Threats tagged 'infosecnews'

LastPass Warns of Fake Repositories Infecting macOS with Atomic Infostealer Source: https://thehackernews.com/2025/09/lastpass-warns-of-fake-repositories.html

Phishing#infosecnews#redditGermany+7

17,500 Phishing Domains Target 316 Brands Across 74 Countries in Global PhaaS Surge Source: https://thehackernews.com/2025/09/17500-phishing-domains-target-316.html

Phishing#infosecnews#redditGermany+9

Fortra warns of max severity flaw in GoAnywhere MFT’s License Servlet Source: https://www.bleepingcomputer.com/news/security/fortra-warns-of-max-severity-flaw-in-goanywhere-mfts-license-servlet/

News#infosecnews#redditGermany+6

CISA exposes malware kits deployed in Ivanti EPMM attacks Source: https://www.bleepingcomputer.com/news/security/cisa-exposes-malware-kits-deployed-in-ivanti-epmm-attacks/

Malware#infosecnews#redditGermany+7

UNC1549 Hacks 34 Devices in 11 Telecom Firms via LinkedIn Job Lures and MINIBIKE Malware Source: https://thehackernews.com/2025/09/unc1549-hacks-34-devices-in-11-telecom.html

Malware#infosecnews#redditGermany+9

FBI warns of cybercriminals using fake FBI crime reporting portals Source: https://www.bleepingcomputer.com/news/security/fbi-warns-of-fake-fbi-crime-complaint-portals-used-for-cybercrime/

Phishing#infosecnews#redditGermany+6

Chinese Network Selling Thousands of Fake US and Canadian IDs Source: https://hackread.com/chinese-network-ofake-us-canadian-ids/

Phishing#infosecnews#redditGermany+6

Google Issues Urgent Chrome 140 Update After Zero-Day Exploited in the Wild Source: https://www.lansweeper.com/blog/vulnerability/google-issues-urgent-chrome-140-update-after-zero-day-exploited-in-the-wild/?utm_source=reddit&utm_medium=social&utm_campaign=ls-global-vulnerability-2025&utm_content=google-chrome-140

WatchGuard Issues Fix for 9.3-Rated Firebox Firewall Vulnerability Source: https://hackread.com/watchguard-fix-for-firebox-firewall-vulnerability/

SystemBC malware turns infected VPS systems into proxy highway Source: https://www.bleepingcomputer.com/news/security/systembc-malware-turns-infected-vps-systems-into-proxy-highway/

Malware#infosecnews#redditGermany+7

New York Blood Center Alerts 194,000 People to Data Breach Source: https://www.infosecurity-magazine.com/news/new-york-blood-center-data-breach/

Breach#infosecnews#redditGermany+9

Two UK Teenagers Charged Over Transport for London (TFL) Hack Linked to Scattered Spider Source: https://hackread.com/two-uk-teenagers-charged-tfl-hack-scattered-spider/

News#infosecnews#redditGermany+4

Fake Empire Podcast Invites Target Crypto Industry with macOS AMOS Stealer Source: https://hackread.com/fake-empire-podcast-invites-crypto-macos-amos-stealer/

Malware#infosecnews#redditGermany+5

WatchGuard warns of critical vulnerability in Firebox firewalls Source: https://www.bleepingcomputer.com/news/security/watchguard-warns-of-critical-vulnerability-in-firebox-firewalls/

CVE-2025-10585 is a critical zero-day vulnerability in the Google Chrome browser's V8 JavaScript and WebAssembly engine, involving a type confusion flaw. This vulnerability has been actively exploited in the wild in 2025 and was discovered by Google's Threat Analysis Group. It allows attackers to corrupt memory, potentially leading to arbitrary code execution, unauthorized access, or service disruption. Google has released patches in Chrome version 140.0.7339.185/.186 and later to address this and other zero-day vulnerabilities. The vulnerability is part of a series of actively exploited Chrome zero-days in 2025. Immediate patching is strongly recommended to mitigate the risk. The vulnerability poses a critical threat due to its active exploitation and potential impact on user security. There is no detailed public technical information about the exploit methods or affected Chrome versions prior to the patch. No specific countries are confirmed as targeted, though European countries with heavy Chrome usage were noted as at elevated risk.

Vane Viper Malvertising Network Posed as Legit Adtech in Global Scams Source: https://hackread.com/vane-viper-malvertising-adtech-global-scams/

News#infosecnews#redditGermany+7

Microsoft Office 2016/2019 End of Life Source: https://www.lansweeper.com/blog/eol/microsoft-office-end-of-life/?utm_source=reddit&utm_medium=social&utm_campaign=ls-global-end-of-life-2025&utm_content=microsoft-office

News#infosecnews#redditGermany+9

40% of Corporate Client Devices Still Run Windows 10 Source: https://www.lansweeper.com/blog/eol/are-you-prepared-for-windows-10-end-of-life/?utm_source=reddit&utm_medium=social&utm_campaign=ls-global-end-of-life-2025&utm_content=windows10

News#infosecnews#redditGermany+10

ShinyHunters claims 1.5 billion Salesforce records stolen in Drift hacks Source: https://www.bleepingcomputer.com/news/security/shinyhunters-claims-15-billion-salesforce-records-stolen-in-drift-hacks/

News#infosecnews#redditGermany+6

SonicWall warns customers to reset credentials after breach Source: https://www.bleepingcomputer.com/news/security/sonicwall-warns-customers-to-reset-credentials-after-MySonicWall-breach/

Breach#infosecnews#redditGermany+9