MATLOCK.CA
90Articles
9Categories
2025-09-25Date
🚨
CISA Directs Federal Agencies to Identify and Mitigate Potential Compromise of Cisco DevicesToday, CISA issued Emergency Directive ED 25-03: Identify and Mitigate Potential Compromise of Cisco Devices to address vulnerabilities in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower devices. CISA has added vulnerabilities CVE-2025-30333 and CVE-2025-20362 to the…
KEVCISA.GOV — Thu, 25 Sep 25 1
🐛
Chinese spies had year-long access to US tech and legal firms
CSOONLINE.COM — 25 Sep 2025
🐛
Cisco IOS 0-Day RCE Vulnerability Actively Targeted
KEVGBHACKERS.COM — 25 Sep 2025
🐛
NVIDIA Merlin Flaw Enables Remote Code Execution with Root Access
GBHACKERS.COM — 25 Sep 2025
🐛
Linux Kernel ksmbd Flaw Lets Remote Attackers Execute Arbitrary Code
GBHACKERS.COM — 25 Sep 2025
🐛
Cisco Warns of Actively Exploited SNMP Vulnerability Allowing RCE or DoS in IOS Software
KEVTHEHACKERNEWS.COM — 25 Sep 2025
🐛
ZendTo Flaw Lets Attackers Bypass Security Controls to Access Sensitive Data
GBHACKERS.COM — 25 Sep 2025
🐛
Cisco IOS/XE Vulnerability Allows Unauthorized Access to Confidential Data
GBHACKERS.COM — 25 Sep 2025
🐛
Vulnerability in Salesforce AI could be tricked into leaking CRM data
CSOONLINE.COM — 25 Sep 2025
🐛
CVE-2025-59251 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 25 Sep 2025
🐛
AL25-012 - Vulnerabilities impacting Cisco ASA and FTD devices – CVE-2025-20333, CVE-2025-20362 and CVE-2025-20363
CYBER.GC.CA — 2025-09-25
🐛
Urgent: Cisco ASA Zero-Day Duo Under Attack; CISA Triggers Emergency Mitigation Directive
KEVTHEHACKERNEWS.COM — 25 Sep 2025
🐛
Cisco admins urged to patch IOS, IOS XE devices
NETWORKWORLD.COM — 25 Sep 2025
🐛
Patch now: Attacker finds another zero day in Cisco firewall software
CSOONLINE.COM — 25 Sep 2025
🐛
Chromium: CVE-2025-10890 Side-channel information leakage in V8
MSRC.MICROSOFT.COM — 25 Sep 2025
🐛
Chromium: CVE-2025-10891 Integer overflow in V8
MSRC.MICROSOFT.COM — 25 Sep 2025
🐛
Chromium: CVE-2025-10892 Integer overflow in V8
MSRC.MICROSOFT.COM — 25 Sep 2025
⚠️
Die besten Cyber-Recovery-Lösungen
CSOONLINE.COM — 25 Sep 2025
⚠️
Hackers Exploit Hikvision Camera Flaw to Steal Sensitive Data
GBHACKERS.COM — 25 Sep 2025
⚠️
AI coding assistants amplify deeper cybersecurity risks
CSOONLINE.COM — 25 Sep 2025
⚠️
LNK Malware Leverages Legit Windows Files to Slip Past Defenses
GBHACKERS.COM — 25 Sep 2025
⚠️
Cisco Patches Zero-Day Flaw Affecting Routers and Switches
SECURITYWEEK.COM — 25 Sep 2025
⚠️
Malware Deployment via Copyright Takedown Claims by Threat Actors
GBHACKERS.COM — 25 Sep 2025
⚠️
SetupHijack Tool Abuses Race Conditions in Windows Installer to Hijack Setups
GBHACKERS.COM — 25 Sep 2025
⚠️
Malicious Rust Crates Steal Solana and Ethereum Keys — 8,424 Downloads Confirmed
THEHACKERNEWS.COM — 25 Sep 2025
⚠️
Hackers Use GitHub Notifications to Impersonate Y Combinator and Steal Wallet Funds
GBHACKERS.COM — 25 Sep 2025
⚠️
Chinese Spies Lurked in Networks for 393 Days, Hunted for Zero-Day Intel
SECURITYWEEK.COM — 25 Sep 2025
⚠️
CTEM's Core: Prioritization and Validation
THEHACKERNEWS.COM — 25 Sep 2025
⚠️
