Welcome to CyberHoot’s December Cybersecurity Newsletter!
The cybersecurity landscape is evolving faster than ever before. Understanding emerging threats from AI’s impacts offensively and defensively, to the malware factories churning out new threats daily, staying informed is the only way to secure our personal and professional lives. This month at CyberHoot, we’re focusing on two critical areas needing your attention: new mobile phone spyware and zero-trust remote access.
We begin with CISA’s latest warning on emerging mobile spyware targeting popular messaging apps. This threat doesn’t just bypass encryption, it compromises the devices themselves. We break down how the spyware works, who’s most at risk, and the immediate steps organizations should take to protect their users and data.
Next, we shift to the future of secure remote access. Our feature on RPAM explores how identity-based, just-in-time privileged access is replacing traditional VPNs. With session monitoring, credential isolation, and reduced attack surface, RPAM solves some of the biggest weaknesses in today’s hybrid work environments.
Read on, stay sharp, and keep your organization Cyber(Hoot) Smart.
Got Questions? Let’s Talk.
If you’d like to dive deeper into anything we’ve covered, or talk cybersecurity strategy, compliance, or training, our CTO Chuck Taylor is making time for one-on-one sessions with our subscribers.
It’s a rare chance to pick the brain of a seasoned cybersecurity leader. You can schedule a session directly below.

CISA Details an Emerging Mobile Spyware Alert
CISA warns of spyware targeting messaging apps. See how it works, who’s at risk, and what security steps organizations must take now.

Zero Trust RPAM: The Future of Secure Remote Access
Discover how RPAM delivers secure, monitored, just-in-time privileged access without VPNs, solving the biggest weaknesses in remote work.
Fresh Feathers at CyberHoot

Nick Taylor is the newest owl in the CyberHoot nest, jumping in alongside Chuck to support sales operations and conversions. He brings a love of learning, a great attitude, and enough enthusiasm to rival a fully charged 56-volt EGO battery.
Nick calls Dover, Delaware home, where he lives with his cat, Leg Kick, who may or may not make surprise appearances on Zoom. He’s a soccer fan, a Spider-Man lore expert, and a multi-talented performer with experience in All-State Choir, drama, karaoke, and even high-school drumline.
Most importantly, he’s genuinely excited to help CyberHoot grow and champion our mission of building cyber literacy worldwide.
Customer Spotlight
Liking CyberHoot? We need your help. Please leave us a review using the links below!
TrustPilot.com | G2.com | Capterra.com | Google.com | TrustRadius.com | Gartner.com
–G2
For more information on how to leave a CyberHoot review, please watch the brief video overviews below. Note: to avoid fraudulent reviews, each review website will require to you to create and validate your identity through an email account registration process.
- How to leave a TrustPilot Review
- How to leave a G2 Review
- How to write a Capterra.com Review
- How to write a Google Review of CyberHoot
- How to leave a TrustRadius Review
- How to leave us a Gartner ‘Peer Review’ Review
CyberHoot Awarded Badges from G2

Cybersecurity Term of the Month:
hCaptcha
hCaptcha is a bot mitigation and anti-spam service that helps websites distinguish between real human users and automated bots. It works similarly to Google reCAPTCHA, but with a focus on privacy, data protection, and accessibility. hCaptcha presents short challenges (like identifying images or simple tasks) to verify human interaction before allowing access to forms, logins, or other sensitive actions.
Recently Added Features
General Release Notes
- Applied MSP Timezone to all email log tables.
- Added export CSV functionality for exposed users.
- Updated DMARC reporting to alert on enforcement levels (None, Quarantine, or Reject).
- Added a count badge showing outstanding assignments in ‘My Assignments’.
Power Platform Release Notes
- Added the ability to set individual user level language preference and updated my assignments and emails to use the users set language as the default if set. Previously this was a tenant-only setting.
- Fixed Manager Compliance Report timing to use customer set time zone.
- Added learn more section to DNS twister report.
Autopilot Platform Release Notes
- Added the ability to set user level languages.
- Updated Entra ID interface to display the email that will be sync’d based on new email mapping.
- Added HootPhish and AttackPhish to CustomHoots power-up.
Check out Craig Taylor, Co-Founder & CEO of CyberHoot, Featured on #CyberChats Podcast!

New Feature Alert: AI Support ChatBot
CyberHoot’s new ChatBot Self-Service Support is now live, providing 24×7 assistance directly inside the Admin Interface and on our CyberHoot website. Located at the bottom right of your screen, this intelligent support tool helps you find answers instantly, troubleshoot issues, and access resources without waiting for an email response.
If you need additional help, you can always reach our support team at [email protected].


Enroll in CyberHoot’s Referral Program today and start earning a 20% share of all revenue generated for one year by those who register through your exclusive referral link. As a referral partner, not only will you receive financial rewards, but you’ll also experience the satisfaction of aiding others in becoming more security-conscious, safeguarding them against cyber threats. Don’t hesitate, sign up now at https://cyberhoot.com/referral-program/.
Referral through Autopilot’s Dashboard:
Join CyberHoot in our mission to create a more aware and better secured world! Recommend CyberHoot Autopilot to a friend, and they will enjoy a complimentary first month. For every new sign up who uses your referral link, you will receive a free month added to your account. This offer is exclusively for first-time CyberHoot registrants.

CyberHoot has Free Cybersecurity Training for Individuals
Know someone who had a close call recently with a cyber attack, phishing email, or social engineering phone call? Recommend CyberHoot’s free cybersecurity training. They’ll receive six (6) videos (each video is 3-4min.) and one of our positive reinforcement, hyper-realistic, phishing simulations. All for free.
Registration: https://cyberhoot.com/individuals
Looking for additional resources?
CyberHoot White Paper Download – How HootPhish Improves upon AttackPhish
All New: 2025 Infographics on Cybersecurity Statistics
Secure your business with CyberHoot Today!!!
The post CyberHoot’s Cybersecurity Newsletter: Dec. 2025 appeared first on CyberHoot.


