Cybersecurity Feed
Updated: 27/10/2025, 04:49:44 β€’ Items: 150
Keywords
CVE- ClickFix Malware Leak Attack 0-day zero-day RCE remote code execution privilege escalation LPE kernel exploit PoC exploit weaponized exploit KEV CISA KEV critical vulnerability supply chain attack dependency hijacking DLL sideloading code injection memory corruption SQL injection SSRF XSS sandbox escape hypervisor escape ransomware data exfiltration lateral movement APT nation state Cobalt Strike Sliver Metasploit malware campaign phishing kit loader infostealer rootkit persistence command and control C2 backdoor Fortinet FortiOS FortiGate GlobalProtect Palo Alto Cortex XDR XSIAM Prisma PAN-OS CrowdStrike SentinelOne Mandiant Elastic Security Azure AD KQL Active Directory Kerberos Golden Ticket pass-the-hash Okta identity breach session hijack exploit
SANS Internet Storm Center, InfoCON: green β€” 26/10/2025, 21:31:53

Kaitai Struct WebIDE, (Sun, Oct 26th) Click here

Cyber Security News β€” 26/10/2025, 20:53:36

Cybersecurity Newsletter Weekly – AWS Outage, WSUS Exploitation, Chrome Flaws, and RDP Attacks CVE-2025-29876 Critical Click here

Cyber Security News β€” 26/10/2025, 07:34:50

706,000+ BIND 9 Resolver Instances Vulnerable to Cache Poisoning Exposed Online – PoC Released CVE-2025-40778 Critical Click here

Cyber Security News β€” 26/10/2025, 04:45:54

LockBit 5.0 Actively Attacking Windows, Linux, and ESXi Environments High Click here

Cyber Security News β€” 26/10/2025, 03:34:32

Hackers Weaponizing Telegram Messenger with Dangerous Android Malware to Gain Full System Control Click here

Cyber Security News β€” 26/10/2025, 02:38:59

Vault Viper Exploits Online Gambling Websites Using Custom Browser to Install Malicious Program Click here

Cyber Security News β€” 26/10/2025, 02:09:45

Google Warns of Threat Actors Using Fake Job Posting to Deliver Malware and Steal Credentials Click here

GBHackers Security | #1 Globally Trusted Cyber Security News Platform β€” 26/10/2025, 00:00:00

Hackers Use ClickFix Technique to Deploy NetSupport RAT Loaders Click here

Cyber Security News β€” 25/10/2025, 23:29:17

North Korean Hackers Attacking Unmanned Aerial Vehicle Industry to Steal Confidential Data Click here

GBHackers Security | #1 Globally Trusted Cyber Security News Platform β€” 25/10/2025, 23:00:00

Hackers Exploit WordPress Arbitrary Installation Vulnerabilities in the Wild Critical Click here

Cyber Security News β€” 25/10/2025, 22:52:08

New Phishing Attack Bypasses Using UUIDs Unique to Bypass Secure Email Gateways Click here

GBHackers Security | #1 Globally Trusted Cyber Security News Platform β€” 25/10/2025, 22:01:45

CISA Beware! Hackers Are Actively Exploiting Windows Server Update Services RCE Flaw in the Wild CVE-2025-59287 Critical Click here

BleepingComputer β€” 25/10/2025, 21:46:00

New CoPhish attack steals OAuth tokens via Copilot Studio agents Click here

GBHackers Security | #1 Globally Trusted Cyber Security News Platform β€” 25/10/2025, 13:17:39

TopΒ 5 Network Detection and Response (NDR) Tools to Watch in 2026 Click here

Unit 42 β€” 25/10/2025, 03:30:01

Cloud Discovery With AzureHound Click here

darkreading β€” 25/10/2025, 01:04:00

Microsoft Issues Emergency Patch for Critical Windows Server Bug CVE-2025-59287 Critical Click here

BleepingComputer β€” 25/10/2025, 00:58:42

Hackers launch mass attacks exploiting outdated WordPress plugins High Click here

The Hacker News β€” 25/10/2025, 00:05:00

Smishing Triad Linked to 194,000 Malicious Domains in Global Phishing Operation Click here

darkreading β€” 24/10/2025, 23:11:33

How CISA Layoffs Weaken Civilian Cyber Defense Click here

The Hacker News β€” 24/10/2025, 22:00:00

Newly Patched Critical Microsoft WSUS Flaw Comes Under Active Exploitation CVE-2025-59287 Critical Click here

