NetSec News Articles of Interest From the Week of June 9, 2025
Read more cybersecurity news in this edition of NetSec News.
Google Warns of Vishing, Extortion Campaign Targeting Salesforce Customers
A threat actor specializing in voice phishing (vishing) attacks is targeting Salesforce customers in a large-scale data theft and extortion campaign, Google warns. (SecurityWeek)
 |
|
“This campaign underscores that phishing and vishing remain one of the most effective ways for attackers to infiltrate a company’s systems. It is a story we see happening over and over again. While software and infrastructure can be updated, humans essentially cannot be patched – making social engineering tactics very effective. The rapid integration of AI tools like ChatGPT for generating near-flawless phishing emails, and AI powered technology that allows for synthetic voice and video to produce convincing vishing and deepfake calls, only amplifies this threat. Combined with the broader trend of threat actors impersonating IT support personnel, this highlights the urgent need for organizations to prioritize ongoing phishing awareness training and normalize slowing down, and or calling back through known good channels, when accommodating unusual requests.” –Alex Malooley, Tier 2 SOC Analyst at C3 Integrated Solutions |
New Secure Boot Flaw Lets Attackers Install Bootkit Malware, Patch Now
Security researchers have disclosed a new Secure Boot bypass tracked as CVE-2025-3052 that can be used to turn off security on PCs and servers and install bootkit malware. (BleepingComputer)
Popular Chrome Extensions Leak API Keys, User Data via HTTP and Hard-Coded Credentials
Cybersecurity researchers have flagged several popular Google Chrome extensions that have been found to transmit data in HTTP and hard-code secrets in their code, exposing users to privacy and security risks. (The Hacker News)
Microsoft Shares Script To Restore Inetpub Folder You Shouldn’t Delete
Microsoft has released a PowerShell script to help restore an empty ‘inetpub’ folder created by the April 2025 Windows security updates if deleted. As Microsoft previously warned, this folder helps mitigate a high-severity Windows Process Activation privilege escalation vulnerability. (BleepingComputer)
Critical Cisco ISE Auth Bypass Flaw Impacts Cloud Deployments on AWS, Azure, and OCI
Cisco has released security patches to address a critical security flaw impacting the Identity Services Engine (ISE) that, if successfully exploited, could allow unauthenticated actors to carry out malicious actions on susceptible systems. (The Hacker News)
Misconfigured HMIs Expose US Water Systems to Anyone With a Browser
A stray artifact in a TLS certificate led security researchers to an unnerving discovery: hundreds of control-room dashboards for US water utilities were sitting a click away from the public internet, and dozens of them offered full, no-password control over pumps, valves and chemical feeds. (SecurityWeek)
Meet the Author
