This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Thursday, October 2nd, 2025…
IT Security News Hourly Summary 2025-10-02 00h : 2 posts
2 posts were published in the last hour 22:55 : IT Security News Daily Summary 2025-10-01 21:32 : OpenSSL patches 3 vulnerabilities, urging immediate updates
IT Security News Daily Summary 2025-10-01
165 posts were published in the last hour 21:32 : OpenSSL patches 3 vulnerabilities, urging immediate updates 21:2 : WestJet Confirms Passenger IDs and Passports Stolen in Cyberattack 21:2 : Threat Actors Leveraging Senior Travel Scams to Deliver Datzbro Malware…
USENIX 2025: PEPR ’25 – Network Structure And Privacy: The Re-Identification Risk In Graph Data
Creator, Author and Presenter: Daniele Romanini, Resolve Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Enigma ’23 Conference content on the organization’s’ YouTube channel. Permalink The post USENIX 2025: PEPR ’25 – Network Structure And Privacy: The Re-Identification…
OpenSSL patches 3 vulnerabilities, urging immediate updates
OpenSSL updates addressed 3 flaws enabling key recovery, code execution, and DoS attacks. Users are urged to update asap. The OpenSSL Project has released security updates to address three vulnerabilities, tracked as CVE-2025-9230, CVE-2025-9231, and CVE-2025-9232, in its open-source SSL/TLS…
WestJet Confirms Passenger IDs and Passports Stolen in Cyberattack
WestJet confirms a data breach starting June 13, 2025, stole passport/ID and personal data. Credit cards and passwords are safe. The airline offers 24 months of free identity monitoring, including $1M insurance. This article has been indexed from Hackread –…
Threat Actors Leveraging Senior Travel Scams to Deliver Datzbro Malware
Cybersecurity researchers have uncovered a sophisticated Android malware campaign targeting seniors through fraudulent travel and social activity promotions on Facebook. The newly identified Datzbro malware represents a dangerous evolution in mobile threats, combining advanced spyware capabilities with remote access tools…
Ukraine Warns of Weaponized XLL Files Delivers CABINETRAT Malware Via Zip Files
Ukrainian security agencies have issued an urgent warning regarding a sophisticated malware campaign targeting government and critical infrastructure sectors through weaponized XLL files distributed via compressed archives. The malicious campaign leverages Microsoft Excel add-in files containing the CABINETRAT backdoor, representing…
Passwordless 101 for SaaS: Magic Links, OTP, or Passkeys?
Discover magic links, OTPs, and passkeys for SaaS apps. Compare security, UX, and rollout strategies to choose the right passwordless method. The post Passwordless 101 for SaaS: Magic Links, OTP, or Passkeys? appeared first on Security Boulevard. This article has…
What Does the Government Shutdown Mean for Cybersecurity?
CISA is among the government agencies affected. The shutdown is a reminder for government contractors to harden their cybersecurity. The post What Does the Government Shutdown Mean for Cybersecurity? appeared first on TechRepublic. This article has been indexed from Security…
Anker offered to pay Eufy camera owners to share videos for training its AI
Hundreds of Eufy customers have donated hundreds of thousands of videos to train the company’s AI systems. This article has been indexed from Security News | TechCrunch Read the original article: Anker offered to pay Eufy camera owners to share…
IT Security News Hourly Summary 2025-10-01 21h : 2 posts
2 posts were published in the last hour 19:2 : Nvidia and Adobe vulnerabilities 18:32 : Air Force admits SharePoint privacy issue as reports trickle out of possible breach
Fake Google Careers Recruiters Target Gmail Users in Phishing Scam
Phishing emails posing as Google recruiters steal Gmail logins, exploiting Salesforce spoofing and Cloudflare to bypass defenses. The post Fake Google Careers Recruiters Target Gmail Users in Phishing Scam appeared first on eSecurity Planet. This article has been indexed from…
AI agent hypefest crashing up against cautious leaders, Gartner finds
Only 15% considering deployments and just 7% say it’ll replace humans in next four years Enterprises aren’t keen on letting autonomous agents take the wheel amid fears over trust and security as research once again shows that AI hype is…
‘Delightful’ root-access bug in Red Hat OpenShift AI allows full cluster takeover
Who wouldn’t want root access on cluster master nodes? A 9.9 out of 10 severity bug in Red Hat’s OpenShift AI service could allow a remote attacker with minimal authentication to steal data, disrupt services, and fully hijack the platform.……
Nvidia and Adobe vulnerabilities
Cisco Talos’ Vulnerability Discovery & Research team recently disclosed five vulnerabilities in Nvidia and one in Adobe Acrobat. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, all in adherence to Cisco’s third-party vulnerability disclosure…
Air Force admits SharePoint privacy issue as reports trickle out of possible breach
Uncle Sam can’t quit Redmond Exclusive The US Air Force confirmed it’s investigating a “privacy-related issue” amid reports of a Microsoft SharePoint-related breach and subsequent service-wide shutdown, rendering mission files and other critical tools potentially unavailable to service members.… This…
Google Adds AI-Powered Ransomware Protection and Recovery to Drive for Desktop
This new ransomware detection is available in beta in Google Drive for desktop on Windows or macOS, with a general release expected by the end of the year. The post Google Adds AI-Powered Ransomware Protection and Recovery to Drive for…
Red Hat OpenShift AI Flaw Opens Door to Full Infrastructure Takeover
Severe OpenShift AI bug lets low-privileged users escalate to cluster admin, risking data theft and infrastructure control. The post Red Hat OpenShift AI Flaw Opens Door to Full Infrastructure Takeover appeared first on eSecurity Planet. This article has been indexed…
US Air Force investigates ‘privacy-related issue’ amid rumored SharePoint shutdown
Uncle Sam can’t quit Redmond Exclusive The US Air Force confirmed it’s investigating a “privacy-related issue” amid reports of a Microsoft SharePoint-related breach and subsequent service-wide shutdown, rendering mission files and other critical tools potentially unavailable to service members.… This…
CISA Ends Funding for MS-ISAC Program for State and Local Governments
CISA ended a 21-year agreement with CIS to run MS-ISAC, a cyberthreat resource and information-sharing program that local and state governments relied on, and is adopting a new model that includes grant money and no-cost tools as it shifts more…
Top Strategies for Effective and Secure Identity Risk Monitoring
Today, digital footprints are as significant as physical ones, which is why the importance of secure identity risk monitoring cannot be overstated. With the constant evolution of cyber threats, it’s crucial to implement robust strategies to protect not only personal…
New WireTap Attack Extracts Intel SGX ECDSA Key via DDR4 Memory-Bus Interposer
In yet another piece of research, academics from Georgia Institute of Technology and Purdue University have demonstrated that the security guarantees offered by Intel’s Software Guard eXtensions (SGX) can be bypassed on DDR4 systems to passively decrypt sensitive data. SGX…
CISA Ends Funding for MS-ISAG Program for State and Local Governments
CISA ended a 21-year agreement with CIS to run MS-ISAC, a cyberthreat resource and information-sharing program that local and state governments relied on, and is adopting a new model that includes grant money and no-cost tools as it shifts more…