[HIGH] – Mantax Otax Android Malware Combines Ransomware and Spyware
Mantax Otax targets Android users with ransomware, data theft, credential harvesting, and device-control capabilities.
[HIGH] – Anthropic Details AI-Assisted Cyber Operations in New Threat Report
Anthropic reports disrupting AI misuse across cyber operations, surveillance, fraud, influence, weapons, and model distillation.
[CRITICAL] – GitLab Releases Critical Patch for CE and EE
GitLab released 19.3.2, 19.2.6, and 19.1.8 with critical security fixes for self-managed installations.
[HIGH] – BlueMoon Exploit Kit Chains Chrome and Windows Flaws in Espionage Campaigns
Proofpoint identified four espionage-focused groups using BlueMoon to chain Chrome and Windows vulnerabilities.
[CRITICAL] – AI-Orchestrated PaperCut Campaign Compromises 395 Organizations
GreyNoise reports an AI-orchestrated PaperCut campaign compromised at least 440 instances across 395 organizations.
[CRITICAL] – JFrog Artifactory Flaws Actively Exploited to Gain Administrative Control
Wiz reports active exploitation of three Artifactory vulnerabilities, including chains that yield administrative control.
[HIGH] – Trezor Warns of Phishing After Email-Provider Breach
Trezor says attackers breached its email provider and sent phishing messages from its legitimate domain.
[HIGH] – Veradigm Discloses Vendor-Credential Data Exposure
Veradigm says stolen vendor credentials were used to download patient personal data, including some Social Security numbers.
[HIGH] – Check Point Issues Patches for Two Critical VPN Certificate Flaws
Check Point released fixes for two CVSS 9.8 VPN certificate flaws that may permit unauthenticated remote code execution.
[HIGH] – Android September Updates Address 180 Vulnerabilities
Android's September updates address 180 vulnerabilities, including critical System-component issues that may allow remote code execution.