This week, trusted identity and familiar applications become entry points, exposed enterprise platforms face active exploitation, critical infrastructure reveals persistent visibility gaps, and AI appears as both an attack accelerator and a security boundary of its own.This episode covers 22 cybersecurity stories.Chapters:00:00 Opening00:26 Critical Keycloak Password Reset Flaw Could Let Attackers Hijack Any Account01:25 19 Chrome and Edge Extensions Found Stealing Crypto Wallets02:21 ToxicPanda Android Malware Uses VPN Permissions to Block Google Play03:10 SynkLoader Malware Spreads via Microsoft Teams Phishing Campaign04:07 Critical Avada WordPress Theme Flaw Enables Zero-Click Remote Code Execution04:59 Critical Gitea Vulnerability Exploited in Active Code Injection Attacks05:51 PaperCut NG and MF Zero-Day Flaw Actively Exploited in Attacks06:41 PaperCut issues second emergency patch for exploited NG and MF flaws07:28 Critical cPanel Flaw Lets Single Hosting Customer Gain Root Access08:20 Critical ownCloud Flaw Exploited to Steal Nuclear Records in Philippines09:21 Three CVSS 10.0 ServiceNow Flaws Enable Code Execution and SQL Injection10:14 Critical Vulnerabilities Found in Ebyte NE2-D11 Firmware11:12 Critical Vulnerabilities Found in Xiiaozet LK100W Devices12:00 296K IoT Botnet, 100+ Water Systems Targeted, New SharePoint RCE Chain12:58 US Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches13:48 Nimbus Manticore Expands Toolset With New Backdoor and SSH Tunneler14:41 FBI Disrupts China-Linked QTFY Platforms Targeting U.S. Infrastructure15:29 UAT-10147 Uses AI to Scale Server Attacks and Deploys Advanced Linux Rootkit16:26 OpenAI Reveals Reward Hacking Drove AI Agents to Breach Hugging Face17:21 Securing AI Infrastructure: Protecting Gateways and Control Points18:18 Malicious Webpage Can Poison Local AI Models via NVIDIA NemoClaw19:13 CISA Red Team Tests Expose Critical SOC and Cloud Security Gaps20:27 ClosingSOC Minute: https://www.socminute.com#Cybersecurity #SOC #SecurityNews