Do Son Kaspersky found a Chrome zero-day (CVE-2025-2783) and sandbox bypass being exploited by Operation ForumTroll to deploy Memento Labs (Hacking Team) commercial Dante spyware against Russian targets.
A High-severity OpenVPN flaw (CVE-2025-10680) in beta versions allows script injection on Unix-like clients (Linux, macOS). Malicious DNS/DHCP arguments can execute arbitrary commands on the client side.
Doctor Web exposed Android.Backdoor.Baohuo.1.origin, a malware hiding in a Telegram X clone. It uses a Redis database for C2, infects 58K+ devices, and steals crypto wallet info from the clipboard.
Lab52 exposed Lazarus Group using DreamLoader malware via fake job lures. The modular tool chain abuses DLL sideloading and the Microsoft Graph API for stealthy C2 communications.
Trellix exposed SideWinder APT's campaign against South Asian diplomacy. It uses PDF/ClickOnce lures with a signed MagTek binary to deploy StealerBot for deep intelligence collection.
Apache patched three flaws in Tomcat 9/10/11: CVE-2025-55752 risks RCE by bypassing security constraints. CVE-2025-55754 allows ANSI escape sequence injection in Windows logs.
Arctic Wolf exposed Caminho, a Brazilian Loader-as-a-Service that hides .NET payloads in images via LSB steganography. It operates filelessly and is deployed via phishing and legitimate Archive.org.
GhostGrab is a hybrid Android malware that steals banking credentials and OTPs via phishing WebView overlays while secretly running a Monero miner in the background to monetize the victim's device.
Netskope found the RedTiger Python tool repurposed as an infostealer targeting gamers. It uses Discord injection to steal tokens/payment data and GoFile for anonymous data exfiltration, spamming files/processes for evasion.
iOS 26.1 introduces a new PhotoKit feature that allows third-party apps like Google Photos to upload media seamlessly in the background, even when the phone is locked.
Microsoft’s latest Bing Wallpaper update covertly launches Bing Search when users click the desktop, appearing to artificially inflate the search engine’s traffic.
cybernewswire
London, United Kingdom, 27th October 2025, CyberNewsWire
OpenAI is reportedly developing a text/audio-to-music AI generator and is collaborating with students from The Juilliard School to train its models.
Dan Agbo
Sergei Beliachkov, who managed security for 7,000+ users as a virtual CISO and later launched the service...
Google Gemini's Canvas workspace now uses AI to automatically generate presentation slides from a prompt or uploaded documents, ready for export to Google Slides.
Apple plans to add vapor chamber cooling to the M6-powered iPad Pro (expected 2027) to prevent thermal throttling during intensive professional workloads.
Amazon introduced Blue Jay, a multi-arm robot for packing, and Project Eluna, an AI assistant for managers, promising safer, faster operations.
Apple is planning to introduce search ads in Apple Maps by 2026, allowing businesses to pay for prominent placement in a major expansion of its ad business.
The European Commission has formally accused Meta and TikTok of violating the DSA by hiding illegal content reporting and obstructing access for researchers.
Microsoft Edge adds two new AI features, Copilot Actions and Journeys, enabling automated, multi-step web tasks and context-aware browsing history.
Anthropic dramatically expands its Google Cloud partnership, securing access to up to 1 million TPU accelerators and 1 GW of compute for future Claude model development.
CISA warned of two critical flaws in Veeder-Root TLS4B ATG systems. The RCE (CVE-2025-58428, CVSS 9.9) allows command injection via the SOAP interface, risking system takeover and energy disruption.