Breaking News – Cyber Threats (last 6h)
Generated: 2025-12-10 12:00 PST
- Microsoft Teams to warn of suspicious traffic with external domains
BleepingComputer • 2025-12-10 11:32 • www.bleepingcomputer.com
Microsoft is working on a new Teams security feature that will analyze suspicious traffic with external domains to help IT administrators tackle potential security threats. […]
https://www.bleepingcomputer.com/news/security/microsoft-teams-to-warn-of-suspicious-traffic-with-external-domains/ - .NET SOAPwn Flaw Opens Door for File Writes and Remote Code Execution via Rogue WSDL
The Hacker News • 2025-12-10 11:21 • thehackernews.com
New research has uncovered exploitation primitives in the .NET Framework that could be leveraged against enterprise-grade applications to achieve remote code execution.
WatchTowr Labs, which has codenamed the “invalid cast vulnerability” SOAPwn, said the issue impacts Barracuda Service Center RMM, Ivanti Endpoint Manager (EPM), and Umbraco 8. But the number of affected vendors is likely to be
https://thehackernews.com/2025/12/net-soapwn-flaw-opens-door-for-file.html - Over 10,000 Docker Hub images found leaking credentials, auth keys
BleepingComputer • 2025-12-10 10:22 • www.bleepingcomputer.com
More than 10,000 Docker Hub container images expose data that should be protected, including live credentials to production systems, CI/CD databases, or LLM model keys. […]
https://www.bleepingcomputer.com/news/security/over-10-000-docker-hub-images-found-leaking-credentials-auth-keys/ - Ransomware may have extorted over $2.1 billion between 2022-2024, but it’s not all bad news, claims FinCEN report
Graham Cluley • 2025-12-10 08:17 • www.fortra.com
A new report from the United States’s Financial Crimes Enforcement Network (FinCEN) has shone a revealing light on the state of the criminal industry of ransomware.The report, which examines ransomware incidents from 2022 to 2024, reveals that attackers extorted more than $2.1 billion over the three-year period.
Yes, that number is enormous – but it hides a more interesting story beneath it: that after peaking in 2023, ransomware payments actually started to decline.
Read more in my article on the Fortra blog.
https://www.fortra.com/blog/ransomware-may-have-extorted-over-21-billion-between-2022-2024-its-not-all-bad-news-claims - Possible exploit variant for CVE-2024-9042 (Kubernetes OS Command Injection), (Wed, Dec 10th)
SANS ISC Diary (full) • 2025-12-10 07:25 • isc.sans.eduLast year, Kubernetes fixed a command injection vulnerability in the Kubernetes NodeLogQuery feature (%%cve:2024-9042%%) [1]. To exploit the vulnerability, several conditions had to be met:
- Sophos achieves its best-ever results in the MITRE ATT&CK Enterprise 2025 Evaluation
Sophos Security Ops • 2025-12-10 07:03 • news.sophos.com
A major milestone: Sophos XDR delivers 100% detection coverage in the latest ATT&CK Evaluation.
https://news.sophos.com/en-us/2025/12/10/sophos-achieves-its-best-ever-results-in-the-mitre-attck-enterprise-2025-evaluation/ - Why a secure software development life cycle is critical for manufacturers
BleepingComputer • 2025-12-10 07:00 • www.bleepingcomputer.com
Recent supply-chain breaches show how attackers exploit development tools, compromised credentials, and malicious NPM packages to infiltrate manufacturing and production environments. Acronis explains why secure software development life cycle (SSDLC) practices are now critical for evaluating partners and protecting systems. […]
https://www.bleepingcomputer.com/news/security/why-a-secure-software-development-life-cycle-is-critical-for-manufacturers/ - New Spiderman phishing service targets dozens of European banks
BleepingComputer • 2025-12-10 06:53 • www.bleepingcomputer.com
A new phishing kit called Spiderman is being used to target customers of dozens of European banks and cryptocurrency holders with pixel-perfect cloned sites impersonating brands and organizations. […]
https://www.bleepingcomputer.com/news/security/new-spiderman-phishing-service-targets-dozens-of-european-banks/
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
