Cybersecurity Brief – 2025-12-14
Major Incidents or Breaches
- Multiple South Korean CEOs have resigned following recent cyberattacks targeting their companies.
Newly Discovered Vulnerabilities
- A high-severity vulnerability affecting Sierra Wireless AirLink ALEOS routers has been added to CISA’s Known Exploited Vulnerabilities (KEV) catalogue. The flaw enables remote code execution (RCE) and is currently being actively exploited.
Notable Threat Actor Activity
- ClickFix attacks continue to leverage the “Finger” protocol as part of their exploitation tactics.
Trends, Tools, or Tactics of Interest
- AI-powered toys marketed to children have been found to generate conversations about sex, drugs, and Chinese propaganda, raising concerns about content safety and manipulation in consumer AI products.
Regulatory or Policy Developments Affecting the Security Industry
- Prospective travellers to the United States may be required to provide up to five years of social media history as part of entry procedures.