Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. New Report Links Research Firms BIETA and CIII to China’s MSS Cyber Operations
Published: 2025-10-06
A new report assesses that the Chinese company Beijing Institute of Electronics Technology and Application (BIETA) and its subsidiary CIII are likely led by China’s Ministry of State Security (MSS), with personnel links to MSS officers and activities supporting intelligence and military missions through technologies like steganography.
2. ⚡ Weekly Recap: Oracle 0-Day, BitLocker Bypass, VMScape, WhatsApp Worm & More
Published: 2025-10-06
This weekly cybersecurity recap highlights key trends and attacks, including threat actors tied to Cl0p ransomware exploiting a zero-day flaw CVE-2025-61882 in Oracle E-Business Suite for data theft, along with other notable incidents like BitLocker bypass and a WhatsApp worm.
3. 5 Critical Questions For Adopting an AI Security Solution
Published: 2025-10-06
Organizations evaluating AI Security Posture Management (AI-SPM) solutions should ask five critical questions to ensure comprehensive visibility, control over AI and data risks, integration with existing tools, scalability, and robust support for regulatory compliance.
4. Oracle Rushes Patch for CVE-2025-61882 After Cl0p Exploited It in Data Theft Attacks
Published: 2025-10-06
Oracle has issued an emergency patch for the critical vulnerability CVE-2025-61882 in its E-Business Suite, which allows remote code execution and was exploited by Cl0p ransomware-linked actors for data theft without authentication.
5. Chinese Cybercrime Group Runs Global SEO Fraud Ring Using Compromised IIS Servers
Published: 2025-10-06
Cybersecurity researchers have identified a Chinese-speaking cybercrime group UAT-8099 conducting SEO fraud and stealing credentials from compromised Microsoft IIS servers, primarily targeting mobile users in countries like India, Thailand, and Brazil across universities, tech firms, and telecom providers.
6. Zimbra Zero-Day Exploited to Target Brazilian Military via Malicious ICS Files
Published: 2025-10-06
A patched stored cross-site scripting vulnerability CVE-2025-27915 in Zimbra Collaboration was exploited as a zero-day to target the Brazilian military, allowing attackers to execute arbitrary JavaScript via malicious ICS calendar files in emails for unauthorized account actions.
7. CometJacking: One Click Can Turn Perplexity’s Comet AI Browser Into a Data Thief
Published: 2025-10-04
Researchers have revealed CometJacking, a prompt injection attack on Perplexity’s Comet AI browser that uses a malicious link to embed prompts and siphon sensitive data from connected services like email and calendar without detection.
8. Scanning Activity on Palo Alto Networks Portals Jump 500% in One Day
Published: 2025-10-04
GreyNoise observed a 500% surge in scanning activity targeting Palo Alto Networks login portals on October 3, 2025, involving over 1,300 unique IP addresses mostly from the U.S., with characteristics similar to recent Cisco ASA scans.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor and protect your digital assets. Stay safe online!