⚡ Weekly Recap: Fortinet Exploited, China's AI Hacks, PhaaS Empire Falls & More

The weekly recap highlights a Fortinet FortiWeb flaw, CVE-2025-64446, which has been exploited in the wild since early October 2025 to create malicious administrative accounts; Fortinet had issued a patch and the flaw carries a CVSS score of 9.1. The article notes that the U.S.

Cybersecurity and Infrastructure Security Agency (CISA) has added the flaw to its Known Exploited Vulnerabilities catalog, requiring Federal Civilian Executive Branch agencies to patch by 21 November 2025, with attribution to the U.S. agency in this report. In top news, Google has filed a civil lawsuit in SDNY against 25 unnamed China-based hackers behind a Lighthouse Phishing-as-a-Service platform that has ensnared over 1 million users across 120 countries, supporting large-scale smishing campaigns.

The coverage also mentions Konni, a North Korea‑affiliated threat actor, using Google’s Find Hub to wipe data remotely on Android devices, with Google confirming no Android or Find Hub flaw was exploited. Overall, the recap shows threat actors leveraging trusted tools and services, from AI-assisted campaigns to widely used apps, to carry out espionage, fraud, and data theft.