Week in review: Windows kernel flaw patched, suspected Fortinet FortiWeb zero-day exploited
16
Nov
2025

Week in review: Windows kernel flaw patched, suspected Fortinet FortiWeb zero-day exploited

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Adopting a counterintelligence mindset in…

China-backed hackers launch first large-scale autonomous AI cyberattack
16
Nov
2025

China-backed hackers launch first large-scale autonomous AI cyberattack

Anthropic: China-backed hackers launch first large-scale autonomous AI cyberattack Pierluigi Paganini November 16, 2025 China-linked actors used Anthropic’s AI to…

Network Communication Blocker Tool That Neutralizes EDR/AV
16
Nov
2025

Network Communication Blocker Tool That Neutralizes EDR/AV

A new open-source tool called SilentButDeadly has emerged, designed to disrupt Endpoint Detection and Response (EDR) and antivirus (AV) software…

Multiple Vulnerabilities in GoSign Desktop lead to Remote Code Execution
16
Nov
2025

Multiple Vulnerabilities in GoSign Desktop lead to Remote Code Execution

Multiple Vulnerabilities in GoSign Desktop lead to Remote Code Execution Pierluigi Paganini November 15, 2025 Researchers found a critical vulnerability…

Windows 10
15
Nov
2025

Windows 10 KB5068781 ESU update may fail with 0x800f0922 errors

Microsoft has confirmed it is investigating a bug causing the Windows 10 KB5068781 extended security update to fail to install…

Hacker pointing a finger
15
Nov
2025

Decades-old ‘Finger’ protocol abused in ClickFix malware attacks

The decades-old “finger” command is making a comeback,, with threat actors using the protocol to retrieve remote commands to execute on…

DoorDash reports new data breach after staff member tricked by social engineering
15
Nov
2025

DoorDash hit by data breach after an employee falls for social engineering scam

DoorDash, the popular food delivery company, is once again dealing with a public relations issue following a data breach where…

Jaguar
15
Nov
2025

Jaguar Land Rover cyberattack cost the company over $220 million

Jaguar Land Rover (JLR) published its financial results for July 1 to September 30, warning that the cost of a…

XWiki Servers
15
Nov
2025

RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet

Nov 15, 2025Ravie LakshmananMalware / Vulnerability The botnet malware known as RondoDox has been observed targeting unpatched XWiki instances against…

Cisco Catalyst Center Vulnerability Let Attackers Escalate Priveleges
15
Nov
2025

Cisco Catalyst Center Vulnerability Let Attackers Escalate Priveleges

A serious security flaw in Cisco Catalyst Center Virtual Appliance has been discovered that allows attackers with low-level access to…

PoC Exploit Tool Released for FortiWeb WAF Vulnerability Exploited in the Wild
15
Nov
2025

PoC Exploit Tool Released for FortiWeb WAF Vulnerability Exploited in the Wild

A proof-of-concept (PoC) exploit tool for CVE-2025-64446 has been publicly released on GitHub. This vulnerability, affecting FortiWeb devices from Fortinet,…

RONINGLOADER Weaponized Weaponizes Signed Drivers to Disable Defender and Evade EDR Tools
15
Nov
2025

RONINGLOADER Weaponized Weaponizes Signed Drivers to Disable Defender and Evade EDR Tools

A new threat targeting Chinese users has appeared with a dangerous ability to shut down security tools. RONINGLOADER, a multi-stage…