Top Security News for Today
🛡️ I’ve started a Pentesting Weekly Digest — would love your feedback & thoughts!
https://www.reddit.com/r/netsec/comments/1nfpp7o/ive_started_a_pentesting_weekly_digest_would_love/
WSASS - Old But Gold, Dumping LSASS With Windows Error Reporting On Modern Windows 11
https://www.reddit.com/r/netsec/comments/1nfrgc1/wsass_old_but_gold_dumping_lsass_with_windows/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
🛡️ I’ve started a Pentesting Weekly Digest — would love your feedback & thoughts!
https://www.reddit.com/r/netsec/comments/1nfpp7o/ive_started_a_pentesting_weekly_digest_would_love/
WSASS - Old But Gold, Dumping LSASS With Windows Error Reporting On Modern Windows 11
https://www.reddit.com/r/netsec/comments/1nfrgc1/wsass_old_but_gold_dumping_lsass_with_windows/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Reddit
From the netsec community on Reddit: 🛡️ I’ve started a Pentesting Weekly Digest — would love your feedback & thoughts!
Explore this post and more from the netsec community
Top Security News for Today
On the Security of SSH Client Signatures
https://reporter.deepspecter.com/
2025 Supabase Security Best Practices Guide - Common Misconfigs from Recent Pentests.
https://www.reddit.com/r/netsec/comments/1ngzvfi/2025_supabase_security_best_practices_guide/
New OpenSecurityTraining2 class: "TPM 2.0 Programming using Python and the tpm2-pytss libraries" (~13 hours)
https://www.reddit.com/r/netsec/comments/1nh52qm/new_opensecuritytraining2_class_tpm_20/
Strategies for Analyzing Native Code in Android Applications: Combining Ghidra and Symbolic…
https://www.reddit.com/r/netsec/comments/1nh7yuo/strategies_for_analyzing_native_code_in_android/
pyLDAPGui - Python based GUI for browsing LDAP
https://www.reddit.com/r/netsec/comments/1nh8qvn/pyldapgui_python_based_gui_for_browsing_ldap/
DB3 Team's Solution For Meta KDD Cup' 25
https://arxiv.org/abs/2509.09684
Faster and Memory-Efficient Training of Sequential Recommendation Models for Large Catalogs
https://arxiv.org/abs/2509.09681
Forecasting Clicks in Digital Advertising: Multimodal Inputs and Interpretable Outputs
https://arxiv.org/abs/2509.09682
Text-to-SQL Oriented to the Process Mining Domain: A PT-EN Dataset for Query Translation
https://arxiv.org/abs/2509.09683
TalkPlayData 2: An Agentic Synthetic Data Pipeline for Multimodal Conversational Music Recommendation
https://arxiv.org/abs/2509.09331
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
On the Security of SSH Client Signatures
https://reporter.deepspecter.com/
2025 Supabase Security Best Practices Guide - Common Misconfigs from Recent Pentests.
https://www.reddit.com/r/netsec/comments/1ngzvfi/2025_supabase_security_best_practices_guide/
New OpenSecurityTraining2 class: "TPM 2.0 Programming using Python and the tpm2-pytss libraries" (~13 hours)
https://www.reddit.com/r/netsec/comments/1nh52qm/new_opensecuritytraining2_class_tpm_20/
Strategies for Analyzing Native Code in Android Applications: Combining Ghidra and Symbolic…
https://www.reddit.com/r/netsec/comments/1nh7yuo/strategies_for_analyzing_native_code_in_android/
pyLDAPGui - Python based GUI for browsing LDAP
https://www.reddit.com/r/netsec/comments/1nh8qvn/pyldapgui_python_based_gui_for_browsing_ldap/
DB3 Team's Solution For Meta KDD Cup' 25
https://arxiv.org/abs/2509.09684
Faster and Memory-Efficient Training of Sequential Recommendation Models for Large Catalogs
https://arxiv.org/abs/2509.09681
Forecasting Clicks in Digital Advertising: Multimodal Inputs and Interpretable Outputs
https://arxiv.org/abs/2509.09682
Text-to-SQL Oriented to the Process Mining Domain: A PT-EN Dataset for Query Translation
https://arxiv.org/abs/2509.09683
TalkPlayData 2: An Agentic Synthetic Data Pipeline for Multimodal Conversational Music Recommendation
https://arxiv.org/abs/2509.09331
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Medium
Deep Specter Research – Medium
Read writing from Deep Specter Research on Medium. Exposing digital fraud, regulatory evasion, and corporate manipulation through cyber intelligence.
https://deepspecter.com
https://deepspecter.com
Top Security News for Today
Shiny tools, shallow checks: how the AI hype opens the door to malicious MCP servers
https://securelist.com/model-context-protocol-for-ai-integration-abused-in-supply-chain-attacks/117473/
Lawsuit About WhatsApp Security
https://www.schneier.com/blog/archives/2025/09/lawsuit-about-whatsapp-security.html
15th September – Threat Intelligence Report
https://research.checkpoint.com/2025/15th-september-threat-intelligence-report/
US national charged in Finnish psychotherapy center extortion
https://therecord.media/finland-vastaamo-hack-us-national-charged
New Zealand sanctions Russian military hackers over cyberattacks on Ukraine
https://therecord.media/new-zealand-russia-gru-ukraine
Europol adds Spanish academic suspected of aiding pro-Russian hackers to most wanted list
https://therecord.media/europol-adds-spanish-academic-most-wanted-russia-hack
FBI warns of Scattered Spider and ShinyHunters attacks on Salesforce platforms
https://therecord.media/fbi-warns-scattered-spider-salesforce
Ukraine claims cyberattacks on Russian election systems; Moscow confirms disruptions
https://therecord.media/ukraine-claims-ddos-attack-russian-election-system
Uvalde school district says ransomware attack forcing closure until Thursday
https://therecord.media/uvalde-texas-school-district-temporarily-closing-ransomware
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Shiny tools, shallow checks: how the AI hype opens the door to malicious MCP servers
https://securelist.com/model-context-protocol-for-ai-integration-abused-in-supply-chain-attacks/117473/
Lawsuit About WhatsApp Security
https://www.schneier.com/blog/archives/2025/09/lawsuit-about-whatsapp-security.html
15th September – Threat Intelligence Report
https://research.checkpoint.com/2025/15th-september-threat-intelligence-report/
US national charged in Finnish psychotherapy center extortion
https://therecord.media/finland-vastaamo-hack-us-national-charged
New Zealand sanctions Russian military hackers over cyberattacks on Ukraine
https://therecord.media/new-zealand-russia-gru-ukraine
Europol adds Spanish academic suspected of aiding pro-Russian hackers to most wanted list
https://therecord.media/europol-adds-spanish-academic-most-wanted-russia-hack
FBI warns of Scattered Spider and ShinyHunters attacks on Salesforce platforms
https://therecord.media/fbi-warns-scattered-spider-salesforce
Ukraine claims cyberattacks on Russian election systems; Moscow confirms disruptions
https://therecord.media/ukraine-claims-ddos-attack-russian-election-system
Uvalde school district says ransomware attack forcing closure until Thursday
https://therecord.media/uvalde-texas-school-district-temporarily-closing-ransomware
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Securelist
Malicious MCP servers used in supply chain attacks
Kaspersky experts discuss the Model Context Protocol used for AI integration. We describe the MCP's architecture, attack vectors and follow a proof of concept to see how it can be abused.
