Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. China-Linked Hackers Exploit New VMware Zero-Day Since October 2024
Published: 2025-10-10
Urgent report reveals China-linked hackers have been exploiting a new VMware zero-day vulnerability since October 2024, posing significant risks to affected systems.
2. CISA Sounds Alarm on Critical Sudo Flaw Actively Exploited in Linux and Unix Systems
Published: 2025-10-10
CISA has issued a warning about a critical sudo flaw that is being actively exploited in Linux and Unix systems, urging immediate patching to prevent unauthorized access.
3. From LFI to RCE: Active Exploitation Detected in Gladinet and TrioFox Vulnerability
Published: 2025-10-10
Cybersecurity company Huntress has observed active in-the-wild exploitation of an unpatched security flaw impacting Gladinet CentreStack and TrioFox products, allowing attackers to escalate from local file inclusion to remote code execution.
4. Stealit Malware Abuses Node.js Single Executable Feature via Game and VPN Installers
Published: 2025-10-10
Cybersecurity researchers have disclosed details of an active malware campaign called Stealit that leverages Node.js’ Single Executable Application feature to distribute payloads through game and VPN installers.
5. Microsoft Warns of ‘Payroll Pirates’ Hijacking HR SaaS Accounts to Steal Employee Salaries
Published: 2025-10-10
A threat actor known as Storm-2657 has been observed hijacking employee accounts in HR SaaS platforms to divert salary payments to attacker-controlled accounts.
6. From Detection to Patch: Fortra Reveals Full Timeline of CVE-2025-10035 Exploitation
Published: 2025-10-10
Fortra has revealed the results of its investigation into CVE-2025-10035, a critical security flaw in GoAnywhere Managed File Transfer that’s been under active exploitation since at least September 11, 2025.
7. RondoDox: Large-Scale Botnet Targets 56 N-Day Vulnerabilities
Published: 2025-10-09
RondoDox is a large-scale botnet active since June 2025, targeting 56 n-day vulnerabilities across over 30 device types, including routers, DVRs, and web servers.
8. New Ransomware Alliance Emerges Between DragonForce, LockBit, and Qilin
Published: 2025-10-09
A new ransomware alliance has emerged between DragonForce, LockBit, and Qilin, signaling a major evolution in the cyber threat landscape by sharing tools and infrastructure to enhance attack effectiveness.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider adopting multi-layered security strategies to protect against emerging vulnerabilities. Stay safe online!