Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. CometJacking: One Click Can Turn Perplexity’s Comet AI Browser Into a Data Thief
Published: 2025-10-04
Cybersecurity researchers have disclosed details of a new attack called CometJacking targeting Perplexity’s agentic AI browser Comet by embedding malicious prompts within a seemingly innocuous link to siphon sensitive data, including from connected services like email and calendar.
2. Scanning Activity on Palo Alto Networks Portals Jump 500% in One Day
Published: 2025-10-04
Threat intelligence firm GreyNoise disclosed a massive spike in scanning activity targeting Palo Alto Networks login portals, with a nearly 500% increase in IP addresses on October 3, 2025, the highest level recorded in the last three months.
3. Detour Dog Caught Running DNS-Powered Malware Factory for Strela Stealer
Published: 2025-10-03
A threat actor named Detour Dog has been outed as powering campaigns distributing an information stealer known as Strela Stealer, maintaining control of domains hosting the first stage backdoor called StarFish since August 2023.
4. Rhadamanthys Stealer Evolves: Adds Device Fingerprinting, PNG Steganography Payloads
Published: 2025-10-03
The threat actor behind Rhadamanthys has updated the information stealer to support device and web browser fingerprinting, along with advertising other tools like Elysium Proxy Bot and Crypt Service on their website.
5. Researchers Warn of Self-Spreading WhatsApp Malware Named SORVEPOTEL
Published: 2025-10-03
Brazilian users have emerged as the target of a new self-propagating malware called SORVEPOTEL that spreads via WhatsApp through phishing messages with malicious ZIP file attachments, focusing on speed and propagation across Windows systems.
6. New “Cavalry Werewolf” Attack Hits Russian Agencies with FoalShell and StallionRAT
Published: 2025-10-03
A threat actor known as Cavalry Werewolf, with overlaps to YoroTrooper and other clusters, has targeted Russian state agencies and enterprises using phishing emails disguised as official correspondence to deliver FoalShell and StallionRAT malware.
7. CISA Flags Meteobridge CVE-2025-4008 Flaw as Actively Exploited in the Wild
Published: 2025-10-03
The U.S. Cybersecurity and Infrastructure Security Agency added a high-severity command injection vulnerability CVE-2025-4008 in Smartbedded Meteobridge to its Known Exploited Vulnerabilities catalog due to evidence of active exploitation allowing remote unauthenticated attackers to gain root privileges.
8. Confucius Hackers Hit Pakistan With New WooperStealer and Anondoor Malware
Published: 2025-10-02
The threat actor known as Confucius has conducted a phishing campaign targeting Pakistan with malware families like WooperStealer and Anondoor, using spear-phishing and malicious documents against government agencies, military organizations, and critical industries since 2013.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using tools like advanced threat intelligence platforms to monitor your systems for vulnerabilities and automate security patches. Stay safe online!