This week, attackers target exposed edge infrastructure, compromise trusted software distribution, steal authenticated sessions and cloud credentials, exploit familiar work flows, and turn third-party access into large-scale data exposure.

This episode covers 23 cybersecurity stories.

Chapters:

00:00 Opening

00:27 Active Attacks Exploit Critical Citrix NetScaler Auth Bypass

01:22 Attackers Exploit Two SonicWall SMA 1000 Zero-Days

02:19 China-Linked Fire Ant Targets Cisco Routers to Steal Credentials

03:04 Critical Cisco Nexus 9000 Flaw Lets Remote Attackers Run Code as Root

03:53 New 'Ted' Backdoor Hides in HAProxy to Intercept Web Traffic

04:42 Critical JFrog Artifactory Flaw Exploited Days After Patch

05:49 Coder’s registry compromised to distribute malicious Terraform modules

06:51 BGP Hijack Delivers Malicious Virtualizor Update with Root Access

07:38 CISA Adds Critical Chromium V8 Vulnerability to Exploited Catalog

08:42 GiveWP WordPress Plugin Flaw Lets Hackers Execute Server Commands

09:42 Critical Elementor Pro Flaw Enables Takeover of WordPress Sites

10:27 Critical Langflow Flaw Exploited to Steal OpenAI and AWS Keys

11:15 Anthropic warns of infostealer malware hijacking Claude AI sessions

12:05 The Coding-Agent Trap: Malicious Use of Free LLM Endpoints Exposed

13:08 Microsoft alerts on TerminalFix attacks using reverse tunnels

14:04 ASCII Smuggling Technique Evolves from AI Prompt Injection to Phishing Evasion

15:09 Guildma (Astaroth) Malware Infection via Brazilian Portuguese Email

16:11 Iranian Hackers Use Coding Tests to Deliver Cross-Platform RATs

17:07 US Charges Russian for Malware Campaign Targeting 80,000 Freelancers

18:11 BraZetsu Malware Turns Windows Hosts Into Underground Marketplace Assets

18:56 McKesson Breach Exposes 284 Million Patient Records, ShinyHunters Claims Theft

19:47 Aesto Health Data Breach Exposes Over 9.5 Million Patients

20:45 IDScan sued over breach exposing 153 million driver’s licenses

21:31 Closing

SOC Minute: https://www.socminute.com

#Cybersecurity #SOC #SecurityNews