10
Oct
2025

Apple offers $2 million for zero-click exploit chains

Apple bug bounty program’s categories are expanding and rewards are rising, and zero-click exploit chains may now earn researchers up…

175 Malicious npm Packages with 26,000 Downloads Used in Credential Phishing Campaign
10
Oct
2025

175 Malicious npm Packages with 26,000 Downloads Used in Credential Phishing Campaign

Oct 10, 2025Ravie LakshmananCybercrime / Malware Cybersecurity researchers have flagged a new set of 175 malicious packages on the npm…

March ransomware slowdown probably a red herring
10
Oct
2025

Warlock ransomware may be linked to Chinese state

An emergent strain of ransomware known as Warlock – which was linked to multiple attacks orchestrated via vulnerabilities in on-premise…

Coordinated campaign targeting Palo Alto, Fortinet and Cisco devices
10
Oct
2025

Cisco, Fortinet, Palo Alto Networks Devices Targeted in Coordinated Campaign

Three exploitation campaigns targeting Cisco and Palo Alto Networks firewalls and Fortinet VPNs originate from IPs on the same subnets,…

SonicWall SSL VPN Devices Targeted by Threat Actors to Distribute Akira Ransomware
10
Oct
2025

SonicWall SSL VPN Devices Targeted by Threat Actors to Distribute Akira Ransomware

A significant uptick in Akira ransomware attacks has been observed exploiting unpatched SonicWall SSL VPN devices between July and August…

Expert Guide to Ransomware Recovery
10
Oct
2025

Who’s Hacked By A GEICO Customer Service Impersonator

In a Cybercrime Magazine Podcast episode this week, our producer and Editor-in-Chief Steve Morgan shares a real-life scam incident he encountered, telling listeners exactly…

Chattee and GiMe Chat AI girlfriends
10
Oct
2025

Millions of (very) private chats exposed by two AI companion apps

Cybernews discovered how two AI companion apps, Chattee Chat and GiMe Chat, exposed millions of intimate conversations from over 400,000…

Fortra Reveals Full Timeline of CVE-2025-10035 Exploitation
10
Oct
2025

Fortra Reveals Full Timeline of CVE-2025-10035 Exploitation

Oct 10, 2025Ravie LakshmananVulnerability / Network Security Fortra on Thursday revealed the results of its investigation into CVE-2025-10035, a critical…

What will happen now Google has been given ‘strategic market status’ by CMA?
10
Oct
2025

What will happen now Google has been given ‘strategic market status’ by CMA?

The Competition and Markets Authority (CMA) has given Google strategic market status (SMS) for search and search advertising. The regulator…

DDoS botnet
10
Oct
2025

RondoDox Botnet Takes ‘Exploit Shotgun’ Approach

A newly identified botnet takes a ‘shotgun’ approach to compromising devices, packing over 50 exploits targeting routers, servers, cameras, and…

API Security Platform of the Year 2025 — API Security
10
Oct
2025

API Security Platform of the Year 2025 — API Security

2025 has been one of Wallarm’s biggest years yet.  In the last few months alone, we unveiled our industry-first API…

Microsoft Defender Incorrectly Flags SQL Server Software as End-of-life
10
Oct
2025

Microsoft Defender Incorrectly Flags SQL Server Software as End-of-life

Microsoft Defender for Endpoint is incorrectly flagging specific versions of SQL Server as having reached their end-of-life, causing potential confusion…