Cisco Zero-Day Alert: DoS Attacks Exploit CVE-2025–20333 & CVE-2025–20362

Cisco Zero-Day Alert: DoS Attacks Exploit CVE-2025–20333 & CVE-2025–20362

Monday, November 24, 2025

Top 5 Cybersecurity Stories You Should Know

  1. Cisco Zero-Day Alert: DoS Attacks Exploit CVE-2025–20333 & CVE-2025–20362tl;dr: Cisco Systems has announced a critical zero-day vulnerability affecting its firewall products, specifically CVE-2025–20333 and CVE-2025–20362. This exploit leads to Denial-of-Service (DoS) conditions by causing affected devices, including Cisco Secure Firewall ASA and FTD Software, to enter continuous reboot cycles. Network administrators must act immediately to patch their systems to prevent potential disruptions and ensure network integrity. Stay informed and apply the necessary updates to safeguard your infrastructure against this serious threat.
    https://medium.com/@costigermano/urgent-cisco-firewall-zero-day-alert-new-dos-attack-exploiting-cve-2025-20333-cve-2025-20362-f22c3504d71a

  2. European Commission Issues Burner Phones for US Trips Amid Espionage Concernstl;dr: In response to escalating cyber threats, the European Commission is equipping staff with burner phones and laptops for trips to the US, a precaution typically reserved for visits to nations like China and Russia. This decision reflects heightened concerns regarding espionage and deteriorating relations between the EU and the US. Additionally, a whistleblower has raised alarms about potential data misuse by DOGE, which allegedly accessed sensitive labor data from the National Labor Relations Board. Stakeholders are urged to remain vigilant and consider implementing similar security measures when traveling to high-risk regions.
    https://infosec-mashup.santolaria.net/p/infosec-mashup-16-2025

  3. WhatsApp Vulnerability Exposes 3.5 Billion Users' Phone Numberstl;dr: A significant vulnerability in WhatsApp has been discovered that exposes the phone numbers of approximately 3.5 billion users. This issue stems from the app's contact discovery feature, which has been a concern since warnings were issued to Meta in 2017. The breach raises serious privacy implications for users worldwide. It is crucial for WhatsApp users to review their privacy settings and consider enabling two-factor authentication to enhance their account security. Meta has been urged to address this vulnerability promptly to protect user data and maintain trust.
    https://maniainc.com/wp-content/uploads/geekline-archives/2025/11/archive-2025-11-20.html

  4. Explore 3,129 Cybersecurity Threats Stock Photos on Getty Imagestl;dr: Getty Images offers a vast collection of 3,129 high-resolution stock photos focused on cybersecurity threats. This extensive library includes images related to ransomware, phishing, and other cyber risks, making it an invaluable resource for businesses, educators, and content creators seeking to illustrate cybersecurity topics. Users can find images that depict various aspects of digital security, aiding in the creation of informative content. For those in need of visual assets, leveraging these images can enhance presentations, articles, and marketing materials related to cybersecurity awareness and education.
    https://www.gettyimages.com/photos/cybersecurity-threats

  5. Explore 87,869 High-Res Cybersecurity Stock Photos at Getty Imagestl;dr: Getty Images offers a vast collection of 87,869 high-resolution stock photos related to cybersecurity. These images cover a range of themes, including cybersecurity technology, threats, training, and awareness. Ideal for professionals in the cybersecurity field, marketers, and educators, these visuals can enhance presentations, websites, and educational materials. Users can browse and purchase images tailored to their specific needs, ensuring they find the perfect visual content to support their projects. For those seeking unique and high-quality imagery, Getty Images remains a leading resource in this domain.
    https://www.gettyimages.com/photos/cybersecurity


IoT Hacking, Pentesting & Exploitation — Firmware extraction, UART/JTAG and more.
Explore →


Connect with LufSec

Read more

CISA Alerts on Android Zero-Day Vulnerabilities CVE-2025-48572 and CVE-2025-48633

CISA Alerts on Android Zero-Day Vulnerabilities CVE-2025-48572 and CVE-2025-48633

Thursday, December 4, 2025 Top 5 Cybersecurity Stories You Should Know 1. CISA Alerts on Android Zero-Day Vulnerabilities CVE-2025-48572 and CVE-2025-48633 — tl;dr: The Cybersecurity and Infrastructure Security Agency (CISA) has added two critical Android vulnerabilities, CVE-2025-48572 and CVE-2025-48633, to its Known Exploited Vulnerabilities catalog due to active exploitation. CVE-2025-48572

By Luciano Ferrari
Google Patches Critical Zero-Day Vulnerabilities CVE-2025-48633 & CVE-2025-48572 in Android

Google Patches Critical Zero-Day Vulnerabilities CVE-2025-48633 & CVE-2025-48572 in Android

Tuesday, December 2, 2025 Top 5 Cybersecurity Stories You Should Know 1. Google Patches Critical Zero-Day Vulnerabilities CVE-2025-48633 & CVE-2025-48572 in Android — tl;dr: Google has swiftly addressed critical zero-day vulnerabilities CVE-2025-48633 and CVE-2025-48572 affecting Android versions 13 to 16, amid reports of active exploitation. The vulnerabilities, which include an

By Luciano Ferrari