Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. X Warns Users With Security Keys to Re-Enroll Before November 10 to Avoid Lockouts
Published: 2025-10-27
Social media platform X is urging users who have enrolled for two-factor authentication (2FA) using passkeys and hardware security keys like Yubikeys to re-enroll their key by November 10, 2025, to ensure continued access, as part of retiring the twitter.com domain.
2. New ChatGPT Atlas Browser Exploit Lets Attackers Plant Persistent Hidden Commands
Published: 2025-10-27
Cybersecurity researchers have discovered a vulnerability in OpenAI’s ChatGPT Atlas web browser that allows attackers to inject malicious instructions into the AI assistant’s memory via a CSRF flaw, enabling persistent attacks across devices and sessions.
3. ⚡ Weekly Recap: WSUS Exploited, LockBit 5.0 Returns, Telegram Backdoor, F5 Breach Widens
Published: 2025-10-27
This weekly recap covers recent cybersecurity incidents including active exploitation of a critical Microsoft WSUS flaw (CVE-2025-59287), the return of LockBit 5.0 ransomware, a Telegram backdoor, and the widening F5 breach, highlighting threats to security and trust.
4. Qilin Ransomware Combines Linux Payload With BYOVD Exploit in Hybrid Attack
Published: 2025-10-27
The Qilin ransomware group, active since 2022, has claimed over 40 victims monthly in 2025, using leaked credentials for initial access via VPN and RDP, targeting sectors like manufacturing, with attacks impacting countries including the U.S., Canada, and U.K.
5. ChatGPT Atlas Browser Can Be Tricked by Fake URLs into Executing Hidden Commands
Published: 2025-10-27
OpenAI’s ChatGPT Atlas browser is vulnerable to prompt injection attacks where malicious prompts disguised as URLs in the omnibox are treated as trusted user intent, enabling harmful actions due to lack of boundaries between inputs.
6. Smishing Triad Linked to 194,000 Malicious Domains in Global Phishing Operation
Published: 2025-10-24
The China-linked Smishing Triad has registered over 194,000 malicious domains since January 2024 using a Hong Kong registrar, hosting on U.S. cloud services to send fraudulent smishing messages about toll violations and package deliveries, generating over $1 billion.
7. Newly Patched Critical Microsoft WSUS Flaw Comes Under Active Exploitation
Published: 2025-10-24
Microsoft released out-of-band updates for CVE-2025-59287, a critical remote code execution flaw in WSUS (CVSS 9.8), which has a public PoC and is under active exploitation, affecting servers with the WSUS role enabled.
8. APT36 Targets Indian Government with Golang-Based DeskRAT Malware Campaign
Published: 2025-10-24
Pakistan-linked APT36 has targeted Indian government entities via spear-phishing emails with ZIP attachments or Google Drive links containing Golang-based DeskRAT malware, observed in August and September 2025, pulling payloads from modgovindia.com.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using tools like multi-factor authentication and regular software patches to enhance your security posture. Stay safe online!