Top Security News for Today
RevengeHotels: a new wave of attacks leveraging LLMs and VenomRAT
https://securelist.com/revengehotels-attacks-with-ai-and-venomrat-across-latin-america/117493/
Microsoft Still Uses RC4
https://www.schneier.com/blog/archives/2025/09/microsoft-still-uses-rc4.html
Building a compiler custom programming language
https://www.reddit.com/r/lowlevel/comments/1nierls/building_a_compiler_custom_programming_language/
New LG Vulnerability - LG WebOS TV Path Traversal, Authentication Bypass and Full Device Takeover
https://www.reddit.com/r/netsec/comments/1nif05t/new_lg_vulnerability_lg_webos_tv_path_traversal/
Jaguar Land Rover says cyberattack shutdown to last 'at least' another week
https://therecord.media/jaguar-land-rover-another-week-shutdown-cyberattack
Windows 10 Retirement: A Reminder for Managing Legacy Industrial Control Systems (ICS)
https://www.tripwire.com/state-of-security/windows-10-retirement-reminder-managing-legacy-industrial-control-systems-ics
Under the Pure Curtain: From RAT to Builder to Coder
https://research.checkpoint.com/2025/under-the-pure-curtain-from-rat-to-builder-to-coder/
Self-Replicating Worm Hits 180+ Software Packages
https://krebsonsecurity.com/2025/09/self-replicating-worm-hits-180-software-packages/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
RevengeHotels: a new wave of attacks leveraging LLMs and VenomRAT
https://securelist.com/revengehotels-attacks-with-ai-and-venomrat-across-latin-america/117493/
Microsoft Still Uses RC4
https://www.schneier.com/blog/archives/2025/09/microsoft-still-uses-rc4.html
Building a compiler custom programming language
https://www.reddit.com/r/lowlevel/comments/1nierls/building_a_compiler_custom_programming_language/
New LG Vulnerability - LG WebOS TV Path Traversal, Authentication Bypass and Full Device Takeover
https://www.reddit.com/r/netsec/comments/1nif05t/new_lg_vulnerability_lg_webos_tv_path_traversal/
Jaguar Land Rover says cyberattack shutdown to last 'at least' another week
https://therecord.media/jaguar-land-rover-another-week-shutdown-cyberattack
Windows 10 Retirement: A Reminder for Managing Legacy Industrial Control Systems (ICS)
https://www.tripwire.com/state-of-security/windows-10-retirement-reminder-managing-legacy-industrial-control-systems-ics
Under the Pure Curtain: From RAT to Builder to Coder
https://research.checkpoint.com/2025/under-the-pure-curtain-from-rat-to-builder-to-coder/
Self-Replicating Worm Hits 180+ Software Packages
https://krebsonsecurity.com/2025/09/self-replicating-worm-hits-180-software-packages/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Top Security News for Today
Labour politician charged over 'honey trap' WhatsApp messages sent to MPs
https://therecord.media/oliver-steadman-charged-alleged-honeypot-blackmail-britain-politicians
North Korean operation uses ChatGPT to forge military IDs as part of cyberattack
https://therecord.media/north-korea-kimsuky-hackers-phishing-fake-military-ids-chatgpt
JLR ‘cyber shockwave ripping through UK industry’ as supplier share price plummets by 55%
https://therecord.media/jlr-cyber-shockwave-auto-sector
Hackers steal hotel guests’ payment data in new AI-driven campaign
https://therecord.media/hackers-payment-data-guests-steal
Judge rejects Meta attempt to overturn Flo privacy verdict
https://therecord.media/judge-rejects-meta-attempt-overturn-flo-privacy-lawsuit
Practical guide for hunters: how leaked webhooks are abused and how to defend them
https://www.reddit.com/r/netsec/comments/1njbx3q/practical_guide_for_hunters_how_leaked_webhooks/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Labour politician charged over 'honey trap' WhatsApp messages sent to MPs
https://therecord.media/oliver-steadman-charged-alleged-honeypot-blackmail-britain-politicians
North Korean operation uses ChatGPT to forge military IDs as part of cyberattack
https://therecord.media/north-korea-kimsuky-hackers-phishing-fake-military-ids-chatgpt
JLR ‘cyber shockwave ripping through UK industry’ as supplier share price plummets by 55%
https://therecord.media/jlr-cyber-shockwave-auto-sector
Hackers steal hotel guests’ payment data in new AI-driven campaign
https://therecord.media/hackers-payment-data-guests-steal
Judge rejects Meta attempt to overturn Flo privacy verdict
https://therecord.media/judge-rejects-meta-attempt-overturn-flo-privacy-lawsuit
Practical guide for hunters: how leaked webhooks are abused and how to defend them
https://www.reddit.com/r/netsec/comments/1njbx3q/practical_guide_for_hunters_how_leaked_webhooks/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
therecord.media
Labour politician charged over 'honey trap' WhatsApp messages sent to MPs
Former local British elected official Oliver Steadman has been charged with blackmail in a case involving attempts to acquire compromising photographs from politicians.
Top Security News for Today
Two teenage suspected Scattered Spider members charged in UK over TfL hack
https://therecord.media/scattered-spider-teenage-suspects-arrested-britain-nca
Taliban bans fiber-optic internet in several Afghan provinces to curb ‘immorality’
https://therecord.media/taliban-bans-fiber-optic-internet
Russian regional airline disrupted by suspected cyberattack
https://therecord.media/russia-krasavia-airline-disrupted-suspected-cyberattack
Brazil enacts sweeping bill requiring online age verification, safeguards for children’s data
https://therecord.media/brazil-enacts-sweeping-children-data-law
Time-of-Check Time-of-Use Attacks Against LLMs
https://www.schneier.com/blog/archives/2025/09/time-of-check-time-of-use-attacks-against-llms.html
How to join the desync endgame: Practical tips from pentester Tom Stacey
https://portswigger.net/blog/how-to-join-the-desync-endgame-practical-tips-from-pentester-tom-stacey
Microsoft Defender delivered 242% return on investment over three years
https://www.microsoft.com/en-us/security/blog/2025/09/18/microsoft-defender-delivered-242-return-on-investment-over-three-years/
SLasH-DSA: Breaking SLH-DSA Using an Extensible End-To-End Rowhammer Framework
https://arxiv.org/abs/2509.13048
AQUA-LLM: Evaluating Accuracy, Quantization, and Adversarial Robustness Trade-offs in LLMs for Cybersecurity Question Answering
https://arxiv.org/abs/2509.13514
LIGHT-HIDS: A Lightweight and Effective Machine Learning-Based Framework for Robust Host Intrusion Detection
https://arxiv.org/abs/2509.13561
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Two teenage suspected Scattered Spider members charged in UK over TfL hack
https://therecord.media/scattered-spider-teenage-suspects-arrested-britain-nca
Taliban bans fiber-optic internet in several Afghan provinces to curb ‘immorality’
https://therecord.media/taliban-bans-fiber-optic-internet
Russian regional airline disrupted by suspected cyberattack
https://therecord.media/russia-krasavia-airline-disrupted-suspected-cyberattack
Brazil enacts sweeping bill requiring online age verification, safeguards for children’s data
https://therecord.media/brazil-enacts-sweeping-children-data-law
Time-of-Check Time-of-Use Attacks Against LLMs
https://www.schneier.com/blog/archives/2025/09/time-of-check-time-of-use-attacks-against-llms.html
How to join the desync endgame: Practical tips from pentester Tom Stacey
https://portswigger.net/blog/how-to-join-the-desync-endgame-practical-tips-from-pentester-tom-stacey
Microsoft Defender delivered 242% return on investment over three years
https://www.microsoft.com/en-us/security/blog/2025/09/18/microsoft-defender-delivered-242-return-on-investment-over-three-years/
SLasH-DSA: Breaking SLH-DSA Using an Extensible End-To-End Rowhammer Framework
https://arxiv.org/abs/2509.13048
AQUA-LLM: Evaluating Accuracy, Quantization, and Adversarial Robustness Trade-offs in LLMs for Cybersecurity Question Answering
https://arxiv.org/abs/2509.13514
LIGHT-HIDS: A Lightweight and Effective Machine Learning-Based Framework for Robust Host Intrusion Detection
https://arxiv.org/abs/2509.13561
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
therecord.media
Two teenage suspected Scattered Spider members charged in UK over TfL hack
A 19-year-old and an 18-year-old have been arrested and charged in the hack of London's transport agency in 2024 — an attack attributed to the Scattered Spider cybercrime collective.
