Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. CISA Warns of Active Spyware Campaigns Hijacking High-Value Signal and WhatsApp Users
Published: 2025-11-24
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert about bad actors using commercial spyware and remote access trojans (RATs) to target users of mobile messaging applications like Signal and WhatsApp through sophisticated social engineering and unauthorized access. Examples include Russia-aligned threat actors exploiting Signal’s linked devices feature, Android spyware like ProSpy, ToSpy, and ClayRat impersonating apps to steal data, and exploits of iOS and WhatsApp vulnerabilities as well as a Samsung flaw to deploy spyware like LANDFALL. CISA emphasizes that these campaigns focus on high-value individuals such as government officials and urges best practices like using end-to-end encrypted communications, enabling secure authentication, and updating software to mitigate risks.
2. Initial Guidance on Responding to the SitusAMC Data Breach
Published: 2025-11-25
SitusAMC reported a data security incident on November 12, 2025, impacting corporate data tied to some clients’ relationships and certain data relating to clients’ customers, with services remaining operational while the scope is under investigation. The breach may involve detailed financial information including Social Security numbers in commercial real estate applications, potentially triggering legal implications for corporate clients such as notice obligations under U.S. state laws and GDPR, regulatory notifications to entities like state attorneys general and financial regulators, and risks of litigation or investigations. Corporate clients should promptly assemble stakeholders, review vendor contracts for indemnification and data handling, assess exposed data and cyber insurance, prepare communications, and consult legal counsel to manage the incident.
3. Cybersecurity News Weekly Newsletter – Fortinet, Chrome 0-Day Flaws, Cloudflare Outage and Salesforce Gainsight Breach
Published: 2025-11-18
This week’s newsletter highlights a major Cloudflare outage on November 18, 2025, that caused widespread HTTP 500 errors and disrupted services across platforms like X, ChatGPT, and Spotify, exposing the fragility of centralized internet infrastructure. New Chrome zero-day flaws in the V8 engine, including CVE-2025-13223, have been exploited in the wild for remote code execution, prompting urgent updates. Additionally, a Salesforce Gainsight breach via abused OAuth tokens underscores supply chain risks, while vulnerabilities like a Fortinet FortiWeb command injection flaw (CVE-2025-58034) and exploited XWiki RCE (CVE-2025-24893) demand immediate patching and exposure mitigation.
4. November 2025| The Month the Cyber World Shook — Inside 12 Attacks That Redefined Security
Published: 2025-11-15
In November 2025, the cyber world experienced a series of transformative attacks, including ransomware breaches on banks like Habib Bank AG Zurich by the Qilin gang, malware like Maverick spreading via WhatsApp to steal banking credentials, and critical vulnerabilities in Cisco systems enabling remote code execution. Other incidents involved breaches at Nikkei via personal devices, a Dutch broadcaster RTV Noord facing a media blackout, and ransomware groups like Everest and Anubis targeting airports, airlines, manufacturing, and water suppliers. The month highlighted evolving threats such as AI-powered malware, social app weaponization, and probes into critical infrastructure, underscoring cybersecurity as a battlefield driven by legacy systems and human errors.
5. Updates to NIST Cybersecurity Guidance May Impact Government Contractors
Published: 2025-11-15
The National Institute of Standards and Technology (NIST) has released a final public draft of Special Publication (SP) 800-172 Revision 3, which provides enhanced security requirements for protecting Controlled Unclassified Information (CUI) on nonfederal information systems, particularly for high-value assets or critical programs targeted by Advanced Persistent Threats. This revision supplements NIST SP 800-171 Revision 3 and includes 14 new controls addressing access controls, network segmentation, asset management, and supply chain security practices, such as maintaining a centralized repository for system components. Contractors may benefit from preparing for these updates, as federal agencies could incorporate them into contracts, and the Department of Defense may adopt them in the future for the Cybersecurity Maturity Model Certification (CMMC) Program.
6. SWK Cybersecurity News Recap November 2025
Published: 2025-11-01
November 2025 featured insider threats, social engineering attacks, and a major ransomware campaign targeting enterprise software, alongside legislative efforts to enhance data privacy protections in healthcare. The U.S. Department of Justice indicted three cybersecurity professionals for conducting ransomware attacks while employed as negotiators, using ALPHV/BlackCat tools to extort over $1.2 million from victims. DoorDash confirmed a breach exposing millions of users’ contact information due to a social engineering attack on an employee, marking its third major incident in six years.
7. Switching to Offense: US Makes Cyber Strategy Changes
Published: 2025-11-24
The US plans to release an updated National Cyber Strategy under the Trump administration that adopts a more aggressive stance against attackers targeting companies, government agencies, and citizens, while deepening public-private partnerships and addressing cybersecurity workforce shortages. The strategy aims to coordinate efforts across disparate federal agencies. Experts note that the initiative’s success depends heavily on effective execution.
8. CrowdStrike fires ‘suspicious insider’ linked to cyberattack
Published: 2025-11-21
CrowdStrike terminated an employee suspected of leaking internal screenshots to the hacker collective Scattered Lapsus$ Hunters, who claimed to have compromised systems using stolen data from Gainsight, a CRM provider. The cybersecurity firm refutes the claims of external hacking and attributes the incident to a suspicious insider. This event follows other high-profile cyberattacks where hackers use large language models and social engineering techniques.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using tools like multi-factor authentication and regular software updates to bolster your defenses. Stay safe online!