Threats tagged 'high-priority'

FBI warns of cybercriminals using fake FBI crime reporting portals Source: https://www.bleepingcomputer.com/news/security/fbi-warns-of-fake-fbi-crime-complaint-portals-used-for-cybercrime/

Phishing#infosecnews#redditGermany+6

Google Issues Urgent Chrome 140 Update After Zero-Day Exploited in the Wild Source: https://www.lansweeper.com/blog/vulnerability/google-issues-urgent-chrome-140-update-after-zero-day-exploited-in-the-wild/?utm_source=reddit&utm_medium=social&utm_campaign=ls-global-vulnerability-2025&utm_content=google-chrome-140

SystemBC malware turns infected VPS systems into proxy highway Source: https://www.bleepingcomputer.com/news/security/systembc-malware-turns-infected-vps-systems-into-proxy-highway/

Malware#infosecnews#redditGermany+7

New York Blood Center Alerts 194,000 People to Data Breach Source: https://www.infosecurity-magazine.com/news/new-york-blood-center-data-breach/

Breach#infosecnews#redditGermany+9

WatchGuard warns of critical vulnerability in Firebox firewalls Source: https://www.bleepingcomputer.com/news/security/watchguard-warns-of-critical-vulnerability-in-firebox-firewalls/

CVE-2025-10585 is a critical zero-day vulnerability in the Google Chrome browser's V8 JavaScript and WebAssembly engine, involving a type confusion flaw. This vulnerability has been actively exploited in the wild in 2025 and was discovered by Google's Threat Analysis Group. It allows attackers to corrupt memory, potentially leading to arbitrary code execution, unauthorized access, or service disruption. Google has released patches in Chrome version 140.0.7339.185/.186 and later to address this and other zero-day vulnerabilities. The vulnerability is part of a series of actively exploited Chrome zero-days in 2025. Immediate patching is strongly recommended to mitigate the risk. The vulnerability poses a critical threat due to its active exploitation and potential impact on user security. There is no detailed public technical information about the exploit methods or affected Chrome versions prior to the patch. No specific countries are confirmed as targeted, though European countries with heavy Chrome usage were noted as at elevated risk.

ShinyHunters claims 1.5 billion Salesforce records stolen in Drift hacks Source: https://www.bleepingcomputer.com/news/security/shinyhunters-claims-15-billion-salesforce-records-stolen-in-drift-hacks/

News#infosecnews#redditGermany+6

SonicWall warns customers to reset credentials after breach Source: https://www.bleepingcomputer.com/news/security/sonicwall-warns-customers-to-reset-credentials-after-MySonicWall-breach/

Breach#infosecnews#redditGermany+9

VC giant Insight Partners warns thousands after ransomware breach Source: https://www.bleepingcomputer.com/news/security/vc-giant-insight-partners-warns-thousands-after-ransomware-breach/

Malware#infosecnews#redditGermany+5

TA558 Uses AI-Generated Scripts to Deploy Venom RAT in Brazil Hotel Attacks Source: https://thehackernews.com/2025/09/ta558-uses-ai-generated-scripts-to.html

News#infosecnews#redditPortugal+6

RaccoonO365 Phishing Network Dismantled as Microsoft, Cloudflare Take Down 338 Domains Source: https://thehackernews.com/2025/09/raccoono365-phishing-network-shut-down.html

Phishing#infosecnews#redditGermany+9

Jaguar Land Rover extends shutdown after cyberattack by another week Source: https://www.bleepingcomputer.com/news/security/jaguar-land-rover-extends-shutdown-after-cyberattack-by-another-week/

News#infosecnews#redditGermany+8

Self-Replicating Worm Hits 180+ Software Packages Source: https://krebsonsecurity.com/2025/09/self-replicating-worm-hits-180-software-packages/

Malware#infosecnews#redditGermany+8

SlopAds Fraud Ring Exploits 224 Android Apps to Drive 2.3 Billion Daily Ad Bids Source: https://thehackernews.com/2025/09/slopads-fraud-ring-exploits-224-android.html

News#infosecnews#redditGermany+6

Fifteen Ransomware Gangs “Retire,” Future Unclear Source: https://www.infosecurity-magazine.com/news/fifteen-ransomware-gangs-retire/

Malware#infosecnews#redditGermany+6

Gucci, Balenciaga and Alexander McQueen Breach Linked to ShinyHunters Source: https://hackread.com/gucci-balenciaga-alexander-mcqueen-breach-shinyhunters/

Breach#infosecnews#redditFrance+6

40 npm Packages Compromised in Supply Chain Attack Using bundle.js to Steal Credentials Source: https://thehackernews.com/2025/09/40-npm-packages-compromised-in-supply.html

Campaign#infosecnews#redditGermany+11

FinWise insider breach impacts 689K American First Finance customers Source: https://www.bleepingcomputer.com/news/security/finwise-insider-breach-impacts-689k-american-first-finance-customers/

Breach#infosecnews#redditGermany+5

Google confirms fraudulent account created in law enforcement portal Source: https://www.bleepingcomputer.com/news/security/google-confirms-hackers-gained-access-to-law-enforcement-portal/

News#infosecnews#redditGermany+9

New Phoenix attack bypasses Rowhammer defenses in DDR5 memory Source: https://www.bleepingcomputer.com/news/security/new-phoenix-attack-bypasses-rowhammer-defenses-in-ddr5-memory/

Campaign#infosecnews#redditGermany+7