Cyber Bulletin

⚡️Massive Ransomware Surge — Last 72 Hours Over the past 72 hours, more than 80 new ransomware victims. #CyberBulletin

⚡️A new FortiWeb vulnerability, CVE-2025-58034, has emerged just days after the previous Fortinet disclosure and is already being exploited in the wild. While medium in severity, early signals suggest it may be chained with CVE-2025-64446, though no official confirmation has been issued at this time. Allows authenticated attackers to execute code via crafted HTTP requests or CLI commands. Affects multiple FortiWeb versions across the 8.x, 7.6.x, 7.4.x, 7.2.x, and 7.0.x branches. No public PoC, but reports of a zero-day exploit for sale are circulating. #CyberBulletin

⚡️TamperedChef Malware Spreads via Fake Software Installers in Ongoing Global Campaign. #CyberBulletin

⚡️Fake Chrome Extension “Safery” Steals Ethereum Wallet Seed Phrases Using Sui Blockchain. #CyberBulletin

⚡️SAP Pushes Emergency Patch for 9.9 Rated CVE-2025-42887 After Full Takeover Risk. #CyberBulletin

⚡️Popular Android-based photo frames download malware on boot. #CyberBulletin

⚡️Hackers are using trusted apps to attack. ThreatLocker’s Ringfencing™ stops them — blocking PowerShell, macros, and other risky actions before they spread. #CyberBulletin

⚡️WhatsApp accounts are being hijacked worldwide via fake WhatsApp Web pages that mimic the official interface exactly — including auto-detected language and country flag. You scan QR or type code → they take your account → message your friends for money + steal everything. #CyberBulletin

⚡️The Wayback Machine, http://openlibrary.org, and some other http://archive.org functions are offline because some network gear has failed. #CyberBulletin

The spread remains limited at this stage.

The trojan, once launched, contacts a remote server over WebSocket and HTTP channels to register the device and receive encrypted payloads in return. It also establishes a WebSocket channel to allow the threat actors to interact with the compromised Android device during Virtual Network Computing (VNC) sessions.

⚡️New Android malware can read your private chats — even on Signal, WhatsApp, and Telegram. It records your screen after messages are decrypted, stealing passwords and banking logins. It even fakes system updates to hide what it’s doing. #CyberBulletin

⚡️Adobe and Qualcomm partner with Saudi-backed Humain to develop Arabic AI content tools. #CyberBulletin

⚡️New ShadowRay attacks convert Ray clusters into crypto miner. Inside the payload code, the researchers found that the attacker appreciates a system with at least eight cores and root privileges, calling it "a very good boy." #CyberBulletin

Hackers have unleashed over 2.3 million malicious sessions against Palo Alto Networks’ GlobalProtect VPN portals since November 14, 2025.

⚡️Hackers Attacking Palo Alto Networks’ GlobalProtect VPN Portals with 2.3 Million Attacks. #CyberBulletin

⚡️Europe is so back. No more cookie banners, if member states approve of the proposal. #CyberBulletin

The changes, proposed by the European Commission, the bloc’s executive branch, changes core elements of the GDPR, making it easier for companies to share anonymized and pseudonymized personal datasets. They would allow AI companies to legally use personal data to train AI models, so long as that training complies with other GDPR requirements.