Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Hackers Actively Exploiting 7-Zip Symbolic Link–Based RCE Vulnerability
Published: 2025-11-19
A recently disclosed security flaw impacting 7-Zip (CVE-2025-11001) has come under active exploitation in the wild, allowing remote attackers to execute arbitrary code via crafted symbolic links in ZIP files.
2. Python-Based WhatsApp Worm Spreads Eternidade Stealer Across Brazilian Devices
Published: 2025-11-19
A new campaign leverages social engineering and WhatsApp hijacking to distribute the Delphi-based Eternidade Stealer trojan using a Python script that dynamically retrieves C2 addresses via IMAP.
3. WrtHug Exploits Six ASUS WRT Flaws to Hijack Tens of Thousands of EoL Routers Worldwide
Published: 2025-11-19
The Operation WrtHug campaign has compromised over 50,000 end-of-life ASUS WRT routers globally by exploiting six known vulnerabilities to create a massive hijacked network.
4. Fortinet Warns of New FortiWeb CVE-2025-58034 Vulnerability Exploited in the Wild
Published: 2025-11-19
Fortinet has patched CVE-2025-58034, a medium-severity OS command injection vulnerability in FortiWeb (CVSS 6.7) that requires authentication and has been exploited via crafted HTTP requests.
5. CISA Unveils Guide to Combat Bulletproof Hosting Cybercrime
Published: 2025-11-19
CISA, in collaboration with US and international partners, released a guide to help ISPs and network defenders mitigate risks from bulletproof hosting providers used by cybercriminals for ransomware and other malicious activities.
6. Congress Moves to Revive State and Local Cybersecurity Grant Program
Published: 2025-11-19
The U.S. House of Representatives has passed the PILLAR Act, reauthorizing the State and Local Cybersecurity Grant Program through 2033 to enhance cybersecurity for state and local governments without specifying a funding amount.
7. Disrupting the first reported AI-orchestrated cyber espionage campaign
Published: 2025-11-14
Anthropic disrupted a mid-September 2025 cyber espionage campaign orchestrated by a Chinese state-sponsored group, which used AI agentic capabilities via Claude Code to execute large-scale attacks on global targets with minimal human intervention, marking the first documented case of such autonomy in cyberattacks.
8. Fortinet Discloses Second Exploited FortiWeb Zero-Day in a Week
Published: 2025-11-19
An OS command injection flaw, the exploited zero-day allows attackers to execute arbitrary code on the underlying system.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor and protect your digital assets. Stay safe online!