Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. China-Linked APT31 Launches Stealthy Cyberattacks on Russian IT Using Cloud Services
Published: 2025-11-22
The China-linked APT31 group has been attributed to undetected cyberattacks targeting the Russian IT sector between 2024 and 2025.
2. Matrix Push C2 Uses Browser Notifications for Fileless, Cross-Platform Phishing Attacks
Published: 2025-11-22
Attackers are using browser notifications as a vector for fileless phishing attacks via a new command-and-control platform called Matrix Push C2.
3. CISA Warns of Actively Exploited Critical Oracle Identity Manager Zero-Day Vulnerability
Published: 2025-11-22
CISA has added a critical Oracle Identity Manager vulnerability (CVE-2025-61757) to its Known Exploited Vulnerabilities catalog due to active exploitation.
4. Grafana Patches CVSS 10.0 SCIM Flaw Enabling Impersonation and Privilege Escalation
Published: 2025-11-21
Grafana has patched a critical SCIM vulnerability (CVE-2025-41115) that could allow user impersonation or privilege escalation under specific configurations.
5. APT24 Deploys BADAUDIO in Years-Long Espionage Hitting Taiwan and 1,000+ Domains
Published: 2025-11-21
The China-nexus APT24 group has used a new malware called BADAUDIO for persistent access in a three-year campaign targeting Taiwan and over 1,000 domains.
6. SEC Drops SolarWinds Case After Years of High-Stakes Cybersecurity Scrutiny
Published: 2025-11-21
The SEC has voluntarily dismissed its lawsuit against SolarWinds and its CISO over allegations of misleading investors about security practices leading to the 2020 supply chain attack.
7. Salesforce Flags Unauthorized Data Access via Gainsight-Linked OAuth Activity
Published: 2025-11-21
Salesforce has detected unusual OAuth activity linked to Gainsight applications, potentially enabling unauthorized access to customer data, and has revoked related tokens.
8. ShadowRay 2.0 Exploits Unpatched Ray Flaw to Build Self-Spreading GPU Cryptomining Botnet
Published: 2025-11-20
Attackers are exploiting an unpatched Ray framework vulnerability (CVE-2023-48022) to create a self-replicating botnet for cryptocurrency mining on infected GPU clusters.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor and protect your digital assets. Stay safe online!