Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Five New Exploited Bugs Land in CISA’s Catalog — Oracle and Microsoft Among Targets
Published: 2025-10-20
The U.S. Cybersecurity and Infrastructure Security Agency added five security flaws to its Known Exploited Vulnerabilities Catalog, including a server-side request forgery vulnerability in Oracle E-Business Suite that has been weaponized in real-world attacks.
2. 131 Chrome Extensions Caught Hijacking WhatsApp Web for Massive Spam Campaign
Published: 2025-10-20
Cybersecurity researchers uncovered 131 rebranded Chrome extensions sharing the same codebase that inject scripts into WhatsApp Web to automate bulk spam messaging, bypassing anti-spam controls and affecting about 20,905 users.
3. MSS Claims NSA Used 42 Cyber Tools in Multi-Stage Attack on Beijing Time Systems
Published: 2025-10-20
China’s Ministry of State Security accused the U.S. NSA of a premeditated cyber attack on the National Time Service Center using 42 tools, which was foiled but could have disrupted Beijing Time and critical infrastructure.
4. TigerJack Hacks Infiltrated Developer Marketplaces with 11 Malicious VS Code Extensions
Published: 2025-10-20
A sophisticated threat actor known as TigerJack has systematically infiltrated developer marketplaces with at least 11 malicious Visual Studio Code extensions, targeting thousands of developers.
5. Mysterious Elephant APT Hackers Infiltrate Organization to Steal Sensitive Data
Published: 2025-10-20
In recent months, a new advanced persistent threat (APT) group known as Mysterious Elephant has emerged as a formidable adversary targeting government and diplomatic organizations to steal sensitive data.
6. New DefenderWrite Tool Let Attackers Inject Malicious DLLs into AV Executable Folders
Published: 2025-10-20
A new tool called DefenderWrite exploits whitelisted Windows programs to bypass protections and write arbitrary files into antivirus executable folders, potentially enabling malware persistence.
7. AWS Outage Impacts Amazon, Snapchat, Prime Video, Canva and More – Update
Published: 2025-10-20
A widespread Amazon Web Services (AWS) outage on Monday disrupted operations for millions of users worldwide, knocking out access to everything from streaming giants to productivity tools.
8. Envoy Air Hit by Oracle Hack
Published: 2025-10-20
Envoy Air, which operates the American Eagle brand, has confirmed that business information was stolen by hackers.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider leveraging AI-driven security platforms to enhance threat detection and response in your environment. Stay safe online!