Top Security News for Today
Industrial Threat Report Q2 2025
https://securelist.com/industrial-threat-report-q2-2025/117532/
CISOs Concerned of AI Adoption in Business Environments
https://www.tripwire.com/state-of-security/cisos-concerned-ai-adoption-business-environments
Surveying the Global Spyware Market
https://www.schneier.com/blog/archives/2025/09/surveying-the-global-spyware-market.html
MI6 launches darkweb portal to recruit foreign spies
https://therecord.media/mi6-darkweb-portal-recruit-foreign-spies
The GoLaxy papers: Inside China’s AI persona army
https://therecord.media/golaxy-china-artificial-intelligence-papers
Russia's main airport in St. Petersburg says its website was hacked
https://therecord.media/russia-pulkovo-airport-st-petersburg-website-hacked
How AI-Native Development Platforms Enable Fake Captcha Pages
https://www.trendmicro.com/en_us/research/25/i/ai-development-platforms-enable-fake-captcha-pages.html
Russian spy groups Turla, Gamaredon join forces to hack Ukraine, researchers say
https://therecord.media/russian-spy-groups-turla-gamaredon-target-ukraine
Watchdog finds MrBeast improperly collected children’s data
https://therecord.media/watchdog-mrbeast-youtube-privacy-colection
DOJ: Scattered Spider took $115 million in ransoms, breached a US court system
https://therecord.media/scattered-spider-unsealed-charges-115million-extortion-breached-courts-system
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Industrial Threat Report Q2 2025
https://securelist.com/industrial-threat-report-q2-2025/117532/
CISOs Concerned of AI Adoption in Business Environments
https://www.tripwire.com/state-of-security/cisos-concerned-ai-adoption-business-environments
Surveying the Global Spyware Market
https://www.schneier.com/blog/archives/2025/09/surveying-the-global-spyware-market.html
MI6 launches darkweb portal to recruit foreign spies
https://therecord.media/mi6-darkweb-portal-recruit-foreign-spies
The GoLaxy papers: Inside China’s AI persona army
https://therecord.media/golaxy-china-artificial-intelligence-papers
Russia's main airport in St. Petersburg says its website was hacked
https://therecord.media/russia-pulkovo-airport-st-petersburg-website-hacked
How AI-Native Development Platforms Enable Fake Captcha Pages
https://www.trendmicro.com/en_us/research/25/i/ai-development-platforms-enable-fake-captcha-pages.html
Russian spy groups Turla, Gamaredon join forces to hack Ukraine, researchers say
https://therecord.media/russian-spy-groups-turla-gamaredon-target-ukraine
Watchdog finds MrBeast improperly collected children’s data
https://therecord.media/watchdog-mrbeast-youtube-privacy-colection
DOJ: Scattered Spider took $115 million in ransoms, breached a US court system
https://therecord.media/scattered-spider-unsealed-charges-115million-extortion-breached-courts-system
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Securelist
Threat landscape for industrial automation systems in Q2 2025
Kaspersky industrial threat report contains statistics on various malicious objects detected and blocked on ICS computers by Kaspersky solutions in Q2 2025.
Top Security News for Today
EDR-Freeze: A Tool That Puts EDRs And Antivirus Into A Coma State
https://www.reddit.com/r/netsec/comments/1nmhg29/edrfreeze_a_tool_that_puts_edrs_and_antivirus/
Linux Kernel Runtime Guard (LKRG) 1.0 first mature release + talk slides
https://www.reddit.com/r/netsec/comments/1nmctnd/linux_kernel_runtime_guard_lkrg_10_first_mature/
Pentesting Weekly Digest second version
https://www.reddit.com/r/netsec/comments/1nmfed6/pentesting_weekly_digest_second_version/
Ayuda
https://www.reddit.com/r/lowlevel/comments/1nlzw7n/ayuda/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
EDR-Freeze: A Tool That Puts EDRs And Antivirus Into A Coma State
https://www.reddit.com/r/netsec/comments/1nmhg29/edrfreeze_a_tool_that_puts_edrs_and_antivirus/
Linux Kernel Runtime Guard (LKRG) 1.0 first mature release + talk slides
https://www.reddit.com/r/netsec/comments/1nmctnd/linux_kernel_runtime_guard_lkrg_10_first_mature/
Pentesting Weekly Digest second version
https://www.reddit.com/r/netsec/comments/1nmfed6/pentesting_weekly_digest_second_version/
Ayuda
https://www.reddit.com/r/lowlevel/comments/1nlzw7n/ayuda/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Reddit
From the netsec community on Reddit: EDR-Freeze: A Tool That Puts EDRs And Antivirus Into A Coma State
Explore this post and more from the netsec community
Top Security News for Today
EDR-Freeze: A Tool That Puts EDRs And Antivirus Into A Coma State
https://research.checkpoint.com/2025/22nd-september-threat-intelligence-report/
New Infostealer Campaign Targeting Mac Users via GitHub Pages Claiming to Offer LastPass Premium
https://www.reddit.com/r/netsec/comments/1nnb1tw/new_infostealer_campaign_targeting_mac_users_via/
The God Mode Vulnerability That Should Kill “Trust Microsoft” Forever
https://www.reddit.com/r/netsec/comments/1nndpz7/the_god_mode_vulnerability_that_should_kill_trust/
Electron App Vulnerabilities testcases
https://www.reddit.com/r/netsec/comments/1nne01o/electron_app_vulnerabilities_testcases/
Video2Roleplay: A Multimodal Dataset and Framework for Video-Guided Role-playing Agents
https://arxiv.org/abs/2509.15233
Pre-Forgettable Models: Prompt Learning as a Native Mechanism for Unlearning
https://arxiv.org/abs/2509.15230
Exploring the Capabilities of LLM Encoders for Image-Text Retrieval in Chest X-rays
https://arxiv.org/abs/2509.15234
ViSpec: Accelerating Vision-Language Models with Vision-Aware Speculative Decoding
https://arxiv.org/abs/2509.15235
ChannelFlow-Tools: A Standardized Dataset Creation Pipeline for 3D Obstructed Channel Flows
https://arxiv.org/abs/2509.15236
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
EDR-Freeze: A Tool That Puts EDRs And Antivirus Into A Coma State
https://research.checkpoint.com/2025/22nd-september-threat-intelligence-report/
New Infostealer Campaign Targeting Mac Users via GitHub Pages Claiming to Offer LastPass Premium
https://www.reddit.com/r/netsec/comments/1nnb1tw/new_infostealer_campaign_targeting_mac_users_via/
The God Mode Vulnerability That Should Kill “Trust Microsoft” Forever
https://www.reddit.com/r/netsec/comments/1nndpz7/the_god_mode_vulnerability_that_should_kill_trust/
Electron App Vulnerabilities testcases
https://www.reddit.com/r/netsec/comments/1nne01o/electron_app_vulnerabilities_testcases/
Video2Roleplay: A Multimodal Dataset and Framework for Video-Guided Role-playing Agents
https://arxiv.org/abs/2509.15233
Pre-Forgettable Models: Prompt Learning as a Native Mechanism for Unlearning
https://arxiv.org/abs/2509.15230
Exploring the Capabilities of LLM Encoders for Image-Text Retrieval in Chest X-rays
https://arxiv.org/abs/2509.15234
ViSpec: Accelerating Vision-Language Models with Vision-Aware Speculative Decoding
