Cybersecurity Feed
Updated: 18/09/2025, 12:50:15 • Items: 150
Keywords
CVE- ClickFix Malware Leak Attack 0-day zero-day RCE remote code execution privilege escalation LPE kernel exploit PoC exploit weaponized exploit KEV CISA KEV critical vulnerability supply chain attack dependency hijacking DLL sideloading code injection memory corruption SQL injection SSRF XSS sandbox escape hypervisor escape ransomware data exfiltration lateral movement APT nation state Cobalt Strike Sliver Metasploit malware campaign phishing kit loader infostealer rootkit persistence command and control C2 backdoor Fortinet FortiOS FortiGate GlobalProtect Palo Alto Cortex XDR XSIAM Prisma PAN-OS CrowdStrike SentinelOne Mandiant Elastic Security Azure AD KQL Active Directory Kerberos Golden Ticket pass-the-hash Okta identity breach session hijack exploit
GBHackers Security | #1 Globally Trusted Cyber Security News Platform — 18/09/2025, 12:25:53

Researchers Expose Hidden Alliances Between Ransomware Groups High Click here

Cyber Security News — 18/09/2025, 11:51:41

Pixie Dust Wi-Fi Attack Exploits Routers WPS to Obtain PIN and Connect With Wireless Network Click here

Cyber Security News — 18/09/2025, 11:46:30

TP-Link Router 0-Day RCE Vulnerability Exploited Bypassing ASLR Protections – PoC Released CVE-2025-9961 Critical Click here

GBHackers Security | #1 Globally Trusted Cyber Security News Platform — 18/09/2025, 11:44:03

Windows Greenshot Vulnerability Lets Attackers Execute Malicious Code – PoC Published CVE-2025-59050 Click here

The Hacker News — 18/09/2025, 11:19:00

Google Patches Chrome Zero-Day CVE-2025-10585 as Active V8 Exploit Threatens Millions CVE-2025-10585 Critical Click here

GBHackers Security | #1 Globally Trusted Cyber Security News Platform — 18/09/2025, 11:17:11

Raven Stealer Targets Google Chrome Users to Exfiltrate Sensitive Data Click here

GBHackers Security | #1 Globally Trusted Cyber Security News Platform — 18/09/2025, 10:39:22

Hackers Abuse RTL/LTR Text Tricks and Browser Flaws to Mask Malicious Links Click here

GBHackers Security | #1 Globally Trusted Cyber Security News Platform — 18/09/2025, 10:17:39

Google Chrome 0-Day Under Active Attack – Update Immediately Critical Click here

Cyber Security News — 18/09/2025, 07:54:56

Google Chrome 0-Day Vulnerability Actively Exploited in the Wild – Patch Now CVE-2025-10585 Critical Click here

BleepingComputer — 18/09/2025, 02:41:06

ShinyHunters claims 1.5 billion Salesforce records stolen in Drift hacks Click here

Cyber Security News — 18/09/2025, 02:11:24

MuddyWater Hackers Using Custom Malware With Multi-Stage Payloads and Uses Cloudflare to Mask Fingerprints Click here

Cyber Security News — 18/09/2025, 01:46:09

BeaverTail Variant via Malicious Repositories Targeting Retail Sector Organizations Click here

Cyber Security News — 18/09/2025, 01:24:36

China-Aligned TA415 Hackers Uses Google Sheets and Google Calendar for C2 Communications Click here

Unit 42 — 18/09/2025, 01:00:14

"Shai-Hulud" Worm Compromises npm Ecosystem in Supply Chain Attack Click here

Cyber Security News — 18/09/2025, 00:57:01

New Magecart Skimmer Attack With Malicious JavaScript Injection to Skim Payment Data Click here

Business Insights Cybersecurity Blog by Bitdefender — 18/09/2025, 00:41:34

EggStreme Malware: Unpacking a New APT Framework Targeting a Philippine Military Company Click here

The Hacker News — 18/09/2025, 00:00:00

TA558 Uses AI-Generated Scripts to Deploy Venom RAT in Brazil Hotel Attacks Click here

