î ‚Oct 04, 2025î „Ravie LakshmananAgentic AI / Enterprise Security Cybersecurity experts have unveiled details of a new cyber attack known as CometJacking that targets Perplexity’s agentic AI browser Comet by embedding malicious prompts in a seemingly harmless link to extract sensitive …
One Click Can Turn Perplexity’s Comet AI Browser Into a Data Thief Read More »
î ‚Oct 04, 2025î „Ravie LakshmananVulnerability / Network Security GreyNoise, a threat intelligence firm, revealed a significant increase in scanning activity targeting Palo Alto Networks login portals on October 3, 2025. The surge in scanning activity saw a 500% rise in IP …
Scanning Activity on Palo Alto Networks Portals Jump 500% in One Day Read More »
Oct 03, 2025Ravie Lakshmanan Malware / Online Security Brazilian users are under attack with a new self-propagating malware spreading through WhatsApp. Trend Micro named the campaign SORVEPOTEL, emphasizing its rapid propagation across Windows systems without the typical focus on data …
Researchers Warn of Self-Spreading WhatsApp Malware Named SORVEPOTEL Read More »
î ‚Oct 02, 2025î „Ravie LakshmananPython / Malware Cybersecurity experts have identified a harmful package on the Python Package Index (PyPI) repository that purports to provide a SOCKS5 proxy service but also includes a covert backdoor-like feature to deploy extra payloads on …
Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown Read More »
Date: Oct 01, 2025 Author: Ravie Lakshmanan Tags: Vulnerability / API Security A critical security vulnerability has been uncovered in the One Identity OneLogin Identity and Access Management (IAM) solution. This flaw, if exploited, could potentially expose sensitive OpenID Connect …
OneLogin Bug Let Attackers Use API Keys to Steal OIDC Secrets and Impersonate Apps Read More »
On September 30, 2025, cybersecurity researchers revealed three security vulnerabilities in Google’s Gemini artificial intelligence (AI) assistant that have since been patched. These vulnerabilities posed serious privacy risks and potential data theft for users. The vulnerabilities, collectively known as the …
A critical security flaw has been identified in MyCourts, a widely used platform for tennis court bookings and league management in the UK. The vulnerability, known as CVE-2025-57424, could have allowed malicious actors to hijack user sessions and gain unauthorized …
î ‚Sep 27, 2025î „Ravie LakshmananMalware / Network Security Telecommunications and manufacturing sectors in Central and South Asian countries have become the focus of an ongoing campaign distributing a new variant of the known malware PlugX (also known as Korplug or SOGU). …
China-Linked PlugX and Bookworm Malware Attacks Target Asian Telecom and ASEAN Networks Read More »
74 Austin / TX, United States, September 25th, 2025, CyberNewsWire Living Security, a global leader in Human Risk Management (HRM), today announced the full speaker lineup for the Human Risk Management Conference (HRMCon 2025), taking place October 20, 2025, at …
The latest ClickFix-style attacks have been linked to the Russian advanced persistent threat (APT) group COLDRIVER, who are behind the distribution of two new malware families known as BAITSWITCH and SIMPLEFIX. Zscaler ThreatLabz, the cybersecurity firm that first discovered this …
