Cyber Bulletin July Edition 2025

Dear All, In July, cyber threats surged with multiple high-impact incidents. The FortiWeb Zero-Day exploit (CVE-2025-25257) enabled attackers to execute remote code, steal sensitive data, and plant ransomware on vulnerable web application firewalls. Similarly, the Microsoft SharePoint RCE flaw allowed unauthenticated access to internal collaboration portals, exposing confidential files and enabling deeper network infiltration. Nation-state actors targeted critical infrastructure, from energy grids to transportation systems, causing risks of service disruption, espionage, and large-scale data breaches. The stealthy “Plague” PAM Backdoor also emerged, providing persistent, undetected access to Linux/UNIX systems for espionage and further attacks. Alongside these, AI-driven security trends revealed growing risks from cloud misconfigurations, SaaS vulnerabilities, and targeted AI model manipulation, while Kerberoasting attacks re-emerged to exploit Active Directory service accounts for credential theft and privilege escalation. To defend against these threats, organizations must ensure rapid patching, adopt Zero Trust frameworks, enforce multi-factor authentication, deploy AI-driven detection tools, and maintain continuous monitoring across IT and OT environments.