Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Chinese APT Deploys EggStreme Fileless Malware to Breach Philippine Military Systems
Published: 2025-09-10
A Chinese APT group compromised a Philippines-based military company using a fileless malware framework called EggStreme, which achieves persistent espionage through memory injection and DLL sideloading.
2. CHILLYHELL macOS Backdoor and ZynorRAT RAT Threaten macOS, Windows, and Linux Systems
Published: 2025-09-10
Researchers discovered CHILLYHELL, a modular macOS backdoor, and ZynorRAT, a Go-based RAT targeting Windows and Linux, linked to the UNC4487 threat cluster active since at least October 2022.
3. Microsoft Fixes 80 Flaws — Including SMB PrivEsc and Azure CVSS 10.0 Bugs
Published: 2025-09-10
Microsoft addressed 80 security flaws, including eight critical and 72 important vulnerabilities, with none exploited as zero-days, focusing on privilege escalation and remote code execution.
4. Apple iPhone Air and iPhone 17 Feature A19 Chips With Spyware-Resistant Memory Safety
Published: 2025-09-10
Apple introduced Memory Integrity Enforcement (MIE) in iPhone 17 and iPhone Air, built into A19 and A19 Pro chips, to provide always-on memory safety protection against spyware attacks without performance impact.
5. Watch Out for Salty2FA: New Phishing Kit Targeting US and EU Enterprises
Published: 2025-09-10
Researchers uncovered Salty2FA, a phishing kit designed to bypass multiple 2FA methods, targeting US and EU enterprises in sectors like finance and energy, with capabilities to intercept credentials and 2FA codes.
6. China-Linked APT41 Hackers Target U.S. Trade Officials Amid 2025 Negotiations
Published: 2025-09-10
The House Select Committee on China warned of ongoing cyber espionage campaigns by China-linked APT41, targeting U.S. trade policy organizations and individuals, including phishing emails impersonating Congressman John Robert Moolenaar to steal sensitive data.
7. Adobe Commerce Flaw CVE-2025-54236 Lets Hackers Take Over Customer Accounts
Published: 2025-09-10
Adobe warned of a critical vulnerability, CVE-2025-54236, in its Commerce and Magento Open Source platforms, allowing attackers to take over customer accounts via the Commerce REST API, with a CVSS score of 9.1.
8. Ransomware Hits New Peak: Data Theft Nearly Doubles to 238TB
Published: 2025-09-11
Ransomware attacks have reached a new high, with data theft nearly doubling to 238TB in recent incidents, highlighting the escalating risks to organizations worldwide.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and implement multi-layered defenses like memory-safe technologies to counter advanced persistent threats. Stay safe online!