October 2025
325 posts. Browse all months
- Top attacks and breaches - 2025-10-31
A concise roundup of notable incidents and high-risk exposures (at 08h22 ET on 2025-10-31).
- Hungarian and Belgian diplomatic entities were allegedly targeted
Diplomatic entities in Belgium and Hungary hacked in China-linked spy campaign therecord.media/belgium-h… Hungarian and Belgian diplomatic entities were …
- CISA and NSA share tips on securing Microsoft Exchange servers
CISA and NSA share tips on securing Microsoft Exchange servers www.bleepingcomputer.com/news/secu… The Cybersecurity and Infrastructure Security Agency (CISA) …
- Hezi Rash: Rising Kurdish Hacktivist Group Targets Global Sites
Hezi Rash: Rising Kurdish Hacktivist Group Targets Global Sites blog.checkpoint.com/research/… A new ideologically-motivated threat actor has emerged and …
- How scammers use your data to create personalized tricks that work | Malwarebytes
Scammers exploit your digital footprint, comprising both active (shared) and passive (unintentionally left) data, to craft personalized tricks. They gather …
- Year-Long Nation-State Hack Hits US Telecom Ribbon Communications – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
US telecom firm Ribbon Communications has revealed a nation-state hack that went undetected for nearly a year, compromising older customer files on two …
- Brush exploit can cause any Chromium browser to collapse in 15-60 seconds
A severe vulnerability named Brash has been discovered in Chromium’s Blink rendering engine, capable of crashing Chromium-based browsers within seconds by …
- Spyware-Plugged ChatGPT, DALL·E and WhatsApp Apps Target US Users – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
A report from Appknox reveals malicious apps impersonating ChatGPT, DALL·E, and WhatsApp are targeting US users through third-party app stores. While some are …
- NYDFS releases guidance on third-party service provider risks | Data Protection Report
The NYDFS has released guidance to help licensees comply with its cybersecurity regulation, focusing on managing risks associated with third-party service …
- Massive surge of NFC relay malware steals Europeans’ credit cards
A massive surge of NFC relay malware has been observed, with over 760 malicious Android apps discovered in Eastern Europe that steal credit card information by …
- Top attacks and breaches - 2025-10-30
A concise roundup of notable incidents and high-risk exposures.
- Experts Reports Sharp Increase in Automated Botnet Attacks Targeting PHP
Experts Reports Sharp Increase in Automated Botnet Attacks Targeting PHP Servers and IoT Devices thehackernews.com/2025/10/e… Cybersecurity researchers are …
- Ransomware Hackers Look for New Tactics Amid Falling Profits
Ransomware Hackers Look for New Tactics Amid Falling Profits www.databreachtoday.com/ransomwar… Waning profitability of ransomware for cybercriminals is having …
- Oracle EBS Attack Victims May Be More Numerous Than Expected
Oracle EBS Attack Victims May Be More Numerous Than Expected www.darkreading.com/vulnerabi… The list of enterprises targeted by recent Oracle EBS attacks may …
- Firms See Surge in AI-Powered Attacks Across Africa
Cybersecurity Firms See Surge in AI-Powered Attacks Across Africa www.darkreading.com/cyberatta… Africa becomes a proving ground for AI-driven phishing, …
- Microsoft: DNS outage impacts Azure and Microsoft 365 services
Microsoft: DNS outage impacts Azure and Microsoft 365 services www.bleepingcomputer.com/news/micr… Microsoft is suffering an ongoing DNS outage affecting …
- Aisuru Botnet Shifts from DDoS to Residential Proxies
Aisuru Botnet Shifts from DDoS to Residential Proxies krebsonsecurity.com/2025/10/a… Aisuru, the botnet responsible for a series of record-smashing distributed …
- Data Leak Outs Students of Iran’s MOIS Training Academy
A recent data leak has exposed over 1,000 individuals associated with Iran’s Ravin Academy, a cybersecurity school linked to the government’s APT34 group and …
- LinkedIn gives you until Monday to stop AI from training on your profile
LinkedIn is using user profile data, public posts, and activity to train its AI models and personalize ads, with a deadline of Monday, November 3, 2025, for …
- Microsoft Azure Cloud Apps Shut Down by Configuration Error
A configuration error caused a widespread outage of Microsoft Azure cloud apps, impacting services like App Service and Microsoft Defender. The issue, which …
- Varonis Lays Off 5% of Staff, Stock Plunges as Renewals Drop
Varonis laid off 5% of its workforce, approximately 120 employees, due to a sharp drop in renewal rates for its on-premise subscription business, particularly …
- Hospital System Flaws Could Leak Patient Data, CISA Says
CISA warns of vulnerabilities in Vertikal Systems hospital information management software that could allow hackers to access and disclose patient data. The …
- Top attacks and breaches - 2025-10-29
A concise roundup of notable incidents and high-risk exposures.
