Cybersecurity — June 1, 2025

### Significant Vulnerabilities Discovered in Linux Distributions Researchers from Qualys have identified two vulnerabilities in Apport and systemd-coredump, affecting Ubuntu, Red Hat Enterprise Linux, and Fedora. The flaws (CVE-2025-5054 and CVE-2025-4598) could allow local attackers to exploit race condition bugs to obtain sensitive information. These vulnerabilities highlight the ongoing risks in widely used Linux distributions and the crucial need for timely updates and patches. [Read more](https://thehackernews.com/2025/05/new-linux-flaws-allow-password-hash.html) ### NIST Proposes New Metric for Evaluating Software Vulnerabilities The National Institute of Standards and Technology (NIST) has introduced a new metric to better evaluate which software vulnerabilities are likely to be exploited. This development aims to refine vulnerability prioritization, helping organizations allocate resources more effectively for remediation efforts. [Read more](https://www.helpnetsecurity.com/2025/06/01/week-in-review-nist-proposes-new-vulnerabilities-metric-flaws-in-nasas-open-source-software/) ### Cisco IOS XE Flaw Exploit Details Released Details of a maximum-severity flaw (CVE-2025-20188) in Cisco IOS XE Software have been released to the public. This vulnerability allows arbitrary file uploads, and its technical disclosure brings the cybersecurity community closer to a potential exploit. Organizations using Cisco technology should review their systems and apply necessary patches or mitigation strategies. [Read more](https://www.bleepingcomputer.com/news/security/exploit-details-for-max-severity-cisco-ios-xe-flaw-now-public/) ### FBI Warns of Filipino Tech Company Involved in Crypto Scams The FBI has issued a warning regarding a Filipino tech company allegedly running extensive cryptocurrency scams. This is part of ongoing efforts to combat fraud and cybercrime, with the FBI urging the public and financial institutions to remain vigilant against such evolving threats. [Read more](https://ciso2ciso.com/fbi-warns-of-filipino-tech-company-running-sprawling-crypto-scams-source-www-darkreading-com/) ### Interlock Ransomware Group's New RATs Affect UK Targets Security firm Quorum Cyber has uncovered two new variants of the NodeSnake Remote Access Trojan (RAT) deployed by the Interlock Ransomware group. These strains target UK higher education and local government sectors, indicating a shift in ransomware tactics. [Read more](https://hackread.com/interlock-ransomware-new-nodesnake-rat-in-uk-attacks/) ### U.S. DOJ Takes Down Cybercrime Domains in International Operation A coordinated international effort led by the U.S. Department of Justice has resulted in the seizure of four domains associated with providing crypting services to cybercriminals. This operation disrupts a significant enabler of malware operations worldwide. [Read more](https://thehackernews.com/2025/05/us-doj-seizes-4-domains-supporting.html) ### You May Also Be Interested In... - [YARA 4.5.3 Release Addresses 5 Bugs](https://isc.sans.edu/diary/rss/31976) - [Google Warns Gmail Users Amid New Privacy Update](https://www.forbes.com/sites/zakdoffman/2025/06/01/google-confirms-gmail-warning-how-to-keep-your-email-account/) - [Samsung's New Galaxy 'Kill Switch' Update Explained](https://www.forbes.com/sites/zakdoffman/2025/06/01/samsungs-galaxy-kill-switch-completely-changes-your-phone/) - [FBI and Police Issue Call Scam Alert](https://www.forbes.com/sites/zakdoffman/2025/06/01/fbi-and-police-warning-if-you-get-this-call-hang-up-immediately/)

A clearer view of today.

Your briefing

A clearer view of today.

Your briefing

Make room for a smarter morning.