Weekly cybersecurity bulletin: the 5 most relevant news (8-12 December 2025)

This week has been marked by corporate breaches that expose sensitive data, advances in artificial intelligence that could facilitate automated attacks, and unexpected movements within large entertainment companies. From a new cyberattack that compromises information from ASUS users, to concerns about Claude Skills and its potential use to automate ransomware operations, the landscape once again makes it clear that the technical limits of cybercrime are changing rapidly. Added to this is the incident suffered by Paramount in the midst of a business battle with Netflix and Warner, where the manipulation of its official social media account demonstrated how digital reputation can become another weapon in corporate wars. And, to complete the picture, a smishing campaign that impersonates Amazon with false refund messages has alerted thousands of users, showing that phishing remains one of the most effective and persistent threats.

‍

This week's incidents don't just show vulnerabilities in large scale systems and platforms: they highlight an ecosystem where social engineering, AI automation and breaches in corporate account management combine to challenge the digital security of companies and users alike.

‍

The message is clear: organizations must strengthen their controls, protect every point of exposure — from their social networks to their internal processes — and train their teams to anticipate a scenario where the speed and sophistication of threats no longer leave room for improvisation.

‍

_{ASUS suffers a new cyberattack that exposes user data}

An attack aimed at ASUS brought a critical point back to the table: supply chains remain an enormous risk vector. Although the company initially denied a profound impact, the attackers claim to have obtained sensitive data and are asking for ransom. A reminder that protecting suppliers is as important as protecting your own infrastructure.

‍

_{Claude Skills opens the door to automated ransomware}

Claude's new feature enhances the automation of tasks... including their misuse. Researchers warn that cybercriminals are already testing ways to turn these tools into ransomware engines, reducing the time, effort and knowledge needed to launch attacks. The barrier to entry to cybercrime is reduced to leaps and bounds.

‍

_{Paramount hack fuels rivalry with Warner and Netflix}

In the midst of the million-dollar push for the acquisition of Warner Bros. Discovery, Paramount's X account was manipulated with a provocative message. A minor technical but enormous reputational incident, which demonstrates how corporate wars are also being waged in the digital field and how a single exposed account can alter the public narrative.

‍

_{Amazon Refund Scam: Phishing Is Evolving Again}

A wave of fake SMS and emails is deceiving thousands of users with alleged refunds or returns. The attack is not particularly new, but it is more sophisticated: fake URLs almost identical to the real ones, hyperpersonalized messages and an increase in the volume of victims. A reminder that social engineering remains criminals' most effective weapon.

‍

_{Strengthen your security before the next threat hits}

In an environment where threats evolve faster than ever, protecting your business cannot be reactive: it must be strategic, continuous and proactive.

‍

At Apolo Cybersecurity, we help companies detect vulnerabilities, anticipate attacks and strengthen both their systems and the preparation of their teams. If you want to ensure that your organization is ready to face this new landscape, we're here to help.

‍

If you want to reduce your exposure, improve your resilience and protect what matters most, we're ready to help.