The Journey of Life.....: Ransomware

Showing posts with label Ransomware. Show all posts

Wednesday, January 21, 2026

Critical AVEVA Software Vulnerabilities Disclosed - AVEVA disclosed seven critical and high-severity vulnerabilities in its Process Optimization software on January 13, 2026, exposing industrial control systems. Source: CyberPress

Ransomware Incidents Increased 37% Between 2024-2025 - Research reports indicate a 37% increase in total ransomware incidents between 2024 and 2025, with hacktivists escalating from DDoS to ICS intrusions and state-aligned campaigns. Source: Dig.Watch
Cisco Secure Email Appliance RCE Exploited in Active Attacks - Cisco discovered active exploitation of a remote code execution vulnerability in Secure Email Appliance, with evidence suggesting attacks began in November 2025. Source: eSecurityPlanet

Aikido - Unified Security Platform for Code & Cloud - Aikido provides a central security platform to secure code, cloud, and runtime environments, automatically finding and fixing vulnerabilities. Source: Aikido

🔒CYBERSECURITY

WatchGuard Firewall RCE Vulnerability CVE-2025-14733 Actively Exploited (December 22, 2025) - Critical RCE flaw CVE-2025-14733 impacts over 115,000 WatchGuard Firebox firewalls running Fireware OS 11.x and later, with active exploitation confirmed in the wild.
Source: BleepingComputer
Fortinet CVE-2025-59718 & CVE-2025-59719 Authentication Bypass (December 22, 2025) - Critical authentication bypass vulnerabilities in Fortinet FortiGate, FortiOS, and FortiWeb are being actively exploited, allowing attackers to bypass security controls and access sensitive data.
Source: Check Point Research
2025 Cybersecurity Threat Analysis - 86% of Exploited Flaws Were High-Severity (December 2025) - Industry analysis reveals that over 86% of exploited vulnerabilities in 2025 were high-severity flaws, many with publicly available exploits, highlighting critical patch management challenges.
Source: InformationWeek

Android Malware Operations Combining Droppers and SMS Theft (December 2025) - Coordinated Android malware campaigns merge multiple attack vectors - fake app distribution, SMS theft, and remote access trojans - primarily targeting users in Uzbekistan.
Source: The Hacker News
OAuth Device Code Phishing Attacks Target Microsoft Accounts (December 2025) - Threat actors are abusing Microsoft OAuth device authorization flows in sophisticated phishing campaigns to bypass MFA and gain persistent access to enterprise accounts.
Source: CSO Online
Kaspersky Warns: 2025 Telecom Threats Continue into 2026 with AI-Driven Risks (December 2025) - Kaspersky security report confirms that APT campaigns, supply chain attacks, and DDoS operations from 2025 will persist, with new AI-driven attack vectors creating additional operational risks.
Source: Kaspersky Press Releases
Hackers Abuse Nezha Monitoring Tool as Trojan for System Control (December 2025) - Security researchers discovered that attackers are weaponizing Nezha, a legitimate server health monitoring tool, to maintain stealth access and complete control over compromised systems.
Source: HackRead

Identity Management Remains Top Cybersecurity Challenge - 29% of Organizations Struggle (December 2025) - According to the 2025 Cisco Cybersecurity Readiness Index, 29% of organizations struggle most with securing identity and access management, making it the second-highest challenge after network security.
Source: InformationWeek / Cisco

Critical CVE Count Dropped in 2025 - 3,753 vs. 4,629 in 2023 (December 2025) - Analysis shows the number of critical vulnerabilities discovered in 2025 decreased to 3,753 compared to 4,629 in 2023 and 4,283 in 2024, though quality concerns remain.
Source: BitSight
Ransomware Attack Volumes Plateau in November, But Methods Evolve (December 22, 2025) - NCC Group's Cyber Threat Intelligence Report shows global ransomware attack volumes plateaued in November, even as threat actors diversify and evolve attack methodologies.
Source: Automation.com
Cisco AsyncOS Exploitation and Industry-Wide Vulnerability Concerns (December 2025) - Security researchers report active exploitation of Cisco AsyncOS vulnerabilities, with evidence suggesting that the next major cyber exploit is a matter of when, not if.
Source: ET Edge Insights

Cisco Patches Critical Zero-Day CVE-2025-20393 - Cisco patches CVE-2025-20393 (CVSS 10.0) in Secure Email Gateway, actively exploited by China-linked APT groups for arbitrary command execution. Source: The Hacker News
WatchGuard Warns of Critical Fireware OS Exploitation - WatchGuard reports active exploitation of CVE-2025-14733, a critical Fireware OS VPN flaw with CVSS score 9.3. Source: The Hacker News
SonicWall SMA1000 Zero-Day Under Active Exploitation - SonicWall discloses zero-day vulnerability in SMA1000 access platform (CVE-2025-40602) under active exploitation via chained attacks. Source: Dark Reading

New UEFI Flaw Enables Early-Boot DMA Attacks - CVE-2025-59230 affects ASRock, ASUS, GIGABYTE, and MSI motherboards, allowing low-privileged users to gain SYSTEM-level access via UEFI firmware. Source: The Hacker News

AI & Cloud Security Breaches 2025 Year Review - Comprehensive analysis of 2025 AI and cloud security breaches including OAuth abuse, prompt injection, deepfake fraud, and shadow AI exposure. Source: Reco Security
AI Agent Attacks Signal New 2026 Risks - Q4 2025 attacks demonstrate early AI agents are expanding attack surface, requiring enterprises to rethink AI security strategies for 2026. Source: eSecurityPlanet
Ransomware Attack 2025 Recap - 2025 ransomware landscape evolved from cybersecurity issue into strategic threat to national security and global economic stability. Source: Cybersecurity News

Tenable Cybersecurity Snapshot - December 19, 2025 - Latest cybersecurity update covering AI prompt injection attacks, AI data security controls, and responsible AI practices. Source: Tenable
Veracode 2025 Year in Review - Veracode reports scanning 420 trillion lines of code in 2025 and releases new AI-powered security solutions for enterprise defense. Source: Veracode Blog