Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. BatShadow Group Uses New Go-Based ‘Vampire Bot’ Malware to Hunt Job Seekers
Published: 2025-10-07
A Vietnamese threat actor named BatShadow has been attributed to a new campaign that leverages social engineering tactics to deceive job seekers and digital marketing professionals to deliver a previously undocumented malware called Vampire Bot, posing as recruiters with malicious files disguised as job descriptions.
2. Google’s New AI Doesn’t Just Find Vulnerabilities — It Rewrites Code to Patch Them
Published: 2025-10-07
Google’s DeepMind division has announced an AI-powered agent called CodeMender that automatically detects, patches, and rewrites vulnerable code to prevent future exploits, acting both reactively and proactively to secure codebases.
3. New Research: AI Is Already the #1 Data Exfiltration Channel in the Enterprise
Published: 2025-10-07
A new report by LayerX reveals that AI has become the largest uncontrolled channel for corporate data exfiltration, surpassing shadow SaaS or unmanaged file sharing, with sensitive data flowing into tools like ChatGPT, Claude, and Copilot via unmanaged accounts.
4. XWorm 6.0 Returns with 35+ Plugins and Enhanced Data Theft Capabilities
Published: 2025-10-07
Cybersecurity researchers have detailed the evolution of XWorm malware into a versatile tool with a modular design featuring a core client and over 35 plugins for actions like data theft, keylogging, screen capture, persistence, and ransomware deployment.
5. 13-Year-Old Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code Remotely
Published: 2025-10-07
Redis has disclosed a maximum-severity security flaw CVE-2025-49844 in its in-memory database software, allowing remote code execution via a specially crafted Lua script that manipulates the garbage collector, requiring an authenticated user.
6. Microsoft Links Storm-1175 to GoAnywhere Exploit Deploying Medusa Ransomware
Published: 2025-10-07
Microsoft has attributed the exploitation of a critical flaw CVE-2025-10035 in Fortra GoAnywhere software to threat actor Storm-1175, enabling the deployment of Medusa ransomware through unauthenticated command injection.
7. Oracle EBS Under Fire as Cl0p Exploits CVE-2025-61882 in Real-World Attacks
Published: 2025-10-07
CrowdStrike has linked the exploitation of CVE-2025-61882 in Oracle E-Business Suite to the Cl0p ransomware group (aka Graceful Spider), with attacks starting as early as August 9, 2025, allowing remote code execution without authentication.
8. New Report Links Research Firms BIETA and CIII to China’s MSS Cyber Operations
Published: 2025-10-06
A new report assesses that the Beijing Institute of Electronics Technology and Application (BIETA) and its subsidiary CIII are likely led by China’s Ministry of State Security, supporting intelligence and military missions through technologies like steganography.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider implementing AI-powered security tools to detect and mitigate vulnerabilities in real time. Stay safe online!