RadioCSIRT English Edition

Your Cybersecurity update for Wednesday, November 19, 2025 (Ep.491)

00:00 /

Welcome to your daily cybersecurity podcast.

🛰️ Europol dismantles multiple digital piracy services after investigators traced more than EUR 47 million in crypto assets linked to illegal IPTV, streaming, and content-distribution platforms;
🛡️ CISA adds a newly identified and actively exploited vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, requiring federal agencies to apply patches under strict timelines;
⚠️ PlushDaemon supply-chain attacks: threat actors are hijacking legitimate software update mechanisms to deliver malicious payloads and compromise environments through trusted distribution channels;
📹 Large-scale CCTV compromise: thousands of connected surveillance cameras hijacked for coordinated cybercriminal operations, including unauthorized internal access, reconnaissance, and further attack staging;
🎭 New Browser-in-the-Browser phishing kit: an advanced toolset capable of cloning authentication portals—including MFA flows—to bypass modern protections and steal credentials and session tokens;
🏢 Eurofiber breach confirmed: attackers exfiltrated sensitive customer data and attempted extortion following the November 13 intrusion, with stolen information allegedly shared or offered for sale;
🛰️ EdgeStepper implant: a stealthy network-level malware capable of rerouting DNS traffic through compromised routers and intermediary devices, enabling manipulation, interception, and redirection of network flows.

⚡️ Don’t think—patch! 🚀