81Articles
8Categories
2025-10-10Date
🐛
Gladinet CentreStack and Triofox 0-Day Flaw Under Active Attack
🐛
RondoDox Botnet Targets Over 50 Vulnerabilities to Compromise Routers, CCTV Systems, and Web Servers
🐛
From LFI to RCE: Active Exploitation Detected in Gladinet and TrioFox Vulnerability
🐛
From Detection to Patch: Fortra Reveals Full Timeline of CVE-2025-10035 Exploitation
🐛
Open-source DFIR Velociraptor was abused in expanding ransomware efforts
🐛
Hackers exploiting zero-day in Gladinet file sharing software
🐛
Apple bumps RCE bug bounties to $2M to counter commercial spyware vendors
⚠️
IoT Hacks Galore - Kieran Human - PSW #895
⚠️
Disaster Recovery und Business Continuity effektiv planen
⚠️
7-Zip Vulnerabilities Allowing Remote Code Execution
⚠️
Teenage Ransomware Arrest In Day Care Ransom
KEV
⚠️
Credit Card Payment Terminal Exploited for Remote Access
⚠️
Google Issues Alert on CL0P Ransomware Actively Exploiting Oracle E-Business Suite Zero-Day
⚠️
Hackers Exploit Microsoft Employee Accounts in Salary Theft Scheme
⚠️
Authorities Dismantle BreachForums’ Reemerged Clearnet Marketplace
⚠️
CL0P-Linked Hackers Breach Dozens of Organizations Through Oracle Software Flaw
⚠️
The CIA triad is dead — stop using a Cold War relic to fight 21st century threats
⚠️
Sophisticated Malware Deployed in Oracle EBS Zero-Day Attacks
⚠️
FBI takes down BreachForums portal used for Salesforce extortion
⚠️
ZDI Drops 13 Unpatched Ivanti Endpoint Manager Vulnerabilities
⚠️
GitHub Copilot Flaw Allows Attackers to Steal Source Code from Private Repositories
⚠️
it-sa-Special
⚠️
RondoDox Botnet Takes ‘Exploit Shotgun’ Approach
⚠️
SonicWall SSL VPN Devices Targeted by Threat Actors to Distribute Akira Ransomware
⚠️
Datenleck bei SonicWall betrifft alle Cloud-Backup-Kunden
⚠️
Cisco, Fortinet, Palo Alto Networks Devices Targeted in Coordinated Campaign
⚠️
In Other News: Gladinet Flaw Exploitation, Attacks on ICS Honeypot, ClayRat Spyware
⚠️
Stealit Malware Abuses Node.js Single Executable Feature via Game and VPN Installers
⚠️
Microsoft Warns of ‘Payroll Pirates’ Hijacking HR SaaS Accounts to Steal Employee Salaries
⚠️
SonicWall data breach affects all cloud backup customers
⚠️
Apple now offers $2 million for zero-click RCE vulnerabilities
⚠️
FBI takes down BreachForums portal used for Salesforce extortion
⚠️
FBI seizes BreachForums servers as threatened Salesforce data release deadline approaches
⚠️
News alert: SquareX exposes how AI browsers fall prey to OAuth hijacks and malware traps
⚠️
BreachForums seized, but hackers say they will still leak Salesforce data
📋
Windows 11 23H2 Home and Pro reach end of support in 30 days
📢
reuters.com
📢
Google Chrome security advisory (AV25-653)
📢
Nanoprecise partners with AccuKnox to strengthen its Zero Trust Cloud Security and Compliance Posture
📢
Microsoft Edge security advisory (AV25-654)
📢
ServiceNow security advisory (AV25-655)
📢
Homeland Security reassigns ‘hundreds’ of CISA cyber staffers to support Trump’s deportation crackdown
🔥
KFC Venezuela Suffers Alleged Data Breach Exposing 1 Million Customer Records
🔥
LLM-Powered MalTerminal Malware Uses OpenAI GPT-4 to Create Ransomware Code
🔥
Autonomous AI Hacking and the Future of Cybersecurity
🔥
Chaosbot Using CiscoVPN and Active Directory Passwords for Network Commands
🔥
Hackers now use Velociraptor DFIR tool in ransomware attacks
🔥
Attackers compromised ALL SonicWall firewall configuration backup files - Help Net Security
🔥
Data-Leak Sites Hit an All-Time High With New Scattered Spider RaaS and LockBit 5.0
🔥
SaaS Breaches Start with Tokens - What Security Teams Must Watch
🔥
DDoS Botnet Aisuru Blankets US ISPs in Record DDoS
🔥
WhatsApp Worm Targets Brazilian Banking Customers
🔥
Ransomware gang says it hacked merchandise distributor SRP not once, but twice - Comparitech
🔥
Cybersecurity For Dummies, 3rd Edition eBook FREE for a Limited Time
🔥
Ballistic Hot Dogs, Clayrat, Twonet, Lockbit, Resumes, Discord, Aaran Leyland and... - SWN #519
🕵️
ISC Stormcast For Friday, October 10th, 2025 https://isc.sans.edu/podcastdetail/9650, (Fri, Oct 10th)
🕵️
Sammelklage gegen Facebook-Mutter Meta
🕵️
Snake Keylogger Uses Weaponized Emails and PowerShell to Steal Sensitive Data
🕵️
ClayRat Android Malware Masquerades as WhatsApp & Google Photos
🕵️
Apple Bug Bounty Update: Top Payout Now $2 Million, $35 Million Paid to Date
🕵️
Juniper Networks Patches Critical Junos Space Vulnerabilities
🕵️
The AI SOC Stack of 2026: What Sets Top-Tier Platforms Apart?
🕵️
175 Malicious npm Packages Targeting Tech and Energy Firms, 26,000 Downloads
🕵️
RondoDox botnet targets 56 n-day flaws in worldwide attacks
🕵️
GitHub Copilot Chat Flaw Let Private Code Leak Via Images
🕵️
Researchers Warn of Security Gaps in AI Browsers - Infosecurity Magazine
🕵️
A TikTok for Deepfakes? OpenAI Could Be Making It a Reality
🕵️
reuters.com
🕵️
From Phishing to Malware: AI Becomes Russia's New Cyber Weapon in War on Ukraine
🕵️
The Hidden Cybersecurity Threat: Securing the Human-AI Relationship
🕵️
Microsoft: Hackers target universities in “payroll pirate” attacks
🕵️
Report: North Korea Expands Its Remote Employment Schemes
🕵️
News alert: Lightship, OpenSSL submit OpenSSL 3.5.4 — with post-quantum crypto on board
🕵️
Friday Squid Blogging: Sperm Whale Eating a Giant Squid
🌐
Spyware maker NSO Group confirms acquisition by US investors
📡
175 Malicious npm Packages with 26,000 Downloads Used in Credential Phishing Campaign
📡
Copilot on Windows can now connect to email, create Office docs
📡
From Lab to Leadership: How VMware Certification Transformed My Career
📡
Security risks of vibe coding and LLM assistants for developers
📡
Google Chrome to revoke notification access for inactive sites
📡
Security considerations for Internet Protocol version 6 (ITSM.80.003)