Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. DOJ Charges 22-Year-Old for Running RapperBot Botnet Behind 370,000 DDoS Attacks
Published: 2025-08-20
A 22-year-old man from Oregon has been charged with developing and overseeing the RapperBot botnet, used for large-scale DDoS attacks since 2021.
2. North Korea Uses GitHub in Diplomat Cyber Attacks as IT Worker Scheme Hits 320+ Firms
Published: 2025-08-20
North Korean threat actors used GitHub as a command-and-control channel in a spear-phishing campaign targeting diplomatic missions between March and July 2025.
3. Experts Find AI Browsers Can Be Tricked by PromptFix Exploit to Run Malicious Hidden Prompts
Published: 2025-08-20
Researchers demonstrated a PromptFix technique that tricks AI-driven browsers into executing malicious instructions embedded in fake CAPTCHA checks.
4. FBI Warns FSB-Linked Hackers Exploiting Unpatched Cisco Devices for Cyber Espionage
Published: 2025-08-20
The FBI reported that the Russian group Static Tundra is exploiting a seven-year-old Cisco vulnerability for cyber espionage targeting multiple sectors globally.
5. DOM-Based Extension Clickjacking Exposes Popular Password Managers to Credential and Data Theft
Published: 2025-08-20
Popular password manager plugins are vulnerable to a new DOM-based extension clickjacking technique that could steal credentials and sensitive data with a single click.
6. Hackers Weaponize Active Directory Federation Services and office.com to Steal Microsoft 365 logins
Published: 2025-08-20
A phishing campaign is stealing Microsoft 365 credentials by exploiting Active Directory Federation Services (ADFS) to redirect users.
7. New Salty 2FA PhaaS Attacking Microsoft 365 Users to Steal Login Credentials
Published: 2025-08-20
A new Phishing-as-a-Service framework called Salty 2FA is targeting Microsoft 365 users in the US and Europe to steal login credentials.
8. Lenovo AI Chatbot Vulnerability Let Attackers Run Remote Scripts on Corporate Machines
Published: 2025-08-20
A critical vulnerability in Lenovo’s AI chatbot Lena allows attackers to execute malicious scripts on corporate machines.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider implementing robust endpoint protection and regular security audits to safeguard your systems. Stay safe online!