Weekly cybersecurity bulletin: the 5 most relevant news (15-19 December 2025)

This week has been marked by corporate breaches that expose sensitive data, advances in artificial intelligence that could facilitate automated attacks, and unexpected movements within large entertainment companies. From a new cyberattack that compromises information from ASUS users, to concerns about Claude Skills and its potential use to automate ransomware operations, the landscape once again makes it clear that the technical limits of cybercrime are changing rapidly. Added to this is the incident suffered by Paramount in the midst of a business battle with Netflix and Warner, where the manipulation of its official social media account demonstrated how digital reputation can become another weapon in corporate wars. And, to complete the picture, a smishing campaign that impersonates Amazon with false refund messages has alerted thousands of users, showing that phishing remains one of the most effective and persistent threats.

‍

This week's incidents don't just show vulnerabilities in large scale systems and platforms: they highlight an ecosystem where social engineering, AI automation and breaches in corporate account management combine to challenge the digital security of companies and users alike.

‍

The message is clear: organizations must strengthen their controls, protect every point of exposure — from their social networks to their internal processes — and train their teams to anticipate a scenario where the speed and sophistication of threats no longer leave room for improvisation.

‍

_{More than 40,000 phishing emails disguised as SharePoint and electronic signatures}

The campaign takes advantage of the work environment to gain credibility, simulating internal documents and urgent requests. Attackers know that the professional context reduces mistrust and accelerates the click. A single email can be enough to compromise corporate credentials and open the door to deeper access within the organization.

‍

_{Jaguar Land Rover confirms employee data leak}

The breach affected personal information used for payroll and benefits management, expanding the impact beyond the technical sphere. Although there is no evidence of malicious use, the company has had to activate support and identity surveillance protocols. The incident demonstrates how an attack can have prolonged consequences on employees and third parties.

‍

_{SoundCloud data breach affects 20% of its customers}

‍The unauthorized access exposed information from a significant part of the platform's user base. These types of incidents reinforce the need to review access controls, credential management and security in large scale digital services. Even consolidated platforms remain attractive targets for attackers.

‍

_{Pornhub suffers from a data breach affecting millions of customers}

‍The potential exposure of data linked to consumer habits and personal accounts increases the risk of extortion and fraud. Beyond the technical impact, the reputational and psychological damage to users can be significant. This case refocuses on the responsibility to protect especially sensitive information.

‍

_{New phishing technique using device codes in Microsoft 365}

Attackers are exploiting legitimate authentication flows to trick users into gaining access without the need for passwords. Even environments with MFA can be compromised if the user authorizes processes they don't understand. Training and surveillance remain key in the face of increasingly sophisticated attacks.

‍

_{Get ahead of the next incident}

At Apolo Cybersecurity, we help companies detect risks before they become crises: we analyze vulnerabilities, reinforce infrastructures and train teams to recognize real threats in their daily lives.

‍
Because security isn't about reacting to an attack, it's about being prepared before it happens.