🔒 Microsoft just revoked 200+ trusted certificates — used to sign ransomware disguised as Teams installers.

The fake setup files slipped past security checks for weeks.

Here’s how Vanilla Tempest pulled it off ↓ https://thehackernews.com/2025/10/microsoft-revokes-200-fraudulent.html

🚨 CVE-2025-9242 — Critical WatchGuard Fireware flaw (CVSS 9.3)

Unauthenticated attackers can exploit a 520-byte overflow in IKEv2 before cert checks, executing code on VPN firewalls — even spawning a Python shell over TCP.

Patch now ↓ https://thehackernews.com/2025/10/researchers-uncover-watchguard-vpn-bug.html

🚨 AI agents don’t make mistakes — they execute them.

One wrong logic chain can turn flawless automation into a flawless catastrophe.

The real risk? Most enterprises don’t even know which bots hold the keys.

Identity is the new firewall. Read the 2025-26 Horizons report ↓ https://thehackernews.com/2025/10/identity-security-your-first-and-last.html

⚠️ A fake tech interview → a real breach.

North Korean hackers merged “BeaverTail” + “OtterCookie” into a new advanced malware—keylogger, wallet stealer, and remote shell all in one.

Learn more ↓ https://thehackernews.com/2025/10/north-korean-hackers-combine-beavertail.html

📄 You open a tax doc.
💻 Windows quietly loads malware.
🛑 Your AV dies.
💀 You’re owned.

That’s how Winos 4.0 and HoldingHands RAT are spreading right now — using Windows’ own Task Scheduler against it.

Details here ↓ https://thehackernews.com/2025/10/silver-fox-expands-winos-40-attacks-to.html

Hackers just dropped a new .NET backdoor disguised as a tax notice.

Open the ZIP → boom, your data’s gone.

It even runs through legit Windows tools so nothing looks off.

Full story → https://thehackernews.com/2025/10/new-net-capi-backdoor-targets-russian.html

💣 Europol just dismantled a SIM farm-for-hire platform that powered 49 million fake accounts used for global fraud.

It let anyone rent verified phone numbers from 80+ countries — to scam, extort, or launder money.

Details → https://thehackernews.com/2025/10/europol-dismantles-sim-farm-network.html

🕵️ China says the NSA hacked its national time servers — the system that keeps everything in sync.

If that clock went down, it could’ve hit banks, power grids, even space launches.

The attack used foreign SMS exploits, forged certs, and 42 stealth tools.

Read → https://thehackernews.com/2025/10/mss-claims-nsa-used-42-cyber-tools-in.html

🚨 131 Chrome extensions were caught turning WhatsApp Web into spam bots.

They look like “CRM tools,” but secretly send bulk messages.

Over 20,000 users already installed them.

Full details ↓ https://thehackernews.com/2025/10/131-chrome-extensions-caught-hijacking.html

🔴 Silent breaches, blockchain malware, and new Android exploits — this week’s threat roundup proves attackers are getting bolder and smarter.

Catch the highlights:

⚡ F5 breach
⚡ EtherHiding malware
⚡ Cisco rootkits
⚡ Pixnapping 2FA theft

Read WEEKLY RECAP → https://thehackernews.com/2025/10/weekly-recap-f5-breached-linux-rootkits.html

🚨 A fake CAPTCHA just breached hospitals, universities, and city networks.

The scary part? Victims copied the attack code themselves — straight from their browser.

It’s called ClickFix, and it hijacks users through “fix this page” pop-ups — no downloads, no phishing email needed.

See how it slips past every control ↓ https://thehackernews.com/2025/10/analysing-clickfix-3-reasons-why.html

A Chinese-linked hacking group breached Europe’s telecom defenses — weaponizing antivirus software.

They planted a backdoor in legitimate Norton and Bkav installs.

Payload: SnappyBee, a new ShadowPad variant delivered via DLL side-loading.

Learn more ↓ https://thehackernews.com/2025/10/hackers-used-snappybee-malware-and.html

Russia’s COLDRIVER hackers rebuilt their malware tools in just 5 days.

Meet NOROBOT, YESROBOT, and MAYBEROBOT — hidden behind fake CAPTCHA checks and PowerShell tricks.

Google just exposed how they did it ↓ https://thehackernews.com/2025/10/google-identifies-three-new-russian.html

⚠️ Your AppSec blind spots are costing you.

The gap between code and cloud runtime drives 90% of delayed fixes—and missed accountability.

Map vulnerabilities, misconfigs, and secrets across your pipeline to regain control.

Cut the noise. Reduce risk. Start now ↓ https://thehacker.news/code-to-cloud-appsec

🔥 Your Cisco, ASUS, QNAP, or Synology router might secretly be part of a botnet.

A new threat called PolarEdge is hiding inside routers, turning them into undetectable spies using a secret TLS server and a hidden config file.

Exploit chain, IOCs & decryption trick ↓ https://thehackernews.com/2025/10/polaredge-targets-cisco-asus-qnap.html

Meta just rolled out new anti-scam tools for WhatsApp & Messenger.

⚠️ Screen-share warnings
🤖 AI scam detection
🚨 Instant alerts

... but one setting quietly breaks 🔐 encryption.

Learn more ↓ https://thehackernews.com/2025/10/meta-rolls-out-new-tools-to-protect.html

Every new AI tool in your SOC adds another way in for attackers.

The defender might now be the weak spot.

AI agents are making decisions on their own — and trust just became an identity problem.

Learn how to secure them before someone else does → https://thehackernews.com/2025/10/securing-ai-to-benefit-from-ai.html