Daily CyberSecurity • Page 253 of 776 • Zero-hour alerts. Unmatched analysis.

Conti Ransomware Operator Oleksii Lytvynenko Extradited from Ireland to Face Federal Hacking Charges

Conti Ransomware Extradition, Lytvynenko

Conti Ransomware Operator Oleksii Lytvynenko Extradited from Ireland to Face Federal Hacking Charges

Do Son November 2, 2025

Ukrainian national Oleksii Lytvynenko was extradited from Ireland for his alleged role in the Conti ransomware operation. The DoJ charges him with wire/computer fraud for extorting over $500,000.

Sandworm APT Attacks Belarus Military With LNK Exploit and OpenSSH Over Tor obfs4 Backdoor ThinkPHP Vulnerabilities

Sandworm APT Attacks Belarus Military With LNK Exploit and OpenSSH Over Tor obfs4 Backdoor

Do Son November 1, 2025

Cyble exposed a Sandworm-linked espionage campaign targeting Belarusian military UAV personnel. It uses a malicious LNK file to deploy OpenSSH over Tor obfs4 for stealthy, persistent remote access.

Pinterest Launches AI Assistant: Transforming Search to Personalized Visual Discovery

Pinterest AI layoffs 2026, Pinterest workforce reduction 15% OpenAI Pinterest acquisition 2026, multimodal AI training data Pinterest Assistant, AI Search, Visual Discovery

Pinterest Launches AI Assistant: Transforming Search to Personalized Visual Discovery

Do Son November 1, 2025

Pinterest Assistant uses AI to analyze saved Pins and Boards, delivering highly personalized visual recommendations for open-ended queries. Now in US beta.

Meta Quest 3 Gets Windows 11 Virtual Desktop—Bringing Mixed Reality to the Masses Mixed Reality, Virtual Desktop, Meta Quest 3

Meta Quest 3 Gets Windows 11 Virtual Desktop—Bringing Mixed Reality to the Masses

Do Son November 1, 2025

Microsoft's Mixed Reality Link brings the Windows 11 virtual desktop experience to Meta Quest 3 users. It supports cloud PCs and challenges the expensive Apple Vision Pro.

iPhone 17 Surge: Apple Hits Record $102B Revenue While Teasing AI Siri 2026 Debut Apple Earnings, iPhone 17 Sales Satellite connectivity, iPhone

iPhone 17 Surge: Apple Hits Record $102B Revenue While Teasing AI Siri 2026 Debut

Do Son November 1, 2025

Apple reported a record Q4 revenue of $102.47B, boosted by the iPhone 17, and promised an AI-powered Siri in 2026. China sales dipped; Services revenue surged 15.1%.

Critical WordPress Theme Flaw (CVE-2025-5397, CVSS 9.8) Under Active Exploitation Allows Unauthenticated Admin Takeover PAN-OS Root RCE CL-STA-1132 Exploitation Tianxin RCE CVE-2021-4473 React Native Supply Chain Attack AstrOOnauta Malware Gladinet Zero-Day, LFI RCE Chain WordPress Theme, Account Takeover CVE-2024-50623 - European Space Agency cyberattack

PAN-OS Root RCE CL-STA-1132 Exploitation Tianxin RCE CVE-2021-4473 React Native Supply Chain Attack AstrOOnauta Malware Gladinet Zero-Day, LFI RCE Chain WordPress Theme, Account Takeover CVE-2024-50623 - European Space Agency cyberattack

Critical WordPress Theme Flaw (CVE-2025-5397, CVSS 9.8) Under Active Exploitation Allows Unauthenticated Admin Takeover

Do Son November 1, 2025

A Critical (CVSS 9.8) Auth Bypass in the Jobmonster theme's check_login() function is actively exploited. The flaw allows unauthenticated attackers to gain admin access to job board sites.

Critical WordPress Plugin Flaw (CVE-2025-8489, CVSS 9.8) Allows Unauthenticated Admin Takeover CVE-2024-11972 - Hunk Companion

Critical WordPress Plugin Flaw (CVE-2025-8489, CVSS 9.8) Allows Unauthenticated Admin Takeover

Do Son November 1, 2025

A critical security vulnerability has been identified and is being actively exploited in the King Addons for...

