Your daily cybersecurity update for Thursday, November 20, 2025 (Ep. 492)

RadioCSIRT English Edition
RadioCSIRT English Edition
Your daily cybersecurity update for Thursday, November 20, 2025 (Ep. 492)
Loading
/

Welcome to your daily podcast dedicated to cybersecurity.

✈️ Industrial espionage by UNC1549: Iranian hackers deploy DEEPROOT and TWOSTROKE backdoors against aerospace and defense sectors, exploiting VDI access and the supply chain.

🤖 Gmail trains its AI with your data: Google enables email and attachment analysis for its Gemini model by default, requiring a complex manual opt-out to preserve privacy.

🍎 New macOS “DigitStealer”: A fileless malware specifically targeting Apple Silicon chips to exfiltrate credentials and crypto wallets while bypassing standard detections.

🛡️ Massive scan of GlobalProtect VPNs: A coordinated campaign of 2.3 million scan sessions targets Palo Alto Networks portals, foreshadowing imminent vulnerability exploitation.

⚡️ Don’t think, just patch! 🚀

📚 Sources:

🔗 UNC1549 – Iranian hackers use DEEPROOT and TWOSTROKE https://thehackernews.com/2025/11/iranian-hackers-use-deeproot-and.html

🔗 Privacy – Gmail is reading your emails to train its AI https://www.malwarebytes.com/blog/news/2025/11/gmail-is-reading-your-emails-and-attachments-to-train-its-ai-unless-you-turn-it-off

🔗 Malware – Mac users warned about new DigitStealer https://www.malwarebytes.com/blog/news/2025/11/mac-users-warned-about-new-digitstealer-information-stealer

🔗 Infrastructures – GlobalProtect VPN portals probed with 2.3 million scan sessions https://www.bleepingcomputer.com/news/security/globalprotect-vpn-portals-probed-with-23-million-scan-sessions/

📞 Share your feedback:
📧 radiocsirt@gmail.com
🌐 www.radiocsirt.org
📰 radiocsirtintl.substack.com

#CyberSécurité #Espionnage #Gmail #Privacy #MacOS #Malware #PaloAlto #VPN #RadioCSIRT 🎧