- Bots, Bread and the Battle for the Web
This article discusses the rise of malicious SEO and AI-powered spam that drowns out authentic content, using the example of a baker named Sarah whose website …
- Scammers target international students by threatening their visa status - Help Net Security
A 2025 study found that international students in the U.S. became frequent scam targets after widespread visa revocations. Scammers impersonated officials, …
- New Attack Targets DDR5 Memory to Steal Keys From Intel and AMD TEEs - SecurityWeek
A new attack named TEE.fail targets DDR5 memory to steal cryptographic keys from Intel TDX and AMD SEV-SNP trusted execution environments (TEEs), requiring …
- 10 npm Packages Caught Stealing Developer Credentials on Windows, macOS, and Linux
Cybersecurity researchers have identified 10 malicious npm packages that steal developer credentials across Windows, Linux, and macOS. These packages, …
- Chrome to Turn HTTPS on by Default for Public Sites - SecurityWeek
Starting October 2026 with Chrome 154, Google will make HTTPS the default for all users, enhancing browsing security by preventing attackers from hijacking …
- Suspected Nation-State Threat Actor Uses New Airstalk Malware in a Supply Chain Attack
A new Windows-based malware family named Airstalk, with PowerShell and .NET variants, has been identified, potentially used by a nation-state threat actor in a …
- Ad and PR Giant Dentsu Says Hackers Stole Merkle Data - SecurityWeek
Advertising and PR giant Dentsu has confirmed a data breach affecting its subsidiary Merkle, with hackers stealing files containing sensitive information about …
- XWiki Vulnerability Exploited in Cryptocurrency Mining Operation - SecurityWeek
A critical-severity vulnerability (CVE-2025-24893) in the XWiki enterprise wiki platform has been exploited in the wild, allowing attackers to execute …
- OpenAI Restructures, Nonprofit Foundation Retains Control
OpenAI has restructured, with its nonprofit Foundation retaining control and oversight of the for-profit group to ensure artificial general intelligence …
- Warnings Mount Over Windows Server Update Services Hacks
Warnings have escalated regarding hackers exploiting a Windows Server Update Services (WSUS) flaw that allows unauthenticated attackers to execute arbitrary …
- Aktia Bank has been fined 865,000 euros for neglecting cybersecurity
Aktia Bank has been fined 865,000 euros for neglecting cybersecurity. The penalty stems from an incident two years ago where a disruption in the bank’s …
- Active Water Saci Campaign Spreading Via WhatsApp Features Multi-Vector
Active Water Saci Campaign Spreading Via WhatsApp Features Multi-Vector Persistence and Sophisticated C&C www.trendmicro.com/en_us/res… Further investigation …
- 'Jingle Thief' Highlights Retail Cyber Threats
‘Jingle Thief’ Highlights Retail Cyber Threats www.darkreading.com/cyber-ris… A large-scale gift card fraud campaign run by a Morocco-based cybercrime group …
- New Herodotus Android malware fakes human typing to avoid detection
New Herodotus Android malware fakes human typing to avoid detection www.bleepingcomputer.com/news/secu… A new Android malware family, Herodotus, uses random …
- New Atroposia malware comes with a local vulnerability scanner
New Atroposia malware comes with a local vulnerability scanner www.bleepingcomputer.com/news/secu… A new malware-as-a-service (MaaS) platform named Atroposia …
- Crypto wasted: BlueNoroff’s ghost mirage of funding and jobs
Crypto wasted: BlueNoroff’s ghost mirage of funding and jobs securelist.com/bluenorof… Primarily focused on financial gain since its appearance, BlueNoroff …
- Veeam security advisory (AV25-703) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security issued Veeam security advisory AV25-703 on October 28, 2025, addressing vulnerabilities in Veeam Backup & Replication …
- PoC code drops for remotely exploitable BIND 9 DNS flaw (CVE-2025-40778) - Help Net Security
A high-severity BIND 9 DNS vulnerability (CVE-2025-40778) allows remote attackers to perform cache poisoning, potentially redirecting internet traffic. …
- More Collins Aerospace Hacking Fallout - GovInfoSecurity
A Russian data extortion group, Everest Group, has threatened to release 1.5 million passenger records stolen from Dublin Airport, claiming the data was …
- Iranian Intel-Linked Cybersecurity School Hit by Data Breach
A data breach at Ravin Academy, a cyber training firm linked to Iranian intelligence, has exposed the personal data of over 1,000 individuals enrolled in its …
- Ransomware profits drop as victims stop paying hackers
Ransomware profits drop as victims stop paying hackers www.bleepingcomputer.com/news/secu… The number of victims paying ransomware threat actors has reached a …
- Italian spyware vendor linked to Chrome zero-day
Italian spyware vendor linked to Chrome zero-day attacks www.bleepingcomputer.com/news/secu… A zero-day vulnerability in Google Chrome, exploited in Operation …
- QNAP warns of critical ASP.NET flaw
QNAP warns of critical ASP.NET flaw in its Windows backup software www.bleepingcomputer.com/news/secu… QNAP warned customers to patch a critical ASP.NET Core …
- Svenska kraftnät, has been the target of a cyberattack
The Swedish national grid company, Svenska kraftnät, has been the target of a cyberattack. The hacker group Everest has claimed responsibility for the breach, …
- The ForumTroll and his colleagues
The ForumTroll and his colleagues www.kaspersky.com/blog/foru… Our experts from the Kaspersky Global Research and Analysis Team (GReAT) reconstructed the chain …
- Hackers steal Discord accounts with RedTiger
Hackers steal Discord accounts with RedTiger-based infostealer www.bleepingcomputer.com/news/secu… Attackers are using the open-source red-team tool RedTiger to …
- The State of Exposure Management in 2025
The State of Exposure Management in 2025: Insights From 3,000+ Organizations www.bleepingcomputer.com/news/secu… In 2025, AI is making it easier for attackers …
- Safepay ransomware group claims the hack of professional video surveillance provider Xortec
The Safepay ransomware group has claimed responsibility for hacking the German video surveillance provider Xortec, adding the company to their data leak site …
- AI writes code like a junior dev, and security is feeling it - Help Net Security
A report by OX Security highlights that AI-generated code is being deployed faster than it can be secured, leading to systemic security risks due to the …
- Wordfence blocks 8.7M attacks exploiting old GutenKit and Hunk Companion flaws
Wordfence blocked 8.7 million attacks exploiting vulnerabilities in the GutenKit and Hunk Companion WordPress plugins. These vulnerabilities allowed …
- Chrome Zero-Day Exploitation Linked to Hacking Team Spyware - SecurityWeek
A Chrome zero-day (CVE-2025-2783) exploited in a cyberespionage campaign named Operation ForumTroll is linked to Hacking Team’s new spyware, Dante. The …
- Ransomware Payments Dropped in Q3 2025: Analysis - SecurityWeek
Ransomware payments saw a significant drop in Q3 2025, with payment rates falling to a historical low of 23% and average ransom payments decreasing by 66%. …
