RadioCSIRT – Your Cybersecurity Update for Monday, 24 November 2025 (Ep.30)

Welcome to your daily cybersecurity briefing.🛡️ CERT-UA Alert: official update released – CERT-UA publishes an expanded update detailing malicious activity targeting educational and public-sector infrastructures, including new technical insights and reinforced hardening recommendations.🧪 CERT-FR: new security advisory – CERT-FR issues a refreshed advisory regarding ongoing vulnerability analysis, highlighting potential operational risks affecting both Windows and Linux environments depending on configuration.✈️ CERT-FR: additional security notice – A second CERT-FR advisory stresses the need for immediate mitigation actions due to the possibility of opportunistic exploitation associated with certain flaws with SYNOLOGY NAS.🔐 NCSC: guidance for selecting an MSP – The NCSC releases updated recommendations to help organisations choose a trustworthy Managed Service Provider, with emphasis on baseline security controls, operational resilience and supply-chain risk management.⚡ Don’t Think - Patch Now  and ask later.📚 Sources:🔗 CERT-UA – Official updatehttps://cert.gov.ua/article/6286219🔗 CERT-FR – Advisory CERTFR-2025-AVI-1035 - SYNOLOGYhttps://www.cert.ssi.gouv.fr/avis/CERTFR-2025-AVI-1035/🔗 CERT-FR – Advisory CERTFR-2025-AVI-1036 - TANZU VMWarehttps://www.cert.ssi.gouv.fr/avis/CERTFR-2025-AVI-1036/🔗 NCSC – Choosing a Managed Service Providerhttps://www.ncsc.gov.uk/guidance/choosing-a-managed-service-provider-msp📞 Your feedback is welcome!📧 Email: [email protected]🌐 Website: https://www.radiocsirt.com📰 Weekly Newsletter: https://radiocsirtintl.substack.com#CyberSecurity #CERTFR #CERTUA #NCSC #MSP #SupplyChainSecurity #RadioCSIRT