Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Android Security Alert: Google Patches 120 Flaws, Including Two Zero-Days Under Attack
Published: 2025-09-01
Google released security updates to address 120 flaws in the Android operating system, including two zero-day vulnerabilities actively exploited in targeted attacks, with patch levels 2025-09-01 and 2025-09-05.
2. House Homeland Security committee looks to reform the Cybersecurity Sharing Act
Published: 2025-09-05
The House Homeland Security Committee passed a bill to reauthorize and reform the Cybersecurity Information Sharing Act of 2015 for another 10 years, updating it for AI advancements and improving DHS outreach on cyber threats, though its Senate path remains unclear as the law nears expiration.
3. Range Rover and Jaguar drivers face lengthy repair delays after cyber attack crippled garages
Published: 2025-09-02
Over a million Range Rover and Jaguar drivers may experience significant repair delays due to a cyber-attack that impacted Jaguar Land Rover’s operations.
4. NSA, CISA, and Others Release a Shared Vision of Software Bill of Materials (SBOM)
Published: 2025-09-03
The NSA, CISA, and others released a Cybersecurity Information Sheet to inform software producers, choosers, and operators about the benefits of integrating SBOM generation, analysis, and sharing into existing security processes.
5. $10M reward for Russia’s FSB officers accused of hacking US Critical infrastructure
Published: 2025-09-04
The US Department of State is offering a $10M reward for information leading to the identification or location of Russian FSB officers Tyukov, Gavrilov, and Akulov, accused of hacking US critical infrastructure and over 500 energy firms worldwide.
6. Exclusive: How North Korean hackers are using fake job offers to steal cryptocurrency
Published: 2025-09-04
North Korean hackers are employing fake job offers as a tactic to infiltrate organizations and steal cryptocurrency, according to recent reports.
7. macOS vulnerability allowed Keychain and iOS app decryption without a password
Published: 2025-09-04
A severe macOS vulnerability has been discovered that allows attackers to decrypt Keychain data and iOS apps without requiring a password.
8. Researchers warn of zero-day vulnerability in SiteCore products
Published: 2025-09-04
Mandiant researchers have warned of a zero-day vulnerability in SiteCore products involving ViewState deserialization attacks that could be disarmed.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor and protect your digital assets. Stay safe online!