- 72 states sign first global UN Convention against Cybercrime - Help Net Security
The UN Convention against Cybercrime, the world’s first global treaty to combat cybercrime, has been signed by 72 states in Hanoi. This legally binding …
- IBM security advisory (AV25-696) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security issued IBM security advisory (AV25-696) on October 27, 2025, detailing vulnerabilities in multiple IBM products that …
- Dell security advisory (AV25-697) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security has issued Dell security advisory AV25-697, addressing vulnerabilities in Dell Storage Manager versions prior to 2020 …
- Ubuntu security advisory (AV25-698) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security issued Ubuntu security advisory AV25-698 on October 27, 2025, addressing vulnerabilities in the Linux kernel affecting …
- New HyperRat Android Malware Sold as Ready-Made Spy Tool – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
A new Android RAT malware named HyperRat is being sold as a malware-as-a-service, allowing attackers to remotely control devices, steal data, and send phishing …
- Massive China-Linked Smishing Campaign Leveraged 194,000 Domains - SecurityWeek
A massive smishing campaign, ongoing since April 2024 and linked to a China-linked threat actor known as the Smishing Triad, has leveraged over 194,000 …
- Crafted URLs can trick OpenAI Atlas into running dangerous commands
OpenAI Atlas, a web browser with built-in ChatGPT, is vulnerable to prompt injection attacks. Attackers can disguise malicious instructions as URLs, tricking …
- How to turn off Meta AI on Facebook (and on all Meta apps) | Proton
Meta AI, an AI assistant integrated into Facebook, Instagram, Messenger, and WhatsApp, raises privacy concerns as it collects and uses personal data for …
- DomeWatch Leak Exposed Personal Data of Capitol Hill Applicants – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
An unsecured online database for the House Democrats' resume bank, DomeWatch.us, publicly exposed the personal data of thousands of applicants, including …
- New Firefox Extensions Required to Disclose Data Collection Practices - SecurityWeek
Starting next week, new Firefox extensions must disclose their data collection practices in the manifest file using a specific key, enhancing user visibility. …
- X to Retire Twitter.com, Users Must Re-Register Security Keys by Nov 10 – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
X (formerly Twitter) is requiring users who rely on security keys for two-factor authentication to re-enroll their keys by November 10, 2025. This is due to …
- OpenAI is connecting all company secrets to ChatGPT - all your work data and apps are now open | TechRadar
OpenAI is integrating company knowledge into ChatGPT Business, Enterprise, and Edu by connecting to tools like Slack and Google Drive, allowing the AI to …
- Sneaky Mermaid attack in Microsoft 365 Copilot steals data • The Register
A security vulnerability in Microsoft 365 Copilot allowed attackers to steal sensitive tenant data through indirect prompt injection attacks, leveraging …
- Amazon says automation bug caused massive AWS outage
An automation bug in Amazon’s DynamoDB software caused a massive AWS outage on October 20, affecting numerous websites and services by failing to automatically …
- Microsoft Teams will start snitching to your boss when you’re not in the office — and this update is coming in December | Tom’s Guide
Starting December 2025, Microsoft Teams will automatically track employees' work locations by detecting their connection to office Wi-Fi, a feature that will …
- Claude Memory just launched and it syncs with ChatGPT — here’s how it works | Tom’s Guide
Claude has launched a new Memory feature for paid users, allowing the AI chatbot to remember projects and context across conversations, similar to ChatGPT. …
- Veeam to Buy Securiti AI for $1.7B to Unify Data Protection
Veeam plans to acquire Securiti AI for $1.725 billion to unify data protection and enable safe AI adoption. The acquisition will provide end-to-end visibility …
- Satellites Are Leaking the World’s Secrets: Calls, Texts, Military and Corporate Data | WIRED
A study by researchers at UC San Diego and University of Maryland revealed that roughly half of geostationary satellite signals are unencrypted, exposing …
- Prisoner hacks his prison IT system, goes wild!
A Romanian prisoner hacked the national prisoner management platform, granting himself and others access to adult content and modifying financial accounts. The …
- Russian hackers suspected of leaking secret UK military files on dark web - Newsweek
The UK Ministry of Defence is investigating claims that Russian hackers leaked sensitive military files on the dark web, including details about RAF and Royal …
- Hundreds of masked ICE agents doxxed by hackers, as personal details posted on Telegram
The personal data of hundreds of US government officials, including those from the FBI, ICE, and Department of Justice, was leaked by a hacking group called …
- MUJI suspends online store due to logistics failure, reopening undecided - Impress Watch
Ryohin Keikaku has suspended operations of MUJI’s online store as of 21:00 on October 19 following a logistics system failure. The company has not yet …
- IBM security advisory (AV25-679) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security issued an IBM security advisory (AV25-679) on October 20, 2025, regarding vulnerabilities in multiple IBM products …
- Dell security advisory (AV25-680) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security issued a Dell security advisory (AV25-680) on October 20, 2025, urging users to update several Dell products due to …
- CAPI Backdoor targets Russia’s auto and e-commerce sectors
The CAPI Backdoor malware targets Russia’s automobile and e-commerce sectors through phishing emails containing a malicious LNK file that installs a .NET …
- Chinese gangs made over $1 billion targeting Americans with scam texts | Malwarebytes
Chinese gangs have made over $1 billion through scam texts targeting Americans, primarily through toll payment and refund scams. These scams are orchestrated …
- Hackers Say They Have Personal Data of Thousands of NSA and Other Government Officials
A hacking group has doxed thousands of U.S. government officials, including NSA employees, by using stolen Salesforce customer data. The group has compiled …
- Ubuntu security advisory (AV25-681) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security issued Ubuntu security advisory AV25-681 on October 20, 2025 to address vulnerabilities in the Linux kernel affecting …
- Microsoft Edge security advisory (AV25-683) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security issued Microsoft Edge security advisory AV25-683 on October 20, 2025, urging users to update Microsoft Edge Stable …
- Red Hat security advisory (AV25-684) - Canadian Centre for Cyber Security
Red Hat published security advisories (AV25-684) addressing vulnerabilities in multiple products, including the Linux kernel, between October 13 and 19, 2025.
