AI-Orchestrated Cyber Espionage Uncovered; Logitech Breached by Clop; Google Patches Actively Exploited Chrome Zero-Day
Summary
This intelligence brief for November 18, 2025, covers a landmark AI-driven espionage campaign by a Chinese state actor, a major data breach at Logitech by the Clop ransomware gang exploiting an Oracle zero-day, and an emergency patch from Google for an actively exploited Chrome vulnerability. Additional reports detail critical flaws in WordPress plugins, a defacement attack on Kenyan government websites, and a massive DDoS attack on critical infrastructure.
Today New Articles
Urgent Patch Required: Critical RCE Flaw in W3 Total Cache WordPress Plugin
A critical command injection vulnerability, CVE-2025-9501, with a CVSS score of 9.0, has been found in the W3 Total Cache WordPress plugin, which is active on over one million websites. The flaw allows unauthenticated attackers to achieve remote code execution...
Kenyan Government Websites Defaced in Coordinated Cyberattack
On November 17, 2025, a coordinated cyberattack targeted and temporarily disabled numerous Kenyan government websites. The Ministry of Interior and National Administration confirmed the breach, which impacted the websites of the State House and ministries of H...
Merck Employee Data Breached in Third-Party Vendor Incident
Pharmaceutical giant Merck has confirmed a data breach impacting its current and former employees due to a cybersecurity incident at a third-party service provider, Graebel Companies. The breach, which occurred in September 2025, was disclosed on November 17....
WordPress Security Plugin Ironically Contains Critical File-Read Flaw
A critical vulnerability, CVE-2025-11705, has been discovered in the 'Anti-Malware Security and Brute-Force Firewall' WordPress plugin, which is active on over 100,000 sites. The flaw allows any authenticated user, including low-privilege subscribers, to read...
NSFOCUS Mitigates Massive 843 Gbps DDoS Attack on Critical Infrastructure
Security vendor NSFOCUS has detailed its successful effort to mitigate a massive multi-vector DDoS attack that targeted a critical infrastructure operator in October 2025. The attack peaked at an enormous 843.4 Gbps and 73.6 million packets per second, sustain...
Article Updates
Cl0p Gang Exploits Oracle Zero-Day to Breach Logitech, Washington Post, and More
Update:Logitech has officially confirmed the exfiltration of approximately 1.8 TB of data from its systems by the Cl0p ransomware group, following the exploitation of CVE-2025-61882 in Oracle E-Business Suite. The company filed a disclosure with the SEC, stating that...