BleepingComputer — 17/09/2025, 23:20:52

VC giant Insight Partners warns thousands after ransomware breach High Click here

Cyber Security News — 17/09/2025, 23:15:05

224 Malicious Android Apps on Google Play With 38 Million Downloads Delivering Malicious Payloads Click here

SecurityWeek — 17/09/2025, 20:17:06

Virtual Event Today: Attack Surface Management Summit Click here

BleepingComputer — 17/09/2025, 19:31:11

From ClickFix to MetaStealer: Dissecting Evolving Threat Actor Techniques Click here

darkreading — 17/09/2025, 19:30:00

AI-Powered Sign-up Fraud Is Scaling Fast Click here

GBHackers Security | #1 Globally Trusted Cyber Security News Platform — 17/09/2025, 19:03:40

MuddyWater Deploys Custom Multi-Stage Malware Hidden Behind Cloudflare Click here

GBHackers Security | #1 Globally Trusted Cyber Security News Platform — 17/09/2025, 18:55:30

Microsoft OneDrive Auto-Sync Flaw Leaks Enterprise Secrets from SharePoint Online Click here

BleepingComputer — 17/09/2025, 18:50:05

Microsoft and Cloudflare disrupt massive RaccoonO365 phishing service Click here

GBHackers Security | #1 Globally Trusted Cyber Security News Platform — 17/09/2025, 18:43:56

BeaverTail Malware Delivered Through Malicious Repositories Targets Retailers Click here

darkreading — 17/09/2025, 17:36:52

Raven Stealer Scavenges Chromium Data Via Telegram Click here

SecurityWeek — 17/09/2025, 16:42:37

Decade-Old Pixie Dust Wi-Fi Hack Still Impacts Many Devices Click here

SecurityWeek — 17/09/2025, 14:39:14

Shai-Hulud Supply Chain Attack: Worm Used to Steal Secrets, 180+ NPM Packages Hit Click here

The Hacker News — 17/09/2025, 14:19:00

Scattered Spider Resurfaces With Financial Sector Attacks Despite Retirement Claims Click here

SecurityWeek — 17/09/2025, 03:56:55

CrowdStrike to Acquire Pangea to Launch AI Detection and Response (AIDR) Click here

darkreading — 17/09/2025, 01:32:30

Self-Replicating 'Shai-hulud' Worm Targets NPM Packages Click here

BleepingComputer — 16/09/2025, 22:50:00

Google nukes 224 Android malware apps behind massive ad fraud campaign Click here

BleepingComputer — 16/09/2025, 22:16:43

Self-propagating supply chain attack hits 187 npm packages Click here

The Hacker News — 16/09/2025, 21:53:00

Chaos Mesh Critical GraphQL Flaws Enable RCE and Full Kubernetes Cluster Takeover High Click here

The Hacker News — 16/09/2025, 19:49:00

SlopAds Fraud Ring Exploits 224 Android Apps to Drive 2.3 Billion Daily Ad Bids Click here

Krebs on Security — 16/09/2025, 19:38:02

Self-Replicating Worm Hits 180+ Software Packages Click here

SOC Prime — 16/09/2025, 19:30:01

Maranhão Stealer Detection: New Node.js-Based Information-Stealing Malware Applies Reflective DLL Injection Click here

The Hacker News — 16/09/2025, 18:03:00

New FileFix Variant Delivers StealC Malware Through Multilingual Phishing Site Click here

darkreading — 16/09/2025, 17:30:00

Innovative FileFix Phishing Attack Proves Plenty Potent Click here

All CISA Advisories — 16/09/2025, 17:30:00

Schneider Electric Altivar Products, ATVdPAC Module, ILC992 InterLink Converter CVE-2025-7746 Click here