- AWS outage takes half the internet offline — What now? | Proton
A major AWS outage on October 20, 2025, disrupted numerous services, highlighting the internet’s reliance on a few corporations. This centralization creates …
- UK Ministry of Defense Probes Military Contractor Data Leak
The UK Ministry of Defense is investigating a data breach by the Russian-speaking ransomware group Lynx, which allegedly stole 4TB of data from the Dodd Group, …
- Winos 4.0 hackers expand to Japan and Malaysia with new malware
Winos 4.0 hackers, also known as ValleyRAT, have expanded their attacks from China and Taiwan to Japan and Malaysia. The attackers used phishing emails with …
- Chinese Hackers Blamed for Severe Breach at US Cyber Firm F5 - Bloomberg
State-backed hackers from China are blamed for a breach at F5 Inc., a major US-based cybersecurity provider. The hackers gained long-term access to F5’s …
- Envoy Air targeted in Oracle-linked hacking campaign | Reuters
Envoy Air, American Airlines’ largest regional carrier, confirmed a hack linked to a campaign targeting Oracle E-Business Suite applications. The company …
- Notorious hacker group doxxes ICE and FBI officials in leak | Mashable
A notorious hacker group, the Com, leaked personal information of hundreds of FBI, ICE, and DOJ officials. The leaked data, shared on private Telegram …
- US Scrambles to Patch F5 Amid China-Linked Breach
Nation-state hackers, linked to China, exploited stolen source code from F5, compromising federal networks. The breach, exacerbated by a government shutdown, …
- Cross-Border Phishing Attacks Spreads Across Asia
A cross-border phishing campaign is spreading remote access trojans across Asia, targeting Chinese-speakers in multiple countries with malware like …
- Prosper Market Data Breach Affects 17.6M Individuals
Hackers stole personal information from 17.6 million individuals from peer-to-peer lending marketplace Prosper. The breach exposed names, dates of birth, …
- Madman Theory Spurs Crazy Scattered Lapsus$ Hunters Playbook
The Scattered Lapsus$ Hunters are a group of Western teenagers who employ a mix of social engineering and technical tactics to target major businesses, often …
- Extortion and ransomware drive over half of cyberattacks - Microsoft On the Issues
Microsoft’s 2025 Digital Defense Report reveals that 80% of investigated cyber incidents involved data theft, with over half driven by financial motives such …
- Extortion and ransomware drive over half of cyberattacks - Microsoft On the Issues
Microsoft’s 2025 Digital Defense Report reveals that 80% of investigated cyber incidents involved data theft, with over half driven by financial motives such …
- Microsoft revokes 200 certs used to sign malicious Teams installers - Help Net Security
Microsoft revoked 200 software-signing certificates used by the ransomware group Vanilla Tempest to sign malicious Microsoft Teams installers. The group used …
- Prosper data breach puts 17 million people at risk of identity theft | Malwarebytes
A data breach at peer-to-peer lending marketplace Prosper on September 2, 2025, exposed the personal information of 17.6 million people, including Social …
- ‘Highest Ever’ Severity Score Assigned by Microsoft to ASP.NET Core Vulnerability - SecurityWeek
Microsoft addressed a critical-severity vulnerability (CVE-2025-55315) in the ASP.NET Core framework with a CVSS score of 9.9. The HTTP request smuggling bug …
- Hackers Steal Sensitive Data From Auction House Sotheby’s - SecurityWeek
Sotheby’s disclosed a data breach involving the theft of sensitive personal information, including names, SSNs, and financial account data. The breach, …
- Email Bombs Exploit Lax Authentication in Zendesk – Krebs on Security
Cybercriminals are exploiting Zendesk’s lack of authentication to flood inboxes with messages from various Zendesk customers. The abuse involves sending ticket …
- Misconfigured NetcoreCloud Server Exposed 40B Records in 13.4TB of Data
A misconfigured NetcoreCloud server exposed 40 billion records and 13.4TB of data, including sensitive emails and internal details from global clients. The …
- Key to Qilin’s Ransomware Success: Bulletproof Hosting
The ransomware group Qilin has been successful due to its affiliation with bulletproof hosting providers in Russia and Hong Kong, which help it evade law …
- Helium Browser
Helium Browser is a privacy-centred, open-source Chromium browser that removes Google services, telemetry and ads while delivering fast performance and strong …
- Cisco Routers Hacked for Rootkit Deployment - SecurityWeek
A new campaign, Operation ZeroDisco, is exploiting a zero-day vulnerability (CVE-2025-20352) in older Cisco devices to deploy a rootkit. The rootkit, which …
- Signal in the noise: what hashtags reveal about hacktivism in 2025
securelist.com/dfi-meta-… What do hacktivist campaigns look like in 2025? To answer this question, we analyzed more than 11,000 posts produced by over 120 …
- From Detection to Patch: Fortra Reveals Full Timeline of CVE-2025-10035 Exploitation - The Cyber Post
Fortra investigated CVE-2025-10035, a critical deserialization vulnerability in GoAnywhere Managed File Transfer, exploited since September 11, 2025. The …
- Qilin Ransomware announced new victims
The Qilin ransomware group has announced new victims, including Volkswagen Group France and Texas San Bernard Electric Cooperative, and is demanding $10 …
- Google Chrome security advisory (AV25-671) - Canadian Centre for Cyber Security
The Google Chrome security advisory (AV25-671) issued by the Canadian Centre for Cyber Security on October 15, 2025 addresses a vulnerability in Stable Channel …
- Cisco security advisory (AV25-672) - Canadian Centre for Cyber Security
The Cisco security advisory (AV25-672) addresses vulnerabilities in various Cisco products, including TelePresence CE, RoomOS Release, Open Source Snort 3, and …
- AL25-014 Security Incident impacting F5 - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security issued AL25-014 to raise awareness about a security incident impacting F5, where a nation-state threat actor accessed …
- Archive.today: inside the web archiving
Archive.today is an on-demand web archiving service that preserves exact snapshots of web pages—including dynamic, JavaScript-heavy sites—via multiple domains …
- Microsoft security advisory - October 2025 monthly rollup (AV25-666) - Canadian Centre for Cyber Security
