New "Cavalry Werewolf" Attack Hits Russian Agencies with FoalShell and StallionRAT
Source: https://thehackernews.com/2025/10/new-cavalry-werewolf-attack-hits.html
CVE-2025-59489 is a medium-severity arbitrary code execution vulnerability found in the Unity Runtime environment. It allows attackers to execute arbitrary code, potentially compromising affected systems. The vulnerability was publicly disclosed on Reddit's NetSec community with minimal discussion and no known exploits in the wild. No specific affected Unity versions or patches have been identified yet. European organizations using Unity-based applications or development environments could face risks related to confidentiality, integrity, and availability if exploited. Mitigation should focus on monitoring official Unity advisories, restricting runtime permissions, and employing runtime application self-protection. Countries with strong gaming, simulation, and software development sectors, such as Germany, France, and the UK, are more likely to be impacted. Given the potential for arbitrary code execution without known exploitation or detailed technical data, the suggested severity is medium. Defenders should prioritize awareness, restrict exposure, and prepare for patch deployment once available.
Red Hat confirms security incident after hackers breach GitLab instance
Source: https://www.bleepingcomputer.com/news/security/red-hat-confirms-security-incident-after-hackers-breach-gitlab-instance/
Confucius Hackers Hit Pakistan With New WooperStealer and Anondoor Malware
Source: https://thehackernews.com/2025/10/confucius-hackers-hit-pakistan-with-new.html
Adobe Analytics bug leaked customer tracking data to other tenants
Source: https://www.bleepingcomputer.com/news/security/adobe-analytics-bug-leaked-customer-tracking-data-to-other-tenants/
Clop extortion emails claim theft of Oracle E-Business Suite data
Source: https://www.bleepingcomputer.com/news/security/clop-extortion-emails-claim-theft-of-oracle-e-business-suite-data/
New bug in classic Outlook can only be fixed via Microsoft support
Source: https://www.bleepingcomputer.com/news/microsoft/new-bug-in-classic-outlook-can-only-be-fixed-via-microsoft-support/
Allianz Life says July data breach impacts 1.5 million people
Source: https://www.bleepingcomputer.com/news/security/allianz-life-says-july-data-breach-impacts-15-million-people/
Red Hat OpenShift AI Flaw Exposes Hybrid Cloud Infrastructure to Full Takeover
Source: https://thehackernews.com/2025/10/critical-red-hat-openshift-ai-flaw.html
New Android Banking Trojan “Klopatra” Uses Hidden VNC to Control Infected Smartphones
Source: https://thehackernews.com/2025/10/new-android-banking-trojan-klopatra.html
Hackers Exploit Milesight Routers to Send Phishing SMS to European Users
Source: https://thehackernews.com/2025/10/hackers-exploit-milesight-routers-to.html
