Weekly Cyber Security News 20/11/2025

Let’s catch up on the more interesting vulnerability disclosures and cyber security news gathered from articles across the web this week. This is what we have been reading about on our coffee break!

Heard of this thing called rate limiting on API? Perhaps not:

• Researchers claim “largest leak ever” after uncovering WhatsApp enumeration flaw

Patch time folks:

• W3 Total Cache WordPress plugin vulnerable to PHP command injection

This can’t be good…

• Critical Railway Braking Systems Open to Tampering