Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. SonicWall Urges Password Resets After Cloud Backup Breach Affecting Under 5% of Customers
Published: 2025-09-18
SonicWall detected suspicious activity targeting its cloud backup service, revealing that unknown threat actors accessed backup firewall preference files for less than 5% of customers, potentially easing exploitation of related firewalls, though credentials were encrypted and no leaks are known.
2. CountLoader Broadens Russian Ransomware Operations With Multi-Version Malware Loader
Published: 2025-09-18
Cybersecurity researchers discovered CountLoader, a malware loader used by Russian ransomware gangs to deliver tools like Cobalt Strike and PureHVNC RAT, appearing in .NET, PowerShell, and JavaScript versions, and observed in campaigns targeting Ukrainian individuals with PDF-based phishing lures.
3. SilentSync RAT Delivered via Two Malicious PyPI Packages Targeting Python Developers
Published: 2025-09-18
Two malicious PyPI packages, sisaws and secmeasure, were found delivering SilentSync RAT on Windows systems, capable of remote command execution, file exfiltration, and extracting browser data, uploaded by a user named “CondeTGAPIS” and now removed from PyPI.
4. How CISOs Can Drive Effective AI Governance
Published: 2025-09-18
The article discusses the growing role of AI in enterprises and the need for CISOs to implement effective AI governance, emphasizing a living system approach over rigid policies to balance security and innovation amidst risks like data leaks and regulatory gaps.
5. UNC1549 Hacks 34 Devices in 11 Telecom Firms via LinkedIn Job Lures and MINIBIKE Malware
Published: 2025-09-19
The Iran-nexus group UNC1549, tracked as Subtle Snail and linked to IRGC, compromised 34 devices across 11 telecom firms in multiple countries using LinkedIn job lures and deploying MINIBIKE backdoor variants, communicating via Azure-proxied C2 infrastructure.
6. SystemBC Powers REM Proxy With 1,500 Daily VPS Victims Across 80 C2 Servers
Published: 2025-09-19
REM Proxy, powered by SystemBC malware, offers 80% of its botnet to users, marketing 20,000 Mikrotik routers and open proxies, with SystemBC turning infected systems into SOCKS5 proxies, linked to actors like those behind TransferLoader and Morpheus ransomware.
7. Fortra Releases Critical Patch for CVSS 10.0 GoAnywhere MFT Vulnerability
Published: 2025-09-19
Fortra disclosed a critical deserialization vulnerability, CVE-2025-10035, in GoAnywhere MFT with a CVSS score of 10.0, potentially leading to command injection if exploited, advising users to update to version 7.8.4 or 7.6.3 and restrict public access.
8. 17,500 Phishing Domains Target 316 Brands Across 74 Countries in Global PhaaS Surge
Published: 2025-09-19
Phishing-as-a-service offerings Lighthouse and Lucid, linked to the XinXin group, created over 17,500 phishing domains targeting 316 brands in 74 countries, charging monthly fees for software with pre-installed templates.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and conduct regular vulnerability scans on your software supply chain to mitigate emerging risks. Stay safe online!