MATLOCK.CA
89Articles
9Categories
2025-09-10Date
🐛
Patch Tuesday priorities: Vulnerabilities in SAP NetWeaver and Microsoft NTLM and Hyper-V
KEVCSOONLINE.COM — 10 Sep 2025
🐛
Adobe Commerce Flaw CVE-2025-54236 Lets Hackers Take Over Customer Accounts
THEHACKERNEWS.COM — 10 Sep 2025
🐛
SAP Patches Critical NetWeaver (CVSS Up to 10.0) and Previously Exploited S/4HANA Flaws
THEHACKERNEWS.COM — 10 Sep 2025
🐛
Critical SAP NetWeaver Flaw Allows Attackers to Execute Arbitrary Code
GBHACKERS.COM — 10 Sep 2025
🐛
Windows BitLocker Flaw Allows Privilege Escalation by Attackers
GBHACKERS.COM — 10 Sep 2025
🐛
Critical Flaws in Microsoft Office Enable Remote Code Execution by Attackers
GBHACKERS.COM — 10 Sep 2025
🐛
Apple CarPlay Vulnerability Allows Remote Code Execution to Gain Root Access
GBHACKERS.COM — 10 Sep 2025
🐛
Cursor’s autorun lets hackers execute arbitrary code
CSOONLINE.COM — 10 Sep 2025
🐛
Adobe Commerce and Magento users: Patch critical SessionReaper flaw now
CSOONLINE.COM — 10 Sep 2025
🐛
CISA Presents Vision for the Common Vulnerabilities and Exposures (CVE) Program
CISA.GOV — Wed, 10 Sep 25 1
⚠️
OT-Security: Warum der Blick auf Open Source lohnt
CSOONLINE.COM — 10 Sep 2025
⚠️
Gentlemen Ransomware Exploits Drivers and Group Policies to Breach Organizations
GBHACKERS.COM — 10 Sep 2025
⚠️
Workday Data Breach Exposed Customer Data and Case Details
GBHACKERS.COM — 10 Sep 2025
⚠️
Chrome Security Update Fixes Critical Remote Code Execution Flaw
GBHACKERS.COM — 10 Sep 2025
⚠️
iCloud Calendar Invites Disguise New Phishing Campaigns
CYBERSECURITYTODAY.LIBSYN.COM — 10 Sep 2025
⚠️
DarkSamural APT Group Deploys LNK/PDF Malware to Steal Critical Information
GBHACKERS.COM — 10 Sep 2025
⚠️
Sophos Wireless Access Point Vulnerability Allows Attackers to Bypass Authentication
GBHACKERS.COM — 10 Sep 2025
⚠️
GONEPOSTAL Malware Exploits Outlook for Stealthy Command-and-Control
GBHACKERS.COM — 10 Sep 2025
⚠️
Highly Popular NPM Packages Poisoned in New Supply Chain Attack
SECURITYWEEK.COM — 10 Sep 2025
⚠️
Fortinet, Ivanti, Nvidia Release Security Updates
SECURITYWEEK.COM — 10 Sep 2025
⚠️
Forrester 2026 Budget Planning Guide and BlackHat 2025 Interviews - Jess Burn - BSW #412
YOUTUBE.COM — 2025-09-10
⚠️
Lazarus Hackers Abuse Git Symlink Vulnerability in Stealthy Phishing Campaign
GBHACKERS.COM — 10 Sep 2025
⚠️
HackerOne Data Breach, Hackers Illegally Access Salesforce Environment
GBHACKERS.COM — 10 Sep 2025
⚠️
Amp’ed RF BT-AP 111 Bluetooth Access Point Vulnerability Enables Admin Takeover
GBHACKERS.COM — 10 Sep 2025
⚠️
What the Salesloft Drift breaches reveal about 4th-party risk
CSOONLINE.COM — 10 Sep 2025
⚠️
Microsoft Fixes 80 Flaws — Including SMB PrivEsc and Azure CVSS 10.0 Bugs
KEVTHEHACKERNEWS.COM — 10 Sep 2025
⚠️
Apple iPhone Air and iPhone 17 Feature A19 Chips With Spyware-Resistant Memory Safety
THEHACKERNEWS.COM — 10 Sep 2025
⚠️
Apple Unveils iPhone Memory Protections to Combat Sophisticated Attacks
SECURITYWEEK.COM — 10 Sep 2025
⚠️
Kikimora Announces Launch of Kikimora Agent: Accessible AI-Powered Cybersecurity Platform for SME Security
GBHACKERS.COM — 10 Sep 2025
⚠️
Ransomware upstart ‘The Gentlemen’ raises the stakes for OT‑heavy sectors
CSOONLINE.COM — 10 Sep 2025
⚠️
CyberVolk Ransomware Targets Windows Systems in Critical Infrastructure and Research Institutions
GBHACKERS.COM — 10 Sep 2025
⚠️
Apple: iPhone 17 lineup and iPhone Air come with Memory Integrity Enforcement, which provides always-on memory safety protection
SH.ITJUST.WORKS — 10 Sep 2025
⚠️
Jaguar Land Rover confirms data theft after recent cyberattack
BLEEPINGCOMPUTER.COM — 10 Sep 2025
⚠️
Can I have a new password, please? The $400M question.