All CISA Advisories — 16/09/2025, 17:30:00

CISA Releases Eight Industrial Control Systems Advisories Click here

All CISA Advisories — 16/09/2025, 17:30:00

Hitachi Energy RTU500 Series CVE-2023-2953 Click here

All CISA Advisories — 16/09/2025, 17:30:00

Delta Electronics DIALink CVE-2025-58320 Click here

All CISA Advisories — 16/09/2025, 17:30:00

Siemens RUGGEDCOM, SINEC NMS, and SINEMA CVE-2021-34798 High Click here

The Hacker News — 16/09/2025, 16:36:00

Apple Backports Fix for CVE-2025-43300 Exploited in Sophisticated Spyware Attack CVE-2025-43300 Critical Click here

darkreading — 16/09/2025, 14:23:40

Emerging Yurei Ransomware Claims First Victims High Click here

The Hacker News — 16/09/2025, 12:57:00

Phoenix RowHammer Attack Bypasses Advanced DDR5 Memory Protections in 109 Seconds CVE-2025-6202 Click here

Threat Research & Intelligence Archives - Sekoia.io Blog — 16/09/2025, 11:30:00

APT28 Operation Phantom Net Voxel Click here

The Hacker News — 16/09/2025, 10:30:00

Self-Replicating Worm Hits 180+ npm Packages to Steal Credentials in Latest Supply Chain Attack Click here

Blog — 16/09/2025, 10:30:00

CrowdStrike Falcon Platform Evolves to Lead the Agentic Security Era Click here

darkreading — 16/09/2025, 02:29:56

'HybridPetya' Ransomware Bypasses Secure Boot High Click here

darkreading — 16/09/2025, 01:58:59

KillSec Ransomware Hits Brazilian Healthcare Software Provider High Click here

darkreading — 16/09/2025, 01:32:17

FBI Warns of Threat Actors Hitting Salesforce Customers Click here

The Hacker News — 16/09/2025, 00:15:00

Mustang Panda Deploys SnakeDisk USB Worm to Deliver Yokai Backdoor on Thailand IPs Click here

Check Point Research — 15/09/2025, 18:13:38

15th September – Threat Intelligence Report CVE-2025-55234 Critical Click here

The Hacker News — 15/09/2025, 17:25:00

6 Browser-Based Attacks Security Teams Need to Prepare For Right Now Click here

The Hacker News — 15/09/2025, 16:52:00

⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero-Days & More Click here

darkreading — 15/09/2025, 14:41:58

'Lies-in-the-Loop' Attack Defeats AI Coding Agents Click here

The Hacker News — 15/09/2025, 11:17:00

HiddenGh0st, Winos and kkRAT Exploit SEO, GitHub Pages in Chinese Malware Attacks Click here

Blog — 15/09/2025, 10:30:00

CrowdStrike to Acquire Pangea to Secure Enterprise AI Use and Development Click here

The Hacker News — 13/09/2025, 14:34:00

FBI Warns of UNC6040 and UNC6395 Targeting Salesforce Platforms in Data Theft Attacks Click here

darkreading — 13/09/2025, 00:58:23

French Advisory Sheds Light on Apple Spyware Activity Critical Click here

The Hacker News — 12/09/2025, 20:46:00

Samsung Fixes Critical Zero-Day CVE-2025-21043 Exploited in Android Attacks CVE-2025-21043 Critical Click here

Check Point Research — 12/09/2025, 18:20:09

Yurei & The Ghost of Open Source Ransomware High Click here

The Hacker News — 12/09/2025, 17:20:00

New HybridPetya Ransomware Bypasses UEFI Secure Boot With CVE-2024-7344 Exploit CVE-2024-7344 High Click here

Blogs on Information Technology, Network & Cybersecurity | Seqrite — 12/09/2025, 17:12:15

Deconstructing a Cyber Deception: An Analysis of the Clickfix HijackLoader Phishing Campaign Click here

The Hacker News — 12/09/2025, 16:33:00

Critical CVE-2025-5086 in DELMIA Apriso Actively Exploited, CISA Issues Warning CVE-2025-5086 Critical Click here

The Hacker News — 12/09/2025, 13:30:00

Cloud-Native Security in 2025: Why Runtime Visibility Must Take Center Stage Click here

Blogs on Information Technology, Network & Cybersecurity | Seqrite — 12/09/2025, 13:26:09

