🐛 COMMON VULNERABILITIES AND EXPOSURES 1[−]
25 OctCISA Beware! Hackers Are Actively Exploiting Windows Server Update Services RCE Flaw in the WildCybersecurity researchers are sounding the alarm after discovering that hackers are actively exploiting a critical remote code execution (RCE) vulnerability in Microsoft’s Windows Server Update Services (WSUS). The flaw, tracked as CVE-2025-59287, allows unauthenticated att…GBHACKERS.COM
⚠️ VULNERABILITY DISCLOSURE 4[−]
25 OctTop 10 Best Bug Bounty Platforms in 2025As digital attack surfaces expand with rapid innovation in cloud, AI, and Web3 technologies, organizations increasingly rely on the collective intelligence of ethical hackers to identify vulnerabilities before malicious actors can exploit them. These platforms facilitate a struct…GBHACKERS.COM
25 Oct$1M WhatsApp Hack Flops: Only Low-Risk Bugs Disclosed to Meta After Pwn2Own WithdrawalWhatsApp told SecurityWeek that the two low-impact vulnerabilities cannot be used for arbitrary code execution. The post $1M WhatsApp Hack Flops: Only Low-Risk Bugs Disclosed to Meta After Pwn2Own Withdrawal appeared first on SecurityWeek .SECURITYWEEK.COM
25 OctHackers Exploit WordPress Arbitrary Installation Vulnerabilities in the WildCybersecurity firm Wordfence has uncovered a renewed wave of mass exploitation targeting critical vulnerabilities in two popular WordPress plugins, allowing unauthenticated attackers to install malicious software and potentially seize control of websites. The flaws, first disclos…GBHACKERS.COM
25 OctOne wrong letter: UN moves to curb cybercrime with new convention | UN Newssubmitted by cm0002 to cybersecurity 1 points | 0 comments https://news.un.org/en/story/2025/10/1166175 In December 2024, the UN General Assembly adopted the United Nations Convention against Cybercrime — the first international treaty on criminal justice in more than two decades…INFOSEC.PUB
📋 SECURITY BULLETINS 1[−]
25 OctHackers Use ClickFix Technique to Deploy NetSupport RAT LoadersCybercriminals are increasingly using a technique known as “ClickFix” to deploy the NetSupport remote administration tool (RAT) for malicious purposes. According to a new report from eSentire’s Threat Response Unit (TRU), threat actors have shifted their primary deliv…GBHACKERS.COM
📢 SECURITY ADVISORIES 1[−]
25 OctTop 10 Best Cloud Access Security Brokers (CASB) in 2025The year 2025 marks a new era in enterprise cloud adoption, characterized by a complex tapestry of Software-as-a-Service (SaaS) applications, Infrastructure-as-a-Service (IaaS) platforms, and Platform-as-a-Service (PaaS) offerings. While cloud services deliver unparalleled agilit…GBHACKERS.COM
🔥 INCIDENT REPORTING 2[−]
25 OctNavigating Cybersecurity in Small and Medium Businesses with White Hat Hacker Graham BerryIn this episode of Cybersecurity Today, host Jim Love sits down with Graham Barrie a CISO and white hat hacker, to discuss the critical importance of cybersecurity for small and medium-sized businesses. From the moment Berry fell in love with technology through a Tandy TRS 80 to …CYBERSECURITYTODAY.LIBSYN.COM
25 OctWeekly Update 475Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite It was the Synthient threat data that ate most of my time this week, and it continues to do so now, the weekend after recording this vi…TROYHUNT.COM
🕵️ THREAT INTELLIGENCE 7[−]
25 OctSmishing Triad Linked to 194,000 Malicious Domains in Global Phishing OperationThe threat actors behind a large-scale, ongoing smishing campaign have been attributed to more than 194,000 malicious domains since January 1, 2024, targeting a broad range of services across the world, according to new findings from Palo Alto Networks Unit 42. "Although these do…THEHACKERNEWS.COM
25 OctTop 10 Best Cloud Security Companies For AWS, Azure And GCP in 2025Organizations are not just adopting cloud; they are embracing multi-cloud and hybrid strategies as the new norm, distributing workloads across Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP) to optimize for cost, performance, and resilience. While the …GBHACKERS.COM
25 OctRobo Bees, side, AI Risk, Red Tiger, SessionReaper, Bad Bots, Willow, Josh Marpet - SWN #523Venomous Robo Bees and Rabid Cocaine Weasels, sidebar spoofing, AI Risk, Red Tiger, SessionReaper, Bad Bots, Willow, Josh Marpet, and More on this edition of the Security Weekly News. Visit https://www.securityweekly.com/swn for all the latest episodes! Show Notes: https://securi…YOUTUBE.COM
25 OctTop 10 Best Cloud Penetration Testing Providers in 2025The rapid migration to cloud environments – AWS, Azure, and GCP being the dominant players continues unabated in 2025. While cloud providers offer robust underlying infrastructure security, the shared responsibility model dictates that securing everything in the cloud, from confi…GBHACKERS.COM
25 OctOpenAI Atlas Omnibox Is Vulnerable to JailbreaksResearchers have discovered that a prompt can be disguised as an url, and accepted by Atlas as an url in the omnibox. The post OpenAI Atlas Omnibox Is Vulnerable to Jailbreaks appeared first on SecurityWeek .SECURITYWEEK.COM
25 OctTop 10 Best Cloud Workload Protection Platforms (CWPP) in 2025The cloud landscape in 2025 continues its unprecedented growth, with organizations of all sizes rapidly migrating critical workloads to public, private, and hybrid cloud environments. While cloud providers meticulously secure their underlying infrastructure, the onus of protectin…GBHACKERS.COM
25 OctTop 5 Network Detection and Response (NDR) Tools to Watch in 2026Cybersecurity professionals are facing a nightmare scenario. Attackers aren’t using basic methods anymore – they’re deploying AI-powered threats that evolve faster than most security teams can respond. Here’s the reality check: The…GBHACKERS.COM
📡 INFOSEC NEWS 3[−]
25 OctThe glaring security risks with AI browser agentsNew AI browsers from OpenAI and Perplexity promise to increase user productivity, but they also come with increased security risks.TECHCRUNCH.COM
25 OctNew 'CoPhish' technique wraps OAuth phishing in Microsoft CopilotA new phishing technique dubbed 'CoPhish' weaponizes Microsoft Copilot Studio agents to deliver fraudulent OAuth consent requests via legitimate and trusted Microsoft domains. [...]BLEEPINGCOMPUTER.COM
25 OctNew CoPhish attack steals OAuth tokens via Copilot Studio agentsA new phishing technique dubbed 'CoPhish' weaponizes Microsoft Copilot Studio agents to deliver fraudulent OAuth consent requests via legitimate and trusted Microsoft domains. [...]BLEEPINGCOMPUTER.COM