72Articles
8Categories
2025-09-22Date
🚨
CISA Shares Lessons Learned from an Incident Response EngagementAdvisory at a Glance Executive Summary CISA began incident response efforts at a U.S. federal civilian executive branch (FCEB) agency following the detection of potential malicious activity identified through security alerts generated by the agency’s endpoint detection and respon…
KEV
🐛
Microsoft Patches Critical Entra ID Flaw Enabling Global Admin Impersonation Across Tenants
🐛
Attackers Bypass Windows “Mark of the Web” Protections Using LNK-Stomping
🐛
Fortra Patches Critical GoAnywhere MFT Vulnerability
🐛
God Mode Vulnerability Lets Attackers Access Any Resource in Microsoft Cloud Tenants
🐛
Code Analysis Published for Chrome Type Confusion 0-Day Vulnerability
⚠️
Agentic AI – der neue Horror für Sicherheitsentscheider?
⚠️
Hackers Deploy New EDR-Freeze Tool to Disable Security Software
⚠️
Extinction Level Cyber Vulnerability Now Fixed
⚠️
Hackers Abuse GitHub Pages to Spread Stealer Malware to macOS Users
⚠️
CSO Awards winners highlight security innovation and transformation
⚠️
Cybercriminals Exploit ICS Computers via Scripts and Phishing Attacks
⚠️
Canada Police Shuts Down TradeOgre After $56M Crypto Theft
⚠️
Disruption is Coming for the Vulnerability Management Market - Tod Beardsley - ESW #425
⚠️
Subtle Snail Impersonation Tactics: How HR Representatives Can Engage Employees to Steal Login Credentials
⚠️
Inboxfuscation Tool Bypasses Exchange Inbox Rules and Evades Detection
⚠️
European airports continue to crawl after a cyberattack on Collins’ MUSE systems
⚠️
⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 Bit-Flips, npm Worm & More
⚠️
AI-powered phishing scams now use fake captcha pages to evade detection
⚠️
Researchers Earn $150,000 for L1TF Exploit Leaking Data From Public Cloud
⚠️
Threat Actors Exploit Oracle Database Scheduler to Infiltrate Corporate Networks
⚠️
Security review of PHP documentation
⚠️
New EDR-Freeze tool uses Windows WER to suspend security software
⚠️
Ex-lobbyist for Meta becomes Irish data protection commissioner
⚠️
Automaker giant Stellantis confirms data breach after Salesforce hack
⚠️
American Archive of Public Broadcasting fixes bug exposing restricted media
⚠️
SonicWall Releases Advisory for Customers after Security Incident
⚠️
Anton’s Security Blog Quarterly Q3 2025
KEV
📢
Mycroft Raises $3.5 Million for AI-Powered Security and Compliance Platform
📢
Dell security advisory (AV25-607)
📢
IBM security advisory (AV25-606)
📢
Red Hat security advisory (AV25-609)
📢
Ubuntu security advisory (AV25-608)
📢
Microsoft Edge security advisory (AV25-611)
📢
[Control systems] CISA ICS security advisories (AV25–610)
📢
Top 10 Best Cybersecurity Compliance Management Software in 2025
🔥
MalTerminal: New GPT-4-Powered Malware That Writes Its Own Ransomware
🔥
Hackerangriff legt Flughäfen lahm
🔥
Kawa4096 Ransomware Targets Multinational Corporations to Steal Sensitive Data
🔥
BlackLock Ransomware Targets Windows, Linux, and VMware ESXi Systems
🔥
European Airport Disruptions Caused by Ransomware Attack
🔥
Stellantis Confirms Data Breach Affecting Citroën, Fiat, Jeep, and More
🔥
EU cyber agency confirms ransomware attack causing airport disruptions
🔥
ComicForm and SectorJ149 Hackers Deploy Formbook Malware in Eurasian Cyberattacks
🔥
Automaker giant Stellantis says customers’ personal data stolen during breach
🔥
Airport disruptions in Europe caused by a ransomware attack
🕵️
ISC Stormcast For Monday, September 22nd, 2025 https://isc.sans.edu/podcastdetail/9622, (Mon, Sep 22nd)
🕵️
Threat Actors Market Stealthy New RAT as Alternative to ScreenConnect FUD
🕵️
Privacy and Security Risks in the eSIM Ecosystem [pdf]
🕵️
Threat Actors Fake FBI IC3 Portal to Steal Visitor Information
🕵️
FBI Warns of Spoofed IC3 Website
🕵️
Massive Lucid PhaaS Campaign: 17,500 Phishing Domains Mimic 316 Global Brands
🕵️
Widespread Infostealer Campaign Targeting macOS Users
🕵️
Details About Chinese Surveillance and Propaganda Companies
🕵️
HoundBytes Launches Automated Security Analyst
🕵️
BlockBlasters Steam Game Disguises Malware as Patch for Computer Download
🕵️
Unit 221B raises $5 million to help track and disrupt today’s top hacking groups
🕵️
FBI warns of cybercriminals using fake FBI crime reporting portals
🕵️
17,500 Phishing Domains Target 316 Brands Across 74 Countries in Global PhaaS Surge
🕵️
Safe by Default: Building a Minimal Sandbox in Linux
🕵️
Mentorship Monday - Discussions for career and learning!
🌐
LastPass: Fake password managers infect Mac users with malware
🌐
Why attackers are moving beyond email-based phishing attacks
🌐
Watch out for SVG files booby-trapped with malware
📡
Verified Steam game steals streamer's cancer treatment donations
📡
What happens when a cybersecurity company gets phished?
📡
How to Gain Control of AI Agents and Non-Human Identities
📡
Microsoft says recent updates cause DRM video playback issues
📡
Mozilla now lets Firefox add-on devs roll back bad updates
📡
VMScape attack | Kaspersky official blog
📡
Microsoft lifts Windows 11 update block after face detection fix
📡
Recommended Contract Clauses for Cryptography (ITSM.00.501)