Asahi cyberattack
30
Sep
2025

Cyberattack on Beer Giant Asahi Disrupts Production 

Japanese brewing giant Asahi Group Holdings on Monday announced that its operations in the country have been disrupted by a…

Fake Postmark MCP Server Silently Stole Thousands of Emails With a Single Line of Malicious Code
30
Sep
2025

Fake Postmark MCP Server Silently Stole Thousands of Emails With a Single Line of Malicious Code

A malicious npm package masquerading as the official Postmark MCP Server has been exfiltrating user emails to an external server. …

Threat Actors Exploiting MS-SQL Servers to Deploy XiebroC2 Framework
30
Sep
2025

Threat Actors Exploiting MS-SQL Servers to Deploy XiebroC2 Framework

A surge in attacks targeting improperly managed MS-SQL servers, culminating in the deployment of the open-source XiebroC2 command-and-control (C2) framework….

Tips for Merging Large PDF Files Online
30
Sep
2025

Tips for Merging Large PDF Files Online

As more businesses rely on digital documents today, effective large file management has also become necessary. PDFs are a ubiquitous…

CISA KEV
30
Sep
2025

Organizations Warned of Exploited Sudo Vulnerability

The US cybersecurity agency CISA on Monday warned that a recently patched local privilege escalation vulnerability in Sudo has been…

Asahi halts ordering, shipping, and customer service after cyberattack
30
Sep
2025

Asahi halts ordering, shipping, and customer service after cyberattack

Asahi halts ordering, shipping, and customer service after cyberattack Pierluigi Paganini September 30, 2025 Japan’s top brewer Asahi suspends operations…

VMware vCenter and NSX Vulnerabilities Let Attackers Enumerate Valid Usernames
30
Sep
2025

VMware vCenter and NSX Vulnerabilities Let Attackers Enumerate Valid Usernames

VMware has disclosed critical security vulnerabilities in vCenter Server and NSX platforms that could allow attackers to enumerate valid usernames…

APT35 Hackers Targeting Government and Military to Steal Login Credentials
30
Sep
2025

APT35 Hackers Targeting Government and Military to Steal Login Credentials

Stormshield CTI researchers have identified two active phishing servers linked to APT35, revealing ongoing credential-stealing operations targeting government and military…

AI compliance: Dealing with data change and proliferation
30
Sep
2025

Cloudian launches object storage AI platform at corporate LLM

Cloudian has launched its Hyperscale AI Data Platform, an on-premise S3-based storage platform plus artificial intelligence (AI) infrastructure bundle aimed…

Scattered Spider, ShinyHunters Restructure - New Attacks Underway 
30
Sep
2025

Scattered Spider, ShinyHunters Restructure – New Attacks Underway 

Scattered Spider, ShinyHunters Restructure – New Attacks Underway  Pierluigi Paganini September 30, 2025 Resecurity warns the “Trinity of Chaos” (LAPSUS$,…

VMware Tools and Aria Operations Vulnerabilities Let Attackers Escalate Privileges to Root
30
Sep
2025

VMware Tools and Aria Operations Vulnerabilities Let Attackers Escalate Privileges to Root

VMware has released an advisory to address three high-severity vulnerabilities in VMware Aria Operations, VMware Tools, VMware Cloud Foundation, VMware…

VMware Tools and Aria 0-Day Under Active Exploitation for Privilege Escalation
30
Sep
2025

VMware Tools and Aria 0-Day Under Active Exploitation for Privilege Escalation

Organizations using VMware hypervisors face an urgent threat as a local privilege escalation zero-day, tracked as CVE-2025-41244, is under active exploitation…