IT Security News Daily Summary 2025-10-09

158 posts were published in the last hour

• 21:32 : 77% of Employees Share Company Secrets on ChatGPT, Report Warns
• 21:3 : SonicWall Says All Firewall Backups Were Accessed by Hackers
• 21:3 : Threat Actors Mimic as HR Departments to Steal Your Gmail Login Credentials
• 21:2 : Hackers Actively Exploiting WordPress Plugin Vulnerability to Gain Admin Access
• 21:2 : New Quishing Attack With Weaponized QR Code Targeting Microsoft Users
• 21:2 : Data Loss, Monetary Damage, and Reputational Harm: How Unsanctioned AI Hurts Companies and 6 Mitigation Strategies
• 21:2 : Cybersecurity Is Now a Regulatory Minefield: What CISOs Must Know in 2025
• 21:2 : It’s trivially easy to poison LLMs into spitting out gibberish, says Anthropic
• 20:32 : ClayRat campaign uses Telegram and phishing sites to distribute Android spyware
• 20:32 : USENIX 2025: PEPR ’25 – OneShield Privacy Guard: Deployable Privacy Solutions for LLMs
• 20:5 : IT Security News Hourly Summary 2025-10-09 21h : 2 posts
• 20:2 : Linode Kubernetes Engine Optimization: Save on Compute, Storage, and Networking
• 19:32 : Chaos Emerges as Faster, Smarter, and More Dangerous Ransomware
• 19:32 : Data-Leak Sites Hit an All-Time High With New Scattered Spider RaaS and LockBit 5.0
• 19:32 : New Polymorphic Python Malware Repeatedly Mutate its Appearance at Every Execution Time
• 19:32 : Hackers Upgraded ClickFix Attack With Cache Smuggling to Secretly Download Malicious Files
• 19:32 : Fake VPN and streaming app drops malware that drains your bank account
• 19:2 : What CISOs should know about DeepSeek cybersecurity risks
• 18:43 : Rethinking DDoS Defense: Why Scale Isn’t the Only Metric That Matters
• 18:2 : Why don’t we sit around this computer console and have a sing-along?
• 18:2 : Apple Took Down These ICE-Tracking Apps. The Developers Aren’t Giving Up
• 18:2 : From HealthKick to GOVERSHELL: The Evolution of UTA0388’s Espionage Malware
• 18:2 : New research from VerifyLabs.AI highlights the nation’s fears when it comes to deepfakes
• 18:2 : Pro-Russian hacking group snared by Forescout Vedere Labs honeypot
• 18:2 : China Sentences 11 Individuals to Death Over Massive Cross-Border Scam Network
• 18:2 : Microsoft Stops Phishing Scam Which Used Gen-AI Codes to Fool Victims
• 17:32 : Fake TikTok and WhatsApp Apps Infect Android Devices with ClayRat Spyware
• 17:32 : Apple Took Down ICE-Tracking Apps. Their Developers Aren’t Giving Up
• 17:32 : ‘Dozens’ of organizations had data stolen in Oracle-linked hacks
• 17:32 : Italian businessman’s phone reportedly targeted with Paragon spyware
• 17:5 : IT Security News Hourly Summary 2025-10-09 18h : 11 posts
• 17:2 : Securing agentic AI: Your guide to the Microsoft Ignite sessions catalog
• 16:46 : Building a Supply Chain Digital Twin Technology
• 16:46 : CISA Releases Four Industrial Control Systems Advisories
• 16:46 : Rockwell Automation Stratix
• 16:46 : Hitachi Energy Asset Suite
• 16:46 : Rockwell Automation Lifecycle Services with Cisco
• 16:46 : New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps
• 16:46 : Anatomy of a Modern Threat: Deconstructing the Figma MCP Vulnerability
• 16:2 : USENIX 2025: PEPR ’25 – Breaking Barriers, Not Privacy: Real-World Split Learning Across Healthcare Systems
• 16:2 : Andesite AI Puts Human Analysts at the Center of Cybersecurity Innovation
• 16:2 : Why Deleting Cookies Doesn’t Protect Your Privacy
• 16:2 : Investigating targeted “payroll pirate” attacks affecting US universities
• 15:34 : Discord Says Hackers Stole 70,000 ID Photos, Dismisses Extortion Claims
• 15:34 : CVE-2025-5947: WordPress Plugin flaw lets hackers access Admin accounts
• 15:34 : Closing the Cloud Security Gap
• 15:34 : Legit tools, illicit uses: Velociraptor, Nezha turned against victims
• 15:5 : CVE-2025-61882 Explained: The Oracle Zero-Day Breach That Hit Enterprises Hard
• 15:5 : Cyber risk a growing priority among insurance and asset management firms
• 15:5 : Risk mitigation budgets swell as enterprise AI adoption grows
• 14:34 : Wordfence Intelligence Weekly WordPress Vulnerability Report (September 29, 2025 to October 5, 2025)
• 14:34 : SonicWall Confirms Breach Exposing All Customer Firewall Configuration Backups
• 14:34 : Microsoft Azure Experiences Global Outage Disrupting Cloud Services Worldwide
• 14:34 : Phantom Taurus: China-Linked Hackers Target Global Governments
• 14:34 : Ransomware Attack on Motility Software Solutions Exposes Data of 766,000 Customers
• 14:6 : LABScon25 Replay | Auto-Poking The Bear: Analytical Tradecraft In The AI Age
• 14:6 : Oracle E-Business Suite Zero-Day Exploited in Widespread Extortion Campaign
• 14:6 : Weaponized AI Assistants & Credential Thieves
• 14:6 : RondoDox: From Targeting Pwn2Own Vulnerabilities to Shotgunning Exploits
• 14:6 : New Chaos-C++ Ransomware Targets Windows by Wiping Data, Stealing Crypto
• 14:6 : Your Shipment Notification is Now a Malware Dropper
• 14:6 : Global Cyber Threats September 2025: Attack Volumes Ease Slightly, but GenAI Risks Intensify as Ransomware Surges 46%
• 14:6 : Met Police Arrest Teenagers in Kido Nursery Ransomware Attack
• 14:6 : ITDR vs EDR: What are the Key Differences?
