Cyber Defense Solutions @CyberDefenseSol

🛑 WARNING: CVE-2025-20393 is rated 10.0, with no patch available. Cisco confirmed active exploitation of an AsyncOS zero-day by a China-linked APT. The flaw allows root-level command execution on affected email security appliances and enables attackers to establish persistence. 🔗 Details and mitigations → thehackernews.com/2025/12/cisco-…

🚨 PRC state-sponsored APT actors are using BRICKSTORM malware, a sophisticated backdoor, to target govt & #CriticalInfrastructure. Our 🆕 Malware Analysis Report, derived from an #IncidentResponse engagement, details IOCs & mitigation steps. Act now! cisa.gov/news-events/an…

CSIS highlights how the Chinese Communist Party weaponizes global cyber supply chains, embedding vulnerabilities and compromising foreign tech infrastructure, posing significant national security risks for the U.S. in the ongoing tech rivalry. #CyberSecu… csis.org/blogs/strategi…

It’s #ComputerSecurityDay! Yes, it's a thing. Your computer holds your life—memories, money, work. Treat it like it matters: 🔐 Strong passwords 🛡️ MFA 💾 Backups

12 Ways of Keeping Your Computer Secure ⬇️ 1. Encrypt Your Hard Drive 2. Backup Your Data 3. Add a Webcam Cover 4. Set a Strong Password 5. Install Anti-Malware and Anti-Virus 6. Keep Firewall Up to date 7. Add a Privacy Screen 8. Use a VPN 9. Setup Location Finding 10. Setup an MFA 11. Fasten Your Laptop with Kensington Cable 12. Keep Software up to date

VLAN!!! | IPCisco CCNA Course: ipcisco.com/course/ccna-ce… . Packet Tracer Lab Files: ipcisco.com/cisco-packet-t… . #cisco #ccna #networkengineers

Hello everyone, Cybersecurity Awareness Month is here again! We’ve crafted a comprehensive content calendar for October’s Cybersecurity Awareness Month. Please share any additional topics you’d like us to explore or cover that aren’t already on our list.

🚨 WhatsApp 0-Click Vulnerability Exploited Using Malicious DNG File Read more: cybersecuritynews.com/whatsapp-0-cli… 📌 WhatsApp 0-click remote code execution (RCE) vulnerability affecting Apple’s iOS, macOS, and iPadOS platforms, detailed with a proof of concept demonstration. 📌 The attack chain exploits two distinct vulnerabilities, identified as CVE-2025-55177 and CVE-2025-43300, to compromise a target device without requiring user interaction. 📌 The exploit, demonstrated in a proof-of-concept (PoC) is initiated by sending a specially crafted malicious (DNG) image file to a victim’s WhatsApp account. 📌 As a “zero-click” attack, the vulnerability is triggered automatically upon receipt of the malicious message, making it particularly dangerous as victims have no opportunity to prevent the compromise. #cybersecuritynews #whatsapp

Government agencies from the UK, US and eight other countries are claiming the notorious Chinese APT group Salt Typhoon has received help from several commercial tech companies to further its cyber-espionage goals. Read the full story here: infosecurity-magazine.com/news/chinese-t…

🚨 Hackers Exploit Microsoft Teams, Posing as IT Help Desk for Screen Sharing and Remote Access Read more: cybersecuritynews.com/hackers-exploi… A sophisticated phishing campaign has been identified, where threat actors impersonate IT helpdesk personnel through Teams' external communication features, exploiting the platform's default configuration to bypass traditional email security measures and gain unauthorized screen-sharing and remote-control capabilities. The attacks leverage Teams' external collaboration features, which are enabled by default in Microsoft 365 tenants, allowing attackers to initiate contact with organizational users without prior authentication. #cybersecuritynews #malware #microsoftteams

Just announced! Learn more: cisa.gov/news-events/ne… 📷

🚨 Critical Chrome Use After Free Vulnerability Let Attackers Execute Arbitrary Code Read more: cybersecuritynews.com/chrome-use-aft… 👉 Google has released an emergency security update for Chrome to address a critical use-after-free vulnerability (CVE-2025-9478) in the ANGLE graphics library that could allow attackers to execute arbitrary code on compromised systems. 👉 The vulnerability affects Chrome versions prior to 139.0.7258.154/.155 across Windows, Mac, and Linux platforms. 👉 The security flaw was discovered by Google’s Big Sleep AI-powered vulnerability research team on August 11, 2025, and has been assigned the highest CVSS severity rating. #cybersecuritynews #chrome

cybersecuritynews.com/exfiltrate-win…

🚨Copilot Vulnerability Breaks Audit Logs and Access Files Secretly for Hackers Read more: cybersecuritynews.com/copilot-vulner… A significant security vulnerability has been discovered in Microsoft's Copilot for M365 that allowed users, including potential malicious insiders, to access and interact with sensitive files without leaving any record in the official audit logs. Under normal circumstances, when a user asks Copilot to summarize a file, the action is recorded in the M365 audit log, a crucial feature for security monitoring and compliance. By simply adding a command for Copilot not to provide a reference link to the summarized file, the AI assistant would act without triggering any log entry. #cybersecurity #Microsoftcopilot

🚨 Microsoft Teams Request Weaponized to Gain System Access and to Drop Malware Read more: cybersecuritynews.com/microsoft-team… ➡️ A sophisticated social engineering campaign by the EncryptHub threat group that combines impersonation tactics with technical exploitation to compromise corporate networks. ➡️ The Russian-linked cybercriminals are posing as IT support staff and using Microsoft Teams requests to establish remote access, ultimately deploying malicious payloads through a previously unknown Windows vulnerability. ➡️ The attack begins with threat actors claiming to be from internal IT departments and sending Microsoft Teams connection requests to targeted employees. #cybersecuritynews

🚨 FortiSIEM Vulnerability Lets Attackers Execute Malicious Commands - PoC Found in the Wild Read more: cybersecuritynews.com/fortisiem-vuln… A critical security vulnerability in the Fortinet FortiSIEM platform allows unauthenticated attackers to execute arbitrary commands remotely. The vulnerability stems from improper neutralization of special elements used in operating system commands within FortiSIEM's architecture. Specifically, the flaw allows remote unauthenticated command injection through crafted Command Line Interface (CLI) requests targeting the system. #cybersecuritynews #vulnerability

🚨 Windows User Account Control Bypassed Using Character Editor to Escalate Privileges | Read more: cybersecuritynews.com/windows-user-a… A sophisticated new technique that exploits the Windows Private Character Editor to bypass User Account Control (UAC) and achieve privilege escalation without user intervention, raising significant concerns for system administrators worldwide. The attack disclosed by Matan Bahar leverages eudcedit.exe Microsoft’s built-in Private Character Editor, located in C:\Windows\System32, which was originally designed to create and edit End-User Defined Characters (EUDC). #cybersecuritynews #windows

GPT-5 is here. Rolling out to everyone starting today. openai.com/gpt-5/