BLEEPINGCOMPUTER.COM — 10 Sep 2025
⚠️
How Pixel and Android are bringing a new level of trust to your images with C2PA Content Credentials
SECURITY.GOOGLEBLOG.COM — 2025-09-10
⚠️
Automation or Exploitation? The AI Cybersecurity Dilemma!
YOUTUBE.COM — 2025-09-10
⚠️
"Yep, I got pwned. Sorry everyone, very embarrassing."
KNOWBE4.COM — 10 Sep 2025
⚠️
When “Free Data” Becomes Your Biggest Security Threat…
YOUTUBE.COM — 2025-09-10
⚠️
Your Hybrid Exchange Server Is Still Wide Open 😱
YOUTUBE.COM — 2025-09-10
⚠️
Risky Business #806 -- Apple's Memory Integrity Enforcement is a big deal
RISKY.BIZ — 10 Sep 2025
📋
ICS Patch Tuesday: Rockwell Automation Leads With 8 Security Advisories
SECURITYWEEK.COM — 10 Sep 2025
📋
Microsoft fixes app install issues caused by August Windows updates
BLEEPINGCOMPUTER.COM — 10 Sep 2025
📋
Microsoft fixes streaming issues triggered by Windows updates
BLEEPINGCOMPUTER.COM — 10 Sep 2025
📋
Multiple Vulnerabilities in GitLab Patched, Blocking DoS and SSRF Attack Vectors
GBHACKERS.COM — 10 Sep 2025
📋
September Patch Tuesday handles 81 CVEs
SOPHOS.COM — 10 Sep 2025
📢
China-Linked APT41 Hackers Target U.S. Trade Officials Amid 2025 Negotiations
THEHACKERNEWS.COM — 10 Sep 2025
📢
The Time-Saving Guide for Service Providers: Automating vCISO and Compliance Services
THEHACKERNEWS.COM — 10 Sep 2025
📢
GitLab security advisory (AV25-584)
CYBER.GC.CA — 2025-09-10
📢
Adobe security advisory (AV25-583)
CYBER.GC.CA — 2025-09-10
📢
The Mandate, Mission, and Momentum to lead the CVE Program into the Future belongs to CISA
CISA.GOV — Wed, 10 Sep 25 1
🔥
US Offers $10 Million Reward for Ukrainian Ransomware Operator
SECURITYWEEK.COM — 10 Sep 2025
🔥
The State of Ransomware in Education 2025
SOPHOS.COM — 10 Sep 2025
🔥
Lovesac warns customers their data was breached after suspected RansomHub attack six months ago
BITDEFENDER.COM — 10 Sep 2025
🔥
AsyncRAT Leverages Fileless Techniques to Bypass Detection
GBHACKERS.COM — 10 Sep 2025
🔥
Jaguar Land Rover says data stolen in disruptive cyberattack
TECHCRUNCH.COM — 10 Sep 2025
🔥
Jaguar Land Rover Admits Data Breach Caused by Recent Cyberattack
SECURITYWEEK.COM — 10 Sep 2025
🔥
Chinese APT Deploys EggStreme Fileless Malware to Breach Philippine Military Systems
THEHACKERNEWS.COM — 10 Sep 2025
🔥
US charges suspected ransomware kingpin, and offers $10 million bounty for his capture
FORTRA.COM — 10 Sep 2025
🕵️
ISC Stormcast For Wednesday, September 10th, 2025 https://isc.sans.edu/podcastdetail/9606, (Wed, Sep 10th)
ISC.SANS.EDU — 10 Sep 2025
🕵️
GitHub Abused by Kimsuky Hackers Delivering Malware Through LNK Files
GBHACKERS.COM — 10 Sep 2025
🕵️
Hackers Impersonate Google AppSheet in Latest Phishing Campaign
