Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. New .NET CAPI Backdoor Targets Russian Auto and E-Commerce Firms via Phishing ZIPs
Published: 2025-10-18
Cybersecurity researchers have identified a new campaign targeting Russian automobile and e-commerce sectors with a .NET malware called CAPI Backdoor, distributed through phishing emails containing ZIP archives with a decoy document and a malicious LNK file that executes the implant using rundll32.exe.
2. Silver Fox Expands Winos 4.0 Attacks to Japan and Malaysia via HoldingHands RAT
Published: 2025-10-18
The threat actors behind Winos 4.0 malware have extended their operations from China and Taiwan to Japan and Malaysia using HoldingHands RAT, spread via phishing emails with PDFs containing malicious links disguised as official Ministry of Finance documents.
3. New Phishing Attack Leverages Azure Blob Storage to Impersonate Microsoft
Published: 2025-10-18
Threat actors are leveraging Microsoft Azure Blob Storage to craft highly convincing phishing sites that mimic legitimate Office 365 login portals, putting Microsoft 365 at risk.
4. PoC Exploit for 7-Zip Vulnerabilities that Allows Remote Code Execution
Published: 2025-10-18
A proof-of-concept exploit for two critical vulnerabilities in the popular file archiver 7-Zip potentially allows attackers to execute arbitrary code remotely through malicious ZIP files.
5. Authorities Dismantle Cybercrime-as-a-Service Platform, Seize 40,000 Active SIM Cards
Published: 2025-10-18
An international law enforcement operation has dismantled a large-scale cybercrime-as-a-service network responsible for fueling thousands of online fraud cases across Europe.
6. Critical Zimbra SSRF Vulnerability Let Attackers Access Sensitive Data
Published: 2025-10-18
A newly disclosed Server-Side Request Forgery (SSRF) flaw in Zimbra Collaboration Suite has raised major security concerns, prompting administrators to patch systems immediately.
7. Hackers Steal Sensitive Data from Auction House Sotheby’s
Published: 2025-10-18
Sotheby’s has disclosed a data breach impacting personal information, including SSNs, with hackers stealing names, addresses, dates of birth, email addresses, Social Security numbers, government IDs, and other information.
8. Prosper Data Breach Impacts 17.6 Million Accounts
Published: 2025-10-18
Hackers stole names, addresses, dates of birth, email addresses, Social Security numbers, government IDs, and other information in a massive breach affecting 17.6 million Prosper accounts.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider implementing multi-layered security measures to safeguard your digital environment. Stay safe online!