The Microsoft security advisory for October 2025 addresses vulnerabilities in multiple products, including Windows 11, Windows 10, and Microsoft 365 Apps for …
- Adobe security advisory (AV25-667) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security issued an Adobe security advisory (AV25-667) on October 15, 2025, urging users to update multiple Adobe products to …
- Maverick: a new banking trojan abusing WhatsApp in a massive scale distribution | Securelist
A new Brazilian banking Trojan, Maverick, is being distributed through WhatsApp using malicious LNK files. The infection chain is complex, fileless, and uses …
- Elasticsearch Leak Exposes 6 Billion Records from Scraping, Old and New Breaches
A misconfigured Elasticsearch server exposed 6 billion records, including banking and personal information from Accordbank and other sources. The server, …
- Fortinet security advisory (AV25-668) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security issued an advisory on October 15, 2025, urging users to apply Fortinet’s security updates to address vulnerabilities in …
- Over 100 VS Code Extensions Exposed Developers to Hidden Supply Chain Risks
Over 100 Visual Studio Code (VS Code) extensions leaked access tokens, exposing developers to supply chain risks. Wiz security researchers found over 550 …
- NCSC Warns Companies to Prepare for a Day When Your Screens Go Dark | Fortra
The UK’s National Cyber Security Centre (NCSC) warns of increasing cyberattacks, urging organizations to prepare for potential IT system outages. While the …
- F5 data breach: “Nation-state attackers” stole BIG-IP source code, vulnerability info - Help Net Security
F5 confirmed a data breach where nation-state attackers stole source code and vulnerability information from its BIG-IP products, but no evidence of customer …
- F5 security advisory (AV25-669) - Canadian Centre for Cyber Security
The F5 security advisory (AV25-669) issued on October 15, 2025, addresses vulnerabilities in various BIG-IP and NGINX products, urging users to apply security …
- DSV targeted by new logistics-focused hacking group - The Loadstar
A new hacking group, Coinbase Cartel, is targeting logistics companies, including DSV and Kuehne + Nagel, focusing on data exfiltration with professional …
- Mango warns of data breach after cyberattack - RetailDetail EU
Mango experienced a cyberattack where hackers stole customer data like names and emails, but no passwords or bank details. The company’s IT systems were …
- Prepare for California’s 2026 Data Breach Law’s Notice Requirement | CDF Labor Law LLP - JDSupra
Starting in 2026, California’s SB 446 requires companies to notify individuals of a data breach within 30 days of discovery, with exceptions for law …
- Vietnam Airlines reports data breach - Travelweek
Vietnam Airlines reported a data breach involving a third-party customer service platform, but sensitive information like payment details and passport data …
- Lynch Carpenter Investigates Claims in PayActiv Data
Lynch Carpenter is investigating claims related to a data breach at PayActiv, which impacted over 100,000 individuals. Affected customers may be entitled to …
- Canadian Tire says customer info caught in data breach on e-commerce platform | CBC News
Canadian Tire Corp. Ltd. identified a data breach involving personal information of customers stored in an e-commerce database. The breached data included …
- High-Severity Vulnerabilities Patched by Fortinet and Ivanti - SecurityWeek
Fortinet and Ivanti have released October 2025 Patch Tuesday updates to fix high-severity vulnerabilities in their products, including FortiDLP, FortiOS, and …
- Red Hat AI 3 helps enterprises scale AI workloads across hybrid environments - Help Net Security
Red Hat AI 3, an evolution of its enterprise AI platform, simplifies AI workload scaling across hybrid environments. It addresses challenges like data privacy …
- PhantomVAI Loader Delivers a Range of Infostealers
PhantomVAI Loader, previously known as Katz Stealer Loader, is a multi-stage infection chain used in phishing campaigns to deliver information-stealing …
- Mysterious Elephant APT: TTPs and tools | Securelist
Mysterious Elephant, a highly active APT group discovered in 2023, targets government entities and foreign affairs sectors in the Asia-Pacific region. Their …
- Microsoft patches three zero-days actively exploited by attackers - Help Net Security
Microsoft released patches for 175+ vulnerabilities, including three zero-days actively exploited by attackers. The vulnerabilities affect a range of systems, …
- Fake Google Job Offer Email Scam Targets Workspace and Microsoft 365 Users
A new credential phishing scam impersonates Google Careers to steal login details from Google Workspace and Microsoft 365 users. The scam uses fake job offers …
- Visa’s Trusted Agent Protocol sets new standard for secure agentic transactions - Help Net Security
Visa’s Trusted Agent Protocol establishes a secure framework for AI agents to communicate with merchants, addressing challenges in agent-driven commerce and …
- RMPocalypse: Single 8-Byte Write Shatters AMD’s SEV-SNP Confidential Computing
The RMPocalypse vulnerability in AMD’s SEV-SNP allows attackers to exploit a single memory write to the Reverse Map Paging (RMP) table, compromising …
- Pixel-stealing “Pixnapping” attack targets Android devices | Malwarebytes
Researchers have demonstrated a Pixnapping attack on Android devices that steals pixel data, including 2FA codes, from apps like Google Maps, Signal, and …
- IBM security advisory (AV25-656) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security issued an IBM security advisory (AV25-656) on October 14, 2025, urging users to review and apply updates for …
- Man Stores AI-Generated ‘Robot Porn' on His Government Computer, Loses Access to Nuclear Secrets
A DOE employee lost security clearance after storing 187,000 AI-generated pornographic images on a government computer, claiming depression and isolation as …
- Dell security advisory (AV25-657) - Canadian Centre for Cyber Security
Dell issued a security advisory (AV25-657) on October 14, 2025, addressing vulnerabilities in SupportAssist for Home and Business PCs prior to specific …
- Ubuntu security advisory (AV25-658) - Canadian Centre for Cyber Security