• 14:6 : Microsoft Azure Faces Global Outage Affecting Services Worldwide
• 14:6 : AI Chatbot Leveraged as a Critical Backdoor to Access Sensitive Data and Infrastructure
• 14:6 : SonicWall Confirms That Hackers Stole All Customers Firewall Configuration Backup Files
• 14:6 : New Phishing Kit Automates Generation of ClickFix Attack Bypassing Security Measures
• 14:5 : Hackers Exploit DFIR Tool ‘Velociraptor’ in Ransomware Attacks
• 14:5 : California just put people back in control of their data
• 14:5 : SonicWall breach hits every cloud backup customer after 5% claim goes up in smoke
• 14:5 : Realm.Security Raises $15 Million in Series A Funding
• 14:5 : Visionary: 2025 Gartner® Magic Quadrant™ for Application Security Testing
• 14:5 : Terraform Secrets Management Best Practices: Secret Managers and Ephemeral Resources
• 14:5 : Lightship Security and the OpenSSL Corporation Submit OpenSSL 3.5.4 for FIPS 140-3 Validation
• 14:5 : SquareX Shows AI Browsers Fall Prey to OAuth Attacks, Malware Downloads and Malicious Link Distribution
• 14:5 : Security Experts Warn of Audio Leakage Through Gaming Mice
• 14:5 : Meta to Use AI Chat Data for Targeted Ads Starting December 16
• 14:5 : Attackers compromised ALL SonicWall firewall configuration backup files
• 14:5 : SaaS Breaches Start with Tokens – What Security Teams Must Watch
• 14:5 : ThreatsDay Bulletin: MS Teams Hack, MFA Hijacking, $2B Crypto Heist, Apple Siri Probe & More
• 14:5 : Hackers Access SonicWall Cloud Firewall Backups, Spark Urgent Security Checks
• 14:5 : All SonicWall Cloud Backup Users Have Firewall Configuration Files Stolen
• 14:5 : ClayRat Spyware Campaign Targets Android Users in Russia
• 14:4 : Researchers Warn of Security Gaps in AI Browsers
• 14:4 : 1Password says it has a solution for AI agents leaking your passwords
• 11:5 : IT Security News Hourly Summary 2025-10-09 12h : 21 posts
• 11:2 : GitHub Copilot Chat Flaw Leaked Data From Private Repositories
• 10:32 : Threat actors steal firewall configs, impacting all SonicWall Cloud Backup users
• 10:32 : PoC Exploit Released For Nothing Phone Code Execution Vulnerability
• 10:32 : Shuyal Stealer Attacking 19 Browsers to Steal Login Credentials
• 10:3 : Velociraptor leveraged in ransomware attacks
• 10:3 : EU Launches ‘Apply AI’ Strategy To Improve Competitiveness
• 10:3 : Fake Teams Installers Dropping Oyster Backdoor (aka Broomstick)
• 10:3 : Hackers Targeting WordPress Plugin Vulnerability to Seize Admin Access
• 10:2 : Chinese Hackers Breached Law Firm Williams & Connolly via Zero-Day
• 10:2 : Ready1 for Identity Crisis Management restores operations after identity breaches
• 10:2 : Ootbi Mini delivers zero trust, immutable data protection
• 10:2 : From Phishing to Malware: AI Becomes Russia’s New Cyber Weapon in War on Ukraine
• 9:33 : OpenAI, Anthropic Weigh Using Investor Funds To Pay Settlements
• 9:33 : PoC Released for Linux Kernel ksmbd Filesystem Vulnerability
• 9:33 : One stolen iPhone uncovered a network smuggling thousands of devices to China
• 9:33 : CyberFOX DNS Filtering stops threats before they reach networks
• 9:33 : ICO’s £7.5m Clearview AI Fine a Step Closer After Legal Victory
• 9:7 : New York City Sues Social Platforms Over ‘Youth Mental Health Crisis’
• 9:7 : Hackers Enhance ClickFix Attack Using Cache Smuggling to Stealthily Download Malicious Files
• 9:7 : Discord denies massive breach, confirms limited exposure of 70K ID photos
• 9:7 : GitLab Security Update – Patch For Multiple Vulnerabilities That Enables DoS Attack
• 9:7 : Linux Kernel ksmbd Filesystem Vulnerability Exploited – PoC Released
• 9:7 : All SonicWall Cloud Backup Users Had Firewall Configurations Stolen
• 9:7 : When Your SaaS Feels Human at Scale
