Do Son Samba released an urgent fix for a Critical (CVSS 10.0) RCE flaw (CVE-2025-10230) allowing unauthenticated command injection on AD DCs when the WINS hook is enabled. Update to 4.23.2.
Unit 42 exposed PhantomVAI Loader, a stealthy MaaS tool that uses steganography (hiding DLL in images) and VM detection to deploy Katz Stealer in MSBuild.exe and exfiltrate crypto credentials globally.
Symantec exposed China's Jewelbug APT in an unprecedented 5-month intrusion on a Russian IT provider. The group used Yandex Cloud for data exfiltration and Graph API for stealthy C2 via custom malware.
Apache issued a critical fix for ActiveMQ NMS AMQP Client (CVE-2025-54539). The deserialization flaw allows untrusted AMQP servers to execute remote code on client systems.
Multiple major online services, including YouTube, X/Twitter, and Steam, suffered simultaneous outages suspected to be caused by a temporary datacenter route failure primarily affecting the U.S. East Coast.
Kaspersky exposed the Mysterious Elephant APT targeting South Asia. The group uses MemLoader and custom tools (BabShell) to steal sensitive WhatsApp desktop data and exfiltrate documents.
ReliaQuest exposed Flax Typhoon for a year-long breach, where the China-backed APT turned a legitimate ArcGIS Java SOE into a web shell and embedded it in backups to ensure persistence.
cybernewswire
New York, United States, 15th October 2025, CyberNewsWire
New York, USA, New York, 15th October 2025, CyberNewsWire
Samsung will unveil Project Moohan (expected as Galaxy XR) at its "Worlds Wide Open" event on Oct 21. The headset runs on the Android XR platform co-developed with Google and Qualcomm.
Siemens patched a Critical (CVSS 9.8) authentication bypass flaw (CVE-2025-40771) in SIMATIC ET 200SP communication processors, allowing unauthenticated remote access to configuration data.
Apple SVP Greg Joswiak teased the M5 chip launch on X, hinting at imminent releases of the M5 MacBook Pro, iPad Pro, and a Vision Pro refresh, all featuring enhanced AI support.
To avoid multi-billion-dollar EU fines, Google is reportedly redesigning its search results to prevent self-preferencing, displaying rivals like Expedia equally to its own Flights and Hotels services.
OpenAI established a Council on Well-Being and AI to guide development and address mental health risks. The move follows lawsuits over teens' use of chatbots for suicidal ideation.
Rockwell issued an urgent fix for a Critical (CVSS 10.0) auth bypass in its 1783-NATR router (CVE-2025-7328). The flaw allows remote admin takeover and configuration disruption.
Veeam patched two Critical RCE flaws (CVE-2025-48983 & -48984) in Backup & Replication v12 that let authenticated domain users compromise backup infrastructure.
DOJ Files Record $15 Billion Bitcoin Seizure Against Prince Group Chairman Over Pig Butchering Scams
DOJ Files Record $15 Billion Bitcoin Seizure Against Prince Group Chairman Over Pig Butchering Scams
The DOJ indicted Prince Group Chairman Chen Zhi for a forced-labor pig butchering scam empire and filed a record $15B civil forfeiture complaint against 127,271 Bitcoin assets.
A sophisticated GhostBat RAT campaign targets Indian users by spoofing RTO apps (mParivahan). The malware steals UPI credentials and OTPs via phishing pages and uses a Telegram bot for C2.
Google released an urgent update for Chrome (v141.0.7390.107), patching a High-severity Use-After-Free flaw (CVE-2025-11756) in the Safe Browsing component. Update immediately.
Microsoft patched 193 vulnerabilities this month, including six zero-days (four exploited) and issued the final update for Windows 10 (KB5066791).
Sekoia details PolarEdge, a Rust-based backdoor using a custom mbedTLS server for C2 on Cisco, QNAP, and Synology devices. The backdoor uses XOR 0x11 for config obfuscation and attempts to delete system utilities to block rivals.
Proofpoint exposed TA585, a self-reliant group that uses ClickFix phishing and private C2 infrastructure (CoreSecThree) to deploy MonsterV2 RAT (available for up to $2,000/month) with Hidden VNC capabilities.