September 2025 – Page 3 – Welcome to APS Law

Sep

⚡ Weekly Recap: Cisco 0-Day, Record DDoS, LockBit 5.0, BMC Bugs, ShadowV2 Botnet & More

September 29, 2025adminuserCyber

Cybersecurity never stops—and neither do hackers. While you wrapped up last week, new attacks were already underway. From hidden software bugs to massive DDoS attacks and new ransomware tricks, this week’s roundup gives you the biggest security moves to know. Whether you’re protecting key systems or locking down cloud apps, these are the updates you...

Sep

The State of AI in the SOC 2025 – Insights from Recent Study

September 29, 2025adminuserCyber

Security leaders are embracing AI for triage, detection engineering, and threat hunting as alert volumes and burnout hit breaking points. A comprehensive survey of 282 security leaders at companies across industries reveals a stark reality facing modern Security Operations Centers: alert volumes have reached unsustainable levels, forcing teams to leave critical threats uninvestigated. You can

Sep

Microsoft Flags AI-Driven Phishing: LLM-Crafted SVG Files Outsmart Email Security

September 29, 2025adminuserCyber

Microsoft is calling attention to a new phishing campaign primarily aimed at U.S.-based organizations that has likely utilized code generated using large language models (LLMs) to obfuscate payloads and evade security defenses. “Appearing to be aided by a large language model (LLM), the activity obfuscated its behavior within an SVG file, leveraging business terminology and...

Sep

First Malicious MCP Server Found Stealing Emails in Rogue Postmark-MCP Package

September 29, 2025adminuserCyber

Cybersecurity researchers have discovered what has been described as the first-ever instance of a Model Context Protocol (MCP) server spotted in the wild, raising software supply chain risks. According to Koi Security, a legitimate-looking developer managed to slip in rogue code within an npm package called “postmark-mcp” that copied an official Postmark Labs library of...

Sep

China-Linked PlugX and Bookworm Malware Attacks Target Asian Telecom and ASEAN Networks

September 27, 2025adminuserCyber

Telecommunications and manufacturing sectors in Central and South Asian countries have emerged as the target of an ongoing campaign distributing a new variant of a known malware called PlugX (aka Korplug or SOGU). “The new variant’s features overlap with both the RainyDay and Turian backdoors, including abuse of the same legitimate applications for DLL side-loading,...

Sep

Researchers Expose Phishing Threats Distributing CountLoader and PureRAT

September 26, 2025adminuserCyber

A new campaign has been observed impersonating Ukrainian government agencies in phishing attacks to deliver CountLoader, which is then used to drop Amatera Stealer and PureMiner. “The phishing emails contain malicious Scalable Vector Graphics (SVG) files designed to trick recipients into opening harmful attachments,” Fortinet FortiGuard Labs researcher Yurren Wan said in a report shared...

Sep

New COLDRIVER Malware Campaign Joins BO Team and Bearlyfy in Russia-Focused Cyberattacks

September 26, 2025adminuserCyber

The Russian advanced persistent threat (APT) group known as COLDRIVER has been attributed to a fresh round of ClickFix-style attacks designed to deliver two new “lightweight” malware families tracked as BAITSWITCH and SIMPLEFIX. Zscaler ThreatLabz, which detected the new multi-stage ClickFix campaign earlier this month, described BAITSWITCH as a downloader that ultimately drops SIMPLEFIX, a

Sep

Crash Tests for Security: Why BAS Is Proof of Defense, Not Assumptions

September 26, 2025adminuserCyber

Car makers don’t trust blueprints. They smash prototypes into walls. Again and again. In controlled conditions. Because design specs don’t prove survival. Crash tests do. They separate theory from reality. Cybersecurity is no different. Dashboards overflow with “critical” exposure alerts. Compliance reports tick every box. But none of that proves what matters most to a...

Sep

Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure

September 26, 2025adminuserCyber

Cybersecurity company watchTowr Labs has disclosed that it has “credible evidence” of active exploitation of the recently disclosed security flaw in Fortra GoAnywhere Managed File Transfer (MFT) software as early as September 10, 2025, a whole week before it was publicly disclosed. “This is not ‘just’ a CVSS 10.0 flaw in a solution long favored...

Sep

New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module

September 26, 2025adminuserCyber

Cybersecurity researchers have discovered an updated version of a known Apple macOS malware called XCSSET that has been observed in limited attacks. “This new variant of XCSSET brings key changes related to browser targeting, clipboard hijacking, and persistence mechanisms,” the Microsoft Threat Intelligence team said in a Thursday report. “It employs sophisticated encryption and obfuscation

1 2 3 4 5 … 10

⚡ Weekly Recap: Cisco 0-Day, Record DDoS, LockBit 5.0, BMC Bugs, ShadowV2 Botnet & More

The State of AI in the SOC 2025 – Insights from Recent Study

Microsoft Flags AI-Driven Phishing: LLM-Crafted SVG Files Outsmart Email Security

First Malicious MCP Server Found Stealing Emails in Rogue Postmark-MCP Package

China-Linked PlugX and Bookworm Malware Attacks Target Asian Telecom and ASEAN Networks

Researchers Expose Phishing Threats Distributing CountLoader and PureRAT

New COLDRIVER Malware Campaign Joins BO Team and Bearlyfy in Russia-Focused Cyberattacks

Crash Tests for Security: Why BAS Is Proof of Defense, Not Assumptions

Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure

New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module

Recent Posts

Recent Comments

Archives

Categories

Meta

Month

Recent Posts

Recent Comments

Archives

Categories

Meta