Echoleak- Send a prompt , extract secret from Copilot AI!( CVE-2025-32711) CVE-2025-32711 Click here

The Hacker News — 12/09/2025, 10:19:00

Cursor AI Code Editor Flaw Enables Silent Code Execution via Malicious Repositories Click here

darkreading — 12/09/2025, 02:31:13

Vyro AI Leak Reveals Poor Cyber Hygiene Click here

darkreading — 12/09/2025, 02:12:08

'Gentlemen' Ransomware Abuses Vulnerable Driver to Kill Security Gear High Click here

darkreading — 12/09/2025, 01:00:24

Apple CarPlay RCE Exploit Left Unaddressed in Most Cars High Click here

darkreading — 12/09/2025, 00:55:21

F5 to Acquire CalypsoAI for Advanced AI Security Capabilities Click here

darkreading — 12/09/2025, 00:07:05

AI-Enhanced Malware Sports Super-Stealthy Tactics Click here

Krebs on Security — 11/09/2025, 23:10:22

Bulletproof Host Stark Industries Evades EU Sanctions Click here

darkreading — 11/09/2025, 21:53:21

Vidar Infostealer Back With a Vengeance Click here

The Hacker News — 11/09/2025, 20:33:00

Google Pixel 10 Adds C2PA Support to Verify AI-Generated Media Authenticity Click here

The Hacker News — 11/09/2025, 20:21:00

Senator Wyden Urges FTC to Probe Microsoft for Ransomware-Linked Cybersecurity Negligence High Click here

SOC Prime — 11/09/2025, 18:14:21

The Gentlemen Ransomware Detection: New Adversary Campaign Abuses Group Policies and Uses Advanced Tools to Target Critical Organizations High Click here

darkreading — 11/09/2025, 17:30:00

Cyberattack on Kazakhstan's Largest Oil Company Was 'Simulation' Click here

All CISA Advisories — 11/09/2025, 17:30:00

Siemens Industrial Edge Management OS (IEM-OS) CVE-2025-48976 Click here

All CISA Advisories — 11/09/2025, 17:30:00

Daikin Security Gateway CVE-2025-10127 Click here

All CISA Advisories — 11/09/2025, 17:30:00

Siemens User Management Component (UMC) CVE-2025-40795 High Click here

All CISA Advisories — 11/09/2025, 17:30:00

Siemens Apogee PXC and Talon TC Devices CVE-2025-40757 Click here

All CISA Advisories — 11/09/2025, 17:30:00

CISA Releases Eleven Industrial Control Systems Advisories Click here

All CISA Advisories — 11/09/2025, 17:30:00

Siemens SIMOTION Tools CVE-2025-43715 Click here

All CISA Advisories — 11/09/2025, 17:30:00

Schneider Electric Modicon M340, BMXNOE0100, and BMXNOE0110 CVE-2024-5056 Click here

All CISA Advisories — 11/09/2025, 17:30:00

Siemens SINEC OS CVE-2025-40802 High Click here

All CISA Advisories — 11/09/2025, 17:30:00

Siemens SINAMICS Drives CVE-2025-40594 Click here

All CISA Advisories — 11/09/2025, 17:30:00

Schneider Electric EcoStruxure CVE-2025-8449 Click here

All CISA Advisories — 11/09/2025, 17:30:00

Siemens SIMATIC Virtualization as a Service (SIVaaS) CVE-2025-40804 Click here

All CISA Advisories — 11/09/2025, 17:30:00

CISA Adds One Known Exploited Vulnerability to Catalog CVE-2025-5086 Critical Click here

Blogs on Information Technology, Network & Cybersecurity | Seqrite — 11/09/2025, 17:21:29

Malware Campaign Leverages SVGs, Email Attachments, and CDNs to Drop XWorm and Remcos via BAT Scripts Click here

The Hacker News — 11/09/2025, 16:03:00

SonicWall SSL VPN Flaw and Misconfigurations Actively Exploited by Akira Ransomware Hackers Critical Click here