New Malicious Rust Crates Impersonate fast_log to Steal Solana and Ethereum Wallet Keys
GBHACKERS.COM — 25 Sep 2025
⚠️
RTX Confirms Airport Services Hit by Ransomware
SECURITYWEEK.COM — 25 Sep 2025
⚠️
Volvo Group Reports Data Breach Following Ransomware Attack on HR Vendor
GBHACKERS.COM — 25 Sep 2025
⚠️
Chinese State-Sponsored Hackers Targeting Telecommunications Infrastructure to Steal Sensitive Data
GBHACKERS.COM — 25 Sep 2025
⚠️
Salesforce Patches Critical ForcedLeak Bug Exposing CRM Data via AI Prompt Injection
THEHACKERNEWS.COM — 25 Sep 2025
⚠️
CISA Releases One Industrial Control Systems Advisory
CISA.GOV — Thu, 25 Sep 25 1
⚠️
Salesforce AI Hack Enabled CRM Data Theft
SECURITYWEEK.COM — 25 Sep 2025
⚠️
Cisco warns of ASA firewall zero-days exploited in attacks
BLEEPINGCOMPUTER.COM — 25 Sep 2025
⚠️
CISA Issues Emergency Directive Requiring Federal Agencies to Identify and Mitigate Cisco Zero-Day Vulnerabilities
CISA.GOV — Thu, 25 Sep 25 1
⚠️
New LockBit 5.0 Targets Windows, Linux, ESXi
TRENDMICRO.COM — 25 Sep 2025
⚠️
Cloud Security Alliance launches framework to improve SaaS security
CSOONLINE.COM — 25 Sep 2025
⚠️
Introducing Microsoft Marketplace — Thousands of solutions. Millions of customers. One Marketplace.
BLOGS.MICROSOFT.COM — 25 Sep 2025
⚠️
CISA orders agencies to patch Cisco flaws exploited in zero-day attacks
BLEEPINGCOMPUTER.COM — 25 Sep 2025
⚠️
Attackers Use AI Development Tools to Craft Phony CAPTCHA Pages
KNOWBE4.COM — 25 Sep 2025
⚠️
A Vulnerability in Nx (build system) Package Could Allow for Sensitive Data Exfiltration
CISECURITY.ORG — 25 Sep 2025
⚠️
Multiple Vulnerabilities in Cisco Products Could Allow for Remote Code Execution
CISECURITY.ORG — 25 Sep 2025
📋
Microsoft will offer free Windows 10 security updates in Europe
BLEEPINGCOMPUTER.COM — 25 Sep 2025
📋
Besides them trying to upsell me a new router, what does this mean?
SH.ITJUST.WORKS — 25 Sep 2025
📢
Hackers Deploy Stealthy Malware on WordPress Sites to Gain Admin Access
GBHACKERS.COM — 25 Sep 2025
📢
Evolved PXA Stealer wraps PureRAT in multi-layer obfuscation
CSOONLINE.COM — 25 Sep 2025
📢
Mit ShadowV2 wird DDoS zu einem Cloud-nativen Abo-Dienst
KEVCSOONLINE.COM — 25 Sep 2025
📢
Cisco security advisory (AV25-619)
CYBER.GC.CA — 2025-09-25
🔥
Cultura - 1,462,025 breached accounts
HAVEIBEENPWNED.COM — 25 Sep 2025
🔥
Steam Confirms Malware Found in BlockBlasters Game
GBHACKERS.COM — 25 Sep 2025
🔥
Volvo Group Employee Data Stolen in Ransomware Attack
SECURITYWEEK.COM — 25 Sep 2025
🔥
Threatsday Bulletin: Rootkit Patch, Federal Breach, OnePlus SMS Leak, TikTok Scandal & More
THEHACKERNEWS.COM — 25 Sep 2025
🔥
Teen suspected of Vegas casino cyberattacks released to parents
BLEEPINGCOMPUTER.COM — 25 Sep 2025
🔥
Chinese Cyberspies Hacked US Defense Contractors
SECURITYWEEK.COM — 25 Sep 2025
🔥
How secure are passkeys, really? Here's what you need to know
BLEEPINGCOMPUTER.COM — 25 Sep 2025
🔥
BQTLOCK Ransomware Attacking Windows Users Via Telegram to Encrypt Files and Delete Backup
GBHACKERS.COM — 25 Sep 2025
🔥
Co-op says it lost $107 million after Scattered Spider attack
BLEEPINGCOMPUTER.COM — 25 Sep 2025
🔥
Unofficial Postmark MCP npm silently stole users' emails
