Apple released security updates across iOS and macOS addressing over 100 vulnerabilities, with 19 issues in WebKit that could lead to memory corruption and browser crashes. With many apps embedding WebKit, organizations should prioritize rapid deployment to reduce exposure from malicious web content.
Source: SecurityWeek
Android’s November update patches critical remote code execution in System component
Google’s November 2025 Android security bulletin fixes two System component bugs, including a critical remote code execution vulnerability. Enterprise mobile fleets should expedite OEM-delivered updates and enforce patch compliance baselines to limit device-wide compromise risk.
Source: SecurityWeek
Google fixes two high‑severity Chrome V8 bugs, pays $100,000 in rewards
Chrome 142 addresses 20 vulnerabilities, including two high‑severity issues in the V8 JavaScript engine that earned researchers $100,000 in bounties. Admins should push 142 enterprise‑wide to mitigate potential exploitation via crafted web content and ensure extensions and legacy apps don’t block auto‑update.
Source: SecurityWeek
New “SesameOp” backdoor abuses OpenAI’s Assistants API as covert C2 channel
Microsoft uncovered a backdoor that uses OpenAI’s Assistants API to fetch commands and relay tasking, blending malicious traffic with legitimate AI service calls. The technique evades traditional detections; defenders should monitor egress to AI endpoints, apply DNS/HTTP controls for LLM services, and hunt for anomalous API usage tied to endpoints.
Source: Microsoft Security Blog
Guest‑to‑RCE XWiki flaw (CVE‑2025‑24893) now widely exploited
Attackers are actively exploiting a February‑patched code injection bug in XWiki’s SolrSearch component that allows arbitrary remote code execution by even “Guest” users. If you run XWiki, urgently apply the vendor’s fix, restrict unauthenticated access, and audit logs for SolrSearch requests and unusual process launches.
Source: SANS Internet Storm Center
UK drinking water suppliers report multiple cyberattacks since 2024
Britain’s water companies disclosed five cyber incidents this year—none impacted water safety, but the pattern underscores rising threats to critical infrastructure. Utilities should harden remote access, segment IT/OT, and validate incident response playbooks for ransomware and data theft scenarios.
Source: Recorded Future News
Cyber‑enabled cargo theft surges as criminals weaponize RMM tools
Researchers are tracking organized crews abusing remote monitoring and management software and logistics tech to hijack shipments and reroute real‑world cargo. Transportation and 3PL firms should lock down RMM access, enforce MFA and allowlists, and monitor for anomalous EDI/TMS actions and geofence violations.
Source: Recorded Future News
You May Also Be Interested In...