81Articles
8Categories
2025-09-29Date
🚨
CISA Adds Five Known Exploited Vulnerabilities to CatalogCISA has added five new vulnerabilities to its  Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2021-21311 Adminer Server-Side Request Forgery Vulnerability CVE-2025-20352 Cisco IOS and IOS XE Stack-based Buffer Overflow Vulnerab…
KEV
🐛
Notepad++ DLL Hijack Flaw Lets Attackers Run Malicious Code
🐛
SUSE Rancher Flaws Allow Attackers to Lock Out Admin Accounts
🐛
WhatsApp 0-Click Flaw Abused via Malicious DNG Image File
🐛
Chinese hackers breached critical infrastructure globally using enterprise network gear
🐛
Attackers exploited critical Fortra GoAnywhere flaw in zero-day attacks (CVE-2025-10035) - Help Net Security
🐛
Increase in Scans for Palo Alto Global Protect Vulnerability (CVE-2024-3400), (Mon, Sep 29th)
🐛
Apple Patches Single Vulnerability CVE-2025-43400, (Mon, Sep 29th)
⚠️
Lockbit Is Back
⚠️
Google Project Zero Discloses Apple Vulnerability Allowing ASLR Bypass
⚠️
Threat Actors Exploiting Dynamic DNS Providers for Malicious Activity
⚠️
SVG Files Abused to Deploy PureMiner Malware and Exfiltrate Data
⚠️
Agentic AI in IT security: Where expectations meet reality
⚠️
Coherence: Insider risk strategy’s new core principle
⚠️
Formbricks Signature Verification Flaw Lets Attackers Reset User Passwords
⚠️
Cybercriminals Exploit Facebook and Google Ads as Tools for Stealing Sensitive Data
⚠️
Live interviews from Oktane 2025: threats, AI in apps, and AI in cybersecurity tools -... - ESW #426
⚠️
Akira Ransomware’s Exploitation of SonicWall Vulnerability Continues
⚠️
Dutch Teens Arrested for Allegedly Helping Russian Hackers
⚠️
Hackers Exploit Weaponized Microsoft Teams Installer to Deploy Oyster Malware
⚠️
Forensic-timeliner: A Windows Forensics Tool for DFIR Investigators
⚠️
XWorm campaign shows a shift toward fileless malware and in-memory evasion tactics
⚠️
Cloud Security Alliance führt neues SaaS-Framework ein
⚠️
⚡ Weekly Recap: Cisco 0-Day, Record DDoS, LockBit 5.0, BMC Bugs, ShadowV2 Botnet & More
⚠️
New TamperedChef Malware Exploits Productivity Tools to Access and Exfiltrate Sensitive Data
⚠️
Can We Trust AI To Write Vulnerability Checks? Here's what we found
⚠️
CISA and UK NCSC Release Joint Guidance for Securing OT Systems
⚠️
Harrods suffers new data breach exposing 430,000 customer records
⚠️
New Botnet Loader-as-a-Service Exploiting Routers and IoT Devices to Deploy Mirai Payloads
⚠️
UK govt backs JLR with £1.5 billion loan guarantee after cyberattack
⚠️
Threat Actors Exploiting SonicWall Firewalls to Deploy Akira Ransomware Using Malicious Logins
⚠️
CISA Strengthens Commitment to SLTT Governments
⚠️
Japan's largest brewer suspends operations due to cyberattack
📢
CSO30 Awards 2025 celebrate Australia’s top cybersecurity leaders
📢
IBM security advisory (AV25-624)
📢
Ubuntu security advisory (AV25-626)
📢
Dell security advisory (AV25-625)
📢
[Control systems] CISA ICS security advisories (AV25–627)
📢
DHS and CISA Announce Cybersecurity Awareness Month 2025
📢
Red Hat security advisory (AV25-628)
📢
CISA is Strengthening Our Nation’s Security with Direct Cyber Support to State and Local Governments
📢
Apple security advisory (AV25-629)
📢
VMware security advisory (AV25-629)
🔥
Welcoming CERN to Have I Been Pwned
🔥
Cyberattack on JLR Prompts £1.5 Billion UK Government Intervention
🔥
Abusing Notion’s AI Agent for Data Theft
🔥
Cybercriminals Target SonicWall Firewalls to Deploy Akira Ransomware via Malicious Login Attempts
🔥
Beijing's RedNovember hacked critical US, global orgs
🔥
Jaguar Land Rover Confirms Gradual Restart of Operations Post-Cyberattack
🔥
UK government bails out Jaguar Land Rover with £1.5B loan after hack disrupts vehicle production for weeks
🔥
Medusa Ransomware Claims Comcast Data Breach, Demands $1.2M
🔥
Harrods Reveals Supply Chain Breach Impacting Online Customers
🔥
Ransomware gang sought BBC reporter’s help in hacking media giant
🔥
This month in security with Tony Anscombe – September 2025 edition
🕵️
ISC Stormcast For Monday, September 29th, 2025 https://isc.sans.edu/podcastdetail/9632, (Mon, Sep 29th)
🕵️
Two Dutch Teenagers Arrested for Wi-Fi Sniffing Activities
🕵️
Junge Onliner tappen oft in Phishing-Fallen
🕵️
New ModStealer Evades Antivirus, Targets macOS Users to Steal Sensitive Data
🕵️
Agentic AI and the Looming Board-Level Security Crisis
🕵️
New Olymp Loader Malware-as-a-Service Promises Defender Bypass with Auto Certificate Signing
🕵️
SafeHill Emerges from Stealth With $2.6 Million Pre-Seed Funding
🕵️
ThreatBook Launches Best-of-Breed Advanced Threat Intelligence Solution
🕵️
Acreed Infostealer Gaining Popularity Among Cybercriminals for C2 via Steam Platform
🕵️
Fake Microsoft Teams installers push Oyster malware via malvertising
🕵️
New Spear-Phishing Attack Deploys DarkCloud Malware to Steal Keystrokes and Credentials
🕵️
Google Ads Used to Spread Trojan Disguised as TradingView Premium
🕵️
EvilAI Malware Masquerades as AI Tools to Infiltrate Global Organizations
🕵️
News Alert: ThreatBook launches ATI Platform, targets gaps in Asia-Pacific threat detection
🕵️
New Olymp Loader Malware-as-a-Service Promises Defender Bypass with Auto Certificate Signing
🌐
First Malicious MCP Server Found Stealing Emails in Rogue Postmark-MCP Package
🌐
The State of AI in the SOC 2025 - Insights from Recent Study
🌐
Introducing the CASI Leaderboard
📡
Microsoft Flags AI-Driven Phishing: LLM-Crafted SVG Files Outsmart Email Security
📡
Joint guidance on creating and maintaining a definitive view of your operational technology architecture
📡
OpenAI is routing GPT-4o to safety models when it detects harmful activities
📡
How to set up anti-phishing security in Kaspersky for Android | Kaspersky official blog
📡
What is security hardening? | Kaspersky official blog
📡
ChatGPT tests free trial for paid plans, rolls out cheaper Go in more regions
📡
Brave launches 'Ask Brave' feature to fuse AI with traditional search
📡
Sophos named a Leader in the IDC MarketScape™: Worldwide Extended Detection and Response (XDR) Software 2025
📡
UK convicts "Bitcoin Queen" in world’s largest cryptocurrency seizure