Fortinet has confirmed a new FortiWeb flaw — CVE-2025-58034 — already exploited in the wild.

It lets authenticated attackers execute OS commands via crafted requests.

Full story ↓ https://thehackernews.com/2025/11/fortinet-warns-of-new-fortiweb-cve-2025.html

We say “trust but verify.”

In SaaS, most teams trust once—and never verify again. Old tokens stay valid. Apps keep broad access.

That’s how attackers move in quietly.

Gal Nakash explains why Zero Trust fails in practice and what to fix ↓ https://thehackernews.com/expert-insights/2025/11/the-problem-with-trust-but-verify-is.html

🚨 Hackers turned software updates into malware.

ESET found a China-linked group called PlushDaemon using a tool named EdgeStepper to hijack internet routers and reroute updates straight to fake servers.

So that “safe update”? It could install spyware instead.

Full story ↓ https://thehackernews.com/2025/11/edgestepper-implant-reroutes-dns.html

🚨 New exploit found in ServiceNow’s Now Assist AI platform.

Researchers showed one AI agent could recruit others to steal data and send emails — even with protections enabled.

Misconfigurations, not models, opened the door.

How it happened ↓ https://thehackernews.com/2025/11/servicenow-ai-agents-can-be-tricked.html

⚠️ Hackers just took over tens of thousands of old ASUS routers around the world.

They used six known bugs to build a massive hidden network — still active right now. Each router even shares a weird 100-year security certificate.

Full story → https://thehackernews.com/2025/11/wrthug-exploits-six-asus-wrt-flaws-to.html

Hackers are using trusted apps to attack.

ThreatLocker’s Ringfencing™ stops them — blocking PowerShell, macros, and other risky actions before they spread.

Learn how it works → https://thehackernews.com/2025/11/application-containment-how-to-use.html

☁️ Your cloud is growing faster than your security.
🔐 One stolen login could bring it all down.

Join the LIVE session next week and learn how top teams lock it down — without slowing down devs.

👉 Save your spot now → https://thehacker.news/securing-cloud-workloads

🚨 A new WhatsApp worm is spreading fast in Brazil.

It hijacks chats, sends fake messages to all your contacts, and installs a program that steals bank and crypto logins.

... and it updates itself through an email inbox to stay hidden.

Read here ↓ https://thehackernews.com/2025/11/python-based-whatsapp-worm-spreads.html

⚠️ Hackers are exploiting a new 7-Zip flaw right now.

A simple ZIP file can break into Windows through a hidden link trick.

The bug’s been patched — but many still haven’t updated.

Details here (CVE-2025-11001) ↓ https://thehackernews.com/2025/11/hackers-actively-exploiting-7-zip.html

🚨 Hackers are running fake ads for popular apps — and they look 100% real.

Click one, and you install TamperedChef, a backdoor that lets attackers control your computer.

Experts say it’s still spreading.

Read here → https://thehackernews.com/2025/11/tamperedchef-malware-spreads-via-fake.html