Daily roundup · 251 editions
Security news
Daily digest of security headlines, vulnerabilities and threat actors in the news.
- CyberNews: 08/10/2025 Edition Chinese-linked threat actors weaponized the open-source Nezha monitoring tool in August 2025, using log poisoning to deliver Gh0st RAT and establish web shells....
- CyberNews: 07/10/2025 Edition A critical Redis vulnerability (CVE-2025-49844) with CVSS 10.0 enables remote code execution via manipulated Lua scripts. Microsoft attributes Storm-1175 actors...
- CyberNews: 06/10/2025 Edition A critical Zimbra Collaboration Suite zero-day (CVE-2025-27915) was exploited via malicious ICS files to target Brazil's military, enabling session hijacking an...
- CyberNews: 04/10/2025 Edition Threat intelligence firm GreyNoise observed a 500% spike in scanning activity targeting Palo Alto Networks login portals on October 3, 2025, labeling the traffi...
- CyberNews: 02/10/2025 Edition Cybersecurity researchers uncovered two Android spyware campaigns (ProSpy and ToSpy) impersonating Signal and ToTok applications, targeting UAE users via fake w...
- CyberNews: 01/10/2025 Edition Academics demonstrated WireTap, a DDR4 memory-bus interposer attack extracting Intel SGX ECDSA keys, bypassing hardware security. OneLogin disclosed CVE-2025-59...
- CyberNews: 30/09/2025 Edition A new Android banking trojan called Datzbro is targeting elderly users via AI-generated Facebook travel events, enabling device takeover and fraudulent transact...
- CyberNews: 29/09/2025 Edition Microsoft reported a U.S.-targeted phishing campaign using AI-generated SVG files with LLM-crafted code to bypass email security systems, indicating evolving at...
- CyberNews: 28/09/2025 Edition Security researchers at Noma Labs disclosed a critical vulnerability (CVSS 9.4) in Salesforce Agentforce dubbed ForcedLeak, enabling attackers to exfiltrate CRM...
- CyberNews: 26/09/2025 Edition Fortra's GoAnywhere MFT software suffered exploitation of a CVSS 10.0 vulnerability (CVE-2025-10035) starting September 10, 2025, a week before public disclosur...