The Ubuntu security advisory (AV25-658) from the Canadian Centre for Cyber Security addresses vulnerabilities in the Linux kernel affecting Ubuntu 14.04 LTS to …
- Red Hat security advisory (AV25-659) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security issued a Red Hat security advisory (AV25-659) on October 14, 2025, urging users to apply updates for vulnerabilities in …
- LevelBlue acquires Cybereason to expand global MDR, XDR, and threat response leadership - Help Net Security
LevelBlue has acquired Cybereason to expand its global MDR, XDR, and threat response capabilities, combining AI-powered services with DFIR expertise. The …
- Ivanti security advisory (AV25-661) - Canadian Centre for Cyber Security
The Ivanti security advisory (AV25-661) addresses vulnerabilities in Ivanti Endpoint Manager and Ivanti Neurons for MDM products, urging users to apply …
- SAP security advisory – October 2025 monthly rollup (AV25-662) - Canadian Centre for Cyber Security
The SAP security advisory for October 2025 addresses vulnerabilities in multiple products, including SAP NetWeaver AS Java, SAP Print Service, and SAP Commerce …
- Europe Postpones ‘Chat Control’ Vote - GovInfoSecurity
The EU postponed a vote on the Chat Control proposal, which aims to scan communications for child sexual abuse material, due to German opposition and privacy …
- Pro-Russian TwoNet Hacktivists Target Water Utility Honeypot
The pro-Russian hacktivist group TwoNet claimed to have hacked a Western water treatment plant, but actually targeted a honeypot set up by Forescout. The group …
- Chinese Owners Locked Out of Dutch Chip Maker Nexperia
The Dutch government invoked a national security law to sever semiconductor chipmaker Nexperia from control by its Chinese parent, Wingtech Technologies, …
- Anthony Albanese’s phone number is leaked online in major privacy breach of world leaders' details | Daily Mail Online
Prime Minister Anthony Albanese’s mobile phone number was leaked online, along with other high-profile politicians, due to a US-based website using artificial …
- Hackers leak medical reports after huge breach impacts 1.2 million patient records | TechRadar
SimonMed Imaging suffered a ransomware attack by Medusa, exposing 1.2 million patient records, including medical reports and payment details. The company is …
- University of St. Thomas data breach leaves community exposed
The University of St. Thomas suffered a data breach exposing student, faculty, and staff records to potential hackers on the dark web for over a month, with …
- 20K Hongkongers’ data leaked after hacking attack on Qantas
Around 20,000 Hongkongers had their personal data leaked after a hacking attack on Qantas Airways, including names, addresses, and contact information. The …
- Revealed: Hundreds of passwords linked to government departments leaked on dark web | The Independent
Hundreds of passwords linked to UK government departments have been leaked on the dark web, raising concerns about national security and cybersecurity …
- youtube.com/watch
London’s Metropolitan Police have dismantled a gang responsible for smuggling around 40,000 stolen mobile phones from the UK to China and Hong Kong, covering …
- Google, Mandiant expose malware and zero-day behind Oracle EBS extortion
Google and Mandiant analyzed an Oracle E-Business Suite extortion campaign, revealing the use of malware exploiting July-patched flaws and a likely zero-day …
- Google, Mandiant expose malware and zero-day behind Oracle EBS extortion
Google and Mandiant analyzed an Oracle E-Business Suite extortion campaign, revealing the use of malware exploiting July-patched flaws and a likely zero-day …
- Extortion Group Leaks Millions of Records From Salesforce Hacks - SecurityWeek
The Scattered LAPSUS$ Hunters extortion group leaked data from six Salesforce customers, including Albertsons, Engie Resources, Fujifilm, GAP, Qantas, and …
- ESentire Uncovers “ChaosBot”: A Rust-Based Backdoor Hiding In Plain Sight On Discord
eSentire’s Threat Response Unit discovered a Rust-based backdoor, ChaosBot, targeting Vietnamese speakers. The malware used Discord as a command center, …
- Spanish Authorities Dismantle ‘GXC Team’ Crime-as-a-Service Operation - SecurityWeek
Spanish authorities arrested a 25-year-old Brazilian national, known as GoogleXcoder, accused of masterminding the ‘GXC Team’ crime-as-a-service operation. The …
- Astaroth Trojan abuses GitHub to host configs and evade takedowns
Astaroth, a banking Trojan, uses GitHub to host malware configurations, allowing it to evade takedowns and maintain continuous operation. The attack chain …
- Researchers Warn RondoDox Botnet is Weaponizing Over 50 Flaws Across 30+ Vendors
Researchers warn that the RondoDox botnet is exploiting over 50 vulnerabilities across more than 30 vendors, including routers, DVRs, and web servers. This …
- Invoicely Database Leak Exposes 180,000 Sensitive Records
A database linked to the Invoicely platform was found exposed online, containing nearly 180,000 files with sensitive information like PII and banking details. …
- This free productivity app became my second brain in a weekend
Kortex is a free productivity app that combines note-taking, task management, and personal knowledge management. It features an AI tool, kAI, that retrieves …
- Cybersecurity Newsletter Weekly - Discord, Red Hat Data Breach, 7-Zip Vulnerabilities and Sonicwall Firewall Hack
The Cybersecurity Newsletter Weekly highlights critical cyber threats including Discord and Red Hat data breaches, 7-Zip vulnerabilities, and SonicWall …
- This simple devil’s-advocate prompt turned ChatGPT into a better assistant for me
The devil’s advocate prompt transforms ChatGPT from a polite assistant into a critical partner, uncovering weak arguments and highlighting blind spots. This …
- Windows 11 October 2025 security update adds 9 new features | Windows Central
The Windows 11 October 2025 update introduces 9 new features, including AI integrations in File Explorer, Administrator Protection, and third-party passkey …
- Goodbye to AI - Meta CEO Mark Zuckerberg joins Sam Altman and acknowledges that artificial intelligence could be on a bubble
Lately, headlines have claimed that tech leaders are warning of an AI bubble. Before forming opinions or reshaping investment strategies, it’s worth verifying …
- Nintendo allegedly hacked by Crimson Collective hacking group — screenshot shows leaked folders, production assets, developer files, and backups | Tom’s Hardware
