Critical WSUS Vulnerability
24
Oct
2025

Newly Patched Critical Microsoft WSUS Flaw Comes Under Active Exploitation

Oct 24, 2025Ravie LakshmananVulnerability / Network Security Microsoft on Thursday released out-of-band security updates to patch a critical-severity Windows Server…

SentinelOne analysis links service disruption to software flaw
24
Oct
2025

Researchers warn of critical flaws in TP-Link routers

Critical flaws in TP-Link Omada and Festa VPN routers could allow attackers to take control of a device, according to…

New National Cyber Director Cairncross faces challenges on policy, bureaucracy, threats
24
Oct
2025

National cyber director says U.S. needs to counter Chinese surveillance, push American tech

The United States needs to counter China’s “attempt to export a surveillance state across planet Earth,” and instead push a…

Scammers use fake courier messages to steal Hong Kong bank details from victims
24
Oct
2025

Scammers use fake courier messages to steal Hong Kong bank details from victims

Two people have fallen victim to scammers who impersonated courier workers and sent fake text messages to steal bank account…

Windows Server
24
Oct
2025

Critical WSUS flaw in Windows Server now exploited in attacks

Attackers are now exploiting a critical-severity Windows Server Update Service (WSUS) vulnerability, which already has publicly available proof-of-concept exploit code….

WhatsApp Exploit Privately Disclosed To Meta At The Pwn2Own Ireland
24
Oct
2025

WhatsApp Exploit Privately Disclosed To Meta At The Pwn2Own Ireland

At Pwn2Own Ireland 2025 hacking competition, cybersecurity researchers from Team Z3 have withdrawn their high-stakes demonstration of a potential zero-click…

Google Warns of Cybercriminals Using Fake Job Postings to Spread Malware and Steal Credentials
24
Oct
2025

Google Warns of Cybercriminals Using Fake Job Postings to Spread Malware and Steal Credentials

Google’s Threat Intelligence Group (GTIG) has uncovered a sophisticated social engineering campaign orchestrated by financially motivated threat actors based in…

Australia’s CommBank completes migration of data to AWS in AI drive
24
Oct
2025

Banks’ AI cost-cutting benefits won’t last, will ‘erode’ profits

Banks could save huge amounts in operating costs through artificial intelligence (AI), but the technology will eventually erode their profits,…

AWS
24
Oct
2025

This week’s AWS outage caused by major DNS failure

Amazon says a major DNS failure was behind a massive AWS (Amazon Web Services) outage that took down many websites…

MuddyWater Using New Malware Toolkit to Deliver Phoenix Backdoor Malware to International Organizations
24
Oct
2025

MuddyWater Using New Malware Toolkit to Deliver Phoenix Backdoor Malware to International Organizations

The Advanced Persistent Threat group MuddyWater, widely recognized as an Iran-linked espionage actor, has orchestrated a sophisticated phishing campaign targeting…

Hexnode CEO Says Passwords Alone Won’t Fix Your Layer 8 Issues
24
Oct
2025

Hexnode CEO Says Passwords Alone Won’t Fix Your Layer 8 Issues

Since 2004, Cybersecurity Awareness Month has been held every October to educate individuals, communities, and businesses on the fundamentals of…

LockBit 5.0 Targets Windows, Linux, and ESXi Systems in Ongoing Attacks
24
Oct
2025

LockBit 5.0 Targets Windows, Linux, and ESXi Systems in Ongoing Attacks

After months of disruption following Operation Cronos in early 2024, the notorious LockBit ransomware group has resurfaced with renewed vigor…