This week, SOC Minute follows active attacks against edge infrastructure, identity and data breaches, AI-branded phishing, targeted malware, and three distinct ways attackers are poisoning trust across the open-source development ecosystem.

This episode covers 24 cybersecurity stories.

Chapters:

00:00 Opening

00:33 New NetScaler Zero-Day Targeted Attacks Can Disrupt SAML Deployments

01:19 Max severity SonicWall SMA1000 flaw now exploited in attacks

02:12 Cisco warns of critical flaws allowing Nexus switch takeover

03:10 Realtek Jungle SDK Exploit Attempts Spread Cling Botnet via STUN C2

04:05 Danish University DTU Data Breach Exposes Up to 200,000 Users

04:57 Denmark's Population Registry Data Breach Affects 8.8 Million People

05:49 ASOS confirms data breach after hacked in-app notifications

06:42 Hackers Hijack Google Domains via ccTLD Registry Breaches

07:38 China-Aligned TA419 Targets U.S. AI Policy Experts with Microsoft AitM Phishing

08:40 Phishing Platform Targets Credentials via Fake AI Chatbot Ad Portals

09:36 Hackers Use Google Ads and Bing Redirects to Spread Claude ClickFix Malware

10:29 Linux Backdoors Evade Detection by Mimicking Email Security Tools in Asia

11:27 UAC-0099 Deploys ASHVEIN RAT Targeting Ukrainian Government Staff

12:25 Chinese State-linked Hackers Use Automated Tools and Manual Exploits to Steal Data

13:30 Eight Malicious npm Packages Delivered Overlord RAT and Stealer

14:16 FakeGit Malware Campaign Relaunches with Over 17,600 Malicious GitHub Repos

15:21 Credential-Stealing GitHub Actions Workflows Found in Thousands of Repos

16:18 Critical File-Access Flaw Found in Atlassian Jira and Confluence

17:22 Anthropic Launches Free AI Vulnerability Scanner for Open-Source

18:12 Critical Dell System Update Vulnerability Allows Root Privilege Escalation

18:56 Critical Buffer Overflow Found in Savannah lwIP SMTP Client v2.2.1

19:57 Critical Vulnerabilities Found in Grid Protection Alliance openPDC and openHistorian

20:59 Critical LMCache Flaw Allows Unauthenticated Remote Code Execution

21:58 PoeLLM Malware Infects Over 3,400 Servers to Expand Crypto Mining Botnet

22:50 Closing

SOC Minute: https://www.socminute.com

#Cybersecurity #SOC #SecurityNews