Crimson Collective, a hacking group, claims to have hacked Nintendo, leaking folders with production assets, developer files, and backups. Nintendo has yet to …
- Multiple WordPress Vulnerabilities Affect 20,000+ Travel Sites
The WP Travel Engine plugin for WordPress, used by over 20,000 travel sites, has two critical vulnerabilities rated 9.8 on the CVSS scale, allowing …
- ‘Happy Gilmore’ Producer Buys Spyware Maker NSO Group | WIRED
The spyware vendor NSO Group, known for Pegasus malware, has been acquired by a US-based group led by movie producer Robert Simonds. US Immigration and Customs …
- Wireless power banks recalled in Canada, U.S.: Health Canada
Health Canada and the U.S. Consumer Product Safety Commission have recalled nearly 58,000 ESR HaloLock wireless power banks due to a fire hazard caused by …
- Hyperliquid User Loses $21 Million to Hackers After Private Key Breach — TradingView News
A Hyperliquid user lost $21 million worth of cryptocurrency due to a private key breach. The stolen assets, including DAI and MSYRUPUSDP tokens, were quickly …
- BreachForums seized, but hackers say they will still leak Salesforce data
Law enforcement agencies seized domains linked to BreachForums, a hacking forum used for leaking stolen data and selling credentials. However, a dark web …
- Hackers leak Qantas data containing 5 million customer records after ransom deadline passes | Qantas | The Guardian
Hackers leaked personal data of 5 million Qantas customers (plus records from 40+ other companies globally) after ransom demands weren’t paid. The stolen …
- CL0P-Linked Hackers Breach Dozens of Organizations Through Oracle Software Flaw
Cl0p-linked hackers exploited a zero-day flaw in Oracle’s E-Business Suite (EBS) software since August 9, 2025, impacting dozens of organizations. The …
- SaaS Breaches Start with Tokens - What Security Teams Must Watch
Token theft is a leading cause of SaaS breaches, with OAuth and API tokens often being overlooked. Security teams must strengthen token hygiene to prevent …
- DraftKings Warns Users of Credential Stuffing Attacks - SecurityWeek
DraftKings notified users of a credential stuffing campaign discovered on September 2, where attackers used credentials from other sources to access accounts. …
- Ransomware Group Claims Attack on Beer Giant Asahi - SecurityWeek
The Qilin ransomware group claimed responsibility for an attack on Asahi, disrupting operations in Japan and stealing 27 gigabytes of data, including contracts …
- Severe Figma MCP Vulnerability Lets Hackers Execute Code Remotely — Patch Now
A severe vulnerability (CVE-2025-53967) in the Figma MCP server, discovered by Imperva, allows attackers to achieve remote code execution through command …
- OpenAI Finds Growing Exploitation of AI Tools by Foreign Threat Groups
OpenAI’s report reveals that foreign threat groups are increasingly using AI tools for cyberattacks, scams, and influence operations. Hackers are combining …
- North Korean hackers stole over $2 billion in cryptocurrency this year - Help Net Security
North Korean hackers have stolen over $2 billion in cryptocurrency in 2025, with the majority coming from a February attack on the Bybit exchange. The hackers …
- Brazil: Data Protection Authority becomes a regulatory agency and assumes new responsibilities for the digital protection of children and adolescents - Global Compliance News
Provisional Measure No. 1.317/2025 transformed Brazil’s Data Protection Authority into the Brazilian Data Protection Agency (ANPD), granting it autonomy and …
- Vietnam: Releasing draft AI Law for comprehensive AI governance framework - Global Compliance News
Vietnam’s Ministry of Science and Technology released a draft AI Law for public consultation until October 20, 2025. The law, effective January 1, 2026, …
- 28% of adults say they’ve had a romantic relationship with AI
A study by Vantage Point Counseling Services found that 28% of adults have had a romantic relationship with AI, such as ChatGPT, Alexa, Siri, Gemini, or …
- Deloitte will refund Australian government for AI hallucination-filled report - Ars Technica
Deloitte Australia will partially refund a $440,000 AUD government contract after its compliance report was found containing AI-hallucinated citations …
- Phishers target 1Password users with convincing fake breach alert | Malwarebytes
Phishers targeted a Malwarebytes employee with a convincing fake 1Password breach alert, attempting to steal their credentials. The phishing email, sent from …
- Spyware in Fake Signal and ToTok Apps Targets UAE Android Users
ESET researchers identified two spyware campaigns targeting UAE Android users, spreading fake Signal and ToTok apps. The malware, ProSpy and ToSpy, steals …
- Redis security advisory (AV25-646) - Canadian Centre for Cyber Security
Redis published a security advisory on October 3, 2025, addressing a critical vulnerability in Redis Software and Redis OSS/CE/Stack releases with Lua …
- Daily Cyber Threat Intelligence Briefing – Oct. 6, 2025
This post is part of our ongoing daily CTI briefing series, highlighting verified, high-impact cyber incidents from the past 48 hours. All entries meet strict …
- Renault Informs Customers of Supply Chain Data Breach - Infosecurity Magazine
Renault informed customers that a data breach at a third-party supplier compromised personal data, including names, contact information, and vehicle details. …
- ParkMobile pays… $1 each for 2021 data breach that hit 22 million
ParkMobile has settled a class action lawsuit from a 2021 data breach affecting 22 million users, offering a $1 in-app credit that must be claimed manually by …
- NSW flood victims' personal details loaded to ChatGPT in major data breach - ABC News
A major data breach exposed personal details of up to 3,000 NSW flood victims when a former contractor uploaded 12,000 rows of data to ChatGPT. The NSW …
- Zimbra users targeted in zero-day exploit using iCalendar attachments
StrikeReady researchers discovered a zero-day exploit (CVE-2025-27915) in Zimbra Collaboration Suite, allowing attackers to hijack sessions and exfiltrate data …
- Oracle E-Business Suite Zero-Day Exploited in Cl0p Attacks - SecurityWeek
The Cl0p ransomware group exploited a zero-day vulnerability (CVE-2025-61882) in Oracle E-Business Suite, stealing data from customers and sending extortion …