GBHACKERS.COM — 10 Sep 2025
🕵️
Threat Actor’s Self-Deployment of EDR Exposes Their Tools and Workflows
GBHACKERS.COM — 10 Sep 2025
🕵️
MY TAKE: The workflow cadences of GenAI — what’s being lost, what’s starting to be reclaimed
LASTWATCHDOG.COM — 10 Sep 2025
🕵️
Hush Security Emerges Stealth to Eliminate Credential Threats With No-Secrets Platform
SECURITYWEEK.COM — 10 Sep 2025
🕵️
Google Drive Desktop for Windows Flaw Lets Users Gain Full Access to Others’ Drives
GBHACKERS.COM — 10 Sep 2025
🕵️
Red Access Raises $17 Million for Agentless Security Platform
SECURITYWEEK.COM — 10 Sep 2025
🕵️
Meta Verified Scam Ads on Facebook Steal User Account Details
GBHACKERS.COM — 10 Sep 2025
🕵️
Geordie Emerges From Stealth With $6.5M for AI Agent Security Platform
SECURITYWEEK.COM — 10 Sep 2025
🕵️
A look at a P2P camera (LookCam app)
INFOSEC.PUB — 10 Sep 2025
🕵️
Neues Phishing-Framework umgeht Multi-Faktor-Authentifizierung
CSOONLINE.COM — 10 Sep 2025
🕵️
BASE64 Over DNS, (Wed, Sep 10th)
ISC.SANS.EDU — 10 Sep 2025
🕵️
The Most Overlooked Cybersecurity Skill in Devs ⚡
YOUTUBE.COM — 2025-09-10
🕵️
What are You Working on Wednesday
INFOSEC.PUB — 10 Sep 2025
🕵️
Paved Roads Explained: Security Without the Chaos 🚀
YOUTUBE.COM — 2025-09-10
🕵️
Monorepo or Microservices… Does Security Care? 😱
YOUTUBE.COM — 2025-09-10
🕵️
Report: Shadow AI Poses an Increasing Risk to Organizations
KNOWBE4.COM — 10 Sep 2025
🕵️
US Senator Wyden pushes FTC to investigate Microsoft for 'gross cybersecurity negligence'
SH.ITJUST.WORKS — 10 Sep 2025
🕵️
Why Developers Hate the Wrong Cybersecurity Metrics ⚡
YOUTUBE.COM — 2025-09-10
🌐
CHILLYHELL macOS Backdoor and ZynorRAT RAT Threaten macOS, Windows, and Linux Systems
THEHACKERNEWS.COM — 10 Sep 2025
🎙️
Smashing Security podcast #434: Whopper Hackers, and AI Whoppers
GRAHAMCLULEY.COM — 10 Sep 2025
📡
What’s Your Cybersecurity Maturity?
TRENDMICRO.COM — 10 Sep 2025
📡
Watch Out for Salty2FA: New Phishing Kit Targeting US and EU Enterprises
THEHACKERNEWS.COM — 10 Sep 2025
📡
Google’s former security leads raise $13M to fight email threats before they reach you
TECHCRUNCH.COM — 10 Sep 2025
📡
Vibe coding? Meet vibe security
TECHCRUNCH.COM — 10 Sep 2025
📡
Pixel 10 fights AI fakes with new Android photo verification tech
BLEEPINGCOMPUTER.COM — 10 Sep 2025
📡
Cursor AI editor lets repos “autorun” malicious code on devices
BLEEPINGCOMPUTER.COM — 10 Sep 2025
📡
Hackers left empty-handed after massive NPM supply-chain attack
BLEEPINGCOMPUTER.COM — 10 Sep 2025
📡
Microsoft waives fees for Windows devs publishing to Microsoft Store
BLEEPINGCOMPUTER.COM — 10 Sep 2025
📡
DDoS defender targeted in 1.5 Bpps denial-of-service attack
BLEEPINGCOMPUTER.COM — 10 Sep 2025