Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Smishing Triad Linked to 194,000 Malicious Domains in Global Phishing Operation
Published: 2025-10-24
The threat actors behind a large-scale smishing campaign have been linked to over 194,000 malicious domains since January 1, 2024, targeting various services worldwide using U.S. cloud services despite Hong Kong registration. This China-linked group, known as Smishing Triad, floods devices with fake notices to steal sensitive information, generating over $1 billion in three years.
2. Newly Patched Critical Microsoft WSUS Flaw Comes Under Active Exploitation
Published: 2025-10-24
Microsoft released emergency patches for CVE-2025-59287, a critical remote code execution vulnerability in Windows Server Update Service (WSUS) with a public proof-of-concept exploit now actively exploited in the wild. The flaw involves deserialization of untrusted data, allowing unauthorized attackers to execute code over networks, but it does not affect servers without the WSUS role enabled.
3. APT36 Targets Indian Government with Golang-Based DeskRAT Malware Campaign
Published: 2025-10-24
Pakistan-linked APT36 has targeted Indian government entities via spear-phishing emails with ZIP attachments or links to archives on cloud services, delivering Golang-based DeskRAT malware. The attacks, observed in August and September 2025, pull payloads from external servers and display decoy PDFs to infect systems.
4. The Cybersecurity Perception Gap: Why Executives and Practitioners See Risk Differently
Published: 2025-10-24
A Bitdefender 2025 assessment reveals a perception gap in cybersecurity, with 93% of professionals confident in managing risks, but C-level executives showing higher optimism (45% very confident) compared to mid-level staff facing daily challenges. This disconnect can lead to misprioritization of resources and blind spots in threat response.
5. 3,000 YouTube Videos Exposed as Malware Traps in Massive Ghost Network Operation
Published: 2025-10-24
A malicious network, dubbed YouTube Ghost Network by Check Point, has published over 3,000 videos since 2021 using hacked accounts to promote pirated software and game cheats that lead to stealer malware downloads. The videos exploit trust signals like views and likes, with volumes tripling this year, though Google has removed most.
6. Self-Spreading ‘GlassWorm’ Infects VS Code Extensions in Widespread Supply Chain Attack
Published: 2025-10-24
Koi Security identified GlassWorm, a self-propagating worm targeting VS Code extensions on Open VSX Registry and Microsoft Marketplace, marking the second DevOps supply chain attack this month. It uses Solana blockchain and Google Calendar for resilient C2 and hides code with invisible Unicode characters.
7. North Korean Hackers Lure Defense Engineers With Fake Jobs to Steal Drone Secrets
Published: 2025-10-23
North Korean actors in Operation Dream Job target European defense firms, especially in UAV sectors, with fake job lures to deploy malware like ScoringMathTea and MISTPEN for stealing proprietary drone information. The campaign began in late March 2025, affecting companies in Southeastern, Central, and other European regions.
8. ThreatsDay Bulletin: $176M Crypto Fine, Hacking Formula 1, Chromium Vulns, AI Hijack & More
Published: 2025-10-23
This week’s bulletin covers exploits like Lumma Stealer activity dropping after doxxing, a $176M crypto fine, Formula 1 hacking, Chromium vulnerabilities, and AI hijacks, emphasizing easy attack paths via user tricks, stale components, and trusted systems. It highlights how misconfigurations and new chains turn tools into entry points.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor and protect your systems from vulnerabilities and attacks. Stay safe online!