Emergency Windows fixes and actively exploited control planes lead into risks across development tooling, identity, critical infrastructure, mobile devices, and trusted cloud services. The episode connects those incidents through access validation, evidence preservation, and defensive context.

This episode covers 28 cybersecurity stories.

Chapters:

00:00 Opening

00:43 Microsoft Issues Emergency Windows Updates for RDS Failures

01:43 CISA Adds Cisco Secure Email Gateway SQLi to Known Exploited Vulnerabilities

02:48 Dutch NCSC Warns of Imminent Exploitation of Critical Check Point VPN Flaws

03:43 Critical Check Point Flaw Allows Root Privilege Code Execution

04:41 CISA Alerts on Ransomware Exploiting Critical VMware vCenter Flaw

05:37 Critical ScreenConnect Flaw Now Actively Exploited in Real Attacks

06:34 Critical Issabel Framework Flaw Enables Unauthenticated OS Command Execution

07:30 CISA Adds Two Actively Exploited Linux Kernel Vulnerabilities to KEV Catalog

08:34 Critical RCE Flaw in Unbound DNSSEC Validator Fixed in 1.26.1

09:33 Critical Vulnerabilities Discovered in mySCADA myPRO Manager

10:33 Critical Authentication Flaw in Mitsubishi Electric GX Works3 and Motion Control

11:25 Red Heron Exploits Gitea RCE to Compromise 13 Organizations Globally

12:30 Hackers Target Exposed Vite Servers to Steal AWS and Azure Secrets

13:23 Attacker Hijacks AI Coding Assistant, Spreads Malware Across 100 Repos

14:20 Brevo Supply-Chain Attack Injected Malicious Scripts on Customer Sites

15:14 Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts

16:14 Florida DMV Database Breached via Stolen Police Credentials

17:12 KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials

18:12 CenterPoint Energy Confirms Customer Data Stolen in Cyberattack

19:03 Gyazo Server Vulnerability Leads to Theft of 23.6 Million User Records

19:57 Russian Hackers Use AI to Rebuild Malware Faster After Detection

20:52 Hackers Exploit Tencent App Flaw to Deploy GrayRabbit Malware

21:48 Iranian Hackers Deploy Telegram-Controlled Malware Against Dissidents

22:44 Transparent Tribe Deploys New Rust Backdoor Targeting South Asia

23:36 New RatHat Android Malware Uses AI for Automated Device Control

24:27 RatHat Android Malware Exploits ADB to Maintain Shell Access

25:28 3BB Attacker Leveraged MeshCentral Backdoor for Root Access

26:24 CISA Guidance on Using Cyber Decoys to Enhance Detection and Response

27:23 Closing

SOC Minute: https://www.socminute.com

#Cybersecurity #SOC #SecurityNews