https://arxiv.org/abs/2509.15235
ChannelFlow-Tools: A Standardized Dataset Creation Pipeline for 3D Obstructed Channel Flows
https://arxiv.org/abs/2509.15236
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Check Point Research
22nd September – Threat Intelligence Report - Check Point Research
For the latest discoveries in cyber research for the week of 22nd September, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Several major European airports including Heathrow, Berlin, Brussels, Dublin, and Cork have experienced…
Top Security News for Today
Neural Data Privacy: Brain Implants
https://therecord.media/neural-data-privacy-brain-implants
Details About Chinese Surveillance and Propaganda Companies
https://www.schneier.com/blog/archives/2025/09/details-about-chinese-surveillance-and-propaganda-companies.html
Major European Airports Work to Restore Services After Cyberattack on Check-in Systems
https://therecord.media/europe-airports-delays-ransomware-attack-checkin-systems
Nimbus Manticore Deploys New Malware Targeting Europe
https://research.checkpoint.com/2025/nimbus-manticore-deploys-new-malware-targeting-europe/
HexStrike AI – Multi-Agent LLM Orchestration for Automated Offensive Security
https://www.darknet.org.uk/2025/09/hexstrike-ai-multi-agent-llm-orchestration-for-automated-offensive-security/
BlackLock Ransomware: From Meteoric Rise to Sudden Disruption
https://www.reddit.com/r/netsec/comments/1nob3s7/blacklock_ransomware_from_meteoric_rise_to_sudden/
What Does “Good” Look Like in Red Teaming
https://bishopfox.com/blog/what-does-good-look-like-in-red-teaming
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Neural Data Privacy: Brain Implants
https://therecord.media/neural-data-privacy-brain-implants
Details About Chinese Surveillance and Propaganda Companies
https://www.schneier.com/blog/archives/2025/09/details-about-chinese-surveillance-and-propaganda-companies.html
Major European Airports Work to Restore Services After Cyberattack on Check-in Systems
https://therecord.media/europe-airports-delays-ransomware-attack-checkin-systems
Nimbus Manticore Deploys New Malware Targeting Europe
https://research.checkpoint.com/2025/nimbus-manticore-deploys-new-malware-targeting-europe/
HexStrike AI – Multi-Agent LLM Orchestration for Automated Offensive Security
https://www.darknet.org.uk/2025/09/hexstrike-ai-multi-agent-llm-orchestration-for-automated-offensive-security/
BlackLock Ransomware: From Meteoric Rise to Sudden Disruption
https://www.reddit.com/r/netsec/comments/1nob3s7/blacklock_ransomware_from_meteoric_rise_to_sudden/
What Does “Good” Look Like in Red Teaming
https://bishopfox.com/blog/what-does-good-look-like-in-red-teaming
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
therecord.media
As scientists show they can read inner speech, brain implant ‘pioneers’ fight for neural data privacy, access rights
With scientists now demonstrating that they can decode attempted speech based on the neural data they collect from Brain Computer Interface (BCI) research subjects with implants, patients and advocates say the importance of adequate data protections has grown.
Top Security News for Today
Ransomware Payments vs Rising Incident Counts in 2025 – What’s Changing in RaaS Economics
https://www.darknet.org.uk/2025/09/ransomware-payments-vs-rising-incident-counts-in-2025-whats-changing-in-raas-economics/
Apple’s New Memory Integrity Enforcement
https://www.schneier.com/blog/archives/2025/09/apples-new-memory-integrity-enforcement.html
Microsoft Purview delivered 30% reduction in data breach likelihood
https://www.microsoft.com/en-us/security/blog/2025/09/23/microsoft-purview-delivered-30-reduction-in-data-breach-likelihood/
Jaguar Land Rover extends shutdown again following cyberattack
https://therecord.media/jaguar-land-rover-extends-shutdown-again-cyberattack
AI-Powered App Exposes User Data, Creates Risk of Supply Chain Attacks
https://www.trendmicro.com/en_us/research/25/i/ai-powered-app-exposes-user-data.html
South Korea probes credit card company data breach affecting 3 million customers
https://therecord.media/south-korea-probes-credit-card-data-breach
Secret Service says it disrupted illicit cellular network threatening UN conference
https://therecord.media/secret-service-cellular-network-disruption
Suspected cyberattack disrupts Circle K chain’s operations in Hong Kong
https://therecord.media/circle-k-hong-kong-suspected-cyberattack-convience-stores
Image Forensics: Detecting AI Fakes with Compression Artifacts
https://www.reddit.com/r/netsec/comments/1noml13/image_forensics_detecting_ai_fakes_with/
Tea continued - Unauthenticated access to 150+ Firebase databases, storage buckets and secrets
https://www.reddit.com/r/netsec/comments/1noppeo/tea_continued_unauthenticated_access_to_150/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Ransomware Payments vs Rising Incident Counts in 2025 – What’s Changing in RaaS Economics
https://www.darknet.org.uk/2025/09/ransomware-payments-vs-rising-incident-counts-in-2025-whats-changing-in-raas-economics/
Apple’s New Memory Integrity Enforcement
https://www.schneier.com/blog/archives/2025/09/apples-new-memory-integrity-enforcement.html
Microsoft Purview delivered 30% reduction in data breach likelihood
https://www.microsoft.com/en-us/security/blog/2025/09/23/microsoft-purview-delivered-30-reduction-in-data-breach-likelihood/
Jaguar Land Rover extends shutdown again following cyberattack
https://therecord.media/jaguar-land-rover-extends-shutdown-again-cyberattack
AI-Powered App Exposes User Data, Creates Risk of Supply Chain Attacks
https://www.trendmicro.com/en_us/research/25/i/ai-powered-app-exposes-user-data.html
South Korea probes credit card company data breach affecting 3 million customers
https://therecord.media/south-korea-probes-credit-card-data-breach
Secret Service says it disrupted illicit cellular network threatening UN conference
https://therecord.media/secret-service-cellular-network-disruption
Suspected cyberattack disrupts Circle K chain’s operations in Hong Kong
https://therecord.media/circle-k-hong-kong-suspected-cyberattack-convience-stores
Image Forensics: Detecting AI Fakes with Compression Artifacts
https://www.reddit.com/r/netsec/comments/1noml13/image_forensics_detecting_ai_fakes_with/
Tea continued - Unauthenticated access to 150+ Firebase databases, storage buckets and secrets
https://www.reddit.com/r/netsec/comments/1noppeo/tea_continued_unauthenticated_access_to_150/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Darknet - Hacking Tools, Hacker News & Cyber Security
Ransomware Payments vs Rising Incident Counts in 2025 - What’s Changing in RaaS Economics
Ransomware payments dropped 35% in 2024 even as incidents rose in 2025. Explore RaaS economics, case studies, and CISO defense strategies.
