Security Affairs.

"Hackers steal millions of Gucci, Balenciaga, and Alexander McQueen customer records."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents. Accessed on 18 September 2025, 1435 UTC.

Content and Source: Email subscription via https://feedly.com.

https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fsecurityaffairs.co%2Fwordpress%2Ffeed

Please check subscription link or scroll down to read your selections. Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

3 TTPs

•

by Pierluigi Paganini / 2d

•

Kering brands hacked customer data

Crooks stole personal data of millions of Gucci, Balenciaga, and Alexander McQueen customers: parent firm Kering confirmed the breach. Hackers stole private data of millions of Gucci, Balenciaga, and Alexander McQueen customers, including names, contacts, addresses, and spending details. The parent company, Kering, confirmed the security breach and notified data protection authorities. The firm d

Cybercrime group accessed Google Law Enforcement Request System (LERS)

2 TTPs

•

by Pierluigi Paganini / 2d

•

Google confirms law enforcement breach

Google found threat actors created a fake account in its Law Enforcement Request System (LERS) and shut it down. Google confirmed that threat actors gained access to its Law Enforcement Request System (LERS) platform by creating a fake account. The Google Law Enforcement Request System (LERS) is a secure online portal for verified government agencies to submit and track legal requests for user da

UK ICO finds students behind majority of school data breaches

Students hacking schools for fun

•

by Pierluigi Paganini / 3d

UK ICO reports students caused over half of school data breaches, showing kids are shaping cybersecurity in unexpected ways. The UK Information Commissioner’s Office (ICO), students were responsible for most of the data breaches suffered by the schools in the country. The U.K.’s independent regulator for data protection and information rights also reported that nearly one-third of insider attacks

Yesterday

CVE-2025-10585 is the sixth actively exploited Chrome zero-day patched by Google in 2025

2 TTPs

•

by Pierluigi Paganini / 4h

•

CVE-2025-10585

Google addressed four vulnerabilities affecting its Chrome web browser, including one that has been exploited in the wild. Google released security updates to address four vulnerabilities in the Chrome web browser, including CVE-2025-10585, which has reportedly been exploited in the wild. “Google is aware that an exploit for CVE-2025-10585 exists in the wild.” reads the advisory published by Goog

Jaguar Land Rover will extend its production halt into a third week following a cyberattack

Impact (Enterprise TA0040)

•

by Pierluigi Paganini / 6h

•

Jaguar Land Rover cyberattack halts production

Jaguar Land Rover will keep vehicle production halted until at least September 24 following a cyberattack that hit the company earlier this month. Jaguar Land Rover will extend its production halt into a third week, keeping operations suspended until at least September 24 after a recent cyberattack . Jaguar Land Rover (JLR) is a British luxury vehicle manufacturer headquartered in Whitley, Covent

China-linked APT41 targets government, think tanks, and academics tied to US-China trade and policy

9 TTPs

•

by Pierluigi Paganini / 17h

•

TA415 targets US-China relations via phishing

China-linked group APT41 impersonated a U.S. lawmaker in phishing attacks on government, think tanks, and academics tied to US-China trade and policy. Proofpoint observed China-linked cyber espionage group APT41 impersonating a U.S. lawmaker in a phishing campaign targeting government, think tanks, and academics tied to U.S.-China trade and policy. APT41, known also as Amoeba, BARIUM, BRONZE ATLA

Microsoft and Cloudflare teamed up to dismantle the RaccoonO365 phishing service

5 TTPs

•

by Pierluigi Paganini / 23h

•

Microsoft disrupts RaccoonO365 phishing service

Microsoft and Cloudflare disrupted the RaccoonO365 phishing service, used to steal thousands of user credentials. A joint operation conducted by Microsoft and Cloudflare has taken down the infrastructure used by the RaccoonO365 phishing service (tracked by Microsoft as Storm-2246). Microsoft announced that its Digital Crimes Unit shut down RaccoonO365, seizing 338 sites used to steal Microsoft 36

Sep 16, 2025

DoJ resentenced former BreachForums admin to three years in prison

BreachForums admin sentenced to three years

•

by Pierluigi Paganini / 1d

The U.S. Department of Justice (DoJ) resentenced the former administrator of the popular BreachForums hacking forum BreachForums to three years in prison. The U.S. DoJ resentenced the former BreachForums administrator, Conor Brian Fitzpatrick (aka Pompompurin), 22, to three years in prison. Authorities say he ran the notorious hacking forum, which traded stolen data and cybercrime tools, fueling

Apple backports fix for actively exploited CVE-2025-43300

by Pierluigi Paganini / 1d

Apple announced it has backported patches for a recently addressed actively exploited vulnerability tracked as CVE-2025-43300. Apple has backported security patches released to address an actively exploited vulnerability tracked as CVE-2025-43300 . In August 2025, Apple addressed the actively exploited zero-day CVE-2025-43300 in iOS, iPadOS, and macOS. The vulnerability is zero-day out-of-bounds

New supply chain attack hits npm registry, compromising 40+ packages

7 TTPs

•

by Pierluigi Paganini / 1d

•

Critical NPM hack threatens crypto funds

Researchers uncovered a new supply chain attack targeting the npm registry that impacted over 40 packages belonging to multiple maintainers. Security researchers at Socket uncovered a malicious update to @ctrl/tinycolor , a package with 2.2M weekly downloads on npm. While investigating the case, they discovered it was linked to a larger supply chain attack that compromised over 40 packages from m

Sep 15, 2025

China-linked Mustang Panda deploys advanced SnakeDisk USB worm

22 TTPs

•

by Pierluigi Paganini / 2d

•

Toneshell backdoor and SnakeDisk worm

China-linked APT group Mustang Panda has been spotted using a new USB worm called SnakeDisk along with a new version of known malware China-linked APT group Mustang Panda (aka Hive0154, Camaro Dragon , RedDelta or Bronze President ) has been spotted using an updated version of the TONESHELL backdoor and a previously undocumented USB worm called SnakeDisk. Mustang Panda has been active since at le

Insider breach at FinWise Bank exposes data of 689,000 AFF customers

Impact (Enterprise TA0040)

•

by Pierluigi Paganini / 2d

•

FinWise data breach affects 700K

An ex-employee caused an insider breach at FinWise Bank, exposing data of 689,000 American First Finance customers. FinWise Bank is a Utah-based community bank, FDIC-insured, that partners with fintechs and lenders to offer consumer loans, small business financing, and deposit services. FinWise Bank notified the Maine AG that a data breach tied to the U.S.-based financial services company America

Fairmont Federal Credit Union 2023 data breach impacted 187K people

Credential Access (Enterprise TA0006)

•

by Pierluigi Paganini / 2d

•

Fairmont Federal Credit Union data breach

Fairmont Federal Credit Union alerts 187K people that a 2023 breach exposed personal, financial, and medical data. Fairmont Federal Credit Union (FFCU) is a not-for-profit financial cooperative in West Virginia. It offers services like personal and business loans, mortgages, checking accounts, and financial aid, operating nine regional branches to serve its members. Fairmont Federal Credit Union

Sep 14, 2025

INC ransom group claimed the breach of Panama’s Ministry of Economy and Finance

2 TTPs

•

by Pierluigi Paganini / 3d

•

Panama MEF hit by ransomware attack

Panama’s Ministry of Economy and Finance disclosed a security breach impacting a computer in its infrastructure. Panama’s Ministry of Economy and Finance (MEF) announced that threat actors likely compromised one of its computers. The Ministry immediately activated its security protocols to contain the threat. Panama’s Ministry pointed out that critical systems vital to operations remain safe. In

Hawaii Cybersecurity Journal