CISA Warns of Critical Vulnerabilities in Dover Fueling Solutions’ ProGauge MagLink LX

https://securityonline.info/cisa-warns-of-critical-vulnerabilities-in-dover-fueling-solutions-progauge-maglink-lx/

Capture the Flag Competition Leads to Cybersecurity Career

https://www.darkreading.com/cybersecurity-careers/capture-the-flag-leads-cybersecurity-careers

CISA exposes malware kits deployed in Ivanti EPMM attacks

https://www.bleepingcomputer.com/news/security/cisa-exposes-malware-kits-deployed-in-ivanti-epmm-attacks/

Stealing the keys from the octopus: Exfiltrate Git Credentials in Argocd

https://www.reddit.com/r/netsec/comments/1ndqx9l/stealing_the_keys_from_the_octopus_exfiltrate_git/

BreachLock Named Sample Vendor for PTaaS and AEV in Two New 2025 Gartner® Reports

https://securityonline.info/breachlock-named-sample-vendor-for-ptaas-and-aev-in-two-new-2025-gartner-reports/

FBI warns of cybercriminals using fake FBI crime reporting portals

https://www.bleepingcomputer.com/news/security/fbi-warns-of-fake-fbi-crime-complaint-portals-used-for-cybercrime/

Surveying the Global Spyware Market

https://www.schneier.com/blog/archives/2025/09/surveying-the-global-spyware-market.html

'ShadowLeak' ChatGPT Attack Allows Hackers to Invisibly Steal Emails

https://www.darkreading.com/vulnerabilities-threats/shadowleak-chatgpt-invisibly-steal-emails

CISA Warns of Malicious Listener Malware Exploiting Ivanti Endpoint Manager Mobile

https://securityonline.info/cisa-warns-of-malicious-listener-malware-exploiting-ivanti-endpoint-manager-mobile/

CVE-2025-10035 (CVSS 10): Critical Deserialization Flaw in GoAnywhere MFT Exposes Enterprises to Remote Exploitation

https://securityonline.info/cve-2025-10035-cvss-10-critical-deserialization-flaw-in-goanywhere-mft-exposes-enterprises-to-remote-exploitation/

Tiantong-1 and satphone security (part 1)

https://www.reddit.com/r/netsec/comments/1nj90ci/tiantong1_and_satphone_security_part_1/

Fine-grained HTTP filtering for Claude Code

https://www.reddit.com/r/netsec/comments/1nff57n/finegrained_http_filtering_for_claude_code/

BIDI Swap: Unmasking the Art of URL Misleading with Bidirectional Text Tricks

https://www.reddit.com/r/netsec/comments/1njfwi3/bidi_swap_unmasking_the_art_of_url_misleading/

How The Right AI Enables An Autonomous Future

https://www.recordedfuture.com/blog/how-the-right-ai-enables-an-autonomous-future

'Scattered Lapsus$ Hunters,' Others Announce End of Hacking Spree

https://www.darkreading.com/cyberattacks-data-breaches/scattered-lapsus-hunters-hacking-end

Reddit Demands More from Google: A New Era for AI Deals?

https://securityonline.info/reddit-demands-more-from-google-a-new-era-for-ai-deals/

ChatGPT Deep Research zero-click vulnerability fixed by OpenAI

https://www.malwarebytes.com/blog/news/2025/09/chatgpt-deep-research-zero-click-vulnerability-fixed-by-openai

Nokia Patches Critical Flaws in CloudBand and NCS: CVE-2023-49564 and CVE-2023-49565

https://securityonline.info/nokia-patches-critical-flaws-in-cloudband-and-ncs-cve-2023-49564-and-cve-2023-49565/

Steam to End Support for 32-Bit Windows 10

https://securityonline.info/steam-to-end-support-for-32-bit-windows-10/

Gemini is Now Free in Chrome: Here’s What It Can Do for You

https://securityonline.info/gemini-is-now-free-in-chrome-heres-what-it-can-do-for-you/

