Daily Cybersecurity News Roundup – November 20, 2025

Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.

1. ShadowRay 2.0 Exploits Unpatched Ray Flaw to Build Self-Spreading GPU Cryptomining Botnet

Published: 2025-11-20

Oligo Security has warned of ongoing attacks exploiting a two-year-old security flaw in the Ray open-source AI framework to turn infected clusters with NVIDIA GPUs into a self-replicating cryptocurrency mining botnet.

Read more

2. Tsundere Botnet Expands Using Game Lures and Ethereum-Based C2 on Windows

Published: 2025-11-20

Cybersecurity researchers have warned of an actively expanding botnet dubbed Tsundere that’s targeting Windows users and designed to execute arbitrary JavaScript code retrieved from a command-and-control server.

Read more

3. ThreatsDay Bulletin: 0-Days, LinkedIn Spies, Crypto Crimes, IoT Flaws and New Malware Waves

Published: 2025-11-20

This week has seen arrests of hackers, spies using fake job recruiters on LinkedIn, large crypto money-laundering cases, and new malware targeting Apple’s Mac protections, highlighting the rapid evolution of cyber threats.

Read more

4. CTM360 Exposes a Global WhatsApp Hijacking Campaign: HackOnChat

Published: 2025-11-20

CTM360 has identified a rapidly expanding WhatsApp account-hacking campaign targeting users worldwide via deceptive authentication portals and impersonation pages using social engineering tactics.

Read more

5. New Sturnus Android Trojan Quietly Captures Encrypted Chats and Hijacks Devices

Published: 2025-11-20

Cybersecurity researchers have disclosed details of a new Android banking trojan called Sturnus that enables credential theft and full device takeover while bypassing encrypted messaging on apps like WhatsApp and Telegram.

Read more

6. Australia’s Weapons Programs Exposed in Defence Industry Cyber Attacks

Published: 2025-11-19

A series of cyber attacks on defence supply chain contractors has compromised material relating to Australia’s weapons programs, including information on the ADF’s $7 billion Redback infantry fighting vehicle.

Read more

7. Advancing Cybersecurity for Microsoft Environments

Published: 2025-11-18

Sophos has announced advancements in cybersecurity for Microsoft environments, featuring integrations with Microsoft 365 Copilot, Microsoft Defender, and other tools to enhance security operations for SMBs and enterprises.

Read more

8. Hackers Increasingly Target Operational Technology, with Manufacturing Sector Bearing the Brunt

Published: 2025-11-18

Threat actors are increasingly exploiting operational technology in critical sectors, particularly manufacturing, leading to heightened risks and the need for stronger defenses in supply chains.

Read more

Stay Vigilant

Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor and protect your digital assets. Stay safe online!

Scroll to Top