CVE-2025-11833 (CVSS 9.8): Critical Flaw Exposes 400,000 WordPress Sites to Unauthenticated Account Takeover

Do Son November 1, 2025

Urgent patch for Post SMTP plugin. A CVSS 9.8 flaw lets unauthenticated attackers read email logs and steal password reset links to take over accounts.

Chinese APT BRONZE BUTLER Exploits LANSCOPE Zero-Day for SYSTEM Control BRONZE BUTLER, Zero-Day

Chinese APT BRONZE BUTLER Exploits LANSCOPE Zero-Day for SYSTEM Control

Do Son October 31, 2025

Chinese APT BRONZE BUTLER exploited CVE-2025-61932 in Motex LANSCOPE Endpoint Manager to gain SYSTEM access. CISA added the actively exploited zero-day to KEV.

CISA Warns of Active Exploitation in XWiki and VMware Vulnerabilities n8n RCE Vulnerability CVE-2025-68613 CISA KEV WinRAR Zero-Day, Cloud Files UAF OpenPLC ScadaBR, CVE-2021-26829 CISA KEV, Gladinet LFI RCE XWiki RCE, VMware EoP CISA KEV CISA, Known Exploited Vulnerabilities CVE-2020-2883 CISA, Trend Micro

n8n RCE Vulnerability CVE-2025-68613 CISA KEV WinRAR Zero-Day, Cloud Files UAF OpenPLC ScadaBR, CVE-2021-26829 CISA KEV, Gladinet LFI RCE XWiki RCE, VMware EoP CISA KEV CISA, Known Exploited Vulnerabilities CVE-2020-2883 CISA, Trend Micro

CISA Warns of Active Exploitation in XWiki and VMware Vulnerabilities

Do Son October 31, 2025

CISA adds XWiki (CVE-2025-24893) and VMware (CVE-2025-41244) to its KEV Catalog after confirming active exploitation in the wild.

Netflix Experiments with Vertical Video and Podcasts, Redefining Mobile Entertainment Amazon Aurora, Netflix Cloud Migration Netflix innovation, vertical video Netflix Dutch DPA

Amazon Aurora, Netflix Cloud Migration Netflix innovation, vertical video Netflix Dutch DPA

Netflix Experiments with Vertical Video and Podcasts, Redefining Mobile Entertainment

Do Son October 31, 2025

Netflix explores vertical video and podcast integration, signaling a new era of mobile entertainment without mimicking TikTok’s model.

Brash Attack: Critical Chromium Flaw Allows DoS via Simple Code Injection Chrome 14-day update cycle Chromium JPEG-XL Image Format Debate Chromium DoS, document.title Browser Muting, iframe Media Supporters of Chromium-based Browsers

Chrome 14-day update cycle Chromium JPEG-XL Image Format Debate Chromium DoS, document.title Browser Muting, iframe Media Supporters of Chromium-based Browsers

Brash Attack: Critical Chromium Flaw Allows DoS via Simple Code Injection

Do Son October 31, 2025

The Brash exploit leverages a missing rate limit on Chromium's document.title API to trigger a Denial-of-Service attack, crashing browsers in seconds.

Samsung Internet Arrives on Windows, Pushing Forward Ambient AI Vision Samsung Internet, ambient AI

Samsung Internet Arrives on Windows, Pushing Forward Ambient AI Vision

Do Son October 31, 2025

Samsung launched the Samsung Internet browser beta for Windows 10/11, featuring cross-device sync and Galaxy AI capabilities to advance its ambient AI ecosystem vision.

Court Mandate: Google Play Opens to External Payments in the US

Do Son October 31, 2025

Google opened the US Play Store to external payment methods and alternative app downloads, a temporary measure following a US court mandate in the Epic Games antitrust case.