BleepingComputer β€” 24/10/2025, 21:58:14

Critical WSUS flaw in Windows Server now exploited in attacks Click here

darkreading β€” 24/10/2025, 21:53:19

Shutdown Sparks 85% Increase in US Government Cyberattacks Click here

SecurityWeek β€” 24/10/2025, 20:12:19

Critical Windows Server WSUS Vulnerability Exploited in the Wild CVE-2025-59287 Critical Click here

SOC Prime β€” 24/10/2025, 19:59:19

CVE-2025-12036 Vulnerability: A New Critical Chrome V8 JavaScript Engine Flaw Enables Attackers to Execute Remote Code on Vulnerable Systems CVE-2025-12036 Critical Click here

BleepingComputer β€” 24/10/2025, 19:36:16

How to reduce costs with self-service password resets Click here

The Hacker News β€” 24/10/2025, 19:30:00

APT36 Targets Indian Government with Golang-Based DeskRAT Malware Campaign Click here

SecurityWeek β€” 24/10/2025, 18:54:05

North Korean Hackers Aim at European Drone Companies Click here

SecurityWeek β€” 24/10/2025, 18:12:43

In Other News: iOS 26 Deletes Spyware Evidence, Shadow Escape Attack, Cyber Exec Sold Secrets to Russia Click here

All CISA Advisories β€” 24/10/2025, 17:30:00

Microsoft Releases Out-of-Band Security Update to Mitigate Windows Server Update Service Vulnerability, CVE-2025-59287 CVE-2025-59287 Critical Click here

All CISA Advisories β€” 24/10/2025, 17:30:00

CISA Adds Two Known Exploited Vulnerabilities to Catalog CVE-2025-54236 Critical Click here

SecurityWeek β€” 24/10/2025, 16:49:52

Toys β€˜R’ Us Canada Customer Information Leaked Online Click here

The Hacker News β€” 24/10/2025, 15:30:00

3,000 YouTube Videos Exposed as Malware Traps in Massive Ghost Network Operation Click here

SecurityWeek β€” 24/10/2025, 15:27:30

Microsoft Disables Downloaded File Previews to Block NTLM Hash Leaks Click here

SecurityWeek β€” 24/10/2025, 13:31:42

Pwn2Own WhatsApp Hacker Says Exploit Privately Disclosed to Meta Click here

BleepingComputer β€” 24/10/2025, 12:57:56

Windows Server emergency patches fix WSUS bug with PoC exploit Click here

The Hacker News β€” 24/10/2025, 12:30:00

Self-Spreading 'GlassWorm' Infects VS Code Extensions in Widespread Supply Chain Attack Click here

BleepingComputer β€” 24/10/2025, 12:06:55

Hackers earn $1,024,750 for 73 zero-days at Pwn2Own Ireland Critical Click here

SANS Internet Storm Center, InfoCON: green β€” 24/10/2025, 06:09:18

Phishing Cloud Account for Information, (Thu, Oct 23rd) Click here

BleepingComputer β€” 24/10/2025, 03:55:35

Toys β€œR” Us Canada warns customers' info leaked in data breach Click here

darkreading β€” 24/10/2025, 02:55:50

Fear the 'SessionReaper': Adobe Commerce Flaw Under Attack CVE-2025-54236 Click here

darkreading β€” 24/10/2025, 01:49:43

Tired of Unpaid Toll Texts? Blame the 'Smishing Triad' Click here

The Hacker News β€” 23/10/2025, 20:59:00

North Korean Hackers Lure Defense Engineers With Fake Jobs to Steal Drone Secrets Click here

Threat Intelligence β€” 23/10/2025, 19:30:00

Help Wanted: Vietnamese Actors Using Fake Job Posting Campaigns to Deliver Malware and Steal Credentials Click here

