September 2025

Prompt injection – and a $5 domain – trick Salesforce Agentforce into leaking sales

Prompt injection – and a $5 domain – trick Salesforce Agentforce into leaking sales 2025-09-26 at 16:14 By Jessica Lyons More fun with AI agents and their security holes A now-fixed flaw in Salesforce’s Agentforce could have allowed external attackers to steal sensitive customer data via prompt injection, according to security researchers who published a

Prompt injection – and a $5 domain – trick Salesforce Agentforce into leaking sales Read More »

New COLDRIVER Malware Campaign Joins BO Team and Bearlyfy in Russia-Focused Cyberattacks

New COLDRIVER Malware Campaign Joins BO Team and Bearlyfy in Russia-Focused Cyberattacks 2025-09-26 at 16:07 By The Russian advanced persistent threat (APT) group known as COLDRIVER has been attributed to a fresh round of ClickFix-style attacks designed to deliver two new “lightweight” malware families tracked as BAITSWITCH and SIMPLEFIX. Zscaler ThreatLabz, which detected the new

New COLDRIVER Malware Campaign Joins BO Team and Bearlyfy in Russia-Focused Cyberattacks Read More »

Microsoft Reduces Israel’s Access to Cloud and AI Products Over Reports of Mass Surveillance in Gaza

Microsoft Reduces Israel’s Access to Cloud and AI Products Over Reports of Mass Surveillance in Gaza 2025-09-26 at 15:40 By Associated Press Microsoft said Thursday it had disabled services to a unit within the Israeli military after a company review had determined its artificial intelligence and cloud computing products were being used to help carry

Microsoft Reduces Israel’s Access to Cloud and AI Products Over Reports of Mass Surveillance in Gaza Read More »

Ransomware Attack Causes Disruptions at Airports Across Europe

Ransomware Attack Causes Disruptions at Airports Across Europe 2025-09-26 at 15:24 View original post at vpnMentor A cyberattack targeting Collins Aerospace’s MUSE (Multi-User System Environment) caused major disruptions to check-in and boarding systems across Europe. There were chaotic scenes at airports across the UK, Germany, Belgium, Ireland, and other countries as travelers were left unable

Ransomware Attack Causes Disruptions at Airports Across Europe Read More »

UK Finance pilots tokenized sterling deposits with six major banks

UK Finance pilots tokenized sterling deposits with six major banks 2025-09-26 at 15:24 By Cointelegraph by Helen Partz UK Finance launched a tokenized deposits pilot in partnership with six major banks, including Barclays, HSBC and Lloyds Banking Group. This article is an excerpt from Cointelegraph.com News View Original Source

UK Finance pilots tokenized sterling deposits with six major banks Read More »

Aster reimburses users after XPL perpetual glitch sends price to $4

Aster reimburses users after XPL perpetual glitch sends price to $4 2025-09-26 at 15:24 By Cointelegraph by Ezra Reguerra Aster reimbursed traders after an XPL glitch caused liquidations, as its perpetual DEX drove daily trading volumes to a record of more than $100 billion. This article is an excerpt from Cointelegraph.com News View Original Source

Aster reimburses users after XPL perpetual glitch sends price to $4 Read More »

Crypto needs dual wallet management, AI monitoring of North Korean hackers

Crypto needs dual wallet management, AI monitoring of North Korean hackers 2025-09-26 at 15:24 By Cointelegraph by Zoltan Vardai AI threat detection and enhanced wallet management may save crypto firms from North Korean infiltrators, cybersecurity experts told Cointelegraph. This article is an excerpt from Cointelegraph.com News View Original Source

Crypto needs dual wallet management, AI monitoring of North Korean hackers Read More »

Microsoft digs up Vista-era animated wallpaper for Windows 11. Here’s how to get it

Microsoft digs up Vista-era animated wallpaper for Windows 11. Here’s how to get it 2025-09-26 at 15:24 By Avram Piltch Debuted in 2007, an old feature is coming back hands on  If you’re tired of staring at the same old static wallpapers in Windows 11, there’s help on the way. Microsoft has just added support

Microsoft digs up Vista-era animated wallpaper for Windows 11. Here’s how to get it Read More »

UK and US security agencies order urgent fixes as Cisco firewall bugs exploited in wild

UK and US security agencies order urgent fixes as Cisco firewall bugs exploited in wild 2025-09-26 at 15:24 By Carly Page CISA gives feds 24 hours to patch, NCSC urges rapid action as flaws linked to ArcaneDoor spies Cybersecurity agencies on both sides of the Atlantic are sounding the alarm over Cisco firewall vulnerabilities that

UK and US security agencies order urgent fixes as Cisco firewall bugs exploited in wild Read More »

