Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Silver Fox Uses Fake Microsoft Teams Installer to Spread ValleyRAT Malware in China
Published: 2025-12-04
The threat actor Silver Fox is conducting an SEO poisoning campaign using fake Microsoft Teams installers to deploy ValleyRAT malware targeting Chinese-speaking users and organizations.
2. ThreatsDay Bulletin: Wi-Fi Hack, npm Worm, DeFi Theft, Phishing Blasts— and 15 More Stories
Published: 2025-12-04
This week’s cybersecurity roundup covers a DeFi exploit draining $9M from Yearn Finance’s yETH pool, alongside other incidents like Wi-Fi hacks, npm worms, and phishing campaigns.
3. 5 Threats That Reshaped Web Security This Year [2025]
Published: 2025-12-04
AI-powered attacks, evolving injection techniques, and supply chain compromises have forced a rethink of web security strategies in 2025, including the rise of vibe coding leading to exploitable code flaws.
4. GoldFactory Hits Southeast Asia with Modified Banking Apps Driving 11,000+ Infections
Published: 2025-12-04
The GoldFactory cybercrime group is distributing modified banking apps to infect mobile users in Indonesia, Thailand, and Vietnam with Android malware since October 2024.
5. Record 29.7 Tbps DDoS Attack Linked to AISURU Botnet with up to 4 Million Infected Hosts
Published: 2025-12-04
Cloudflare mitigated a 29.7 Tbps DDoS attack from the AISURU botnet, which consists of 1-4 million infected hosts and has targeted telecom, gaming, and financial sectors.
6. FTC Examines Whether TP-Link Misled US Consumers About Its China Split
Published: 2025-12-04
The U.S. Federal Trade Commission is examining whether router maker TP-Link Systems Inc. may have deceived consumers by allegedly concealing its connections to China since its restructuring last year.
7. React2Shell: In-the-Wild Exploitation Expected for Critical React Vulnerability
Published: 2025-12-04
A researcher has pointed out that only instances using a newer feature are impacted by CVE-2025-55182.
8. Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code Execution
Published: 2025-12-03
A critical vulnerability in React Server Components, tracked as CVE-2025-55182, enables unauthenticated remote code execution via malicious HTTP requests to server endpoints.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor and protect your digital assets. Stay safe online!