Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. ShadowLeak Zero-Click Flaw Leaks Gmail Data via OpenAI ChatGPT Deep Research Agent
Published: 2025-09-20
Cybersecurity researchers disclosed a zero-click flaw in OpenAI ChatGPT’s Deep Research agent that could leak sensitive Gmail inbox data with a single crafted email without user action, codenamed ShadowLeak.
2. Researchers Uncover GPT-4-Powered MalTerminal Malware Creating Ransomware, Reverse Shell
Published: 2025-09-20
Cybersecurity researchers discovered MalTerminal, a malware using OpenAI GPT-4 to dynamically generate ransomware code or a reverse shell, presented at LABScon 2025.
3. LastPass Warns of Fake Repositories Infecting macOS with Atomic Infostealer
Published: 2025-09-20
LastPass warned of a campaign targeting macOS users with fake GitHub repositories distributing Atomic infostealer malware, impersonating tools like 1Password and Dropbox.
4. DPRK Hackers Use ClickFix to Deliver BeaverTail Malware in Crypto Job Scams
Published: 2025-09-21
North Korean threat actors used ClickFix lures to deliver BeaverTail and InvisibleFerret malware in cryptocurrency and retail sector job scams, targeting marketing and trader roles.
5. Microsoft Patches Critical Entra ID Flaw Enabling Global Admin Impersonation Across Tenants
Published: 2025-09-22
Microsoft addressed a critical token validation failure in Entra ID, tracked as CVE-2025-55241, allowing attackers to impersonate any user, including Global Administrators, across tenants, with a CVSS score of 10.0.
6. SolarWinds Makes Third Attempt at Patching Exploited Vulnerability
Published: 2025-09-23
SolarWinds issued a third patch for CVE-2025-26399, which is a bypass of previous vulnerabilities CVE-2024-28988 and the exploited CVE-2024-28986 in their software.
7. Automotive Titan Stellantis Discloses Data Breach
Published: 2025-09-23
Stellantis reported that customer contact information was stolen from a third-party service provider’s platform in a recent data breach.
8. A Massive Telecom Threat Was Stopped Right As World Leaders Gathered At UN Headquarters In New York
Published: 2025-09-24
More than 300 servers and 100,000 SIM cards designed to mimic cellphones and overwhelm networks were seized by the U.S. Secret Service near the UN headquarters.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced monitoring tools to protect your digital assets. Stay safe online!