Do Son Siemens patched a Critical (CVSS 9.8) authentication bypass flaw (CVE-2025-40771) in SIMATIC ET 200SP communication processors, allowing unauthenticated remote access to configuration data.
Apple SVP Greg Joswiak teased the M5 chip launch on X, hinting at imminent releases of the M5 MacBook Pro, iPad Pro, and a Vision Pro refresh, all featuring enhanced AI support.
To avoid multi-billion-dollar EU fines, Google is reportedly redesigning its search results to prevent self-preferencing, displaying rivals like Expedia equally to its own Flights and Hotels services.
OpenAI established a Council on Well-Being and AI to guide development and address mental health risks. The move follows lawsuits over teens' use of chatbots for suicidal ideation.
Rockwell issued an urgent fix for a Critical (CVSS 10.0) auth bypass in its 1783-NATR router (CVE-2025-7328). The flaw allows remote admin takeover and configuration disruption.
Veeam patched two Critical RCE flaws (CVE-2025-48983 & -48984) in Backup & Replication v12 that let authenticated domain users compromise backup infrastructure.
DOJ Files Record $15 Billion Bitcoin Seizure Against Prince Group Chairman Over Pig Butchering Scams
DOJ Files Record $15 Billion Bitcoin Seizure Against Prince Group Chairman Over Pig Butchering Scams
The DOJ indicted Prince Group Chairman Chen Zhi for a forced-labor pig butchering scam empire and filed a record $15B civil forfeiture complaint against 127,271 Bitcoin assets.
A sophisticated GhostBat RAT campaign targets Indian users by spoofing RTO apps (mParivahan). The malware steals UPI credentials and OTPs via phishing pages and uses a Telegram bot for C2.
Google released an urgent update for Chrome (v141.0.7390.107), patching a High-severity Use-After-Free flaw (CVE-2025-11756) in the Safe Browsing component. Update immediately.
Microsoft patched 193 vulnerabilities this month, including six zero-days (four exploited) and issued the final update for Windows 10 (KB5066791).
Sekoia details PolarEdge, a Rust-based backdoor using a custom mbedTLS server for C2 on Cisco, QNAP, and Synology devices. The backdoor uses XOR 0x11 for config obfuscation and attempts to delete system utilities to block rivals.
Proofpoint exposed TA585, a self-reliant group that uses ClickFix phishing and private C2 infrastructure (CoreSecThree) to deploy MonsterV2 RAT (available for up to $2,000/month) with Hidden VNC capabilities.
Rockwell patched a flaw (CVE-2025-9067) in FactoryTalk Linx allowing SYSTEM privilege escalation via MSI repair hijacking. Other flaws risk file deletion and DoS in ICS environments.
cybernewswire
Torrance, United States, 14th October 2025, CyberNewsWire
SAP's October 2025 Security Patch Day addressed 13 new notes, including two critical 10.0 flaws in NetWeaver AS Java and Print Service, posing an RCE threat.
Luxembourg, Luxembourg, 14th October 2025, CyberNewsWire
Google consolidated ads into a "Sponsored Results" section that requires users to scroll over the entire block before they can manually hide the ads, boosting ad visibility globally.
Microsoft announced MAI-Image-1, its first in-house AI image generation model, now in testing for Copilot and Bing Image Creator, signaling a major push for technological self-reliance.
Ivanti disclosed 13 EPM flaws, including a High-severity RCE (CVE-2025-9713) and 11 Medium SQL Injection bugs. Fixes are scheduled for Nov 2025 and Q1 2026.
Apple faces a second class-action lawsuit claiming its AI models were trained using pirated books from "shadow libraries." The suit cites Anthropic's recent $1.5B copyright settlement.
Early OneDrive testers found Microsoft's new AI facial recognition feature can only be disabled three times per year. The feature is opt-out by default for preview users.