This is today’s cyber news for November 25th, 2025. The brief follows a sweeping set of stories: a self-spreading JavaScript supply-chain attack leaking developer secrets, AI clusters hijacked through exposed orchestration tools, and quiet flaws in cloud logging and Windows update infrastructure that can turn basic plumbing into a takeover path. We also cover high-impact breaches at financial and customer-success vendors, along with data exposures at Harvard and a major dental insurer that put donor and patient details in play. Together, the episode focuses on how trusted tools, partners, and workflows are being bent to serve attackers while still looking ordinary on the surface.

Listeners will hear plain-English walk-throughs of every story from the newsletter, including consumer and creative-device threats, messaging-based banking scams, and research on attackers leaning on artificial intelligence to generate fast-mutating malware. The episode highlights what these developments mean for leaders who own risk, defenders who run infrastructure and incident response, and builders who maintain software and data pipelines. Whether you care most about supply-chain integrity, third-party risk, or policy shifts in telecom regulation, the goal is to help you update mental models without drowning in jargon. The daily feed is also available at DailyCyber.news.