383/68 Friday, October 3, 2025 Apple has released updates for iOS and macOS to fix CVE-2025-43400, a vulnerability in the FontParser system that could cause an out-of-bounds write in memory. This flaw may lead to sudden application crashes, abnormal system behavior, or potentially allow attackers to execute arbitrary malicious code. An attacker could craft a […]
382/68 Friday, October 3, 2025 Canadian airline WestJet has disclosed that a cyberattack in June led to the theft of personal data belonging to over 1.2 million customers, including travel documents such as passports and government-issued IDs. The company confirmed the findings of its investigation and reported the incident to relevant authorities on September 15, […]
381/68 Friday, October 3, 2025 Cybersecurity researchers from Cleafy have uncovered a new Android malware named “Klopatra”, which disguises itself as IPTV and VPN apps to infect over 3,000 devices in Europe. Classified as both a Banking Trojan and Remote Access Trojan (RAT), Klopatra comes with advanced capabilities such as real-time screen monitoring, keylogging, clipboard […]
380/68 Thursday, October 2, 2025 Researchers from NCC Group have unveiled a new framework that leverages AI to clone a person’s voice in real time using only a few minutes of original audio samples. This advancement significantly boosts the credibility and realism of Vishing (voice phishing) attacks, putting organizations, employees, and individuals at higher risk […]
379/68 Thursday, October 2, 2025 Asahi Group Holdings, Ltd., Japan’s leading beer producer and owner of the iconic Asahi Super Dry brand, has announced a temporary suspension of operations in Japan after its systems were hit by a cyberattack. The incident has disrupted order processing, product deliveries, and customer services provided through call centers and […]
378/68 Thursday, October 2, 2025 Cybersecurity researchers have issued a warning about a new Android banking Trojan called “Datzbro”, which is being used in a scam campaign targeting elderly victims. The campaign lures seniors through Facebook groups and ads promoting travel activities or social gatherings. According to ThreatFabric, the campaign was first observed in August […]
377/68 Wednesday, October 1, 2025 Researchers from the eSentire Threat Response Unit (TRU) have reported the resurgence of the DarkCloud Infostealer with version 4.2, discovered in phishing attack attempts targeting the manufacturing sector in September 2025. The malware has been completely rewritten in VB6, after previously being sold on the cybercrime forum XSS.is (shut down […]
376/68 Wednesday, October 1, 2025 A research team from Koi Security has disclosed the first-ever discovery of a Malicious Model Context Protocol (MCP) Server being used in the wild, posing a significant risk of a software supply chain attack. The malicious npm package, named “postmark-mcp”, was uploaded on September 15, 2025, by a developer identified […]
375/68 Wednesday, October 1, 2025 Interpol announced on Friday that Operation Contender 3.0, a two-week international operation conducted across 14 African countries, resulted in the arrest of 260 cybercrime suspects. The dismantled networks were involved in romance scams and sextortion schemes, extorting money through intimate images. The total estimated damage was around USD 2.8 million, […]
374/68 Tuesday, September 30, 2025 The Medusa ransomware group has claimed responsibility for an attack on the systems of Comcast Corporation, a major U.S. media and technology company with core businesses in broadband, television, and film. The group alleges it has stolen more than 834.4 gigabytes of data and is demanding a ransom of $1.2 […]