Check Point Research β€” 23/10/2025, 18:30:33

Dissecting YouTube’s Malware Distribution Network Click here

SANS Internet Storm Center, InfoCON: green β€” 23/10/2025, 17:39:38

Infostealer Targeting Android Devices, (Thu, Oct 23rd) Click here

SOC Prime β€” 23/10/2025, 17:31:47

CVE-2025-40778 and CVE-2025-40780: Cache Poisoning Vulnerabilities in BIND 9 Expose DNS Servers to the Risk of Attacks CVE-2025-40778 Critical Click here

All CISA Advisories β€” 23/10/2025, 17:30:00

Delta Electronics ASDA-Soft CVE-2025-62579 Click here

All CISA Advisories β€” 23/10/2025, 17:30:00

CISA Releases Eight Industrial Control Systems Advisories Click here

All CISA Advisories β€” 23/10/2025, 17:30:00

ASKI Energy ALS-Mini-S8 and ALS-Mini-S4 CVE-2025-9574 Click here

All CISA Advisories β€” 23/10/2025, 17:30:00

AutomationDirect Productivity Suite CVE-2025-62498 High Click here

All CISA Advisories β€” 23/10/2025, 17:30:00

Veeder-Root TLS4B Automatic Tank Gauge System CVE-2025-58428 Click here

All CISA Advisories β€” 23/10/2025, 17:30:00

NIHON KOHDEN Central Monitor CNS-6201 CVE-2025-59668 Click here

The Hacker News β€” 23/10/2025, 17:00:00

ThreatsDay Bulletin: $176M Crypto Fine, Hacking Formula 1, Chromium Vulns, AI Hijack & More Click here

Unit 42 β€” 23/10/2025, 15:30:15

The Smishing Deluge: China-Based Campaign Flooding Global Text Messages Click here

The Hacker News β€” 23/10/2025, 13:22:00

'Jingle Thief' Hackers Exploit Cloud Infrastructure to Steal Millions in Gift Cards Click here

darkreading β€” 23/10/2025, 11:30:00

Mideast, African Hackers Target Gov'ts, Banks, Small Retailers Click here

Threat Research & Intelligence Archives - Sekoia.io Blog β€” 23/10/2025, 11:30:00

TransparentTribe targets Indian military organisations with DeskRAT Click here

The Hacker News β€” 23/10/2025, 11:17:00

Over 250 Magento Stores Hit Overnight as Hackers Exploit New Adobe Commerce Flaw CVE-2025-54236 Click here

The Hacker News β€” 23/10/2025, 11:07:00

Critical Lanscope Endpoint Manager Bug Exploited in Ongoing Cyberattacks, CISA Confirms CVE-2025-61932 Critical Click here

darkreading β€” 23/10/2025, 01:37:29

Too Many Secrets: Attackers Pounce on Sensitive Data Sprawl Click here

Krebs on Security β€” 22/10/2025, 22:51:36

Canada Fines Cybercrime Friendly Cryptomus $176M High Click here

The Hacker News β€” 22/10/2025, 22:51:00

Iran-Linked MuddyWater Targets 100+ Organisations in Global Espionage Campaign Click here

The Hacker News β€” 22/10/2025, 22:25:00

Ukraine Aid Groups Targeted Through Fake Zoom Meetings and Weaponized PDF Files Click here

SANS Internet Storm Center, InfoCON: green β€” 22/10/2025, 19:51:47

webctrl.cgi/Blue Angel Software Suite Exploit Attempts. Maybe CVE-2025-34033 Variant?, (Wed, Oct 22nd) CVE-2025-34033 Click here

darkreading β€” 22/10/2025, 19:30:00

Russia Pivots, Cracks Down on Resident Hackers Click here

darkreading β€” 22/10/2025, 18:47:58

MuddyWater Targets 100+ Gov Entities in MEA With Phoenix Backdoor Click here

The Hacker News β€” 22/10/2025, 18:26:00

Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July Patch Click here

SANS Internet Storm Center, InfoCON: green β€” 22/10/2025, 18:12:06

What time is it? Accuracy of pool.ntp.org., (Tue, Oct 21st) Click here

All CISA Advisories β€” 22/10/2025, 17:30:00

CISA Adds One Known Exploited Vulnerability to Catalog CVE-2025-61932 Critical Click here

The Hacker News β€” 22/10/2025, 17:25:00

Bridging the Remediation Gap: Introducing Pentera Resolve Click here

The Hacker News β€” 22/10/2025, 17:13:00

Fake Nethereum NuGet Package Used Homoglyph Trick to Steal Crypto Wallet Keys Click here

