This week, SOC Minute follows active exploitation from exposed enterprise systems and persistent web compromise into stolen identities, targeted malware, and the growing role of AI in data exposure, social engineering, and automated attacks.

This episode covers 18 cybersecurity stories.

Chapters:

00:00 Opening

00:40 Attackers Exploit Oracle PeopleSoft Flaw to Deploy Web Shells

01:50 WordPress Backdoor Rebuilds Itself Using Files, Database, and Shared Memory

02:46 Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC and Gateway

03:46 Cisco Warns of Critical Authentication Bypass in SD-WAN Manager

04:57 CISA Adds New Fortinet FortiMail Vulnerability to Exploited Catalog

06:06 Critical FortiMail Zero-Day Allows Unauthenticated Arbitrary File Writes

07:20 Dell CSM Flaws Allow Unauthenticated Admin and Root Access on Kubernetes

08:21 Critical Vulnerabilities Found in Armatura One Affecting Access Control Systems

09:38 Warlock Ransomware Exploits SharePoint in Water and Telecom Attacks

10:33 French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Weeks

11:31 Star Blizzard Advances Phishing and Malware with RedFlick Technique

12:29 Lunex Stealer Uses AMD Driver to Evade Security and Steal Credentials

13:27 NeedyMantis: Modular Malware Threat in Targeted Intrusions

14:24 China-Linked UAT-11587 Targets Asian Governments with Antino Backdoor

15:16 OpenAI Agents Accidentally Uploaded User Images to Third-Party Sites

16:29 80,000+ Organizations Exposed by Stolen AI Logins and LLMjacking

17:39 Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures

18:49 Automated AI Agent Used to Breach Cybersecurity Nonprofit DIVD

20:00 Closing

SOC Minute: https://www.socminute.com

#Cybersecurity #SOC #SecurityNews