- Beer Giant Asahi Says Data Stolen in Ransomware Attack - SecurityWeek
Asahi Group Holdings, a Japanese brewing company, confirmed a ransomware attack on its domestic subsidiaries, causing a week-long outage. The attack disrupted …
- Patch Now: Dell UnityVSA Flaw Allows Command Execution Without Login
A critical vulnerability (CVE-2025-36604) in Dell UnityVSA allows attackers to execute commands without authentication. The flaw, discovered by WatchTowr, …
- Data Breach at Doctors Imaging Group Impacts 171,000 People - SecurityWeek
Doctors Imaging Group, a radiology practice in Florida, experienced a data breach in November 2024, impacting over 171,000 individuals. The breach exposed …
- Android Spyware Targets UAE Messaging Users - GovInfoSecurity
Two Android spyware campaigns, ProSpy and ToSpy, target UAE messaging users by masquerading as Signal and ToTok upgrades. These campaigns, discovered by Eset …
- Inside the ‘Trinity of Chaos’ group of young hackers targeting major companies - ABC News
The Trinity of Chaos, a supergroup of young hackers including LAPSUS$, ShinyHunters, and Scattered Spider, has targeted major companies like Qantas, Allianz …
- Bill C-8: What Operators of Critical Cyber Systems Should Know and Do to Prepare their Cybersecurity Programs
Bill C-8 introduces the Critical Cyber Systems Protection Act (CCSPA), mandating designated operators in key sectors to implement comprehensive cybersecurity …
- ‘I have your nudes and everything to ruin your life’ - the cyber scammers targeting teenagers
The BBC investigates sextortion scams targeting teenagers, focusing on the tragic case of Evan Boettler, who took his own life after being blackmailed. The …
- Firefighter Recruitment Site Hack Exposes 50,000 Personal Records
A data breach on the firefighter recruitment website ‘119Gosi’ exposed the personal information of 50,093 individuals. The National Fire Agency is …
- Discord customer service data breach leaks user info and scanned photo IDs | The Verge
Discord customer service data breach exposed user information, including names, usernames, emails, and partial credit card numbers, due to a compromised …
- Almost 1 billion Salesforce records stolen, hacker group claims | Reuters
A hacker group, “Scattered LAPSUS$ Hunters,” claims to have stolen almost 1 billion records from Salesforce by targeting its customers through “vishing” …
- Cyberattack on Israeli hospital leaks patient information | The Jerusalem Post
Shamir Medical Center in Israel suffered a Yom Kippur cyberattack that leaked September 25 hospital emails containing some patient information, though the …
- Third-Party Data Breach Hits Harrods, Leaking Over 430,000 Customer Records - CPO Magazine
Harrods disclosed a third-party data breach after cybercriminals stole over 430,000 customer records and demanded ransom, though the retailer refused to pay …
- Hacking group claims theft of 1 billion records from Salesforce customer databases | TechCrunch
The hacking group Lapsus$/Scattered Spider/ShinyHunters launched a dark web leak site to extort victims, claiming nearly one billion records stolen from …
- 3.7M breach letters set to flood North America’s mailboxes • The Register
Three companies, Allianz Life, WestJet, and Motility Software Solutions, disclosed data breaches affecting approximately 3.7 million customers and employees …
- Red Hat confirms security incident after hackers claim GitHub breach
Red Hat confirmed a security incident related to its consulting business, but did not verify hacker claims of breaching GitHub repositories and stealing …
- EU Threat Landscape: Hacktivism, DDoS Attacks and Ransomware
The EU threat landscape is dominated by hacktivism, DDoS attacks, and ransomware, with phishing being the most common initial intrusion vector, according to …
- Google says Mandiant & Google Threat Intelligence Group are tracking recent activity by threat actor, possibly linked to Clop | MarketScreener
Google’s Mandiant and Google Threat Intelligence Group are tracking recent activity by a threat actor, possibly linked to Clop. Alphabet Inc. operates in six …
- Threat Actors Leveraging Senior Travel Scams to Deliver Datzbro Malware
Cybersecurity researchers have uncovered a Datzbro malware campaign targeting seniors through fraudulent travel promotions on Facebook, leveraging AI-generated …
- Zurich urges national cybersecurity metrics adoption | Insurance Business Canada
Zurich Insurance Group advocates for national cybersecurity metrics to address the protection gap between insured losses and global economic damage from cyber …
- Federal cyber agency warns of ‘serious and urgent’ attack on tech used by remote workers | CBC News
Government cyber agencies worldwide are addressing a serious and urgent espionage campaign targeting Cisco’s security software, commonly used for VPNs by …
- Why burnout is a growing problem in cyber-security
The cyber-security industry faces a growing burnout problem due to increased stress and demanding work conditions, with professionals often working beyond …
- Businesses overconfident about withstanding cyber attacks: survey
Cyber crime is at an all-time high, and Canadian small and medium-sized businesses are often underestimating the threat of cyber attacks, with 95% of breaches …
- US Auto Insurance Platform ClaimPix Leaked 10.7TB of Records Online
Cybersecurity researcher Jeremiah Fowler discovered an unprotected 10.7TB ClaimPix database exposing 5.1 million customer files without password protection. …
- Latest Airline Security Breach Leaks Passports, IDs, Other Info
Canadian airline WestJet confirmed a June cyberattack exposed customer data including names, birth dates, passports, government IDs, addresses, and WestJet …
- Hack of US Surveillance Provider RemoteCOM Exposes Court Data
A data breach at US surveillance provider RemoteCOM exposed personal records of nearly 14,000 individuals under court supervision and contact information for …
- Cyber Threat Intelligence Report – Oct. 1, 2025
Daily brief covering the past 48 hours. Incidents are independently validated, de-duplicated, and limited to items with clear enterprise or national-level …
- AI's Scaling Recipe: How a Focus on Data Created a Smarter Generation of AI
In the world of artificial intelligence (AI), it turns out that size matters. But a landmark discovery has shown that how you grow is just as important as how …