RadioCSIRT - Your Cybersecurity Update for Tuesday, November 4th, 2025 (Ep.7)

Welcome to your daily cybersecurity briefing 🕵️‍♂️🔥🌐 Tor Browser 15.0 — New Release Based on Firefox ESR 140The Tor Project has released version 15.0, integrating a full year of upstream security fixes and introducing vertical tab management.WebAssembly is now handled by NoScript and remains disabled at the Safer and Safest security levels. This is the last version compatible with Android 5–7 and x86 architectures.🧩 MariaDB — Multiple Vulnerabilities PatchedCERT-FR reports several vulnerabilities affecting all versions prior to 11.7.2. The flaws tracked as CVE-2024-21096, CVE-2025-21490, CVE-2025-30693, and CVE-2025-30722 were fixed in the security bulletin issued on May 7th, 2025.💀 Wazuh — Advanced Ransomware DetectionThe open-source Wazuh platform detects ransomware families DOGE Big Balls and Gunra, leveraging MITRE techniques T1486 and T1562. It combines file integrity monitoring, YARA signatures, and VirusTotal integration to block and automatically delete malicious files.⚖️ United States — Indictment Linked to BlackCat RansomwareThree former cybersecurity professionals are accused of carrying out BlackCat / ALPHV ransomware attacks against five U.S. companies. Ransom demands reached up to 10 million dollars, with confirmed payments exceeding 1.2 million.⚠️ JobMonster — Critical Authentication VulnerabilityA critical flaw tracked as CVE-2025-5397 (CVSS 9.8) allows attackers to hijack administrator accounts on WordPress sites using the JobMonster theme. The issue has been fixed in version 4.8.2; disabling the social login feature mitigates exposure.💶 Eurojust — €600 Million Crypto-Laundering Network DismantledNine arrests were made during a coordinated operation between France, Belgium, Cyprus, Germany, and Spain. The network laundered over €600 million through fake cryptocurrency investment platforms using fraudulent websites and celebrity endorsements.⚡️ Don’t think — just patch! 🚀📚 Sources:🔗 https://blog.torproject.org/new-release-tor-browser-150/🔗 https://www.cert.ssi.gouv.fr/avis/CERTFR-2025-AVI-0956/🔗 https://thehackernews.com/2025/11/ransomware-defense-using-wazuh-open.html🔗 https://thehackernews.com/2025/11/us-prosecutors-indict-cybersecurity.html🔗 https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-auth-bypass-flaw-in-jobmonster-wordpress-theme/🔗 https://www.eurojust.europa.eu/news/decisive-actions-against-cryptocurrency-scammers-earning-over-eur-600-million📞 Share your feedback:📧 [email protected]🌐 www.radiocsirt.com📰 radiocsirtintl.substack.com#CyberSecurity #TorBrowser #MariaDB #Wazuh #BlackCat #JobMonster #Eurojust #Ransomware #CERT #SOC #CTI #RadioCSIRT 🎧🔥