The Hacker News β€” 22/10/2025, 14:56:00

Why You Should Swap Passwords for Passphrases Click here

The Hacker News β€” 22/10/2025, 14:28:00

Researchers Identify PassiveNeuron APT Using Neursite and NeuralExecutor Malware Click here

Cybersecurity Blog - Nextron Systems β€” 22/10/2025, 12:46:58

Beyond Availability – Forensic Backup Scanning with Veeam and THOR High Click here

The Hacker News β€” 22/10/2025, 12:35:00

TARmageddon Flaw in Async-Tar Rust Library Could Enable Remote Code Execution CVE-2025-62518 High Click here

Blog β€” 22/10/2025, 10:30:00

From Domain User to SYSTEM: Analyzing the NTLM LDAP Authentication Bypass Vulnerability (CVE-2025-54918) CVE-2025-54918 Click here

The Hacker News β€” 22/10/2025, 10:08:00

TP-Link Patches Four Omada Gateway Flaws, Two Allow Remote Code Execution CVE-2025-6541 High Click here

The Hacker News β€” 21/10/2025, 19:17:00

PolarEdge Targets Cisco, ASUS, QNAP, Synology Routers in Expanding Botnet Campaign Click here

All CISA Advisories β€” 21/10/2025, 17:30:00

CISA Releases 10 Industrial Control Systems Advisories Click here

All CISA Advisories β€” 21/10/2025, 17:30:00

Raisecomm RAX701-GC Series CVE-2025-11534 High Click here

All CISA Advisories β€” 21/10/2025, 17:30:00

Rockwell Automation Compact GuardLogix 5370 CVE-2025-9124 Click here

All CISA Advisories β€” 21/10/2025, 17:30:00

Siemens SIMATIC S7-1200 CPU V1/V2 Devices CVE-2011-20001 High Click here

All CISA Advisories β€” 21/10/2025, 17:30:00

Oxford Nanopore Technologies MinKNOW CVE-2024-35585 Click here

All CISA Advisories β€” 21/10/2025, 17:30:00

Siemens RUGGEDCOM ROS Devices CVE-2023-52236 Click here

All CISA Advisories β€” 21/10/2025, 17:30:00

CloudEdge Online Cameras and App CVE-2025-11757 Click here

All CISA Advisories β€” 21/10/2025, 17:30:00

Rockwell Automation 1783-NATR CVE-2025-7328 Click here

darkreading β€” 21/10/2025, 15:57:11

β€˜PassiveNeuron’ Cyber Spies Target Orgs With Custom Malware Click here

The Hacker News β€” 21/10/2025, 12:59:00

Google Identifies Three New Russian Malware Families Created by COLDRIVER Hackers Click here

The Hacker News β€” 21/10/2025, 12:53:00

Hackers Used Snappybee Malware and Citrix Flaw to Breach European Telecom Network Click here

Blog β€” 21/10/2025, 10:30:00

Ransomware Reality: Business Confidence Is High, Preparedness Is Low High Click here

darkreading β€” 21/10/2025, 02:57:52

ColdRiver Drops Fresh Malware on Targets Click here

darkreading β€” 21/10/2025, 02:08:26

Is Your Car a BYOD Risk? Researchers Demonstrate How Click here

The Hacker News β€” 21/10/2025, 00:30:00

Five New Exploited Bugs Land in CISA's Catalog β€” Oracle and Microsoft Among Targets CVE-2025-61884 Critical Click here

darkreading β€” 20/10/2025, 23:49:00

Flawed Vendor Guidance Exposes Enterprises to Avoidable Risk Critical Click here

darkreading β€” 20/10/2025, 20:58:45

Bombarding Cars With Lasers: Novel Auto Cyberattacks Emerge Click here

darkreading β€” 20/10/2025, 20:09:48

Self-Propagating GlassWorm Attacks VS Code Supply Chain Click here

Threat Intelligence β€” 20/10/2025, 19:30:00

To Be (A Robot) or Not to Be: New Malware Attributed to Russia State-Sponsored COLDRIVER Click here