Top Security News for Today
Casino company Boyd Gaming hacked, employee data stolen
https://therecord.media/casino-company-boyd-gaming-reports-data-breach
UK authorities announce arrest in cyberattack that disrupted European airports
https://therecord.media/uk-arrest-cyberattack-disruption-european-airports
Feds Tie ‘Scattered Spider’ Duo to $115M in Ransoms
https://krebsonsecurity.com/2025/09/feds-tie-scattered-spider-duo-to-115m-in-ransoms/
AI vs. AI: Detecting an AI-obfuscated phishing campaign
https://www.microsoft.com/en-us/security/blog/2025/09/24/ai-vs-ai-detecting-an-ai-obfuscated-phishing-campaign/
New macOS threat abuses ads and social media to spread malware
https://www.reddit.com/r/netsec/comments/1npcera/new_macos_threat_abuses_ads_and_social_media_to/
International anti-fraud crackdown recovers more than $400 million, Interpol says
https://therecord.media/anti-fraud-interpol-crackdown-recovers-over-400-million
Senators introduce bill directing FTC to establish standards for protecting consumers’ neural data
https://therecord.media/senators-introduce-bill-ftc-brain-data-privacy
Retail at risk: How one alert uncovered a persistent cyberthreat
https://www.microsoft.com/en-us/security/blog/2025/09/24/retail-at-risk-how-one-alert-uncovered-a-persistent-cyberthreat/
Turning Hearsay into Discovery: Industrial 3D Printer Side Channel Information Translated to Stealing the Object Design
https://arxiv.org/abs/2509.18341
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Casino company Boyd Gaming hacked, employee data stolen
https://therecord.media/casino-company-boyd-gaming-reports-data-breach
UK authorities announce arrest in cyberattack that disrupted European airports
https://therecord.media/uk-arrest-cyberattack-disruption-european-airports
Feds Tie ‘Scattered Spider’ Duo to $115M in Ransoms
https://krebsonsecurity.com/2025/09/feds-tie-scattered-spider-duo-to-115m-in-ransoms/
AI vs. AI: Detecting an AI-obfuscated phishing campaign
https://www.microsoft.com/en-us/security/blog/2025/09/24/ai-vs-ai-detecting-an-ai-obfuscated-phishing-campaign/
New macOS threat abuses ads and social media to spread malware
https://www.reddit.com/r/netsec/comments/1npcera/new_macos_threat_abuses_ads_and_social_media_to/
International anti-fraud crackdown recovers more than $400 million, Interpol says
https://therecord.media/anti-fraud-interpol-crackdown-recovers-over-400-million
Senators introduce bill directing FTC to establish standards for protecting consumers’ neural data
https://therecord.media/senators-introduce-bill-ftc-brain-data-privacy
Retail at risk: How one alert uncovered a persistent cyberthreat
https://www.microsoft.com/en-us/security/blog/2025/09/24/retail-at-risk-how-one-alert-uncovered-a-persistent-cyberthreat/
Turning Hearsay into Discovery: Industrial 3D Printer Side Channel Information Translated to Stealing the Object Design
https://arxiv.org/abs/2509.18341
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
therecord.media
Casino company Boyd Gaming hacked, employee data stolen
Casino and hotel operator Boyd Gaming reported a data breach to federal regulators, saying that an intruder accessed information on employees and “a limited number of other individuals."
Top Security News for Today
Massive npm infection: the Shai-Hulud worm and patient zero
https://securelist.com/shai-hulud-worm-infects-500-npm-packages-in-a-supply-chain-attack/117547/
Why “contained” doesn’t mean “safe” in modern SOCs
https://www.reddit.com/r/netsec/comments/1nq1xu9/why_contained_doesnt_mean_safe_in_modern_socs/
Malicious-Looking URL Creation Service
https://www.schneier.com/blog/archives/2025/09/malicious-looking-url-creation-service.html
Yet Another Random Story. VBScript's Randomize Internals.
https://www.reddit.com/r/netsec/comments/1nq3i96/yet_another_random_story_vbscripts_randomize/
Hacking Furbo - A Hardware Research Project – Part 5: Exploiting BLE
https://www.reddit.com/r/netsec/comments/1nq36wg/hacking_furbo_a_hardware_research_project_part_5/
XCSSET evolves again: Analyzing the latest updates to XCSSET’s inventory
https://www.microsoft.com/en-us/security/blog/2025/09/25/xcsset-evolves-again-analyzing-the-latest-updates-to-xcssets-inventory/
Google, period-tracking app to pay combined $56 million to settle privacy claims
https://therecord.media/google-flo-health-settle-privacy-class-action
Federal agencies given one day to patch exploited Cisco firewall bugs
https://therecord.media/cisco-asa-firewall-bugs-cisa-federal-agencies-warning
CNAPP is the Solution to Multi-cloud Flexibility
https://www.trendmicro.com/en_us/research/25/i/cnapp-multi-cloud.html
New LockBit 5.0 Targets Windows, Linux, ESXi
https://www.trendmicro.com/en_us/research/25/i/lockbit-5-targets-windows-linux-esxi.html
Cyberattack on British retailer Co-op shaved about $275 million from revenues, company says
https://therecord.media/retailer-the-co-op-cyberattack-lost-revenue
It Is Bad (Exploitation of Fortra GoAnywhere MFT CVE-2025-10035) - Part 2 - watchTowr Labs
https://www.reddit.com/r/netsec/comments/1nqgbd8/it_is_bad_exploitation_of_fortra_goanywhere_mft/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Massive npm infection: the Shai-Hulud worm and patient zero
https://securelist.com/shai-hulud-worm-infects-500-npm-packages-in-a-supply-chain-attack/117547/
Why “contained” doesn’t mean “safe” in modern SOCs
https://www.reddit.com/r/netsec/comments/1nq1xu9/why_contained_doesnt_mean_safe_in_modern_socs/
Malicious-Looking URL Creation Service
https://www.schneier.com/blog/archives/2025/09/malicious-looking-url-creation-service.html
Yet Another Random Story. VBScript's Randomize Internals.
https://www.reddit.com/r/netsec/comments/1nq3i96/yet_another_random_story_vbscripts_randomize/
Hacking Furbo - A Hardware Research Project – Part 5: Exploiting BLE
https://www.reddit.com/r/netsec/comments/1nq36wg/hacking_furbo_a_hardware_research_project_part_5/
XCSSET evolves again: Analyzing the latest updates to XCSSET’s inventory
https://www.microsoft.com/en-us/security/blog/2025/09/25/xcsset-evolves-again-analyzing-the-latest-updates-to-xcssets-inventory/
Google, period-tracking app to pay combined $56 million to settle privacy claims
https://therecord.media/google-flo-health-settle-privacy-class-action
Federal agencies given one day to patch exploited Cisco firewall bugs
https://therecord.media/cisco-asa-firewall-bugs-cisa-federal-agencies-warning
CNAPP is the Solution to Multi-cloud Flexibility
https://www.trendmicro.com/en_us/research/25/i/cnapp-multi-cloud.html
New LockBit 5.0 Targets Windows, Linux, ESXi
https://www.trendmicro.com/en_us/research/25/i/lockbit-5-targets-windows-linux-esxi.html
Cyberattack on British retailer Co-op shaved about $275 million from revenues, company says
https://therecord.media/retailer-the-co-op-cyberattack-lost-revenue
It Is Bad (Exploitation of Fortra GoAnywhere MFT CVE-2025-10035) - Part 2 - watchTowr Labs
https://www.reddit.com/r/netsec/comments/1nqgbd8/it_is_bad_exploitation_of_fortra_goanywhere_mft/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Securelist
Shai-Hulud worm infects npm packages
We dissect a recent incident where npm packages with millions of downloads were infected by the Shai-Hulud worm. Kaspersky experts describe the starting point for the source of the infection.
