Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps
Published: 2025-10-09
A rapidly evolving Android spyware campaign called ClayRat has targeted users in Russia using Telegram channels and lookalike phishing websites impersonating apps like WhatsApp, Google Photos, TikTok, and YouTube, exfiltrating SMS messages, call logs, notifications, device information, taking photos, sending SMS, and placing calls.
2. Hackers Access SonicWall Cloud Firewall Backups, Spark Urgent Security Checks
Published: 2025-10-09
SonicWall disclosed unauthorized access to firewall configuration backup files for all customers using the cloud backup service, containing encrypted credentials and configuration data that could increase targeted attack risks, prompting notifications, assessment tools, and device checks.
3. From Phishing to Malware: AI Becomes Russia’s New Cyber Weapon in War on Ukraine
Published: 2025-10-09
Russian hackers have escalated AI use in cyberattacks against Ukraine in H1 2025, generating phishing messages and AI-created malware, with SSSCIP reporting 3,018 incidents, up from 2,575 in H2 2024, including increases in attacks on local authorities and military via WRECKSTEEL malware.
4. Discord Says 70,000 Users Had IDs Exposed in Recent Data Breach
Published: 2025-10-09
Hackers claim the theft of over 2 million photos of government identification documents provided to Discord for age verification, exposing IDs of 70,000 users in a recent data breach.
5. Google DeepMind’s New AI Agent Finds and Fixes Vulnerabilities
Published: 2025-10-09
Google DeepMind has introduced CodeMender, an AI-powered agent that automatically detects, patches, and rewrites vulnerable code to prevent future exploits, enhancing software security.
6. Exploitation of Oracle EBS Zero-Day Started 2 Months Before Patching
Published: 2025-10-09
Hundreds of internet-exposed Oracle E-Business Suite instances may still be vulnerable to attacks following the exploitation of a zero-day flaw that began two months before patching.
7. Critical Vulnerability Puts 60,000 Redis Servers at Risk of Exploitation
Published: 2025-10-09
An authenticated attacker can exploit a critical security flaw in Redis to trigger a use-after-free condition, potentially enabling arbitrary code execution on over 60,000 vulnerable servers.
8. North Korean Hackers Steal Over $6 Billion to Fund Military Programs
Published: 2025-10-09
North Korean hackers are believed to have stolen over $6 billion for the Pyongyang regime, financing its military programs through extensive cyber operations.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider leveraging AI-driven tools for proactive vulnerability detection and patching. Stay safe online!