⚡ Weekly Recap: Airline Hacks, Citrix 0-Day, Outlook Malware, Banking Trojans and more

Summary: The FBI warned of new attacks by the cybercrime group Scattered Spider targeting the airline sector through social engineering to gain initial access, with Palo Alto Networks Unit 42 and Google Mandiant issuing similar alerts. The weekly roundup also lists high-risk vulnerabilities including CVE-2025-49825 (Teleport), CVE-2025-6218 (WinRAR), CVE-2025-49144 (Notepad++), CVE-2025-36537 (TeamViewer), CVE-2025-4563 (Kubernetes), and an unpatched flaw in Kerio Control.
What's compelling: Scattered Spider is getting in through identity controls rather than exploits, which is why the FBI's guidance centers on strong authentication, identity segregation, and rigorous controls for password resets and MFA registration. The same roundup notes attackers jump on newly disclosed flaws within hours, so a single unpatched CVE on that list is enough to open the door.

Read the original at The Hacker News ↗

Topics: Identity & Access Management
Mentions: CVE-2025-1533 CVE-2025-2135 CVE-2025-2171 CVE-2025-2172 CVE-2025-23264 CVE-2025-23265 CVE-2025-27387 CVE-2025-27915 CVE-2025-3464 CVE-2025-3509 CVE-2025-36004 CVE-2025-36537 CVE-2025-3699 CVE-2025-37101 CVE-2025-4563 CVE-2025-48703 CVE-2025-49144 CVE-2025-49825 CVE-2025-49853 CVE-2025-52562 CVE-2025-6218 CVE-2025-6709
Related: Asus and Adobe vulnerabilities Cyber Risks ·
CVE-2025-6218: RARLAB WinRAR Path Traversal Vulnerability Known Exploited Vulnerabilities · Dec 09, 2025
CVE-2025-48703: CWP Control Web Panel OS Command Injection Vulnerability Known Exploited Vulnerabilities · Nov 04, 2025