Senior Cyber Safety Briefing – October 10, 2025

🚨ALERT – Critical GoAnywhere MFT vulnerability exploited in the wild (CVE‑2025‑10035)
👉Why it matters – A zero‑day flaw in GoAnywhere (used for file transfers) is already being weaponized by ransomware actors (Storm-1175/Medusa). 
📣Call to Action – If any systems you or your contacts use include GoAnywhere MFT, ensure it’s not exposed to the internet (or isolate it) and update to patched versions (7.8.4 / 7.6.3).

🚨ALERT – Oracle E‑Business Suite under mass attack via a zero‑day (CVE‑2025‑61882)
👉Why it matters – Hackers (linked to Cl0p) are using this vulnerability to breach dozens of organizations, demanding ransom and threatening to release stolen data. 
📣Call to Action – If your systems (or a relative’s business) use Oracle EBS, apply the emergency patch immediately and check for signs of data theft or extortion threats.

📈ECONOMY & SECURITY – Cisco firewall flaws put tens of thousands of networks at risk (CVE‑2025‑20333 / ‑20362)
👉Why it matters – Over 50,000 Cisco ASA / Firepower devices remain exposed. Attackers can run malicious code remotely, and the U.S. government has issued emergency directives. 
📣Call to Action – Make sure any network routers, firewalls, or VPN devices (especially Cisco gear) are updated and patched.

📈ECONOMY & SECURITY – Juniper pushes out massive patch round for critical flaws
👉Why it matters – Juniper patched some 200+ vulnerabilities in its network and management systems, including nine rated critical. 
📣Call to Action – If your home or business network uses Juniper gear (or your ISP uses it), ensure firmware is current.

🧠MUST-READ – Gladinet CentreStack / Triofox exploit (CVE‑2025‑11371) with no available patch yet
👉Why it matters – Attackers are actively exploiting this vulnerability while a fix isn’t yet public. 
📣Call to Action – If you use file‑sharing or sync services built with Gladinet / Triofox, limit internet exposure and monitor for unauthorized activity.

💡OPPORTUNITY – Medicare Open Enrollment opens doors for scammers
👉Why it matters – October 15–December 7 is open enrollment season for Medicare. Scammers often ramp up tactics—impersonating agents, sending misleading offers, or fishing for your personal data. 
📣Call to Action – Don’t click on unsolicited Medicare or insurance offers. Always confirm plans via official Medicare.gov or trusted local SHIP (State Health Insurance Assistance Program).

✅Quick Safety Tip of the Day
Use two-factor authentication (2FA) everywhere it’s available—especially for email, financial accounts, or health portals.

(AI was used to create this article.)

🙋Closing Note

Stay safe, stay secure, stay curious, and remember my friends—you’re never too old to outsmart a scammer👋