Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. White House National Cyber Director Sean Cairncross Kicks Off 16th Billington Cybersecurity Summit
Published: 2025-09-09
Sean Cairncross, the new White House National Cyber Director, will deliver the keynote address at the 16th Annual Billington CyberSecurity Summit, focusing on national cybersecurity strategies and emerging challenges.
2. GitHub Account Compromise Led to Salesloft Drift Breach Affecting 22 Companies
Published: 2025-09-08
Salesloft revealed that a data breach in its Drift application stemmed from a compromised GitHub account accessed by threat actor UNC6395 from March to June 2025, impacting 22 companies through reconnaissance and data downloads.
3. GPUGate Malware Uses Google Ads and Fake GitHub Commits to Target IT Firms
Published: 2025-09-08
The GPUGate malware campaign has been targeting IT and software development companies in Western Europe since December 2024, using poisoned Google ads and fake GitHub commits to deliver malware via lookalike domains.
4. Ramsey Theory Group CEO Outlines Top Three Cybersecurity Threats for September 2025
Published: 2025-09-08
Dan Herbatschek, CEO of Ramsey Theory Group, highlights phishing evolution with AI, ransomware-as-a-service proliferation, and supply chain vulnerabilities as the primary threats businesses should prepare for this month.
5. CYFIRMA Provides Toridoll Holdings with DeCYFIR Cybersecurity Platform
Published: 2025-09-09
CYFIRMA has deployed its DeCYFIR platform to Toridoll Holdings to visualize and mitigate cyber threats and risks in real-time, enhancing the company’s threat intelligence and response capabilities.
6. You Didn’t Get Phished — You Onboarded the Attacker
Published: 2025-09-08
Attackers are increasingly posing as new hires to infiltrate organizations during onboarding, gaining legitimate access to systems and data without traditional phishing tactics, as exemplified by the “Jordan from Colorado” incident.
7. Noisy Bear Campaign Targeting Kazakhstan Energy Sector Revealed as Phishing Test
Published: 2025-09-06
The Russian-linked Noisy Bear group conducted Operation BarrelFire against KazMunaiGas since April 2025, but investigations show it was a simulated phishing exercise rather than a real attack, using ZIP attachments and decoy documents.
8. Cloudflare Blocks Record-Breaking 11.5 Tbps DDoS Attack
Published: 2025-09-04
Cloudflare successfully mitigated a massive 11.5 Tbps DDoS attack in just 35 seconds, underscoring the growing scale of hyper-volumetric threats and the need for advanced mitigation strategies.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and prioritize robust identity verification and threat simulation exercises to bolster your defenses. Stay safe online!