📔 Lumma Stealer Vacuum Filled by Upgraded Vidar 2.0 Infostealer, Researchers Say 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Trend Micro believe security teams should anticipate increased Vidar 2.0 prevalence in campaigns through Q4 2025.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Lumma Stealer Vacuum Filled by Upgraded Vidar 2.0 Infostealer, Researchers Say
Trend Micro believe security teams should anticipate increased Vidar 2.0 prevalence in campaigns through Q4 2025
🖋️ Secure AI at Scale and Speed — Learn the Framework in this Free Webinar 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
AI is everywhereand your company wants in. Faster products, smarter systems, fewer bottlenecks. But if you're in security, that excitement often comes with a sinking feeling. Because while everyone else is racing ahead, you're left trying to manage a growing web of AI agents you didnt create, cant fully see, and werent designed to control. Join our upcoming webinar and learn how to make AI.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ ThreatsDay Bulletin: $176M Crypto Fine, Hacking Formula 1, Chromium Vulns, AI Hijack & More 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Criminals dont need to be clever all the time they just follow the easiest path in trick users, exploit stale components, or abuse trusted systems like OAuth and package registries. If your stack or habits make any of those easy, youre already a target. This weeks ThreatsDay highlights show exactly how those weak points are being exploited from overlooked.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 Lazarus Group’s Operation DreamJob Targets European Defense Firms 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Cyberattacks by North Koreas Lazarus Group target European defense firms in drone development.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Lazarus Group’s Operation DreamJob Targets European Defense Firms
Cyber-attacks by North Korea’s Lazarus Group target European defense firms in drone development
🌊 Fortinet Alternatives 2025: When Your All‑in‑One Starts Fraying Edges 🌊
📖 Read more.
🔗 Via "UnderDefense"
----------
👁️ Seen on @cibsecurity
Fortinet covers a lot, until scale makes policy sprawl, thin SSE depth, and murky investigations slow you down, or TLSDLP licensing bumps your costs. If roaming users, SaaS access, and The post Fortinet Alternatives 2025 When Your AllinOne Starts Fraying Edges appeared first on UnderDefense.📖 Read more.
🔗 Via "UnderDefense"
----------
👁️ Seen on @cibsecurity
UnderDefense
Fortinet Alternatives 2025: Top 9 Competitors & How to Switch
Choosing a Fortinet alternative in 2025? See leading competitors, pros/cons, fit by use case, and a step-by-step PoC/migration checklist.
🌊 Red Canary Alternatives (2025): 8 Serious Options & When They Win 🌊
📖 Read more.
🔗 Via "UnderDefense"
----------
👁️ Seen on @cibsecurity
Red Canary is widely respected for telemetryfirst MDR and crisp analyst narrative. But not every program wants a pure bringyourownEDR MDR on top posture, and your edges, cloud mix, The post Red Canary Alternatives 2025 8 Serious Options When They Win appeared first on UnderDefense.📖 Read more.
🔗 Via "UnderDefense"
----------
👁️ Seen on @cibsecurity
UnderDefense
Red Canary Alternatives 2025: Top 9 MDR Competitors
Choosing a Red Canary alternative? See leading MDR options, pros/cons, fit by use case, plus a practical PoC/migration checklist.
🌊 Zscaler Alternatives (2025): 9 Serious Options & When They Win 🌊
📖 Read more.
🔗 Via "UnderDefense"
----------
👁️ Seen on @cibsecurity
Zscaler owns the roaminguser SaaS access story. But not every program wants allin SSE, or your edges just dont look like the demo. This guide lays out the nine The post Zscaler Alternatives 2025 9 Serious Options When They Win appeared first on UnderDefense.📖 Read more.
🔗 Via "UnderDefense"
----------
👁️ Seen on @cibsecurity
UnderDefense
Zscaler Alternatives 2025: Top 9 Competitors & Use Cases
Explore 9 Zscaler alternatives for 2025: strengths, gaps, Zero Trust/ZTNA, DLP, SD-WAN/SASE fit. Plus a step-by-step PoC/migration checklist.
