Global Cybercrime Disrupted by 'Operation Endgame'; Cl0p Breaches Entrust with Oracle Zero-Day
Summary
This reporting period for November 14, 2025, is dominated by major law enforcement actions and high-stakes cyberattacks. A global coalition led by Europol executed 'Operation Endgame,' dismantling over 1,000 servers tied to prolific malware families. Concurrently, the Cl0p ransomware group exploited a critical Oracle zero-day to breach security firm Entrust. Microsoft also patched an actively exploited Windows Kernel zero-day, while CISA issued an updated warning on the evolving Akira ransomware, which now targets Nutanix virtual machines.
Today New Articles
Checkout.com Rejects Ransom After ShinyHunters Breach, Donates to Research
The global payment processor Checkout.com has disclosed a data breach orchestrated by the ShinyHunters cybercrime group. The attackers exploited a legacy third-party cloud file storage system that was improperly decommissioned. After being contacted with a ran...
Palo Alto Firewalls Vulnerable to Remote Reboot Attack via DoS Flaw
Palo Alto Networks has disclosed a medium-severity denial-of-service (DoS) vulnerability, CVE-2025-4619, affecting its PAN-OS software. The flaw enables an unauthenticated, remote attacker to reboot firewalls by sending specially crafted packets. Repeated expl...
Suspected GRU 'Fancy Bear' Hacker Linked to 2016 Election Interference Arrested in Thailand
A Russian national believed to be Aleksey Lukashev, a high-level military intelligence officer in Russia's GRU, has been arrested in Phuket, Thailand. The arrest was part of a joint operation between Thai authorities and the U.S. FBI. Lukashev is one of 12 GRU...
Team Europe Wins Global Cybersecurity Challenge for Fourth Consecutive Year
For the fourth year in a row, Team Europe has won the International Cybersecurity Challenge (ICC), a prestigious global competition designed to showcase and develop young cybersecurity talent. The event, hosted in Tokyo, Japan, brought together teams from eigh...
Anthropic Disrupts First AI-Orchestrated Cyber Espionage Campaign
AI safety and research company Anthropic has reported disrupting what it believes is the first large-scale cyber espionage campaign orchestrated by an AI with a high degree of autonomy. The company detected a threat actor, assessed to be a Chinese state-sponso...
New Tools From Legit Security and Cyware Tackle AI Code and Ops Risks
As AI adoption accelerates in software development and security, vendors are releasing new solutions to manage the inherent risks. Legit Security has launched 'VibeGuard,' a tool designed to secure AI-generated code within integrated development environments (...
Article Updates
Washington Post Breached by Clop Ransomware via Oracle Flaws
Update:The Cl0p ransomware group has claimed responsibility for breaching digital security firm Entrust. The attack exploited a critical, unpatched zero-day vulnerability in Oracle's E-Business Suite, now identified as CVE-2025-61882. This remote code execution flaw...
Patch Now: Microsoft Scrambles to Fix Actively Exploited Windows Kernel Zero-Day
Update:The Windows Kernel zero-day, CVE-2025-62215, has been assigned a CVSS score of 7.0 (High), confirming its significant impact. Microsoft's own threat intelligence teams reportedly identified and reported the vulnerability, indicating internal awareness of its a...