⚠️ VULNERABILITY DISCLOSURE 4[−]
18 OctExploring the Dark Web: A Conversation with Criminologist David Decary-HetuIn this episode, Jim Love interviews David Decary-Hetu, a criminologist at the University of Montreal, discussing the dark web and its impact on criminal activity and cybersecurity. They delve into what the dark web is, how it operates, its primary users, and its role in cybercri…CYBERSECURITYTODAY.LIBSYN.COM
18 OctCritical Zimbra SSRF Flaw Exposes Sensitive DataZimbra has released an emergency security patch to address a critical Server-Side Request Forgery (SSRF) vulnerability that could allow attackers to access sensitive data through the platform’s chat proxy configuration. The flaw, classified as high severity, affects Zimbra …GBHACKERS.COM
18 OctNew .NET CAPI Backdoor Targets Russian Auto and E-Commerce Firms via Phishing ZIPsCybersecurity researchers have shed light on a new campaign that has likely targeted the Russian automobile and e-commerce sectors with a previously undocumented .NET malware dubbed CAPI Backdoor. According to Seqrite Labs, the attack chain involves distributing phishing emails c…THEHACKERNEWS.COM
18 OctAuthorities Shut Down Cybercrime-as-a-Service, Seize 40,000 SIM CardsLaw enforcement authorities across Europe have dismantled a sophisticated cybercrime-as-a-service operation that enabled criminals to commit widespread fraud and other serious offenses across the continent. The coordinated action, codenamed ‘SIMCARTEL’, resulted in se…GBHACKERS.COM
🕵️ THREAT INTELLIGENCE 2[−]
18 OctSilver Fox Expands Winos 4.0 Attacks to Japan and Malaysia via HoldingHands RATThe threat actors behind a malware family known as Winos 4.0 (aka ValleyRAT) have expanded their targeting footprint from China and Taiwan to target Japan and Malaysia with another remote access trojan (RAT) tracked as HoldingHands RAT (aka Gh0stBins). "The campaign relied on phi…THEHACKERNEWS.COM
18 OctMicrosoft Windows 11 October Update Disrupts Localhost (127.0.0.1) ConnectivityMicrosoft’s October 2025 Windows 11 update has introduced an unexpected connectivity issue affecting developers and IT professionals worldwide. The security patch KB5066835, released on October 14, 2025, for OS Builds 26200.6899 and 26100.6899, has disrupted localhost conne…GBHACKERS.COM
🌐 CYBER THREAT LANDSCAPE 2[−]
18 OctGoogle ads for fake Homebrew, LogMeIn sites push infostealersA new malicious campaign is targeting macOS developers with fake Homebrew, LogMeIn, and TradingView platforms that deliver infostealing malware like AMOS (Atomic macOS Stealer) and Odyssey. [...]BLEEPINGCOMPUTER.COM
18 OctSpyware maker NSO Group blocked from WhatsAppA federal judge has granted Meta-owned WhatsApp’s request for a permanent injunction blocking Israeli cyberintelligence company NSO Group from targeting the messaging app’s users. At the same time, the judge dramatically reduced the fine that NSO Group must pay to Meta.TECHCRUNCH.COM
📡 INFOSEC NEWS 1[−]
18 OctOpenAI confirms GPT-6 is not shipping in 2025OpenAI is not planning to ship GPT-6 this year, but that doesn't necessarily mean the company will not release new models. [...]BLEEPINGCOMPUTER.COM