❤1
📔 Pakistani-Linked Hacker Group Targets Indian Government 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
A cyberespionage campaign by Pakistans TransparentTribe has been identified, targeting Indian government systems using DeskRAT.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Pakistani-Linked Hacker Group Targets Indian Government
A cyber-espionage campaign by Pakistan’s TransparentTribe has been identified, targeting Indian government systems using DeskRAT
❤1
🖋️ North Korean Hackers Lure Defense Engineers With Fake Jobs to Steal Drone Secrets 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Threat actors with ties to North Korea have been attributed to a new wave of attacks targeting European companies active in the defense industry as part of a longrunning campaign known as Operation Dream Job. "Some of these companies' are heavily involved in the unmanned aerial vehicle UAV sector, suggesting that the operation may be linked to North Korea's current efforts to scale up its.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Smishing Triad Linked to 194,000 Malicious Domains in Global Phishing Operation 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
The threat actors behind a largescale, ongoing smishing campaign have been attributed to more than 194,000 malicious domains since January 1, 2024, targeting a broad range of services across the world, according to new findings from Palo Alto Networks Unit 42. "Although these domains are registered through a Hong Kongbased registrar and use Chinese nameservers, the attack infrastructure is.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Newly Patched Critical Microsoft WSUS Flaw Comes Under Active Exploitation 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Microsoft on Thursday released outofband security updates to patch a criticalseverity Windows Server Update Service WSUS vulnerability with a proofofconcept Poc exploit publicly available and has come under active exploitation in the wild. The vulnerability in question is CVE202559287 CVSS score 9.8, a remote code execution flaw in WSUS that was originally fixed by the tech giant.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ APT36 Targets Indian Government with Golang-Based DeskRAT Malware Campaign 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
A Pakistannexus threat actor has been observed targeting Indian government entities as part of spearphishing attacks designed to deliver a Golangbased malware known as DeskRAT. The activity, observed in August and September 2025 by Sekoia, has been attributed to Transparent Tribe aka APT36, a statesponsored hacking group known to be active since at least 2013. It also builds upon a prior.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ The Cybersecurity Perception Gap: Why Executives and Practitioners See Risk Differently 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Does your organization suffer from a cybersecurity perception gap? Findings from the Bitdefender 2025 Cybersecurity Assessment suggest the answer is probably yes and many leaders may not even realize it. This disconnect matters. Small differences in perception today can evolve into major blind spots tomorrow. After all, perception influences what organizations prioritize, where they.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ 3,000 YouTube Videos Exposed as Malware Traps in Massive Ghost Network Operation 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
A malicious network of YouTube accounts has been observed publishing and promoting videos that lead to malware downloads, essentially abusing the popularity and trust associated with the video hosting platform for propagating malicious payloads. Active since 2021, the network has published more than 3,000 malicious videos to date, with the volume of such videos tripling since the start of the.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Self-Spreading 'GlassWorm' Infects VS Code Extensions in Widespread Supply Chain Attack 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have discovered a selfpropagating worm that spreads via Visual Studio Code VS Code extensions on the Open VSX Registry and the Microsoft Extension Marketplace, underscoring how developers have become a prime target for attacks. The sophisticated threat, codenamed GlassWorm by Koi Security, is the second such supply chain attack to hit the DevOps space within a span.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🦅 Newcomers Fuel Ransomware Explosion in 2025 as Old Groups Fade 🦅
📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Despite major changes in the leading ransomware groups, ransomware attacks have surged 50 in 2025, as cybercriminals have proven adept at finding new opportunities and exploiting vulnerabilities. Ransomware attacks were up 50 in 2025 through October 21, according to Cyble data, rising to 5,010 from 3,335 in the same period of 2024. Cybles data is based on ransomware group claims on their dark web data leak sites. From the decline of RansomHub to the rise of Qilin and newcomers like Sinobi and The Gentlemen, ransomware group leadership has been in flux for much of 2025, but affiliates have been quick to find new opportunities, and a steady supply of critical vulnerabilities has helped fuel attacks. Dramatic changes in the ransomware landscape were among the revelations in Cybl...📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
📔 New LockBit Ransomware Victims Identified by Security Researchers 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Check Point has identified a dozen attacks in September that bore the LockBit stamp, with half of them attributed to the groups new ransomware version.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
New LockBit Ransomware Victims Identified by Security Researchers
Check Point has identified a dozen attacks in September that bore the LockBit stamp, with half of them attributed to the group’s new ransomware version
📔 Blitz Spear Phishing Campaign Targets NGOs Supporting Ukraine 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
A spear phishing campaign dubbed PhantomCaptcha targeted Ukraines war relief efforts and regional government administrations for a single day in October.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Blitz Spear Phishing Campaign Targets NGOs Supporting Ukraine
A spear phishing campaign dubbed PhantomCaptcha targeted Ukraine’s war relief efforts and regional government administrations for a single day in October
📔 Threat Actors Ramp Up Public App Exploits as ToolShell Gains Traction 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
ToolShell exploit activity surged last quarter, appearing in over 60 of Cisco Talos IR cases and driving a sharp rise in publicfacing application attacks.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Threat Actors Ramp Up Public App Exploits as ToolShell Gains Traction
ToolShell exploit activity surged last quarter, appearing in over 60% of Cisco Talos IR cases and driving a sharp rise in public-facing application attacks
📔 Qilin Ransomware Group Publishes Over 40 Cases Monthly 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Qilin ransomware activity has surged in late 2025, threatening data leaks via double extortion tactics.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Qilin Ransomware Group Publishes Over 40 Cases Monthly
Qilin ransomware activity has surged in late 2025, threatening data leaks via double extortion tactics
📢 Critical Dell Storage Manager flaws could let hackers access sensitive data – patch now 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
A trio of flaws in Dell Storage Manager has prompted a customer alert.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
IT Pro
Critical Dell Storage Manager flaws could let hackers access sensitive data – patch now
A trio of flaws in Dell Storage Manager has prompted a customer alert