UK to roll out mandatory digital ID for right to work by 2029

UK to roll out mandatory digital ID for right to work by 2029 2025-09-26 at 15:24 By SA Mathieson Prime Minister Starmer revives controversial scheme despite past denials, sparking civil liberties backlash The UK government plans to issue all legal residents a digital identity by the end of the current Parliament, which could run until

UK to roll out mandatory digital ID for right to work by 2029 Read More »

Crash Tests for Security: Why BAS Is Proof of Defense, Not Assumptions

Crash Tests for Security: Why BAS Is Proof of Defense, Not Assumptions 2025-09-26 at 15:23 By Car makers don’t trust blueprints. They smash prototypes into walls. Again and again. In controlled conditions. Because design specs don’t prove survival. Crash tests do. They separate theory from reality. Cybersecurity is no different. Dashboards overflow with “critical” exposure

Crash Tests for Security: Why BAS Is Proof of Defense, Not Assumptions Read More »

Volvo North America confirms staff data stolen following ransomware attack on IT supplier

Volvo North America confirms staff data stolen following ransomware attack on IT supplier 2025-09-26 at 15:13 By Connor Jones The downstream consequences of Miljödata’s ransomware attack continue to affect major organizations Volvo North America is the latest large organization to announce attackers accessed employee data after a ransomware attack struck its HR system provider.… This

Volvo North America confirms staff data stolen following ransomware attack on IT supplier Read More »

North Korea’s Fake Recruiters Feed Stolen Data to IT Workers

North Korea’s Fake Recruiters Feed Stolen Data to IT Workers 2025-09-26 at 15:01 By Ionut Arghire North Korean threat actors pose as recruiters to steal developers’ identities and supply them to fraudulent IT workers. The post North Korea’s Fake Recruiters Feed Stolen Data to IT Workers appeared first on SecurityWeek. This article is an excerpt

North Korea’s Fake Recruiters Feed Stolen Data to IT Workers Read More »

New XCSSET macOS Malware Variant Hijacks Cryptocurrency Transactions

New XCSSET macOS Malware Variant Hijacks Cryptocurrency Transactions 2025-09-26 at 14:50 By Ionut Arghire The malware now uses a four-stage infection chain, has an additional persistence mechanism, and also targets Firefox browser data. The post New XCSSET macOS Malware Variant Hijacks Cryptocurrency Transactions appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

New XCSSET macOS Malware Variant Hijacks Cryptocurrency Transactions Read More »

Recent Fortra GoAnywhere MFT Vulnerability Exploited as Zero-Day

Recent Fortra GoAnywhere MFT Vulnerability Exploited as Zero-Day 2025-09-26 at 14:50 By Ionut Arghire Eight days before patches, a threat actor exploited CVE-2025-10035 as a zero-day to create a backdoor admin account. The post Recent Fortra GoAnywhere MFT Vulnerability Exploited as Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

Recent Fortra GoAnywhere MFT Vulnerability Exploited as Zero-Day Read More »

Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure

Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure 2025-09-26 at 14:50 By Cybersecurity company watchTowr Labs has disclosed that it has “credible evidence” of active exploitation of the recently disclosed security flaw in Fortra GoAnywhere Managed File Transfer (MFT) software as early as September 10, 2025, a whole week before

Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure Read More »

New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module

New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module 2025-09-26 at 14:50 By Cybersecurity researchers have discovered an updated version of a known Apple macOS malware called XCSSET that has been observed in limited attacks. “This new variant of XCSSET brings key changes related to browser targeting, clipboard hijacking, and persistence mechanisms,” the

New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module Read More »

SpaceX Dragon huffs, puffs… and fizzles out as NASA aborts ISS boost

SpaceX Dragon huffs, puffs… and fizzles out as NASA aborts ISS boost 2025-09-26 at 14:29 By Richard Speed Meanwhile, Katalyst wins $30M contract to stop Swift telescope falling out of the sky NASA has made progress with plans to boost the rapidly decaying orbit of the Swift observatory while calling an abrupt halt to an

SpaceX Dragon huffs, puffs… and fizzles out as NASA aborts ISS boost Read More »

Cisco ASA zero-day vulnerabilities exploited in sophisticated attacks

Cisco ASA zero-day vulnerabilities exploited in sophisticated attacks 2025-09-26 at 14:19 By Zeljka Zorz A widespread campaign aimed at breaching organizations via zero-day vulnerabilities in Cisco Adaptive Security Appliances (ASA) has been revealed by the US, UK, Canadian and Australian cybersecurity agencies. The suspected state-sponsored threat actor behind it is believed to be the one

Cisco ASA zero-day vulnerabilities exploited in sophisticated attacks Read More »

Scroll to Top