Category: SecurityWeek

Cybersecurity News tidbits
10
Oct
2025

In Other News: Gladinet Flaw Exploitation, Attacks on ICS Honeypot, ClayRat Spyware

SecurityWeek’s cybersecurity news roundup provides a concise compilation of noteworthy stories that might have slipped under the radar. We provide…

Coordinated campaign targeting Palo Alto, Fortinet and Cisco devices
10
Oct
2025

Cisco, Fortinet, Palo Alto Networks Devices Targeted in Coordinated Campaign

Three exploitation campaigns targeting Cisco and Palo Alto Networks firewalls and Fortinet VPNs originate from IPs on the same subnets,…

DDoS botnet
10
Oct
2025

RondoDox Botnet Takes ‘Exploit Shotgun’ Approach

A newly identified botnet takes a ‘shotgun’ approach to compromising devices, packing over 50 exploits targeting routers, servers, cameras, and…

Juniper Networks vulnerabilities
10
Oct
2025

Juniper Networks Patches Critical Junos Space Vulnerabilities

Juniper Networks has announced patches for nearly 220 vulnerabilities in Junos OS, Junos Space, and Security Director, including nine critical-severity…

Ivanti vulnerability
10
Oct
2025

ZDI Drops 13 Unpatched Ivanti Endpoint Manager Vulnerabilities

Trend Micro’s Zero Day Initiative (ZDI) this week published 13 advisories describing unpatched vulnerabilities in Ivanti Endpoint Manager. One of…

Apple
10
Oct
2025

Apple Bug Bounty Update: Top Payout $2 Million, $35 Million Paid to Date

Apple on Friday announced significant updates to its bug bounty program and the company is now offering up to $2…

Oracle E-Business Suite hack
10
Oct
2025

Sophisticated Malware Deployed in Oracle EBS Zero-Day Attacks

Google Threat Intelligence Group (GTIG) and Mandiant have continued to analyze the recent Oracle E-Business Suite (EBS) extortion campaign and…

MIND Raises $30 Million for Data Loss Prevention
09
Oct
2025

Realm.Security Raises $15 Million in Series A Funding

Cybersecurity startup Realm.Security has announced raising $15 million in Series A funding, bringing the total raised by the company to…

GitHub boosts NPM security
09
Oct
2025

GitHub Copilot Chat Flaw Leaked Data From Private Repositories

Legit Security has detailed a vulnerability in the GitHub Copilot Chat AI assistant that led to sensitive data leakage and…

Chinese hackers target law firms
09
Oct
2025

Chinese Hackers Breached Law Firm Williams & Connolly via Zero-Day

Law firm Williams & Connolly said state-sponsored hackers breached some of its systems and gained access to attorney email accounts….

Discord data breach
09
Oct
2025

Discord Says 70,000 Users Had IDs Exposed in Recent Data Breach

Social media platform Discord on Wednesday confirmed that hackers stole photos of government identification documents for 70,000 users as part…

SonicWall malware
09
Oct
2025

All SonicWall Cloud Backup Users Had Firewall Configurations Stolen

SonicWall on Wednesday announced that all customers who used its cloud backup service to store firewall configuration files were impacted…