Latest Cybersecurity News and Alerts

Security Week

• Chinese Spies Impersonated US Lawmaker to Deliver Malware to Trade Groups: Report 
  September 8, 2025
• PromptLock Only PoC, but AI-Powered Ransomware Is Real
  September 8, 2025
• GitHub Workflows Attack Affects Hundreds of Repos, Thousands of Secrets
  September 8, 2025
• Salesloft GitHub Account Compromised Months Before Salesforce Attack
  September 8, 2025
• Over 6,700 Private Repositories Made Public in Nx Supply Chain Attack
  September 8, 2025
• Fintech Firm Wealthsimple Says Supply Chain Attack Resulted in Data Breach
  September 8, 2025
• Cybersecurity M&A Roundup: 27 Deals Announced in August 2025
  September 8, 2025
• How to Close the AI Governance Gap in Software Development
  September 5, 2025
• Academics Build AI-Powered Android Vulnerability Discovery and Validation Tool
  September 5, 2025
• FireCompass Raises $20 Million for Offensive Security Platform
  September 5, 2025

The Hacker News

• GitHub Account Compromise Led to Salesloft Drift Breach Affecting 22 Companies
  September 8, 2025
• GPUGate Malware Uses Google Ads and Fake GitHub Commits to Target IT Firms
  September 8, 2025
• ⚡ Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & More
  September 8, 2025
• You Didn’t Get Phished — You Onboarded the Attacker
  September 8, 2025
• Noisy Bear Campaign Targeting Kazakhstan Energy Sector Outed as a Planned Phishing Test
  September 6, 2025
• Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys
  September 6, 2025
• CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active Exploitation
  September 5, 2025
• TAG-150 Develops CastleRAT in Python and C, Expanding CastleLoader Malware Operations
  September 5, 2025
• SAP S/4HANA Critical Vulnerability CVE-2025-42957 Exploited in the Wild
  September 5, 2025
• Automation Is Redefining Pentest Delivery
  September 5, 2025
• VirusTotal Finds 44 Undetected SVG Files Used to Deploy Base64-Encoded Phishing Pages
  September 5, 2025
• Russian APT28 Deploys “NotDoor” Outlook Backdoor Against Companies in NATO Countries
  September 4, 2025
• GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS Module
  September 4, 2025
• Cybercriminals Exploit X’s Grok AI to Bypass Ad Protections and Spread Malware to Millions
  September 4, 2025
• Simple Steps for Attack Surface Reduction
  September 4, 2025
• Google Fined $379 Million by French Regulator for Cookie Consent Violations
  September 4, 2025
• CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited
  September 4, 2025
• Malicious npm Packages Exploit Ethereum Smart Contracts to Target Crypto Developers
  September 3, 2025
• Threat Actors Weaponize HexStrike AI to Exploit Citrix Flaws Within a Week of Disclosure
  September 3, 2025

Dark Reading

• The Critical Failure in Vulnerability Management
  September 8, 2025
• 45 New Domains Linked to Salt Typhoon, UNC4841
  September 8, 2025
• How Has IoT Security Changed Over the Past 5 Years?
  September 5, 2025
• Critical SAP S/4HANA Vulnerability Under Attack, Patch Now
  September 5, 2025
• Anyone Using Agentic AI Needs to Understand Toxic Flows
  September 5, 2025
• Secretive MaaS Group 'TAG-150' Develops Novel 'CastleRAT'
  September 5, 2025
• Scammers Are Using Grok to Spread Malicious Links on X
  September 5, 2025
• Embracing the Next Generation of Cybersecurity Talent
  September 5, 2025
• Federal Cuts Put Local, State Agencies at Cyber-Risk
  September 5, 2025
• Sitecore Zero-Day Sparks New Round of ViewState Threats
  September 4, 2025
• Bridgestone Americas Confirms Cyberattack
  September 4, 2025
• Chinese Hackers Game Google to Boost Gambling Sites
  September 4, 2025
• ISC2 Aims to Bridge DFIR Skills Gap With New Certificate
  September 4, 2025
• Phishing Empire Runs Undetected on Google, Cloudflare
  September 4, 2025
• Czech Warning Highlights China Stealing User Data
  September 4, 2025

