Financial Sector Targeting and Browser Patch Velocity: Today's Critical Intel

News

Scattered Spider Pivots to Target the Insurance Industry

Scattered Spider is aggressively targeting the insurance industry, marking a shift in their high-profile, high-pressure attack tactics. This signals that financial services beyond banking are now top-tier targets for sophisticated groups, demanding a rapid reassessment of sector-specific threat models.

Chrome Zero-Day Actively Exploited, Emergency Patch Issued

Google has issued an emergency fix for an actively exploited zero-day in Chrome, tracked as CVE-2025-4664. This is a must-patch situation for anyone managing browser fleets, as public exploit availability and active exploitation shorten the window for action to near-zero.

Court Orders NSO Group to Pay Meta $167M in WhatsApp Pegasus Case

The NSO Group has been ordered by a US court to pay over $167 million to Meta for exploiting WhatsApp to deliver its Pegasus spyware. This verdict sets a major financial precedent that could deter similar commercial surveillance vendors from targeting US platforms and users.

Tools

New Nuclei Template for Ivanti EPMM Critical Vulnerability

A new Nuclei template PR has been merged to detect a critical vulnerability in Ivanti Endpoint Manager Mobile (EPMM). This is a direct, automatable way to check if your environment is exposed to a known remote code execution flaw without manual verification overhead.

Analysis

FBI Warning: End-of-Life Routers Under Active Mass Exploitation

The FBI is warning about widespread exploitation of end-of-life routers, which are often used as cheap infrastructure for botnets and malware distribution. It's a practical reminder that your network's weakest link might not be your latest software, but a forgotten piece of hardware in a remote office.