Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Zero-Click Agentic Browser Attack Can Delete Entire Google Drive Using Crafted Emails
Published: Dec 05, 2025
A new agentic browser attack targeting Perplexity’s Comet browser can wipe a user’s entire Google Drive contents via a seemingly innocuous email, leveraging browser access to automate tasks like reading emails and deleting files.
2. Critical XXE Bug CVE-2025-66516 (CVSS 10.0) Hits Apache Tika, Requires Urgent Patch
Published: Dec 05, 2025
A critical XXE injection vulnerability (CVE-2025-66516, CVSS 10.0) in Apache Tika affects tika-core, tika-pdf-module, and tika-parsers modules, allowing attacks via crafted XFA files in PDFs, with patches available in specified versions.
3. Chinese Hackers Have Started Exploiting the Newly Disclosed React2Shell Vulnerability
Published: Dec 05, 2025
China-linked groups Earth Lamia and Jackpot Panda are exploiting CVE-2025-55182 (React2Shell, CVSS 10.0) in React Server Components for unauthenticated remote code execution, patched in React versions 19.0.1, 19.1.2, and 19.2.1.
4. Aisuru Botnet Powers Record DDoS Attack Peaking at 29 Tbps
Published: December 5, 2025
Cloudflare recently mitigated a new record-breaking Aisuru attack that peaked at 14.1 Bpps.
5. Apple, Google Send New Round of Cyber Threat Notifications to Users Around World
Published: December 5, 2025
Apple and Google have sent a new round of cyber threat notifications to users around the world, announcing their latest effort to insulate customers against surveillance threats.
6. Chinese-Linked Hackers Use Back Door for Potential ‘Sabotage,’ US and Canada Say
Published: December 4, 2025
Chinese-linked hackers are using a back door for potential sabotage, according to statements from the US and Canada.
7. Hackers Ready Threat Campaign Aimed at Zendesk Environments
Published: Dec. 1, 2025
Researchers warn that hackers linked to recent social engineering attacks are targeting customer-service platforms.
8. Calendly-Themed Phishing Attacks Used by Hackers to Steal Google Workspace Accounts
Published: December 3, 2025
A recent large-scale phishing campaign has been uncovered, targeting Google Workspace and Facebook Business account users through convincing Calendly-themed pages.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using tools like multi-factor authentication and regular software updates to enhance your security. Stay safe online!