Massive 500% Surge in Scanning Activity Targeting Palo Alto Networks Login Portals

387/68 Tuesday, October 7, 2025 Cybersecurity company GreyNoise has reported an unusual 500% spike in scanning activity targeting Palo Alto Networks login portals on October 3, 2025-the highest level seen in the past three months. The company detected scanning attempts from 1,285 unique IP addresses, up from a normal daily average of about 200. Of […]

ThaiCERT

October 7, 2025

Researchers Warn of “CometJacking” Vulnerability in Perplexity’s AI Browser – A Single Click Could Lead to Data Theft

386/68 Monday, October 6, 2025 Cybersecurity researchers have disclosed a new attack technique called CometJacking, targeting Perplexity’s Comet AI browser. The attack leverages prompt injection by embedding malicious instructions inside seemingly safe links. Once a victim clicks the link, the AI within the browser executes commands to retrieve data from connected services-such as Gmail or […]

ThaiCERT

October 6, 2025

Discord Discloses Data Breach After Hackers Stole Information from Customer Support System

385/68 Monday, October 6, 2025 Discord, the popular communication platform, revealed a data breach on September 20, 2025, after hackers gained access to the systems of an external customer support provider working with Discord and stole some users’ personal information. The stolen data included names, usernames, emails, contact details, IP addresses, messages and attachments sent […]

ThaiCERT

October 6, 2025

Apple Releases Patches for iOS and macOS Vulnerability Allowing Malicious Code Execution via Fonts

383/68 Friday, October 3, 2025 Apple has released updates for iOS and macOS to fix CVE-2025-43400, a vulnerability in the FontParser system that could cause an out-of-bounds write in memory. This flaw may lead to sudden application crashes, abnormal system behavior, or potentially allow attackers to execute arbitrary malicious code. An attacker could craft a […]

ThaiCERT

October 3, 2025

WestJet Confirms Data Breach Impacting 1.2 Million Customers

382/68 Friday, October 3, 2025 Canadian airline WestJet has disclosed that a cyberattack in June led to the theft of personal data belonging to over 1.2 million customers, including travel documents such as passports and government-issued IDs. The company confirmed the findings of its investigation and reported the incident to relevant authorities on September 15, […]

ThaiCERT

October 3, 2025

“Klopatra” Trojan Spreads Across Europe, Using VNC to Control Devices While Screens Are Off

381/68 Friday, October 3, 2025 Cybersecurity researchers from Cleafy have uncovered a new Android malware named “Klopatra”, which disguises itself as IPTV and VPN apps to infect over 3,000 devices in Europe. Classified as both a Banking Trojan and Remote Access Trojan (RAT), Klopatra comes with advanced capabilities such as real-time screen monitoring, keylogging, clipboard […]

ThaiCERT

October 3, 2025

Researchers Warn AI Can Clone Voices Within Minutes, Increasing Risk of Vishing Attacks

380/68 Thursday, October 2, 2025 Researchers from NCC Group have unveiled a new framework that leverages AI to clone a person’s voice in real time using only a few minutes of original audio samples. This advancement significantly boosts the credibility and realism of Vishing (voice phishing) attacks, putting organizations, employees, and individuals at higher risk […]

ThaiCERT

October 2, 2025

Asahi, Major Japanese Brewer, Halts Orders and Deliveries Following Cyberattack

379/68 Thursday, October 2, 2025 Asahi Group Holdings, Ltd., Japan’s leading beer producer and owner of the iconic Asahi Super Dry brand, has announced a temporary suspension of operations in Japan after its systems were hit by a cyberattack. The incident has disrupted order processing, product deliveries, and customer services provided through call centers and […]

ThaiCERT

October 2, 2025

Researchers Warn of New Android Trojan “Datzbro” Targeting Seniors via Travel Event Scams on Facebook

378/68 Thursday, October 2, 2025 Cybersecurity researchers have issued a warning about a new Android banking Trojan called “Datzbro”, which is being used in a scam campaign targeting elderly victims. The campaign lures seniors through Facebook groups and ads promoting travel activities or social gatherings. According to ThreatFabric, the campaign was first observed in August […]

ThaiCERT

October 2, 2025
1 11 12 13 58