December 2025 TRU Intelligence Briefing
On-Demand

Join eSentire’s Threat Response Unit (TRU) as they share new research-driven observations of malware, notable vulnerabilities, threat actor groups, and cyber activity affecting the threat landscape.

During the December Threat Intelligence Briefing, TRU reviewed:

• Wrapping up 2025 Adversary-in-the-Middle Campaigns: An overview of Adversary-in-the-Middle campaigns from 2025. Insights will be shared from TRU’s threat cases, including tradecraft tied to major toolkit operators and their affiliates. Learn about top Phishing-as-Service threats, commonly abused network infrastructure and anonymization services abused by operators and affiliates and common post-compromise behaviours.
• Dealing with PhaaS Abuse: Recent eSentire observations around Phishing-as-a-Service, including the use of bulletproof hosting providers. Details on detection and mitigation opportunities will be shared to help mitigate this threat.
• Threat Landscape: Recently disclosed vulnerabilities (CVE-2025-64446– Fortinet, CVE-2025-55182 – React, CVE-2025-61757 – Oracle), and notable malware observed by the eSentire SOC (PySpectre, Venom RAT, Websocket RAT).
• A brief geopolitical update on AI enabled cyberespionage.

This webinar also included a live Q&A.