Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Microsoft August 2025 Patch Tuesday Fixes Kerberos Zero-Day Among 111 Total New Flaws
Published: 2025-08-13
Microsoft released patches for 111 vulnerabilities, including a publicly known Kerberos zero-day (CVE-2025-53779) and 16 critical flaws, across its software portfolio.
2. Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code
Published: 2025-08-13
Fortinet has alerted customers to a critical OS command injection vulnerability (CVE-2025-25256) in FortiSIEM, with exploit code already in the wild, affecting multiple versions.
3. Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE Flaws
Published: 2025-08-13
Zoom and Xerox have addressed critical vulnerabilities in Zoom Clients for Windows and FreeFlow Core, including a privilege escalation flaw (CVE-2025-49457) and remote code execution risks.
4. New PS1Bot Malware Campaign Uses Malvertising to Deploy Multi-Stage In-Memory Attacks
Published: 2025-08-13
Cybersecurity researchers have discovered a malvertising campaign deploying PS1Bot, a modular malware framework that performs malicious activities like information theft and keylogging using in-memory execution techniques.
5. Charon Ransomware Hits Middle East Sectors Using APT-Level Evasion Tactics
Published: 2025-08-13
A new ransomware family called Charon is targeting the Middle East’s public sector and aviation industry, using APT-level tactics like DLL side-loading to evade detection.
6. Data Dump From APT Actor Yields Clues to Attacker Capabilities
Published: 2025-08-13
A data dump reveals information on recent campaigns, attack tools, compromised credentials, and command files used by a threat actor believed to be acting on behalf of China or North Korea.
7. Researchers Warn of ‘Hidden Risks’ in Passwordless Account Recovery
Published: 2025-08-13
Passwordless authentication increases risks in account recovery, potentially leading to takeovers, especially by low-skilled attackers.
8. SentinelOne Acquires AI Startup Prompt Security
Published: 2025-08-13
SentinelOne will integrate Prompt Security’s platform, which detects AI tools used in browsers and on desktops, into its Singularity platform.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using tools like AI-powered SOCs to monitor for vulnerabilities and automate security patches. Stay safe online!