Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. EvilAI Malware Masquerades as AI Tools to Infiltrate Global Organizations
Published: 2025-09-29
Threat actors are leveraging AI-themed lures to distribute EvilAI malware, targeting sectors like manufacturing and healthcare across Europe, the Americas, and AMEA, with Trend Micro tracking the campaign’s global impact and evolution.
2. Microsoft Flags AI-Driven Phishing: LLM-Crafted SVG Files Outsmart Email Security
Published: 2025-09-29
A phishing campaign uses LLM-generated code in SVG files to bypass email defenses, targeting U.S. organizations via compromised business emails to steal credentials, showcasing AI’s role in enhancing phishing sophistication.
3. First Malicious MCP Server Found Stealing Emails in Rogue Postmark-MCP Package
Published: 2025-09-29
The first malicious Model Context Protocol server was discovered in the npm package postmark-mcp, which stole emails and highlighted supply chain risks, with the malicious version 1.0.16 garnering 1,643 downloads before removal.
4. North Korean Group Targets South With Military ID Deepfakes
Published: 2025-09-29
The Kimsuky group from North Korea employed ChatGPT to generate deepfake military IDs in attempts to infiltrate South Korean targets, demonstrating advanced use of AI in espionage operations.
5. As Incidents Rise, Japanese Government’s Cybersecurity Falls Short
Published: 2025-09-29
Japan’s government reported 447 cybersecurity incidents in 2024, nearly doubling the previous year, while failing to oversee 16% of critical systems, exposing vulnerabilities in national defense.
6. Chinese APT Leans on Researcher PoCs to Spy on Other Countries
Published: 2025-09-29
The RedNovember group rapidly exploits new vulnerabilities using proof-of-concepts from security researchers to conduct international espionage, accelerating their attack timelines.
7. The Cloud Edge Is the New Attack Surface
Published: 2025-09-29
With the cloud interconnecting IoT devices, applications, and workloads, the expanded edge has become a prime target for cyber threats, requiring enhanced security strategies.
8. Cyberattack on JLR Prompts £1.5 Billion UK Government Intervention
Published: 2025-09-29
A cyberattack on Jaguar Land Rover led to a £1.5 billion government support package, though experts express concerns over the long-term implications for cybersecurity in the automotive sector.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and explore multi-layered defense solutions to bolster your protection against sophisticated attacks. Stay safe online!