Why Are YouTube View Counts Plummeting? The Surprising Reason Behind the Drop

https://securityonline.info/why-are-youtube-view-counts-plummeting-the-surprising-reason-behind-the-drop/

The AI Fix #67: Will Smith’s AI crowd scandal, and gullible agents fall for scams

https://grahamcluley.com/the-ai-fix-67/

Microsoft and Cloudflare disrupt massive RaccoonO365 phishing service

https://www.bleepingcomputer.com/news/security/microsoft-and-cloudflare-disrupt-massive-raccoono365-phishing-service/

ShinyHunters claims 1.5 billion Salesforce records stolen in Drift hacks

https://www.bleepingcomputer.com/news/security/shinyhunters-claims-15-billion-salesforce-records-stolen-in-drift-hacks/

HijackLoader: The Stealthy Malware Loader Powering Modern Cyberattacks

https://securityonline.info/hijackloader-the-stealthy-malware-loader-powering-modern-cyberattacks/

VMScape (CVE-2025-40300): A New CPU Flaw Threatens Cloud Security

https://securityonline.info/vmscape-cve-2025-40300-a-new-cpu-flaw-threatens-cloud-security/

F5 to Acquire CalypsoAI for Advanced AI Security Capabilities

https://www.darkreading.com/cyber-risk/f5-calypsoai-advanced-ai-security-capabilities

BlackNevas Ransomware: A Persistent Global Threat With Impossible-to-Decrypt Payloads

https://securityonline.info/blacknevas-ransomware-a-persistent-global-threat-with-impossible-to-decrypt-payloads/

Firefox Finally Adds MKV Video Support After an 8-Year Wait

https://securityonline.info/firefox-finally-adds-mkv-video-support-after-an-8-year-wait/

Microsoft investigates Exchange Online outage in North America

https://www.bleepingcomputer.com/news/microsoft/microsoft-investigates-exchange-online-outage-in-north-america/

Hackers Are Sophisticated & Impatient — That Can Be Good

https://www.darkreading.com/cyberattacks-data-breaches/hackers-sophisticated-impatient-good

Patch Tuesday: Microsoft Fixes 86 Flaws, Including 9 Critical and 2 Zero-Days (CVE-2025-55234 & CVE-2024-21907)

https://securityonline.info/patch-tuesday-microsoft-fixes-86-flaws-including-9-critical-and-2-zero-days-cve-2025-55234-cve-2024-21907/

The Critical Failure in Vulnerability Management

https://www.darkreading.com/vulnerabilities-threats/the-critical-failure-in-vulnerability-management

iCloud Calendar infrastructure abused in PayPal phishing campaign

https://www.malwarebytes.com/blog/news/2025/09/icloud-calendar-infrastructure-abused-in-paypal-phishing-campaign

Sports streaming piracy service with 123M yearly visits shut down

https://www.bleepingcomputer.com/news/security/massive-calcio-sports-streaming-piracy-service-with-123m-yearly-visits-shut-down/

Phishing Empire Runs Undetected on Google, Cloudflare

https://www.darkreading.com/cloud-security/phishing-empire-undetected-google-cloudflare

Noisy Bear: A New APT Group Is Spying on Kazakhstan’s Energy Sector

https://securityonline.info/noisy-bear-a-new-apt-group-is-spying-on-kazakhstans-energy-sector/

A Massive Coordinated Attack Is Probing Cisco ASA Devices

https://securityonline.info/a-massive-coordinated-attack-is-probing-cisco-asa-devices/

A £100M Lawsuit: Tesco Sues Broadcom Over VMware License Dispute

https://securityonline.info/a-100m-lawsuit-tesco-sues-broadcom-over-vmware-license-dispute/

Exploit development for IBM i - turning blind AS/400 command execution into a proper shell

https://www.reddit.com/r/netsec/comments/1n87uzr/exploit_development_for_ibm_i_turning_blind_as400/

BYOVD: Leveraging Raw Disk Reads to Bypass EDR

https://www.reddit.com/r/netsec/comments/1n8enqa/byovd_leveraging_raw_disk_reads_to_bypass_edr/