Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Grafana Patches CVSS 10.0 SCIM Flaw Enabling Impersonation and Privilege Escalation
Published: 2025-11-21
Grafana has released security updates to address a maximum severity vulnerability (CVE-2025-41115) in its SCIM component, allowing potential privilege escalation or user impersonation if SCIM provisioning is enabled and configured. The flaw, introduced in April 2025 and in public preview, could be exploited by a malicious SCIM client to provision users with numeric externalIds, overriding internal user IDs.
2. APT24 Deploys BADAUDIO in Years-Long Espionage Hitting Taiwan and 1,000+ Domains
Published: 2025-11-21
The China-nexus APT24 group has shifted to using the undocumented BADAUDIO malware for persistent access in a three-year campaign targeting Taiwan and over 1,000 domains, including supply chain attacks via a regional digital marketing firm and targeted phishing. The group, also known as Pitty Tiger, has historically focused on sectors like government, healthcare, and telecommunications in the U.S. and Taiwan.
3. SEC Drops SolarWinds Case After Years of High-Stakes Cybersecurity Scrutiny
Published: 2025-11-21
The U.S. Securities and Exchange Commission has voluntarily dismissed its lawsuit against SolarWinds and its CISO, which alleged the company misled investors about security practices leading to the 2020 supply chain attack. The joint motion filed on November 20, 2025, follows accusations of fraud and internal control failures, with no admission of wrongdoing.
4. New Android Banking Trojan Sturnus Enables Credential Theft and Device Takeover
Published: 2025-11-21
Cybersecurity researchers have disclosed details of a new Android banking trojan called Sturnus that enables credential theft and full device takeover to conduct financial fraud. A key differentiator is its ability to bypass encrypted messaging.
5. Tsundere Botnet Actively Expanding and Targeting Windows Users
Published: 2025-11-21
Cybersecurity researchers have warned of an actively expanding botnet dubbed Tsundere that’s targeting Windows users.
6. Nation-State Actors Blurring Lines Between Cyber Attacks and Kinetic Warfare
Published: 2025-11-21
The lines between state-sponsored cyber attacks and kinetic warfare are increasingly blurring, necessitating the need for a new category of warfare. Nation-state threat actors are engaging in cyber reconnaissance activity to enable kinetic targeting.
7. CrowdStrike Confirms Insider Shared Internal Screenshots with Hackers
Published: 2025-11-19
American cybersecurity firm CrowdStrike has confirmed that an insider shared screenshots taken on internal systems with hackers after they were leaked on Telegram by the Scattered Lapsus$ Hunters threat actors.
8. FCC Rolls Back Stricter Telecom Cybersecurity Measures
Published: 2025-11-19
The Federal Communications Commission (FCC) has rolled back a previous ruling that required U.S. telecom carriers to implement stricter cybersecurity measures following the massive hack from the Chinese threat group known as Salt Typhoon.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using tools like multi-factor authentication and regular software updates to enhance your security. Stay safe online!