Threats tagged 'high-priority'

Noisy Bear Targets Kazakhstan Energy Sector With BarrelFire Phishing Campaign Source: https://thehackernews.com/2025/09/noisy-bear-targets-kazakhstan-energy.html

Phishing#infosecnews#redditGermany+6

Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys Source: https://thehackernews.com/2025/09/malicious-npm-packages-impersonate.html

News#infosecnews#redditGermany+5

TAG-150 Develops CastleRAT in Python and C, Expanding CastleLoader Malware Operations Source: https://thehackernews.com/2025/09/tag-150-develops-castlerat-in-python.html

Malware#infosecnews#redditGermany+6

Max severity Argo CD API flaw leaks repository credentials Source: https://www.bleepingcomputer.com/news/security/max-severity-argo-cd-api-flaw-leaks-repository-credentials/

News#infosecnews#redditGermany+7

Financial services firm Wealthsimple discloses data breach Source: https://www.bleepingcomputer.com/news/security/financial-services-firm-wealthsimple-discloses-data-breach/

Breach#infosecnews#redditGermany+6

CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active Exploitation Source: https://thehackernews.com/2025/09/cisa-orders-immediate-patch-of-critical.html

VirusTotal Finds 44 Undetected SVG Files Used to Deploy Base64-Encoded Phishing Pages Source: https://thehackernews.com/2025/09/virustotal-finds-44-undetected-svg.html

Phishing#infosecnews#redditGermany+7

Scammers Exploit Grok AI With Video Ad Scam to Push Malware on X Source: https://hackread.com/scammers-exploit-grok-ai-video-ad-scam-x-malware/

Chess.com discloses recent data breach via file transfer app Source: https://www.bleepingcomputer.com/news/security/chesscom-discloses-recent-data-breach-via-file-transfer-app/

Breach#infosecnews#redditGermany+7

Tire giant Bridgestone confirms cyberattack impacts manufacturing Source: https://www.bleepingcomputer.com/news/security/tire-giant-bridgestone-confirms-cyberattack-impacts-manufacturing/

News#infosecnews#redditGermany+8

New TP-Link zero-day surfaces as CISA warns other flaws are exploited Source: https://www.bleepingcomputer.com/news/security/new-tp-link-zero-day-surfaces-as-cisa-warns-other-flaws-are-exploited/

Exploit development for IBM i - turning blind AS/400 command execution into a proper shell Source: https://blog.silentsignal.eu/2025/09/04/Exploit-development-for-IBM-i/

Google's September 2025 Android Security Update Fixes 120 Vulnerabilities, Including 2 Active Zero-Day Exploits Source: https://securitydaily.news/article?id=186

SaaS giant Workiva discloses data breach after Salesforce attack Source: https://www.bleepingcomputer.com/news/security/saas-giant-workiva-discloses-data-breach-after-salesforce-attack/

Campaign#infosecnews#redditGermany+6

US sues robot toy maker for exposing children's data to Chinese devs Source: https://www.bleepingcomputer.com/news/security/us-sues-robot-toy-maker-for-exposing-childrens-data-to-chinese-devs/

News#infosecnews#redditGermany+6

Hackers use new HexStrike-AI tool to rapidly exploit n-day flaws Source: https://www.bleepingcomputer.com/news/security/hackers-use-new-hexstrike-ai-tool-to-rapidly-exploit-n-day-flaws/

Iranian Hackers Exploit 100+ Embassy Email Accounts in Global Phishing Targeting Diplomats Source: https://thehackernews.com/2025/09/iranian-hackers-exploit-100-embassy.html

Disney to pay $10M to settle claims it collected kids’ data on YouTube Source: https://www.bleepingcomputer.com/news/security/disney-to-pay-10m-to-settle-claims-it-collected-kids-data-on-youtube/

News#infosecnews#redditGermany+9

Google fixes actively exploited Android flaws in September update Source: https://www.bleepingcomputer.com/news/security/google-fixes-actively-exploited-android-flaws-in-september-update/

News#infosecnews#redditGermany+7

Malicious npm Packages Exploit Ethereum Smart Contracts Source: https://www.infosecurity-magazine.com/news/malicious-npm-packages-exploit/