Netizen Blog and News
The Netizen team sharing expertise, insights and useful information in cybersecurity, compliance, and software assurance.
Category: Application Security
-
ShinyHunters, a cybercriminal group active since 2020, evolved from credential theft to targeting major enterprises like AT&T and Salesforce with sophisticated social engineering tactics. Their operations include stealing sensitive data and employing delayed extortion. Collaborating with Scattered Spider, they threaten extensive damage, prompting enterprises to enhance security against such advanced cyber threats.
-
On September 11, 2025, Enlace Hacktivista leaked 600 GB of data from China’s Great Firewall, detailing the operational structure and international reach of China’s censorship efforts. Separately, the FBI warned about hackers targeting Salesforce to steal sensitive corporate data, impacting major companies. Netizen offers cybersecurity solutions to combat such threats.
-
Microsoft’s August 2025 Patch Tuesday addresses 107 vulnerabilities, including a critical zero-day in Windows Kerberos, which allows privilege escalation. Organizations should prioritize patching and limiting access to sensitive attributes. Major vendors like Adobe, Cisco, and Fortinet also released important updates.
-
Threat actors are increasingly weaponizing AI for ransomware attacks, utilizing tools like Claude Code for reconnaissance and extortion. The recent CVE-2025-42957 vulnerability in SAP S/4HANA allows minimal-access users to exploit the system, leading to severe data breaches. Netizen offers solutions for enhanced cybersecurity and operational support for vulnerable clients.
-
ISO/IEC 27001 is a vital framework for effective information security management, emphasizing a structured approach that integrates people, processes, and technology. Certification offers organizations strengthened security, increased client trust, competitive advantages, cost savings, and streamlined compliance. This cultural shift promotes a security-first mindset, enhancing resilience and operational integration across all departments.
-
Researchers have unveiled the ClickFix attack, which exploits AI-generated summaries to deceive users into executing malicious commands. By embedding harmful instructions within HTML using obfuscation techniques, attackers ensure these commands dominate AI outputs. Recommendations for defense include sanitizing inputs and enforcing AI policy compliance to prevent such vulnerabilities.
-
Security vulnerabilities pose significant threats to organizational security. Netizen’s SOC identified five critical vulnerabilities requiring immediate attention. Notably, CVE-2025-7775 affects NetScaler ADC, allowing remote code execution; CVE-2025-53771 enables spoofing in SharePoint; CVE-2025-54948 allows command injection in Trend Micro Apex One, and CVE-2025-8088 involves serious exploitation in WinRAR. CVE-2025-21479 targets Qualcomm GPUs, emphasizing the need for…
-
Iranian hackers have maintained prolonged access to Middle East critical infrastructure through VPN exploits and malware, leveraging vulnerabilities in popular VPNs. Recent vulnerabilities in Citrix and SAP GUI have exposed sensitive data, prompting calls for immediate updates and mitigation strategies. Organizations must adopt robust cybersecurity measures for protection against these threats.
-
Ransomware attacks increasingly target small and mid-sized businesses (SMBs) due to their limited cybersecurity resources and outdated systems. Attackers find vulnerabilities in various entry points, leading to data breaches and ransom payments. Effective defense strategies include endpoint detection, strong access controls, prioritized patching, secured backups, and employee training, supported by specialized cybersecurity solutions like those…
-
Docker has patched a critical container escape vulnerability (CVE-2025-9074) in Docker Desktop, allowing an attacker to break out of container isolation. Meanwhile, a new Linux malware technique uses RAR filenames to deploy the VShell backdoor, exploiting filename parsing for stealth. Organizations are urged to enhance security measures and update software immediately.
Netizen Blog and News 