Cybersecurity — May 13, 2025

### Horabot: A New Age Stealth Phishing Threat Fortinet researchers have identified a resurgent phishing threat named "Horabot." This sophisticated phishing campaign uses a multi-stage attack sequence involving phishing, credential theft, and further propagation, making it a dangerous adversary for cybersecurity teams. As phishing remains a significant cyber threat, understanding the mechanics of this campaign is crucial in preventing data breaches. [Read more](https://www.fortinet.com/blog/threat-research/horabot-unleashed-a-stealthy-phishing-threat) ### Ransomware Evolution in 2025 On Anti-Ransomware Day, Check Point published insights on the current ransomware landscape, highlighting 2025 as potentially the most hazardous year yet for ransomware attacks. The report underscores the shift from basic encryption schemes to full-fledged extortion ecosystems, emphasizing the need for increased vigilance and advanced defense mechanisms. [Continue Reading](https://blog.checkpoint.com/security/ransomware-reloaded-why-2025-is-the-most-dangerous-year-yet-2/) ### Major Zero-Day Vulnerability in Output Messenger Exploited A zero-day vulnerability in the Output Messenger app has been exploited in cyber espionage operations targeting Kurdish military operations by Turkish-aligned hackers. This incident highlights vulnerabilities in communication platforms that can lead to severe security breaches, underscoring the importance of timely software updates and patches. [Learn more](https://www.microsoft.com/en-us/security/blog/2025/05/12/marbled-dust-leverages-zero-day-in-output-messenger-for-regional-espionage/) ### SAP Visual Composer Vulnerability Beckons Opportunistic Attacks A critical vulnerability in SAP's Visual Composer tool has drawn opportunistic attacks from threat actors exploiting previously planted webshells. These threats highlight the ongoing risk to enterprise systems dependent on legacy software and underline the necessity for continuous monitoring and prompt vulnerability management. [More Details](https://www.helpnetsecurity.com/2025/05/12/compromised-sap-netweaver-instances-attacks-opportunistic-threat-actors/) ### Apple Addresses Significant Vulnerabilities with Latest Security Updates Apple's May 2025 security update addresses 65 different vulnerabilities across iOS and macOS platforms, plugging critical security holes that could potentially allow unauthorized remote code execution through maliciously crafted files. This reinforces the importance of maintaining current software updates to safeguard against exploitation. [Read full article](https://isc.sans.edu/diary/rss/31942) ### You May Also Be Interested In... - **Law Enforcement Cracks Down on Proxy Botnets**: A joint effort by US and Dutch authorities leads to the takedown of major proxy services used in cybercriminal activities. [Read more](https://www.securityweek.com/us-announces-botnet-takedown-charges-against-russian-administrators/) - **Germany Seizes Assets in eXch Cryptocurrency Platform**: German authorities disrupt operations of a major cryptocurrency swapping service linked to laundering activities. [Learn more](https://www.securityweek.com/german-authorities-take-down-crypto-swapping-service-exch/) - **AI-Powered Scam Detection in Chrome**: Google introduces a new real-time scam detection feature in its Chrome browser, aiming to protect users against tech support scams. [Further reading](https://www.scworld.com/brief/google-to-deploy-ai-powered-scam-detection-in-chrome)

A clearer view of today.

Your briefing

A clearer view of today.

Your briefing

Make room for a smarter morning.