Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet
Published: 2025-11-15
The botnet malware known as RondoDox has been observed targeting unpatched XWiki instances against a critical security flaw that could allow attackers to achieve arbitrary code execution.
2. Five Plead Guilty in U.S. for Helping North Korean IT Workers Infiltrate 136 Companies
Published: 2025-11-15
The U.S. Department of Justice (DoJ) on Friday announced that five individuals have pleaded guilty to assisting North Korea’s illicit revenue generation schemes by enabling information technology (IT) worker fraud in violation of international sanctions.
3. North Korean Hackers Turn JSON Services into Covert Malware Delivery Channels
Published: 2025-11-14
The North Korean threat actors behind the Contagious Interview campaign have once again tweaked their tactics by using JSON storage services to stage malicious payloads.
4. Researchers Find Serious AI Bugs Exposing Meta, Nvidia, and Microsoft Inference Frameworks
Published: 2025-11-14
Cybersecurity researchers have uncovered critical remote code execution vulnerabilities impacting major artificial intelligence (AI) inference engines, including those from Meta, Nvidia, Microsoft, and open-source PyTorch projects such as vLLM and SGLang.
5. Iranian Hackers Launch ‘SpearSpecter’ Spy Operation on Defense & Government Targets
Published: 2025-11-14
The Iranian state-sponsored threat actor known as APT42 has been observed targeting individuals and organizations that are of interest to the Islamic Revolutionary Guard Corps (IRGC) as part of a new espionage-focused campaign.
6. Ransomware’s Fragmentation Reaches a Breaking Point While LockBit Returns
Published: 2025-11-14
Key Takeaways: 85 active ransomware and extortion groups observed in Q3 2025, reflecting the most decentralized ransomware ecosystem to date.
7. Chinese Hackers Use Anthropic’s AI to Launch Automated Cyber Espionage Campaign
Published: 2025-11-14
State-sponsored threat actors from China used artificial intelligence (AI) technology developed by Anthropic to orchestrate automated cyber attacks as part of a “highly sophisticated espionage campaign” in mid-September 2025.
8. Now-Patched Fortinet FortiWeb Flaw Exploited in Attacks to Create Admin Accounts
Published: 2025-11-14
Cybersecurity researchers are sounding the alert about an authentication bypass vulnerability in Fortinet Fortiweb Web Application Firewall (WAF) that could allow an attacker to take over admin accounts and completely compromise a device.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using tools like vulnerability scanners to monitor your systems for potential risks and automate security patches. Stay safe online!