Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. SonicWall Urges Password Resets After Cloud Backup Breach Affecting Under 5% of Customers
Published: 2025-09-18
SonicWall is urging customers to reset credentials after a security breach exposed firewall configuration backup files in their cloud service, impacting less than 5% of customers. The breach involved brute-force attacks targeting encrypted preference files, with no known leaks reported.
2. CountLoader Broadens Russian Ransomware Operations With Multi-Version Malware Loader
Published: 2025-09-18
Cybersecurity researchers discovered CountLoader, a malware loader used by Russian ransomware gangs to deliver tools like Cobalt Strike and PureHVNC RAT, appearing in .NET, PowerShell, and JavaScript versions. It has been observed in campaigns targeting Ukraine, often using PDF-based phishing lures.
3. SilentSync RAT Delivered via Two Malicious PyPI Packages Targeting Python Developers
Published: 2025-09-18
Two malicious PyPI packages were found delivering SilentSync RAT, capable of remote command execution and data exfiltration, targeting Windows systems. The packages, now removed, mimicked legitimate software and were uploaded by a user named “CondeTGAPIS.”
4. Google Patches Chrome Zero-Day CVE-2025-10585 as Active V8 Exploit Threatens Millions
Published: 2025-09-18
Google released updates for Chrome to fix four vulnerabilities, including the exploited zero-day CVE-2025-10585, a type confusion issue in the V8 engine. The flaw, reported on September 16, 2025, could lead to arbitrary code execution and program crashes.
5. North Korean Group Targets South With Military ID Deepfakes
Published: 2025-09-18
The North Korea-linked group Kimsuky used ChatGPT to create deepfakes of military ID documents in an attempt to compromise South Korean targets.
6. Innovative FileFix Phishing Attack Proves Plenty Potent
Published: 2025-09-18
The highly deceptive FileFix phishing attack uses code obfuscation and steganography, and has been translated into at least 16 languages to power a global campaign.
7. Cyberattack on Kazakhstan’s Largest Oil Company Was ‘Simulation’
Published: 2025-09-18
Researchers initially thought a Russian APT used a compromised employee email to attack Kazakhstan’s biggest oil company, but it was later confirmed to be a pen test.
8. SecurityScorecard Buys AI Automation Capabilities, Boosts Vendor Risk Management
Published: 2025-09-18
The company acquired HyperComply to help enterprises automate vendor security reviews and gain a real-time picture of their entire supply chain’s security.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and implement multi-factor authentication across all cloud services to prevent brute-force incidents. Stay safe online!