/OTP SSH RCE Exploits, 70% Target OT Firewalls
Published: 2025-08-11
Malicious actors have been exploiting a critical Erlang/OTP SSH flaw, CVE-2025-32433, since May 2025, with 70% of detections targeting OT network firewalls, allowing arbitrary code execution. The vulnerability was patched in April 2025 and added to CISA’s KEV catalog in June 2025.
3. WinRAR Zero-Day Under Active Exploitation – Update to Latest Version Immediately
Published: 2025-08-11
WinRAR released an update for CVE-2025-8088, a path traversal vulnerability actively exploited to achieve arbitrary code execution via malicious archive files, fixed in version 7.13 on July 31, 2025. The details of real-world exploitation remain unclear.
4. French Telecom Giant Bouygues Suffers Major Data Breach Exposing 6.4 Million Customer Records
Published: 2025-08-12
Bouygues Telecom, France’s third-largest mobile operator, confirmed a cyberattack that exposed personal data of 6.4 million customers, including contact details, IBANs, and contractual information. The breach, detected on August 4, 2025, was carried out by a known cybercriminal group, and the company has notified affected customers and reported the incident to France’s National Cybersecurity Agency and data protection authority.
5. AI Assistants Vulnerable to Abuse Using Specially Crafted Prompts
Published: 2025-08-07
Zenity has shown how AI assistants such as ChatGPT, Copilot, Cursor, Gemini, and Salesforce Einstein can be abused using specially crafted prompts for data theft and manipulation. This highlights the vulnerability of widely deployed AI technologies to hijacking attacks.
6. CyberArk Patches Vulnerabilities Allowing Unauthenticated Remote Code Execution
Published: 2025-08-07
CyberArk has patched several vulnerabilities that could be chained for unauthenticated remote code execution, addressing critical flaws in their enterprise secure vaults.
7. Google Salesforce Instance Targeted by ShinyHunters
Published: 2025-08-07
A Google Salesforce instance may have been targeted as part of a ShinyHunters campaign that hit several major companies, potentially exposing small business customer information.
8. CISA and Microsoft Issue Advisories for High-Severity Cloud Privilege Escalation Flaw
Published: 2025-08-08
CISA and Microsoft have issued advisories for CVE-2025-53786, a high-severity flaw allowing privilege escalation in cloud environments, urging immediate updates.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider implementing multi-factor authentication and regular security audits to bolster your defenses. Stay safe online!