Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. UNC6384 Deploys PlugX via Captive Portal Hijacks and Valid Certificates Targeting Diplomats
Published: 2025-08-25
A China-nexus threat actor, UNC6384, has been linked to attacks targeting diplomats in Southeast Asia and other entities, using advanced social engineering, valid code signing certificates, and an adversary-in-the-middle attack to deliver the STATICPLUGIN downloader and evade detection.
2. Docker Fixes CVE-2025-9074, Critical Container Escape Vulnerability With CVSS Score 9.3
Published: 2025-08-25
Docker addressed a critical security flaw, CVE-2025-9074, in Docker Desktop for Windows and macOS, with a CVSS score of 9.3, allowing a malicious container to access the Docker Engine and potentially access host system files without authentication.
3. Phishing Campaign Uses UpCrypter in Fake Voicemail Emails to Deliver RAT Payloads
Published: 2025-08-25
A phishing campaign uses fake voicemails and purchase orders to deliver the UpCrypter malware loader, targeting sectors like manufacturing and healthcare, and deploying RATs such as PureHVNC RAT and DCRat to gain control of compromised systems.
4. Weekly Recap: Password Manager Flaws, Apple 0-Day, Hidden AI Prompts, In-the-Wild Exploits & More
Published: 2025-08-25
This week’s cybersecurity recap highlights vulnerabilities in popular password managers susceptible to clickjacking, affecting account credentials and 2FA codes, alongside other issues like Apple 0-day and in-the-wild exploits.
5. Why SIEM Rules Fail and How to Fix Them: Insights from 160 Million Attack Simulations
Published: 2025-08-25
The Picus Blue Report 2025, based on 160 million attack simulations, reveals SIEM systems detect only 1 in 7 simulated attacks, highlighting critical gaps in threat detection and response, leaving networks vulnerable to compromise.
6. Transparent Tribe Targets Indian Govt With Weaponized Desktop Shortcuts via Phishing
Published: 2025-08-25
The APT group Transparent Tribe, also known as APT36, targets Indian Government entities with phishing emails, using weaponized .desktop shortcut files on Windows and Linux BOSS systems to download and execute malicious payloads.
7. The MCP Security Guide for Early Adopters
Published: 2025-08-25
The guide addresses the lack of clear security strategies for thousands of live MCP servers, providing practical insights for security teams to manage MCP environments effectively.
8. Hackers Exploit SendGrid to Steal User Login Credentials in Latest Attack
Published: 2025-08-25
Cybersecurity researchers at the Cofense Phishing Defense Center have identified a new wave of credential harvesting attacks using SendGrid, a trusted cloud-based email service, spoofing sender addresses and mimicking legitimate notifications to distribute phishing emails that evade security gateways.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and explore AI-enhanced security solutions to proactively identify and mitigate risks in your network. Stay safe online!