The Hacker News — 11/09/2025, 11:32:00

AsyncRAT Exploits ConnectWise ScreenConnect to Steal Credentials and Crypto Click here

darkreading — 10/09/2025, 22:14:30

Chinese Hackers Allegedly Pose as US Lawmaker Click here

The Hacker News — 10/09/2025, 21:16:00

Chinese APT Deploys EggStreme Fileless Malware to Breach Philippine Military Systems Click here

The Hacker News — 10/09/2025, 18:34:00

CHILLYHELL macOS Backdoor and ZynorRAT RAT Threaten macOS, Windows, and Linux Systems Click here

darkreading — 10/09/2025, 17:29:20

Dormant macOS Backdoor ChillyHell Resurfaces Click here

The Hacker News — 10/09/2025, 16:44:00

Microsoft Fixes 80 Flaws — Including SMB PrivEsc and Azure CVSS 10.0 Bugs Critical Click here

The Hacker News — 10/09/2025, 15:51:00

Apple iPhone Air and iPhone 17 Feature A19 Chips With Spyware-Resistant Memory Safety Click here

Blogs on Information Technology, Network & Cybersecurity | Seqrite — 10/09/2025, 15:50:06

SAP NetWeaver Metadata Uploader Vulnerability (CVE-2025-31324) CVE-2025-31324 Critical Click here

Unit 42 — 10/09/2025, 15:30:15

AdaptixC2: A New Open-Source Framework Leveraged in Real-World Attacks Click here

Blogs on Information Technology, Network & Cybersecurity | Seqrite — 10/09/2025, 15:13:25

Critical Role of Mobile Device Management (MDM) in Organizations Today Click here

The Hacker News — 10/09/2025, 13:30:00

Watch Out for Salty2FA: New Phishing Kit Targeting US and EU Enterprises Click here

The Hacker News — 10/09/2025, 13:23:00

China-Linked APT41 Hackers Target U.S. Trade Officials Amid 2025 Negotiations Click here

darkreading — 10/09/2025, 07:30:00

Southeast Asian Scam Centers Face More Financial Sanctions Click here

The Hacker News — 10/09/2025, 06:38:00

Adobe Commerce Flaw CVE-2025-54236 Lets Hackers Take Over Customer Accounts CVE-2025-54236 Click here

The Hacker News — 10/09/2025, 06:33:00

SAP Patches Critical NetWeaver (CVSS Up to 10.0) and High-Severity S/4HANA Flaws CVE-2025-42944 High Click here

Unit 42 — 10/09/2025, 04:30:05

Data Is the New Diamond: Latest Moves by Hackers and Defenders Click here

Krebs on Security — 10/09/2025, 02:51:14

Microsoft Patch Tuesday, September 2025 Edition CVE-2025-54918 Critical Click here

darkreading — 10/09/2025, 00:47:18

Qantas Reduces Executive Pay Following Cyberattack Click here

darkreading — 09/09/2025, 23:46:15

Huge NPM Supply Chain Attack Goes Out With Whimper Click here

darkreading — 09/09/2025, 21:20:11

Salty2FA Takes Phishing Kits to Enterprise Level Click here

SOC Prime — 09/09/2025, 19:48:50

MostereRAT Detection: Attackers Abuse AnyDesk and TightVNC for Persistent Access on Windows Systems Click here

The Hacker News — 09/09/2025, 19:44:00

Axios Abuse and Salty 2FA Kits Fuel Advanced Microsoft 365 Phishing Attacks Click here

