ICYMI: 2025-10-17
Latest Headlines
North Korean Hackers Combine BeaverTail and OtterCookie into Advanced JS Malware
Researchers Uncover WatchGuard VPN Bug That Could Let Attackers Take Over Devices
Microsoft Revokes 200 Fraudulent Certificates Used in Rhysida Ransomware Campaign
Microsoft: Russia, China Increasingly Using AI to Escalate Cyberattacks on the US
In Other News: CrowdStrike Vulnerabilities, CISA Layoffs, Mango Data Breach
Over $3 Million in Prizes Offered at Pwn2Own Automotive 2026
‘Highest Ever’ Severity Score Assigned by Microsoft to ASP.NET Core Vulnerability
Vulnerabilities Allow Disruption of Phoenix Contact UPS Devices
Microsoft Windows 11 October Update Breaks Localhost (127.0.0.1) Connections
Hackers Using TikTok Videos to Deploy Self-Compiling Malware That Leverages PowerShell for Execution
Threat Actors Leveraging ClickFake Interview Attack to Deploy OtterCandy Malware
Hackers Using AI to Automate Vulnerability Discovery and Malware Generation – Microsoft Report
New Tech Support Scam with Microsoft’s Logo Tricks Users to Steal Login Credentials
Windows Rust Kernel GDI Vulnerability Leads to Crash and Blue Screen of Death Error
APT28 With Weaponized Office Documents Delivers BeardShell and Covenant Modules
Critical ConnectWise Vulnerabilities Allow Attackers To Inject Malicious Updates
LinkPro Rootkit Attacking GNU/Linux Systems Using eBPF Module to Hide Malicious Activities
Cisco Desk, IP, and Video Phone Vulnerabilities Let Remote Attackers Trigger DoS And XSS Attacks
American Airlines subsidiary Envoy confirms Oracle data theft attack
Microsoft lifts more safeguard holds blocking Windows 11 updates
Europol dismantles SIM box operation renting numbers for cybercrime
Microsoft fixes Windows bug breaking localhost HTTP connections
– MTZ