Large group surrounding central laptop displaying code with shields, locks, malware, and geometric security shapes

Daily Dose of Cybersecurity News - August 13, 2025

Written by:Daily Cyber Briefing TeamVerified by:Kirill Gavrilenko

August 13, 2025 9:13 AM 3 min read

Microsoft's August 2025 Patch Tuesday Addresses 107 Vulnerabilities, Including Critical Zero-Day in Windows Kerberos (CVE-2025-53779)

High

What happened

Microsoft released security updates addressing 107 vulnerabilities across its product suite, including a publicly disclosed zero-day flaw in Windows Kerberos (CVE-2025-53779) that allows attackers to escalate privileges to domain administrator.

Who is affected

Organizations utilizing Windows Server 2025 with Active Directory Domain Services and environments employing domain Managed Service Accounts (dMSAs) are particularly at risk.

Why it matters

Exploitation of CVE-2025-53779 could lead to full domain compromise, granting attackers control over critical network resources and sensitive data.

How it could have been prevented

Implementing strict access controls on dMSA attributes and regularly updating systems to address known vulnerabilities.

Relevant professional terms

Zero-Day Vulnerability: A security flaw that is publicly disclosed or exploited before a patch is available.
Domain Managed Service Account (dMSA): A type of account in Windows Server designed to provide automatic password management and simplified service principal name management.

Recommended reading: redmondmag.com

Source: krebsonsecurity.com

Allianz Life Data Breach Exposes 2.8 Million Records in Salesforce Attack

High

What happened

Hackers have leaked 2.8 million records containing sensitive information from Allianz Life's Salesforce system, following a data breach on July 16, 2025, attributed to the ShinyHunters extortion group.

Who is affected

Allianz Life's business partners and customers are impacted, with personal information exposed due to the breach.

Why it matters

The exposure of sensitive data increases the risk of identity theft and fraud for affected individuals and highlights vulnerabilities in third-party cloud-based systems.

How it could have been prevented

Implementing multi-factor authentication, conducting regular security audits of third-party services, and providing comprehensive employee training on social engineering tactics.

Relevant professional terms

Social Engineering: Manipulative techniques used by attackers to deceive individuals into divulging confidential information.
Extortion Group: A cybercriminal organization that steals data and demands payment to prevent its release or misuse.

Recommended reading: bleepingcomputer.com

Source: bleepingcomputer.com

Persistent XZ Backdoor in Docker Hub Linux Images (CVE-2024-3094)

Critical

What happened

Researchers have identified that at least 35 Linux images on Docker Hub still contain the XZ Utils backdoor (CVE-2024-3094), a critical vulnerability first discovered in March 2024. This backdoor allows unauthorized remote code execution through the OpenSSH server.

Who is affected

Users and organizations that have downloaded or are using these compromised Docker images are at risk. Additionally, images built upon these infected base images may also be compromised.

Why it matters

The presence of this backdoor in widely used Docker images poses a significant supply chain risk, potentially allowing attackers to execute arbitrary code on affected systems, leading to data breaches, system compromise, and further propagation of malware.

How it could have been prevented

Regularly scanning Docker images for known vulnerabilities before deployment and promptly removing or updating compromised images can mitigate such risks. Implementing strict supply chain security measures and verifying the integrity of software components are also essential.

Relevant professional terms

Remote Code Execution (RCE): A type of vulnerability that allows an attacker to execute arbitrary code on a target system remotely.
Supply Chain Attack: A cyberattack that targets less secure elements in the supply chain to compromise a system or network.

Recommended reading: BleepingComputer

Source: bleepingcomputer.com

Windows 11 Cumulative Updates KB5063878 and KB5063875 Released

High

What happened

Microsoft released cumulative updates KB5063878 and KB5063875 for Windows 11 versions 24H2 and 23H2, respectively, addressing security vulnerabilities and system issues.

Who is affected

Users of Windows 11 versions 24H2 and 23H2.

Why it matters

These updates include critical security patches and system improvements essential for maintaining system integrity and performance.

How it could have been prevented

Regularly applying system updates and patches as they become available.

Relevant professional terms

Cumulative Update: A package of updates that includes previously released fixes and new improvements.
Patch Tuesday: The second Tuesday of each month when Microsoft releases security patches and updates.

Recommended reading: support.microsoft.com

Source: bleepingcomputer.com

US Government Seizes $1 Million in Cryptocurrency from BlackSuit Ransomware Gang

High

What happened

U.S. federal law enforcement agencies dismantled the BlackSuit ransomware gang, seizing approximately $1 million in cryptocurrency and shutting down their servers and web domains.

Who is affected

Over 450 organizations in the United States, including entities in healthcare, education, public safety, energy, and government sectors, were compromised by BlackSuit since 2022.

Why it matters

The takedown of BlackSuit represents a significant disruption to a major cybercriminal operation responsible for extensive attacks on critical infrastructure, highlighting the ongoing threat posed by ransomware groups.

How it could have been prevented

Implementing robust cybersecurity measures, including regular system updates, employee training on phishing attacks, and comprehensive incident response plans, can mitigate the risk of ransomware infections.

Relevant professional terms

Ransomware: Malicious software designed to block access to a computer system until a sum of money is paid.
Double Extortion: A tactic where attackers not only encrypt data but also threaten to release stolen information unless a ransom is paid.

Recommended reading: CISA Advisory on BlackSuit Ransomware

Source: bleepingcomputer.com