The Hacker News β€” 20/10/2025, 17:57:00

⚑ Weekly Recap: F5 Breached, Linux Rootkits, Pixnapping Attack, EtherHiding & More Click here

All CISA Advisories β€” 20/10/2025, 17:30:00

CISA Adds Five Known Exploited Vulnerabilities to Catalog CVE-2022-48503 Critical Click here

The Hacker News β€” 20/10/2025, 17:25:00

Analysing ClickFix: 3 Reasons Why Copy/Paste Attacks Are Driving Security Breaches Click here

The Hacker News β€” 20/10/2025, 11:02:00

MSS Claims NSA Used 42 Cyber Tools in Multi-Stage Attack on Beijing Time Systems Click here

Blog β€” 20/10/2025, 10:30:00

CrowdStrike 2025 APJ eCrime Landscape Report: A New Era of Threats Emerges Click here

The Hacker News β€” 19/10/2025, 11:43:00

Europol Dismantles SIM Farm Network Powering 49 Million Fake Accounts Worldwide Click here

The Hacker News β€” 18/10/2025, 17:11:00

New .NET CAPI Backdoor Targets Russian Auto and E-Commerce Firms via Phishing ZIPs Click here

The Hacker News β€” 18/10/2025, 12:21:00

Silver Fox Expands Winos 4.0 Attacks to Japan and Malaysia via HoldingHands RAT Click here

darkreading β€” 17/10/2025, 21:11:55

AI Chat Data Is History's Most Thorough Record of Enterprise Secrets. Secure It Wisely Click here

The Hacker News β€” 17/10/2025, 19:03:00

North Korean Hackers Combine BeaverTail and OtterCookie into Advanced JS Malware Click here

Krebs on Security β€” 17/10/2025, 16:56:27

Email Bombs Exploit Lax Authentication in Zendesk Click here

Blogs on Information Technology, Network & Cybersecurity | Seqrite β€” 17/10/2025, 15:37:56

Operation MotorBeacon : Threat Actor targets Russian Automotive Sector using .NET Implant Click here

The Hacker News β€” 17/10/2025, 14:55:00

Researchers Uncover WatchGuard VPN Bug That Could Let Attackers Take Over Devices CVE-2025-9242 High Click here

Blog β€” 17/10/2025, 10:30:00

How Falcon Exposure Management’s ExPRT.AI Predicts What Attackers Will Exploit Click here

Unit 42 β€” 17/10/2025, 03:00:08

Threat Brief: Nation-State Actor Steals F5 Source Code and Undisclosed Vulnerabilities Click here

darkreading β€” 17/10/2025, 02:03:11

Cyberattackers Target LastPass, Top Password Managers Click here

darkreading β€” 17/10/2025, 01:24:20

Leaks in Microsoft VS Code Marketplace Put Supply Chain at Risk Click here

darkreading β€” 16/10/2025, 22:32:24

China Hackers Test AI-Optimized Attack Chains in Taiwan Click here

The Hacker News β€” 16/10/2025, 20:26:00

North Korean Hackers Use EtherHiding to Hide Malware Inside Blockchain Smart Contracts Click here

The Hacker News β€” 16/10/2025, 20:22:00

Hackers Abuse Blockchain Smart Contracts to Spread Malware via Infected WordPress Sites Click here

The Hacker News β€” 16/10/2025, 19:58:00

LinkPro Linux Rootkit Uses eBPF to Hide and Activates via Magic TCP Packets Click here

Check Point Research β€” 16/10/2025, 19:47:15

Denial of Fuzzing: Rust in the Windows kernel High Click here

SOC Prime β€” 16/10/2025, 19:46:09

CVE-2025-59230 and CVE-2025-24990 Vulnerabilities: New Windows Zero-Days Under Active Exploitation CVE-2025-59230 Critical Click here

Threat Intelligence β€” 16/10/2025, 19:30:00

DPRK Adopts EtherHiding: Nation-State Malware Hiding on Blockchains High Click here

Threat Intelligence β€” 16/10/2025, 19:30:00

New Group on the Block: UNC5142 Leverages EtherHiding to Distribute Malware Click here