Business Insights Cybersecurity Blog by Bitdefender — 09/09/2025, 19:25:43

Bitdefender Threat Debrief | September 2025 Click here

All CISA Advisories — 09/09/2025, 17:30:00

Rockwell Automation CompactLogix® 5480 CVE-2025-9160 Click here

All CISA Advisories — 09/09/2025, 17:30:00

ABB Cylon Aspect BMS/BAS CVE-2025-53187 Click here

All CISA Advisories — 09/09/2025, 17:30:00

Rockwell Automation 1783-NATR CVE-2020-28895 Click here

All CISA Advisories — 09/09/2025, 17:30:00

Rockwell Automation FactoryTalk Optix CVE-2025-9161 High Click here

All CISA Advisories — 09/09/2025, 17:30:00

Rockwell Automation Stratix IOS CVE-2025-7350 High Click here

All CISA Advisories — 09/09/2025, 17:30:00

CISA Releases Fourteen Industrial Control Systems Advisories Click here

All CISA Advisories — 09/09/2025, 17:30:00

Rockwell Automation FactoryTalk Activation Manager CVE-2025-7970 Click here

All CISA Advisories — 09/09/2025, 17:30:00

Rockwell Automation ControlLogix 5580 CVE-2025-9166 Click here

All CISA Advisories — 09/09/2025, 17:30:00

Rockwell Automation Analytics LogixAI CVE-2025-9364 Click here

All CISA Advisories — 09/09/2025, 17:30:00

Rockwell Automation ThinManager CVE-2025-9065 Medium Click here

The Hacker News — 09/09/2025, 17:23:00

RatOn Android Malware Detected With NFC Relay and ATS Banking Fraud Capabilities Click here

The Hacker News — 09/09/2025, 15:57:00

From MostereRAT to ClickFix: New Malware Campaigns Highlight Rising AI and Phishing Risks Click here

The Hacker News — 09/09/2025, 15:32:00

TOR-Based Cryptojacking Attack Expands Through Misconfigured Docker APIs Click here

The Hacker News — 09/09/2025, 11:43:00

20 Popular npm Packages With 2 Billion Weekly Downloads Compromised in Supply Chain Attack Click here

Blog — 09/09/2025, 10:30:00

September 2025 Patch Tuesday: Two Publicly Disclosed Zero-Days and Eight Critical Vulnerabilities Among 84 CVEs Click here

The Hacker News — 09/09/2025, 05:57:00

45 Previously Unreported Domains Expose Longstanding Salt Typhoon Cyber Espionage Click here

Krebs on Security — 09/09/2025, 04:23:41

18 Popular Code Packages Hacked, Rigged to Steal Crypto Click here

darkreading — 09/09/2025, 02:43:40

SentinelOne Announces Plans to Acquire Observo AI Click here

darkreading — 09/09/2025, 02:19:13

'MostereRAT' Malware Blends In, Blocks Security Tools Click here

darkreading — 09/09/2025, 01:47:59

Salesloft Breached via GitHub Account Compromise Click here

Check Point Research — 08/09/2025, 16:35:59

8th September – Threat Intelligence Report CVE-2025-55177 Critical Click here

Cybersecurity Blog - Nextron Systems — 08/09/2025, 15:03:18

Detecting NetScaler Compromise with THOR During CVE-2025-7775 Attacks CVE-2025-7775 Critical Click here

Cloud Threat Landscape — 08/09/2025, 05:30:00

Qix npm package supply chain compromise (Incident) Click here

Krebs on Security — 06/09/2025, 08:53:35

GOP Cries Censorship Over Spam Filters That Work Click here

darkreading — 06/09/2025, 01:41:30

Critical SAP S/4HANA Vulnerability Under Attack, Patch Now CVE-2025-42957 Click here

darkreading — 05/09/2025, 23:58:14

Secretive MaaS Group 'TAG-150' Develops Novel 'CastleRAT' Click here

darkreading — 05/09/2025, 18:30:00

Federal Cuts Put Local, State Agencies at Cyber-Risk Click here

Proofpoint News Feed — 05/09/2025, 16:03:07

Attacks with Stealerium malware spike Click here

SOC Prime — 05/09/2025, 14:32:27

Lazarus Group Attack Detection: Hackers Expand Their Toolkit with PondRAT, ThemeForestRAT, and RemotePE Malware Strains Critical Click here

Cloud Threat Landscape — 05/09/2025, 05:30:00

GhostAction campaign (Campaign) Click here

Business Insights Cybersecurity Blog by Bitdefender — 04/09/2025, 23:38:35

SafePay Ransomware: How a Non-RaaS Group Executes Rapid Fire Attacks High Click here

↑