CVE-2025-64095: Critical CVSS 10.0 Flaw in DNN Platform Allows Unauthenticated Website Overwrite CVE-2025-64095 Site Takeover DNN Software, XSS, vulnerability

CVE-2025-64095 Site Takeover DNN Software, XSS, vulnerability

CVE-2025-64095: Critical CVSS 10.0 Flaw in DNN Platform Allows Unauthenticated Website Overwrite

Do Son October 31, 2025

Urgent! DNN Platform has a Critical CVSS 10.0 flaw allowing unauthenticated users to overwrite files, leading to site defacement & XSS. Update to 10.1.1.

Magecart SMILODON Skimmer Infiltrates WooCommerce Via Rogue Plugin Hiding Payload in Fake PNG Image WooCommerce Skimmer, Fake PNG Steganography

WooCommerce Skimmer, Fake PNG Steganography

Magecart SMILODON Skimmer Infiltrates WooCommerce Via Rogue Plugin Hiding Payload in Fake PNG Image

Do Son October 31, 2025

Wordfence exposed a Magecart campaign using a rogue WooCommerce plugin to hide skimmer code in a fake PNG image. The malware uses an AJAX backdoor to maintain access and steal customer cards.

PhantomRaven: 126 Malicious npm Packages Steal Developer Tokens and Secrets Using Hidden Dependencies npm RDD Supply Chain, Slopsquatting

PhantomRaven: 126 Malicious npm Packages Steal Developer Tokens and Secrets Using Hidden Dependencies

Do Son October 31, 2025

Koi Security exposed PhantomRaven, an npm supply chain attack using 126 packages. It leverages Remote Dynamic Dependencies (RDD) and AI slopsquatting to steal GitHub/CI/CD secrets from 86,000+ downloads.

XLab Unveils RPX_Client, the First Confirmed Relay Node in PolarEdge IoT ORB Network P2P cryptominer malware threat Ollama endpoint attacks IoT Botnets DDoS Attacks

P2P cryptominer malware threat Ollama endpoint attacks IoT Botnets DDoS Attacks

XLab Unveils RPX_Client, the First Confirmed Relay Node in PolarEdge IoT ORB Network

Do Son October 31, 2025

XLab exposed RPX_Client, a new PolarEdge malware that turns IoT/router devices into a global ORB proxy network. The ELF binary uses XOR to encrypt config and spreads across 40 countries.

Nation-State Espionage: Airstalk Malware Hijacks VMware AirWatch (MDM) API for Covert C2 Channel

Do Son October 31, 2025

Unit 42 exposed Airstalk, a suspected nation-state malware that abuses VMware AirWatch (MDM) APIs for a covert C2 dead drop. The tool is used to steal credentials and browser data in supply chain attacks.

Russian APTs Exploit LotL Techniques in Ukraine Cyber Attacks, Deploying Sandworm-Linked Webshell and Credential Dumping Sandworm LotL, Ukraine Espionage

Russian APTs Exploit LotL Techniques in Ukraine Cyber Attacks, Deploying Sandworm-Linked Webshell and Credential Dumping

Do Son October 31, 2025

Symantec exposed a Russian-aligned espionage campaign in Ukraine using LotL tactics. Attackers used a Sandworm-linked webshell (Localolive) and abused scheduled tasks to dump credentials and bypass Windows Defender.

Progress Patches High-Severity Vulnerability in MOVEit Transfer AS2 Module (CVE-2025-10932) CVE-2023-42659 & CVE-2024-8015 MOVEit AS2 DoS, Uncontrolled Resource Consumption

CVE-2023-42659 & CVE-2024-8015 MOVEit AS2 DoS, Uncontrolled Resource Consumption

Progress Patches High-Severity Vulnerability in MOVEit Transfer AS2 Module (CVE-2025-10932)

Do Son October 31, 2025

Progress patched a High-severity DoS flaw (CVE-2025-10932) in MOVEit Transfer’s AS2 module. The vulnerability allows unauthenticated attackers to exhaust server resources. Patch to v2025.0.3 immediately.

Aembit Introduces Identity and Access Management for Agentic AI Aembit_IAM_for_Agentic_AI_1761774688BqTlixaF6x

Aembit Introduces Identity and Access Management for Agentic AI

cybernewswire October 30, 2025

Silver Spring, USA/ Maryland, 30th October 2025, CyberNewsWire