Top Security News for Today
Digital Threat Modeling Under Authoritarianism
https://www.schneier.com/blog/archives/2025/09/digital-threat-modeling-under-authoritarianism.html
As fraud surges, UK prepares to replace its broken reporting service
https://therecord.media/uk-action-fraud-replacement-report-fraud
Teens arrested by Dutch police reportedly suspected of spying for Russia
https://therecord.media/teens-arrested-netherlands-reportedly-suspected-cyber-espionage-russia
Africa cybercrime crackdown includes hundreds of arrests, Interpol says
https://therecord.media/africa-cyber-fraud-crackdown-ghana-senegal-cote-divoire-angola-interpol
Ransomware attack on Ohio county impacts over 45,000 residents, employees
https://therecord.media/ohio-ransomware-attack-impacts-45000
Pointer leaks through pointer-keyed data structures
https://googleprojectzero.blogspot.com/2025/09/pointer-leaks-through-pointer-keyed.html
The Phantom Extension: Backdooring chrome through uncharted pathways
https://www.reddit.com/r/netsec/comments/1nr9aw5/the_phantom_extension_backdooring_chrome_through/
Supply-Chain Guardrails for npm, pnpm, and Yarn
https://www.reddit.com/r/netsec/comments/1nr727w/supplychain_guardrails_for_npm_pnpm_and_yarn/
Lightweight MobileNetV1+GRU for ECG Biometric Authentication: Federated and Adversarial Evaluation
https://arxiv.org/abs/2509.20382
Can You Trust Your Copilot? A Privacy Scorecard for AI Coding Assistants
https://arxiv.org/abs/2509.20388
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Digital Threat Modeling Under Authoritarianism
https://www.schneier.com/blog/archives/2025/09/digital-threat-modeling-under-authoritarianism.html
As fraud surges, UK prepares to replace its broken reporting service
https://therecord.media/uk-action-fraud-replacement-report-fraud
Teens arrested by Dutch police reportedly suspected of spying for Russia
https://therecord.media/teens-arrested-netherlands-reportedly-suspected-cyber-espionage-russia
Africa cybercrime crackdown includes hundreds of arrests, Interpol says
https://therecord.media/africa-cyber-fraud-crackdown-ghana-senegal-cote-divoire-angola-interpol
Ransomware attack on Ohio county impacts over 45,000 residents, employees
https://therecord.media/ohio-ransomware-attack-impacts-45000
Pointer leaks through pointer-keyed data structures
https://googleprojectzero.blogspot.com/2025/09/pointer-leaks-through-pointer-keyed.html
The Phantom Extension: Backdooring chrome through uncharted pathways
https://www.reddit.com/r/netsec/comments/1nr9aw5/the_phantom_extension_backdooring_chrome_through/
Supply-Chain Guardrails for npm, pnpm, and Yarn
https://www.reddit.com/r/netsec/comments/1nr727w/supplychain_guardrails_for_npm_pnpm_and_yarn/
Lightweight MobileNetV1+GRU for ECG Biometric Authentication: Federated and Adversarial Evaluation
https://arxiv.org/abs/2509.20382
Can You Trust Your Copilot? A Privacy Scorecard for AI Coding Assistants
https://arxiv.org/abs/2509.20388
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Schneier on Security
Digital Threat Modeling Under Authoritarianism - Schneier on Security
Today’s world requires us to make complex and nuanced decisions about our digital security. Evaluating when to use a secure messaging app like Signal or WhatsApp, which passwords to store on your smartphone, or what to share on social media requires us to…
Top Security News for Today
The only JWT security testing guide you will need!
https://www.reddit.com/r/netsec/comments/1nrpzwk/the_only_jwt_security_testing_guide_you_will_need/
This is the first time I've ever found chicken in a public (storage) bucket. You're not ready for this masterpiece.
https://www.reddit.com/r/netsec/comments/1ns58a0/this_is_the_first_time_ive_ever_found_chicken_in/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
The only JWT security testing guide you will need!
https://www.reddit.com/r/netsec/comments/1nrpzwk/the_only_jwt_security_testing_guide_you_will_need/
This is the first time I've ever found chicken in a public (storage) bucket. You're not ready for this masterpiece.
https://www.reddit.com/r/netsec/comments/1ns58a0/this_is_the_first_time_ive_ever_found_chicken_in/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Reddit
From the netsec community on Reddit: The only JWT security testing guide you will need!
Posted by Altrntiv-to-security - 7 votes and 3 comments
Top Security News for Today
Github - Phishcan/phishcan-data: Canadian threat feeds updated every 12 hours.
https://github.com/Phishcan/phishcan-data
SetupHijack – Installer and Updater Race Condition Proof of Concept for Local Escalation
https://www.darknet.org.uk/2025/09/setuphijack-installer-and-updater-race-condition-proof-of-concept-for-local-escalation/
Windows Heap Exploitation - From Heap Overflow to Arbitrary R/W
https://www.reddit.com/r/netsec/comments/1nssfzo/windows_heap_exploitation_from_heap_overflow_to/
FullHunt 💜 Open-Source: 39,408 Exploits from 0day.today is Back Online
https://www.reddit.com/r/netsec/comments/1nt4gt2/fullhunt_opensource_39408_exploits_from_0daytoday/
QUBOLite: A lightweight Python toolkit for QUBO
https://arxiv.org/abs/2509.21321
Discovering and Analyzing Stochastic Processes to Reduce Waste in Food Retail
https://arxiv.org/abs/2509.21322
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Github - Phishcan/phishcan-data: Canadian threat feeds updated every 12 hours.
https://github.com/Phishcan/phishcan-data
SetupHijack – Installer and Updater Race Condition Proof of Concept for Local Escalation
https://www.darknet.org.uk/2025/09/setuphijack-installer-and-updater-race-condition-proof-of-concept-for-local-escalation/
Windows Heap Exploitation - From Heap Overflow to Arbitrary R/W
https://www.reddit.com/r/netsec/comments/1nssfzo/windows_heap_exploitation_from_heap_overflow_to/
FullHunt 💜 Open-Source: 39,408 Exploits from 0day.today is Back Online
https://www.reddit.com/r/netsec/comments/1nt4gt2/fullhunt_opensource_39408_exploits_from_0daytoday/
QUBOLite: A lightweight Python toolkit for QUBO
https://arxiv.org/abs/2509.21321
Discovering and Analyzing Stochastic Processes to Reduce Waste in Food Retail
https://arxiv.org/abs/2509.21322
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
GitHub
GitHub - Phishcan/phishcan-data: Canadian threat feeds updated every 12 hours.
Canadian threat feeds updated every 12 hours. Contribute to Phishcan/phishcan-data development by creating an account on GitHub.
