InfoSec News Nuggets 12/12/2025

NANOREMOTE Malware Uses Google Drive API for Hidden Control on Windows Systems Researchers have disclosed a newly identified Windows backdoor called NANOREMOTE that abuses the Google Drive API for command‑and‑control functions. The malware can execute commands, transfer files, and steal data covertly by leveraging a legitimate cloud service channel, complicating detection and response.   CISA Flags Actively Exploited GeoServer XXE Flaw in Updated KEV Catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a…
Read More