CSO

• Hackerangriff treibt Wehrle-Werk in Insolvenz
  September 8, 2025
• GhostAction campaign steals 3325 secrets in GitHub supply chain attack
  September 8, 2025
• Is the CISO role broken?
  September 8, 2025
• The importance of reviewing AI data centers’ policies
  September 8, 2025
• 10 security leadership career-killers — and how to avoid them
  September 8, 2025
• Diese Unternehmen hat es schon erwischt
  September 8, 2025
• External Attack Surface Management (EASM): Mit diesen vier Schritten minimieren Sie das Cyberrisiko
  September 8, 2025
• Hacker nutzen gravierende Schwachstelle bei SAP S/4HANA aus
  September 5, 2025
• You should be aware of these latest social engineering trends
  September 5, 2025
• Massiver Anstieg bei Hackerangriffen auf deutschen Bildungssektor
  September 5, 2025
• Sendmarc appoints Rob Bowker as North American Region Lead
  September 5, 2025
• Lack of board access: The No. 1 factor for CISO dissatisfaction
  September 5, 2025
• Authentifizierungslösungen: 10 Passwordless-Optionen für Unternehmen
  September 5, 2025
• Alert: Exploit available to threat actors for SAP S/4HANA critical vulnerability
  September 5, 2025
• Sitecore zero-day configuration flaw under active exploitation
  September 4, 2025

• Salesloft Drift Breach Traced to GitHub Compromise and Stolen OAuth Tokens
  September 7, 2025
• Critical SAP Vulnerability CVE-2025-42957 Actively Exploited by Hackers
  September 6, 2025
• GhostAction Attack Steals 3,325 Secrets from GitHub Projects
  September 6, 2025
• Bridgestone Confirms Cyberattack Disrupting North American Plants
  September 5, 2025
• Chess.com Hit by Limited Data Breach Linked to 3rd-Party File Transfer Tool
  September 5, 2025
• Scammers Exploit Grok AI With Video Ad Scam to Push Malware on X
  September 5, 2025
• Russian APT28 Deploys “NotDoor” Backdoor Through Microsoft Outlook
  September 4, 2025
• Model Namespace Reuse Flaw Hijacks AI Models on Google and Microsoft Platforms
  September 4, 2025
• New Malware Uses Windows Character Map for Cryptomining
  September 4, 2025
• Sendmarc appoints Rob Bowker as North American Region Lead
  September 4, 2025

Krebs On Security

• GOP Cries Censorship Over Spam Filters That Work
  September 6, 2025
• The Ongoing Fallout from a Breach at AI Chatbot Maker Salesloft
  September 1, 2025
• Affiliates Flock to ‘Soulless’ Scam Gambling Machine
  August 28, 2025
• DSLRoot, Proxies, and the Threat of ‘Legal Botnets’
  August 26, 2025
• SIM-Swapper, Scattered Spider Hacker Gets 10 Years
  August 21, 2025

CISA Alerts

We Live Security

• Under lock and key: Safeguarding business data with encryption
  September 5, 2025
• GhostRedirector poisons Windows servers: Backdoors with a side of Potatoes
  September 4, 2025
• This month in security with Tony Anscombe – August 2025 edition
  August 28, 2025
• Don’t let “back to school” become “back to (cyber)bullying”
  August 27, 2025
• First known AI-powered ransomware uncovered by ESET Research
  August 26, 2025

Securelist Feed

• IT threat evolution in Q2 2025. Mobile statistics
  September 5, 2025
• IT threat evolution in Q2 2025. Non-mobile statistics
  September 5, 2025
• Cookies and how to bake them: what they are for, associated risks, and what session hijacking has to do with it
  September 2, 2025
• How attackers adapt to built-in macOS protection
  August 29, 2025
• Exploits and vulnerabilities in Q2 2025
  August 27, 2025

CIS Security Advisories

• Multiple Vulnerabilities in Google Android OS Could Allow for Remote Code Execution
  September 4, 2025
• Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
  September 3, 2025
• Multiple Vulnerabilities in NetScaler ADC and NetScaler Gateway Could Allow for Remote Code Execution
  August 27, 2025
• A Vulnerability in Git Could Allow for Remote Code Execution
  August 27, 2025
• Multiple Vulnerabilities in Microsoft Products Could Allow for Remote Code Execution
  August 26, 2025

Deep Website Links