Top Security News for Today
Law enforcement is using AI to synthesize evidence. Is the justice system ready for it?
https://therecord.media/law-enforcement-ai-platforms-synthesize-evidence-criminal-cases
Abusing Notion’s AI Agent for Data Theft
https://www.schneier.com/blog/archives/2025/09/abusing-notions-ai-agent-for-data-theft.html
AIPentestKit – AI-Augmented Red Team Toolkit for Recon, Fuzzing and Payload Generation
https://www.darknet.org.uk/2025/09/aipentestkit-ai-augmented-red-team-toolkit-for-recon-fuzzing-and-payload-generation/
Moldova’s pro-EU party wins election amid cyberattacks, Kremlin interference
https://therecord.media/moldova-election-pro-eu-party-wins-ddos-incidents-influence-ops
29th September – Threat Intelligence Report
https://research.checkpoint.com/2025/29th-september-threat-intelligence-report/
Ukraine’s digital chief pushes for AI-first state amid war and cyber threats
https://therecord.media/ukraine-ai-state-digital
Chinese scammer pleads guilty after UK seizes nearly $7 billion in bitcoin
https://therecord.media/chinese-scammer-guilty-seizure-uk
Understanding the OWASP AI Maturity Assessment
https://www.tripwire.com/state-of-security/understanding-owasp-ai-maturity-assessment
Cloud Security in the CNAPP Era: Eight Important Takeaways
https://www.trendmicro.com/en_us/research/25/i/cloud-security-cnapp.html
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Law enforcement is using AI to synthesize evidence. Is the justice system ready for it?
https://therecord.media/law-enforcement-ai-platforms-synthesize-evidence-criminal-cases
Abusing Notion’s AI Agent for Data Theft
https://www.schneier.com/blog/archives/2025/09/abusing-notions-ai-agent-for-data-theft.html
AIPentestKit – AI-Augmented Red Team Toolkit for Recon, Fuzzing and Payload Generation
https://www.darknet.org.uk/2025/09/aipentestkit-ai-augmented-red-team-toolkit-for-recon-fuzzing-and-payload-generation/
Moldova’s pro-EU party wins election amid cyberattacks, Kremlin interference
https://therecord.media/moldova-election-pro-eu-party-wins-ddos-incidents-influence-ops
29th September – Threat Intelligence Report
https://research.checkpoint.com/2025/29th-september-threat-intelligence-report/
Ukraine’s digital chief pushes for AI-first state amid war and cyber threats
https://therecord.media/ukraine-ai-state-digital
Chinese scammer pleads guilty after UK seizes nearly $7 billion in bitcoin
https://therecord.media/chinese-scammer-guilty-seizure-uk
Understanding the OWASP AI Maturity Assessment
https://www.tripwire.com/state-of-security/understanding-owasp-ai-maturity-assessment
Cloud Security in the CNAPP Era: Eight Important Takeaways
https://www.trendmicro.com/en_us/research/25/i/cloud-security-cnapp.html
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
therecord.media
Law enforcement is using AI to synthesize evidence. Is the justice system ready for it?
Busy law enforcement agencies are trying out AI platforms that process large amounts of evidence to help officers build cases. Experts say there are potential dangers for everyone involved.
Top Security News for Today
Klopatra: exposing a new Android banking trojan operation with roots in Turkey | Cleafy LABS
https://arxiv.org/abs/2509.22662
An In-depth research-based walk-through of an Uninitialized Local Variable Static Analyzer
https://www.reddit.com/r/netsec/comments/1nu7f3y/an_indepth_researchbased_walkthrough_of_an/
You name it, VMware elevates it (CVE-2025-41244)
https://www.reddit.com/r/netsec/comments/1nu9q24/you_name_it_vmware_elevates_it_cve202541244/
Details of a Scam
https://www.schneier.com/blog/archives/2025/09/details-of-a-scam.html
Empowering defenders in the era of agentic AI with Microsoft Sentinel
https://www.microsoft.com/en-us/security/blog/2025/09/30/empowering-defenders-in-the-era-of-agentic-ai-with-microsoft-sentinel/
Cyberattack on Japanese beer giant Asahi limits shipping, call center operations
https://therecord.media/asahi-japan-cyberattack-limits-shipping-call-centers
Afghanistan plunged into nationwide internet blackout, disrupting air travel, medical care
https://therecord.media/afghanistan-plunged-into-nationwide-internet-blackout
FTC alleges messaging app violated child privacy law, duped users into subscriptions
https://therecord.media/ftc-alleges-sendit-app-violated-children-privacy-rule
CISA orders federal gov to patch critical Fortra file transfer bug
https://therecord.media/cisa-orders-federal-gov-patch-fortra-bug
CPPA fines Tractor Supply Company $1.4 million for privacy violations
https://therecord.media/ccpa-tractor-supply-privacy-fine
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Klopatra: exposing a new Android banking trojan operation with roots in Turkey | Cleafy LABS
https://arxiv.org/abs/2509.22662
An In-depth research-based walk-through of an Uninitialized Local Variable Static Analyzer
https://www.reddit.com/r/netsec/comments/1nu7f3y/an_indepth_researchbased_walkthrough_of_an/
You name it, VMware elevates it (CVE-2025-41244)
https://www.reddit.com/r/netsec/comments/1nu9q24/you_name_it_vmware_elevates_it_cve202541244/
Details of a Scam
https://www.schneier.com/blog/archives/2025/09/details-of-a-scam.html
Empowering defenders in the era of agentic AI with Microsoft Sentinel
https://www.microsoft.com/en-us/security/blog/2025/09/30/empowering-defenders-in-the-era-of-agentic-ai-with-microsoft-sentinel/
Cyberattack on Japanese beer giant Asahi limits shipping, call center operations
https://therecord.media/asahi-japan-cyberattack-limits-shipping-call-centers
Afghanistan plunged into nationwide internet blackout, disrupting air travel, medical care
https://therecord.media/afghanistan-plunged-into-nationwide-internet-blackout
FTC alleges messaging app violated child privacy law, duped users into subscriptions
https://therecord.media/ftc-alleges-sendit-app-violated-children-privacy-rule
CISA orders federal gov to patch critical Fortra file transfer bug
https://therecord.media/cisa-orders-federal-gov-patch-fortra-bug
CPPA fines Tractor Supply Company $1.4 million for privacy violations
https://therecord.media/ccpa-tractor-supply-privacy-fine
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
arXiv.org
GPS Spoofing Attacks and Pilot Responses Using a Flight Simulator...
Global Positioning System (GPS) spoofing involves transmitting fake signals that mimic those from GPS satellites, causing the GPS receivers to calculate incorrect Positioning, Navigation, and...
