Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Urgent: China-Linked Hackers Exploit New VMware Zero-Day Since October 2024
Published: 2025-09-30
A newly patched security flaw in Broadcom VMware Tools and VMware Aria Operations has been exploited as a zero-day since mid-October 2024 by the threat actor UNC5174, allowing local privilege escalation.
2. New Android Trojan “Datzbro” Tricking Elderly with AI-Generated Facebook Travel Events
Published: 2025-09-30
A new Android banking trojan called Datzbro targets elderly users by using AI-generated content in Facebook groups promoting senior trips, conducting device takeover attacks and fraudulent transactions.
3. Evolving Enterprise Defense to Secure the Modern AI Supply Chain
Published: 2025-09-30
The rapid adoption of Gen-AI and SaaS platforms with LLMs introduces new risks like AI sprawl and supply chain vulnerabilities, challenging enterprises to protect data and maintain compliance.
4. U.K. Police Just Seized £5.5 Billion in Bitcoin — The World’s Largest Crypto Bust
Published: 2025-09-30
A Chinese national, Zhimin Qian, was convicted for a fraudulent cryptocurrency scheme, leading to the U.K. police seizing £5.5 billion in Bitcoin, the largest crypto bust ever, during a raid in London.
5. CISA Sounds Alarm on Critical Sudo Flaw Actively Exploited in Linux and Unix Systems
Published: 2025-09-30
CISA added a critical Sudo flaw, CVE-2025-32463, to its KEV catalog, noting active exploitation allowing local attackers to run arbitrary commands as root using the -R option, affecting versions prior to 1.9.17p1.
6. $50 Battering RAM Attack Breaks Intel and AMD Cloud Security Protections
Published: 2025-09-30
Academics from KU Leuven and the University of Birmingham demonstrated a $50 interposer called Battering RAM that bypasses Intel SGX and AMD SEV-SNP security features, redirecting protected addresses to attacker-controlled locations.
7. Phantom Taurus: New China-Linked Hacker Group Hits Governments With Stealth Malware
Published: 2025-09-30
A China-aligned nation-state actor, Phantom Taurus, has targeted government and telecommunications organizations in Africa, the Middle East, and Asia with stealth malware for espionage over the past two-and-a-half years.
8. Cyberattack on Beer Giant Asahi Disrupts Production
Published: 2025-09-30
The incident has resulted in a system failure that impacted orders and shipments in Japan, and call center operations.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and prioritize patching critical vulnerabilities in tools like VMware and Sudo to mitigate exploitation risks. Stay safe online!