Cybersecurity Roundup: Critical Flaws, Espionage Campaigns, and Major Breaches Recent weeks have seen a surge in high-profile cybersecurity incidents, from long-standing vulnerabilities to sophisticated espionage operations and large-scale data breaches. Critical Vulnerabilities Exploited The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added multiple flaws to its Known Exploited Vulnerabilities (KEV) catalog, including: - A Mirasvit Full Page Cache Warmer flaw, now actively exploited. - Android and Linux Kernel vulnerabilities, posing risks to mobile and enterprise systems. - A SolarWinds Serv-U flaw, adding to the company’s history of supply chain attacks. - A Cisco Unified Communications Manager (CM) bug, with public exploit code now available, heightening urgency for patches. In a separate discovery, researchers identified a four-year-old vulnerability in Zcash’s privacy layer, raising concerns about potential undetected exploitation. Meanwhile, a new VS Code zero-day was publicly disclosed after a researcher lost confidence in Microsoft’s vulnerability handling process. Espionage and Targeted Attacks - Gamaredon, a Russian-linked threat group, exploited a WinRAR vulnerability in a modular spy campaign targeting Ukrainian entities. - A cyber espionage operation breached a stock exchange executive’s Outlook account, underscoring the risks of high-value phishing. - Russia’s FSB reported that foreign intelligence services infected officials’ phones with malware, highlighting state-sponsored surveillance threats. - The Silent Ransom Group (SRG) shifted to DNS fast flux infrastructure, complicating detection and attribution. Data Breaches and Botnet Threats - ShinyHunters leaked data from DentaQuest, exposing 2.6 million individuals after a breach. - A Meta AI recovery tool flaw compromised over 20,000 Instagram accounts, demonstrating risks in authentication systems. - The IoT botnet C0XMO evolved to include competitor-killing capabilities, enabling attacks on rival botnets. Law Enforcement Actions Authorities dismantled nine crime groups linked to illegal streaming, resulting in 29 arrests and disrupting a major piracy ecosystem. Separately, researchers uncovered PCPJack, a 230-node cloud email relay network used for malicious campaigns. These developments reflect the escalating complexity of cyber threats, from zero-days and state-backed espionage to large-scale data leaks and botnet warfare.