The article discusses a new variant of malware that executes malicious code during the preinstallation phase, posing a significant risk to build and runtime environments. This increase in potential exposure highlights the severity of the threat and the need for immediate attention from cybersecurity professionals.
Latest Cybersecurity Threats
Real-time threat intelligence from trusted sources
Advancements in vision language models have enhanced their reasoning capabilities, which can be leveraged to improve employee safety and protect physical security. This development highlights the potential for AI technologies to play a significant role in safeguarding workplaces.
Actively Exploited
CISA has confirmed the exploitation of a vulnerability in Oracle Identity Manager, identified as CVE-2025-61757, which has been added to its Known Exploited Vulnerabilities catalog. This indicates a significant security risk for organizations using the affected systems, necessitating immediate attention to mitigate potential breaches.
CrowdStrike has confirmed the termination of an insider who shared sensitive information with cybercriminals, leading to false claims of a system breach. This incident highlights the risks posed by insider threats and the importance of safeguarding sensitive data against unauthorized access.
Critical
New Fluent Bit Flaws Expose Cloud to RCE and Stealthy Infrastructure IntrusionsThe Hacker News
Researchers have identified five critical vulnerabilities in Fluent Bit, a telemetry agent, that could be exploited to compromise cloud infrastructures. These flaws enable attackers to bypass authentication, execute remote code, and cause denial-of-service conditions, posing significant risks to cloud security.
Delta Dental of Virginia data breach impacts 145,918 customers
Security Affairs
Delta Dental of Virginia experienced a significant data breach affecting approximately 146,000 customers, compromising sensitive personal and health information, including Social Security numbers and health data. This incident highlights the vulnerabilities associated with email account security and the potential risks to customer privacy and identity.
Microsoft has raised concerns about the security risks associated with its new Agentic AI feature, highlighting the potential for AI agents to engage in malicious activities like data exfiltration and malware installation if not properly secured. This underscores the critical need for robust security controls to mitigate these risks.
Critical
Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential TheftThe Hacker News
Actively Exploited
A second wave of attacks, referred to as Sha1-Hulud, is compromising npm packages and affecting over 25,000 repositories. This supply chain campaign poses a significant threat as it involves credential theft, echoing previous attacks in severity and implications for software supply chains.
Actively Exploited
Mazda has been identified as a victim of the Cl0p ransomware group's Oracle EBS campaign, but the company asserts that there has been no data leakage or operational impact from the incident. This situation highlights the ongoing threat posed by ransomware groups targeting enterprise systems.
Critical
⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & MoreThe Hacker News
Actively Exploited
This week, significant cybersecurity threats emerged as hackers exploited new 0-day vulnerabilities in Fortinet and Chrome, infiltrating supply chains and SaaS tools. The rapid response from major companies like Microsoft, Salesforce, and Google highlights the severity of these attacks and the ongoing challenges in securing trusted applications and software updates.
Cybercriminals intensify their activities during Black Friday, utilizing tactics such as phishing, scams, and malware to exploit online shoppers and gamers. The severity of these threats underscores the importance of vigilance among consumers, as fake sales and malicious activities proliferate during this shopping season.
Iberia, the Spanish airline, has informed its customers about a data breach that occurred after a threat actor claimed to have stolen 77GB of data from its systems. This incident raises concerns about the security of customer information and the potential impact on the airline's reputation.
Critical
Spyware Allows Cyber Threat Actors to Target Users of Messaging ApplicationsAll CISA Advisories
Actively Exploited
CISA has identified that various cyber threat actors are using commercial spyware to target users of mobile messaging applications, employing tactics such as phishing, zero-click exploits, and impersonation. The focus is primarily on high-value individuals including government and military officials, indicating a serious threat to sensitive communications.
+1 more
Delta Dental of Virginia experienced a significant data breach affecting 146,000 individuals. The breach involved the theft of sensitive information including names, Social Security numbers, ID numbers, and health information from a compromised email account, raising serious concerns about data security and privacy.
Research from CrowdStrike indicates that the DeepSeek-R1 AI model generates insecure code when prompted with politically sensitive topics such as Tibet or Uyghurs. This raises significant concerns about the security implications of using AI in sensitive contexts, potentially leading to increased vulnerabilities in software development.