• 9:7 : NCSC: Observability and Threat Hunting Must Improve
• 8:32 : X Settles With Executives Over Unpaid Severance
• 8:32 : Discord Says 70,000 Users Had IDs Exposed in Recent Data Breach
• 8:5 : IT Security News Hourly Summary 2025-10-09 09h : 10 posts
• 8:3 : AI Data Infrastructure Start-Up Confluent Exploring Sale
• 8:3 : GitLab Releases Security Update to Patch Multiple DoS-Enabling Vulnerabilities
• 8:2 : High Number of Windows 10 Users Remain as End-of-Life Looms
• 7:32 : Cisco Chip Connects AI Data Centres Across Hundreds Of Miles
• 7:32 : Polymorphic Python Malware That Mutates Every Time It Runs
• 7:32 : Critical Exploit Lets Hackers Bypass Authentication in WordPress Service Finder Theme
• 7:32 : DeepMind fixes vulnerabilities, California offers data opt-out, China-Nexus targets open-source tool
• 7:2 : Tesla Launches Cheaper Models To Halt Sales Slump
• 7:2 : SoftBank Buys ABB’s Robotics Unit For $5.4bn
• 7:2 : APT Hackers Abuse ChatGPT to Develop Advanced Malware and Phishing Campaigns
• 7:2 : Data-Leak Sites Surge to Record Levels Amid Scattered Spider RaaS and LockBit 5.0 Rise
• 7:2 : Discord Data Breach Exposes 1.5 TB of Data and 2 Million Government ID Photos
• 7:2 : Hackers Abuse CSS Properties With Messages to Inject Malicious Codes in Hidden Text Salting Attack
• 7:2 : IRGC-Linked APT35 Structure, Tools, and Espionage Operations Disclosed
• 6:32 : The Evolution of Chaos: Ransomware’s New Era of Speed and Intelligence
• 6:32 : Rethinking Security Data Management with AI-Native Pipelines
• 6:32 : Why Businesses Must Act Now to Prepare for a Quantum-Safe Future
• 6:2 : Chinese Hackers Weaponize Nezha Tool to Run Commands on Web Servers
• 6:2 : Researchers develop AI system to detect scam websites in search results
• 5:32 : CrowdStrike Falcon Windows Sensor Flaw Could Let Attackers Execute Code and Delete Files
• 5:5 : IT Security News Hourly Summary 2025-10-09 06h : 4 posts
• 5:2 : Turning the human factor into your strongest cybersecurity defense
• 5:2 : Behind the screens: Building security customers appreciate
• 4:32 : 2025-10-08: Infection from Kongtuke campaign’s ClickFix page
• 4:32 : Microsoft 365 Outage Blocks Access to Teams, Exchange Online, and Admin Center – Updated
• 4:31 : Six metrics policymakers need to track cyber resilience
• 3:32 : ISC Stormcast For Thursday, October 9th, 2025 https://isc.sans.edu/podcastdetail/9648, (Thu, Oct 9th)
• 3:32 : [Guest Diary] Building Better Defenses: RedTail Observations from a Honeypot, (Thu, Oct 9th)
• 3:32 : CrowdStrike Falcon Windows Sensor Vulnerability Enables Code Execution and File Deletion
• 3:32 : Discord Data Breach – 1.5 TB of Data and 2 Million Government ID Photos Extorted
• 2:5 : IT Security News Hourly Summary 2025-10-09 03h : 4 posts
• 1:2 : FreePBX SQL Injection Vulnerability Exploited to Modify The Database
• 0:32 : Crimson Collective Leverages AWS Services to Exfiltrate Sensitive Data
• 0:32 : Exciting Developments in Cloud-Native Security
• 0:32 : Zero Trust for AI Agents: Implementing Dynamic Authorization in an Autonomous World
• 23:5 : IT Security News Hourly Summary 2025-10-09 00h : 5 posts
• 23:2 : Research Finds That API Security Blind Spots Could Put AI Agent Deployments at Risk
• 23:2 : Research Finds Budgets, Staffing and Skills Fail to Keep Pace with Rising Cyber Threats
• 22:55 : IT Security News Daily Summary 2025-10-08
• 22:32 : Qilin ransomware claimed responsibility for the attack on the beer giant Asahi
• 22:31 : Hackers Actively Compromising Databases Using Legitimate Commands
• 22:2 : Mustang Panda Using New DLL Side-Loading Technique to Deliver Malware
• 22:2 : Scattered Lapsus$ Hunters Launched a New Leak Site to Release Data Stolen from Salesforce Instances