Do Son BitSight uncovered a Lampion banking Trojan campaign using ClickFix lures and a 700MB bloatware DLL to evade AV. The VBScript loader establishes persistence via the Windows Startup folder.
cybernewswire
Tel Aviv, Israel, 29th October 2025, CyberNewsWire
LiteSpeed Cache for WordPress (LSCWP) versions 7.5.0.1 are vulnerable to a Reflected XSS flaw, exposing 7M sites to account takeover. Update to 7.6 now.
A Critical Heap Overflow in strongSwan's EAP-MSCHAPv2 plugin allows Remote Code Execution on the client. An integer underflow in Failure Request packet processing causes memory corruption.
CISA added two critical DELMIA Apriso flaws (CVE-2025-6204/6205) to its KEV Catalog due to active exploitation. The flaws risk RCE and privileged access to manufacturing management systems.
IBM issued an urgent advisory for a Critical (CVSS 9.8) Auth Bypass flaw (CVE-2025-36386) in Maximo Manage. The flaw in MXCSP allows unauthenticated access to Cognos Analytics.
PayPal partnered with OpenAI to adopt the Agentic Commerce Protocol, allowing 400M users to securely purchase products directly within the ChatGPT interface by 2026.
MediaTek unveiled the Kompanio 540 chip for Chromebooks, featuring Arm Cortex-A78 cores and 35% better battery life, ideal for the education market.
The Windows 11 26H1 update is expected to be a Copilot+ PC exclusive for Qualcomm's Snapdragon X2
Adobe and Google partnered to integrate Premiere Mobile's professional tools directly into the YouTube Shorts workflow, adding AI features and exclusive templates.
OpenAI completed its transformation into a Public Benefit Corporation at a $500B valuation, with Microsoft retaining IP rights through 2032 and OpenAI committing $250B to Azure.
Apple Pay VP confirmed US Passports can soon be added to Apple Wallet as REAL ID for domestic air travel, though not for international border crossings.
Adobe's Firefly now features a timeline-based Video Editor (beta), Generate Soundtrack for licensed music, and Generate Speech for voiceovers, spanning the entire creative workflow.
ASEC exposed a flaw in Gunra Linux ransomware: its ChaCha20 keys are generated using an insecure time()/rand() seed, potentially allowing victims to brute-force decryption and recover files.
Herodotus is a new Android banking Trojan that evades anti-fraud systems by simulating human input: it inserts randomized typing delays (300-3000ms) during remote-control attacks in Italy and Brazil.
A path traversal flaw (CVE-2025-62725) in Docker Compose lets attackers overwrite host files via remote OCI artifact annotations, triggered by read-only commands.
Kaspersky exposed BlueNoroff's GhostCall/GhostHire campaigns, which use AI-enhanced lures (GPT-4o images) and trojanized apps to target executives and developers, deploying SilentSiphon spyware on macOS.
A flaw (CVE-2025-12080) in Google Messages for Wear OS allows any installed app to send SMS/RCS messages without permission by abusing ACTION_SENDTO intents.
Akamai warns of active exploitation of Magento's SessionReaper flaw (CVE-2025-54236). The critical (CVSS 9.8) vulnerability allows session hijacking and unauthenticated RCE via web shells.
AhnLab exposed Beast ransomware (Monster evolution) as a new RaaS threat, with 16+ victims by August 2025. It uses ChaCha20 encryption, deletes Shadow Copies, and features a hidden GUI control panel.
A Critical (CVSS 10.0) flaw (CVE-2025-61481) in MikroTik RouterOS/SwOS exposes the WebFig management interface over unencrypted HTTP by default, allowing remote credential theft via MitM.
Trend exposed the Water Saci worm, a self-propagating campaign that hijacks WhatsApp Web using Selenium/PowerShell. It uses a stealthy IMAP email C2 channel with HTTP fallback.