All CISA Advisories β€” 16/10/2025, 17:30:00

Rockwell Automation ArmorStart AOP CVE-2025-9437 Click here

All CISA Advisories β€” 16/10/2025, 17:30:00

CISA Releases Thirteen Industrial Control Systems Advisories Click here

All CISA Advisories β€” 16/10/2025, 17:30:00

Siemens TeleControl Server Basic CVE-2025-40765 High Click here

All CISA Advisories β€” 16/10/2025, 17:30:00

Siemens SiPass Integrated CVE-2023-35002 High Click here

All CISA Advisories β€” 16/10/2025, 17:30:00

Rockwell Automation FactoryTalk ViewPoint CVE-2025-9066 High Click here

All CISA Advisories β€” 16/10/2025, 17:30:00

Siemens SINEC NMS CVE-2025-40755 Medium Click here

All CISA Advisories β€” 16/10/2025, 17:30:00

Rockwell Automation FactoryTalk View Machine Edition and PanelView Plus 7 CVE-2025-9064 High Click here

All CISA Advisories β€” 16/10/2025, 17:30:00

Siemens SIMATIC ET 200SP Communication Processors CVE-2025-40771 High Click here

All CISA Advisories β€” 16/10/2025, 17:30:00

Siemens HyperLynx and Industrial Edge App Publisher CVE-2025-6554 Click here

All CISA Advisories β€” 16/10/2025, 17:30:00

Siemens Solid Edge CVE-2025-40809 Click here

All CISA Advisories β€” 16/10/2025, 17:30:00

Rockwell Automation FactoryTalk Linx CVE-2025-9067 Click here

The Hacker News β€” 16/10/2025, 17:08:00

Hackers Deploy Linux Rootkits via Cisco SNMP Flaw in 'Zero Disco' Attacks CVE-2025-20352 Click here

Threats - Cisco Talos Blog β€” 16/10/2025, 15:30:49

BeaverTail and OtterCookie evolve with a new Javascript module High Click here

Blogs on Information Technology, Network & Cybersecurity | Seqrite β€” 16/10/2025, 12:47:58

Operation Silk Lure: Scheduled Tasks Weaponized for DLL Side-Loading (drops ValleyRAT) Medium Click here

Blog β€” 16/10/2025, 12:30:00

Falcon Defends Against Git Vulnerability CVE-2025-48384 CVE-2025-48384 Click here

The Hacker News β€” 16/10/2025, 09:56:00

CISA Flags Adobe AEM Flaw with Perfect 10.0 Score β€” Already Under Active Attack CVE-2025-54253 Critical Click here

darkreading β€” 16/10/2025, 02:25:25

'Mysterious Elephant' Moves Beyond Recycled Malware Click here

darkreading β€” 16/10/2025, 00:38:26

F5 BIG-IP Environment Breached by Nation-State Actor Critical Click here

Proofpoint News Feed β€” 16/10/2025, 00:33:46

Cybersecurity Study Shows Patient Care at Risk of Attacks Click here

The Hacker News β€” 15/10/2025, 21:36:00

F5 Breach Exposes BIG-IP Source Code β€” Nation-State Hackers Behind Massive Intrusion Click here

SOC Prime β€” 15/10/2025, 21:28:32

UAC-0239 Activity Detection: Targeted Spearphishing Attacks Against Defense Forces and State Bodies of Ukraine via the OrcaC2 Framework and FILEMESS Stealer High Click here

darkreading β€” 15/10/2025, 20:43:56

Harvard University Breached in Oracle Zero-Day Attack Critical Click here

The Hacker News β€” 15/10/2025, 19:46:00

Over 100 VS Code Extensions Exposed Developers to Hidden Supply Chain Risks Click here

Unit 42 β€” 15/10/2025, 15:30:04

PhantomVAI Loader Delivers a Range of Infostealers Click here

darkreading β€” 15/10/2025, 13:30:00

Africa Remains Top Global Target, Even as Attacks Decline Click here

Unit 42 β€” 15/10/2025, 04:30:01

Anatomy of an Attack: The "BlackSuit Blitz" at a Global Equipment Manufacturer High Click here

Krebs on Security β€” 15/10/2025, 04:27:38

Patch Tuesday, October 2025 β€˜End of 10’ Edition CVE-2025-24990 Critical Click here

darkreading β€” 15/10/2025, 03:23:11

Microsoft Drops Terrifyingly Large October Patch Update Critical Click here

↑