InfoSec News Nuggets 12/12/2025
NANOREMOTE Malware Uses Google Drive API for Hidden Control on Windows Systems Researchers have disclosed a newly identified Windows backdoor called NANOREMOTE that abuses the Google Drive API for command‑and‑control functions. The malware can execute commands, transfer files, and steal data covertly by leveraging a legitimate cloud service channel, complicating detection and response. CISA Flags Actively Exploited GeoServer XXE Flaw in Updated KEV Catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a…