BLEEPINGCOMPUTER.COM — 25 Sep 2025
🕵️
ISC Stormcast For Thursday, September 25th, 2025 https://isc.sans.edu/podcastdetail/9628, (Thu, Sep 25th)
ISC.SANS.EDU — 25 Sep 2025
🕵️
COLDRIVER APT Group Uses ClickFix to Deliver New PowerShell-Based Backdoor BAITSWITCH
GBHACKERS.COM — 25 Sep 2025
🕵️
BRICKSTORM Backdoor Hits Tech and Legal Firms with Stealthy New Campaign
GBHACKERS.COM — 25 Sep 2025
🕵️
Gcore Radar Report Reveals 41% Surge in DDoS Attack Volumes
GBHACKERS.COM — 25 Sep 2025
🕵️
New Phishing Scam Aims at PyPI Maintainers to Steal Login Information
GBHACKERS.COM — 25 Sep 2025
🕵️
Hackers Use AI-Generated Code to Obfuscate Payloads and Bypass Traditional Defenses
GBHACKERS.COM — 25 Sep 2025
🕵️
CSA Unveils SaaS Security Controls Framework to Ease Complexity
SECURITYWEEK.COM — 25 Sep 2025
🕵️
Malicious-Looking URL Creation Service
SCHNEIER.COM — 2025-09-25
🕵️
RedNovember Hackers Targeting Government and Tech Organizations to Install Backdoor
GBHACKERS.COM — 25 Sep 2025
🕵️
Perspective: Why Politics in the Workplace is a Cybersecurity Risk
SECURITYWEEK.COM — 25 Sep 2025
🕵️
North Korean Hackers Use New AkdoorTea Backdoor to Target Global Crypto Developers
THEHACKERNEWS.COM — 25 Sep 2025
🕵️
Budgetprobleme bremsen Cybersicherheit aus
CSOONLINE.COM — 25 Sep 2025
🕵️
PyPI Warns Users of Fresh Phishing Campaign
SECURITYWEEK.COM — 25 Sep 2025
🕵️
XCSSET evolves again: Analyzing the latest updates to XCSSET’s inventory
MICROSOFT.COM — 25 Sep 2025
🕵️
Exploring GrapheneOS secure allocator: Hardened Malloc
SH.ITJUST.WORKS — 25 Sep 2025
🕵️
Living Security Unveils HRMCon 2025 Speakers as Report Finds Firms Detect Just 19% of Human Risk
GBHACKERS.COM — 25 Sep 2025
🕵️
Vane Viper Generates 1 Trillion DNS Queries to Power Global Malware and Ad Fraud Network
THEHACKERNEWS.COM — 25 Sep 2025
🕵️
New AI-Driven Phishing Platform Automates Attack Campaigns
KNOWBE4.COM — 25 Sep 2025
🕵️
Microsoft warns of new XCSSET macOS malware variant targeting Xcode devs
BLEEPINGCOMPUTER.COM — 25 Sep 2025
🕵️
DeceptiveDevelopment: From primitive crypto theft to sophisticated AI-based deception
WELIVESECURITY.COM — 25 Sep 2025
🌐
Statement from the Canadian Centre for Cyber Security on malware targeting global organizations through Cisco Systems
CYBER.GC.CA — 2025-09-25
🌐
Introducing the CASI Leaderboard
F5.COM — 25 Sep 2025
🌐
Introducing the CASI Leaderboards
F5.COM — 25 Sep 2025
📡
Tech Overtakes Gaming as Top DDoS Attack Target, New Gcore Radar Report Finds
THEHACKERNEWS.COM — 25 Sep 2025
📡
Webshells Hiding in .well-known Places, (Thu, Sep 25th)
ISC.SANS.EDU — 25 Sep 2025
📡
Malicious Rust packages on Crates.io steal crypto wallet keys
BLEEPINGCOMPUTER.COM — 25 Sep 2025
📡
EDR or XDR — which does your company need? | Kaspersky official blog
KASPERSKY.COM — 25 Sep 2025
📡
Amazon pays $2.5 billion to settle Prime memberships lawsuit
BLEEPINGCOMPUTER.COM — 25 Sep 2025
📡
New Supermicro BMC vulnerabilities open servers to malicious attacks on firmware
NETWORKWORLD.COM — 25 Sep 2025
📡
Viral call-recording app Neon goes dark after exposing users’ phone numbers, call recordings, and transcripts
TECHCRUNCH.COM — 25 Sep 2025