Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Iranian Infy APT Resurfaces with New Malware Activity After Years of Silence
Published: 2025-12-21
Threat hunters have detected new activity from the Iranian APT group Infy, nearly five years after its last observed operations targeting victims in Sweden, the Netherlands, and Turkey, highlighting its continued relevance and danger.
2. U.S. DOJ Charges 54 in ATM Jackpotting Scheme Using Ploutus Malware
Published: 2025-12-20
The U.S. Department of Justice has indicted 54 individuals linked to the Venezuelan gang Tren de Aragua for using the Ploutus malware to hack ATMs and dispense cash across the U.S.
3. 100+ Cisco Secure Email Devices Exposed to Zero-Day Exploited in the Wild
Published: 2025-12-21
Security researchers have identified at least 120 Cisco Secure Email Gateway and Cisco Secure Email and Web Manager devices vulnerable to a critical zero-day.
4. Microsoft Rolls Out Baseline Security Mode for Office, SharePoint, Exchange, Teams, and Entra
Published: 2025-12-20
Microsoft has begun deploying Baseline Security Mode across Microsoft 365 tenants, a new dashboard in the M365 Admin Center that centralizes recommended security configurations.
5. Cybersecurity Professionals Plead Guilty to Launching Ransomware Attacks
Published: 2025-12-20
In a shocking betrayal of industry trust, two former cybersecurity professionals have pleaded guilty to federal charges for launching ransomware attacks against U.S. businesses.
6. CISA Releases New Indicators of Compromise Tied to BRICKSTORM Malware
Published: 2025-12-20
The Cybersecurity and Infrastructure Security Agency (CISA), along with the National Security Agency (NSA) and Canadian Centre for Cyber Security (Cyber Centre), has released indicators of compromise tied to BRICKSTORM malware.
7. Hackers Weaponize SVG Files and Office Documents to Target Windows Users
Published: 2025-12-20
Cybersecurity researchers have uncovered a sophisticated email campaign deploying a commodity loader to distribute Remote Access Trojans and information stealers targeting Windows users.
8. 25,000+ FortiCloud SSO-Enabled Devices Exposed to Remote Attacks
Published: 2025-12-21
Over 25,000 FortiCloud SSO-enabled devices have been found exposed to remote attacks due to misconfigurations.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to trusted sources like The Hacker News or Cybersecurity News for real-time alerts, and prioritize regular vulnerability scans and employee training to bolster your defenses. Stay safe online!