Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Sharp Increase in Automated Botnet Attacks Targeting PHP Servers and IoT Devices
Published: 2025-10-29
Cybersecurity researchers are calling attention to a spike in automated attacks targeting PHP servers, IoT devices, and cloud gateways by various botnets such as Mirai, Gafgyt, and Mozi, exploiting known CVE vulnerabilities and cloud misconfigurations to gain control over exposed systems and expand botnet networks.
2. New AI-Targeted Cloaking Attack Tricks AI Crawlers Into Citing Fake Info as Verified Facts
Published: 2025-10-29
Cybersecurity researchers have flagged a new security issue in agentic web browsers like OpenAI ChatGPT Atlas that exposes underlying artificial intelligence models to context poisoning attacks, where bad actors set up websites serving different content to browsers and AI crawlers via AI-targeted cloaking.
3. Russian Hackers Target Ukrainian Organizations Using Stealthy Living-Off-the-Land Tactics
Published: 2025-10-29
Organizations in Ukraine have been targeted by Russian-origin threat actors using living-off-the-land tactics and dual-use tools with minimal malware to siphon sensitive data and maintain persistent access, gaining initial entry via web shells on public-facing servers.
4. 10 npm Packages Caught Stealing Developer Credentials on Windows, macOS, and Linux
Published: 2025-10-29
Cybersecurity researchers have discovered 10 malicious npm packages that deliver an information stealer targeting Windows, Linux, and macOS systems, using obfuscation, fake CAPTCHAs, IP fingerprinting, and harvesting credentials from keyrings, browsers, and authentication services.
5. Active Exploits Hit Dassault and XWiki — CISA Confirms Critical Flaws Under Attack
Published: 2025-10-29
Threat actors are actively exploiting multiple security flaws in Dassault Systèmes DELMIA Apriso and XWiki, including code injection, missing authorization, and eval injection vulnerabilities, as confirmed by CISA and VulnCheck alerts.
6. New TEE.Fail Side-Channel Attack Extracts Secrets from Intel and AMD DDR5 Secure Enclaves
Published: 2025-10-28
Academic researchers have developed a side-channel attack called TEE.Fail using an interposition device to inspect DDR5 memory traffic, enabling extraction of cryptographic keys from Intel’s SGX, TDX, and AMD’s SEV-SNP with Ciphertext Hiding in trusted execution environments.
7. Industrial Giants Schneider Electric and Emerson Named as Victims of Oracle Hack
Published: 2025-10-29
Data allegedly stolen from the companies has been made available for download on the Cl0p ransomware leak website.
8. Critical WSUS RCE (CVE-2025-59287) Actively Exploited
Published: 2025-10-29
Attackers are exploiting a critical remote code execution vulnerability in Windows Server Update Services (WSUS), tracked as CVE-2025-59287, which allows low-complexity attacks to run malicious code with SYSTEM privileges on affected servers.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider implementing robust security measures like regular vulnerability scanning and multi-factor authentication to protect your digital assets. Stay safe online!