Top Security News for Today
DEEP SPECTER RESEARCH Alerted Jaguar 2.5 months prior to the cyber incident.
https://www.bloomberg.com/news/newsletters/2025-10-01/researchers-flagged-hacks-at-jaguar-land-rover-ahead-of-crippling-breach
Forensic journey: hunting evil within AmCache
https://securelist.com/amcache-forensic-artifact/117622/
Use of Generative AI in Scams
https://www.schneier.com/blog/archives/2025/10/use-of-generative-ai-in-scams.html
Seniors targeted in global Facebook scam spreading new Android malware
https://therecord.media/seniors-targeted-facebook-android-malware-scam
Hacking smarter with Burp AI: NahamSec puts Burp AI to the test
https://portswigger.net/blog/hacking-smarter-with-burp-ai-nahamsec-puts-burp-ai-to-the-test
China-linked hacking group Phantom Taurus targeting embassies, foreign ministries
https://therecord.media/china-linked-phantom-taurus-hacking
1.2 million people had information stolen during cyberattack on WestJet
https://therecord.media/westjet-data-breach-disclosures
Millions impacted by data breaches at insurance giant, auto dealership software firm
https://therecord.media/millions-impacted-by-data-breaches-insurance-car-dealership-software
Nuclei Templates for Detecting AMI MegaRAC BMC Vulnerabilities
https://www.reddit.com/r/netsec/comments/1nvllz0/nuclei_templates_for_detecting_ami_megarac_bmc/
Fingerprinting LLMs via Prompt Injection
https://arxiv.org/abs/2509.25410
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
DEEP SPECTER RESEARCH Alerted Jaguar 2.5 months prior to the cyber incident.
https://www.bloomberg.com/news/newsletters/2025-10-01/researchers-flagged-hacks-at-jaguar-land-rover-ahead-of-crippling-breach
Forensic journey: hunting evil within AmCache
https://securelist.com/amcache-forensic-artifact/117622/
Use of Generative AI in Scams
https://www.schneier.com/blog/archives/2025/10/use-of-generative-ai-in-scams.html
Seniors targeted in global Facebook scam spreading new Android malware
https://therecord.media/seniors-targeted-facebook-android-malware-scam
Hacking smarter with Burp AI: NahamSec puts Burp AI to the test
https://portswigger.net/blog/hacking-smarter-with-burp-ai-nahamsec-puts-burp-ai-to-the-test
China-linked hacking group Phantom Taurus targeting embassies, foreign ministries
https://therecord.media/china-linked-phantom-taurus-hacking
1.2 million people had information stolen during cyberattack on WestJet
https://therecord.media/westjet-data-breach-disclosures
Millions impacted by data breaches at insurance giant, auto dealership software firm
https://therecord.media/millions-impacted-by-data-breaches-insurance-car-dealership-software
Nuclei Templates for Detecting AMI MegaRAC BMC Vulnerabilities
https://www.reddit.com/r/netsec/comments/1nvllz0/nuclei_templates_for_detecting_ami_megarac_bmc/
Fingerprinting LLMs via Prompt Injection
https://arxiv.org/abs/2509.25410
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Bloomberg.com
Researchers Say They Flagged Cyber Flaws at Jaguar Ahead of Crippling Breach
Two cybersecurity companies say they discovered breaches at the company in the months before automaker shut down by cyberattack.
Top Security News for Today
Georgia Tech settles with DOJ over allegations of lax cybersecurity on federal projects
https://therecord.media/georgia-tech-gtrc-cybersecurity-false-claims-act-settlement
Japanese brewer Asahi delays product launches, halts deliveries after cyberattack
https://therecord.media/japan-asahi-delay-cyberattack
Daniel Miessler on the AI Attack/Defense Balance
https://www.schneier.com/blog/archives/2025/10/daniel-miessler-on-the-ai-attack-defense-balance.html
European parliamentarians implore EU leadership to stop funding spyware
https://therecord.media/european-parliament-stop-funding-spyware
Dutch court rules Meta violated European law by pushing users to profiled feeds
https://therecord.media/dutch-court-meta-violated-european-law-social-feeds
Microsoft named a Leader in the IDC MarketScape for XDR
https://www.microsoft.com/en-us/security/blog/2025/10/02/microsoft-named-a-leader-in-the-idc-marketscape-for-xdr/
Cybercriminals are trying to extort executives with data allegedly stolen through Oracle tool
https://therecord.media/possible-clop-campaign-extortion-executives-stolen-data
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Georgia Tech settles with DOJ over allegations of lax cybersecurity on federal projects
https://therecord.media/georgia-tech-gtrc-cybersecurity-false-claims-act-settlement
Japanese brewer Asahi delays product launches, halts deliveries after cyberattack
https://therecord.media/japan-asahi-delay-cyberattack
Daniel Miessler on the AI Attack/Defense Balance
https://www.schneier.com/blog/archives/2025/10/daniel-miessler-on-the-ai-attack-defense-balance.html
European parliamentarians implore EU leadership to stop funding spyware
https://therecord.media/european-parliament-stop-funding-spyware
Dutch court rules Meta violated European law by pushing users to profiled feeds
https://therecord.media/dutch-court-meta-violated-european-law-social-feeds
Microsoft named a Leader in the IDC MarketScape for XDR
https://www.microsoft.com/en-us/security/blog/2025/10/02/microsoft-named-a-leader-in-the-idc-marketscape-for-xdr/
Cybercriminals are trying to extort executives with data allegedly stolen through Oracle tool
https://therecord.media/possible-clop-campaign-extortion-executives-stolen-data
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
therecord.media
Georgia Tech settles with DOJ over allegations of lax cybersecurity on federal projects
The Georgia Institute of Technology is paying $875,000 to settle a False Claims Act lawsuit with the federal government, which accused an office at the school of not following cybersecurity rules on some defense contracts.
Top Security News for Today
LinkedIn sues software company allegedly scraping data from millions of profiles
https://therecord.media/linkedin-sues-data-scraping-company
CVE-2025-59489: Arbitrary Code Execution in Unity Runtime
https://www.reddit.com/r/netsec/comments/1nwq9wj/cve202559489_arbitrary_code_execution_in_unity/
It's Never Simple Until It Is (Dell UnityVSA Pre-Auth Command Injection CVE-2025-36604) - watchTowr Labs
https://www.reddit.com/r/netsec/comments/1nwy4eq/its_never_simple_until_it_is_dell_unityvsa/
Self-Propagating Malware Spreading Via WhatsApp, Targets Brazilian Users
https://www.trendmicro.com/en_us/research/25/j/self-propagating-malware-spreads-via-whatsapp.html
Oracle links extortion campaign to bugs addressed in July patch
https://therecord.media/oracle-links-extortion-campaign-to-patched-vulnerabilities
California AG sues city for allowing out-of-state searches of license plate reader database
https://therecord.media/california-lawsuit-el-cajon-police-out-of-state-searches-flock-database
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
LinkedIn sues software company allegedly scraping data from millions of profiles
https://therecord.media/linkedin-sues-data-scraping-company
CVE-2025-59489: Arbitrary Code Execution in Unity Runtime
https://www.reddit.com/r/netsec/comments/1nwq9wj/cve202559489_arbitrary_code_execution_in_unity/
It's Never Simple Until It Is (Dell UnityVSA Pre-Auth Command Injection CVE-2025-36604) - watchTowr Labs
https://www.reddit.com/r/netsec/comments/1nwy4eq/its_never_simple_until_it_is_dell_unityvsa/
Self-Propagating Malware Spreading Via WhatsApp, Targets Brazilian Users
https://www.trendmicro.com/en_us/research/25/j/self-propagating-malware-spreads-via-whatsapp.html
Oracle links extortion campaign to bugs addressed in July patch
https://therecord.media/oracle-links-extortion-campaign-to-patched-vulnerabilities
California AG sues city for allowing out-of-state searches of license plate reader database
https://therecord.media/california-lawsuit-el-cajon-police-out-of-state-searches-flock-database
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
therecord.media
LinkedIn sues software company allegedly scraping data from millions of profiles
ProAPIs, a software company, and its CEO Rahmat Alam allegedly run an operation which LinkedIn says charges customers up to $15,000 per month for scraped user data taken from the social media platform.