"Microsoft disrupts ransomware campaign abusing Azure certificates."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.   Accessed on 17 October 2025, 2316 UTC.

Content and Source:  "Dark Reading" via email subscription from https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.darkreading.com%2Frss%2Fall.xml

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Dark Reading

146K followers26 articles per week

#security#tech

25

Today

Microsoft Disrupts Ransomware Campaign Abusing Azure Certificates

Microsoft disrupts Vanilla Tempest attack

•

by Rob Wright / 3h

Microsoft revoked more than 200 digital certificates that threat actors used to sign fake Teams binaries that set the stage for Rhysida ransomware attacks.

AI Agent Security: Whose Responsibility Is It?

by Alexander Culafi / 5h

The shared responsibility model of data security, familiar from cloud deployments, is key to agentic services, but cybersecurity teams and corporate users often struggle with awareness and managing that risk.

AI Chat Data Is History's Most Thorough Record of Enterprise Secrets. Secure It Wisely

by Rob T. Lee / 6h

AI interactions are becoming one of the most revealing records of human thinking, and we're only beginning to understand what that means for law enforcement, accountability, and privacy.

11 Dumbest Things Smart People Waste Money On

by Finance Buzz

sponsored

You’re saving wisely—unlock more secrets to find extra cash fast.

Yesterday

Cyberattackers Target LastPass, Top Password Managers

by Nate Nelson, Contributing Writer / 1d

Be aware: a rash of phishing campaigns are leveraging the anxiety and trust employees have in password vaults securing all of their credentials.

Leaks in Microsoft VS Code Marketplace Put Supply Chain at Risk

VS Code extensions leak sensitive secrets

•

by Rob Wright / 1d

Researchers discovered more than 550 unique secrets exposed in Visual Studio Code marketplaces, prompting Microsoft to bolster security measures.

China Hackers Test AI-Optimized Attack Chains in Taiwan

by Nate Nelson, Contributing Writer / 1d

AI might help some threat actors in certain respects, but one group is proving that its use for cyberattacks has its limits.

Oct 15, 2025

LevelBlue Announces Plans to Acquire XDR Provider Cybereason

LevelBlue acquires Cybereason for expansion

•

by Jeffrey Schwartz / 1d

The deal, which builds on LevelBlue's recent acquisition of Trustwave and Aon, aims to provide customers with a broad portfolio of extended detection and response, managed detection and response, and forensic services.

'Mysterious Elephant' Moves Beyond Recycled Malware

by Jai Vijayan, Contributing Writer / 2d

The cyber-espionage group has been using sophisticated custom tools to target government and diplomatic entities in South Asia since early 2025.

F5 BIG-IP Environment Breached by Nation-State Actor

F5 Networks breached by hackers

•

by Alexander Culafi / 2d

F5 disclosed a breach this week that included zero-day bugs, source code, and some customer information.

Harvard University Breached in Oracle Zero-Day Attack

Clop ransomware hacks Harvard University

•

by Kristina Beek / 2d

The Clop ransomware group claimed responsibility for stealing the university's data as part of a broader campaign against Oracle customers.

Oct 14, 2025

Africa Remains Top Global Target, Even as Attacks Decline

by Robert Lemos, Contributing Writer / 2d

Organizations across the continent saw 10% fewer attacks in September, but Africa remains the most attacked region in the world, leading the Global South.

Microsoft Drops Terrifyingly Large October Patch Update

Microsoft patches 172 vulnerabilities October 2025

•

by Jai Vijayan, Contributing Writer / 3d

October 2025's enormous Patch Tuesday offers plenty of nightmares for admins, including actively exploited zero-days and insidious high-severity privilege-escalation bugs — and it spells curtains for Windows 10 updates.

China's Flax Typhoon Turns Geo-Mapping Server into a Backdoor

by Rob Wright / 3d

Chinese APT threat actors compromised an organization's ArcGIS server, modifying the widely used geospatial mapping software for stealth access.

Pixnapping Attack Lets Attackers Steal 2FA on Android

Android Pixnapping attack steals data

•

by Alexander Culafi / 3d

The proof-of-concept exploit allows an attacker to steal sensitive data from Gmail, Google Accounts, Google Authenticator, Google Maps, Signal, and Venmo.

Oct 13, 2025

Financial, Other Industries Urged to Prepare for Quantum Computers

by Robert Lemos, Contributing Writer / 4d

Despite daunting technical challenges, a quantum computer capable of breaking public-key encryption systems may be only a decade or two off.

Critical infrastructure CISOs Can't Ignore 'Back-Office Clutter' Data

by Joe Pearce / 4d

OT and ICS systems indeed hold the crown jewels of critical infrastructure organizations, but unmonitored data sprawl is proving to be pure gold for increasingly brazen nation-state threat actors like Volt Typhoon, Pearce argues.

Generation AI: Why Today's Tech Graduates Are At a Disadvantage

by Kristina Beek / 4d

With artificial intelligence supplanting entry-level security jobs, new cyber professionals will have to up their game to stay competitive in the industry.

Oct 10, 2025

1Password Addresses Critical AI Browser Agent Security Gap

1Password secures AI agent credentials

•

by Arielle Waldman / 7d

The security company looks to tackle new authentication challenges that could lead to credential leakage, as enterprises increasingly leverage AI browser agents.

The Fight Against Ransomware Heats Up on the Factory Floor

by Arielle Waldman / 7d

Ransomware gangs continue to set their sights on the manufacturing industry, but companies are taking steps to protect themselves, starting with implementing timely patch management protocols.

RondoDox Botnet: an 'Exploit Shotgun' for Edge Vulns

RondoDox botnet exploits multiple vulnerabilities

•

by Nate Nelson, Contributing Writer / 7d

RondoDox takes a hit-and-run, shotgun approach to exploiting bugs in consumer edge devices around the world.

Microsoft Adds Agentic AI Capabilities to Sentinel

by Jeffrey Schwartz / 7d

Microsoft previewed the Sentinel security graph and MCP server at its annual Microsoft Secure virtual event earlier this month.

Feds Shutter ShinyHunters Salesforce Extortion Site

by Kristina Beek / 7d

The group warned that law-enforcement crackdowns are imminent in the wake of the takedown, but its extortion threats against Salesforce victims remain active.

Chinese Hackers Use Velociraptor IR Tool in Ransomware Attacks

Velociraptor used in ransomware attacks

•

by Rob Wright / 7d

In a new wrinkle for adversary tactics, the Storm-2603 threat group is abusing the digital forensics and incident response (DFIR) tool to gain persistent access to victim networks.

Deepfake Awareness High at Orgs, But Cyber Defenses Badly Lag

by Robert Lemos, Contributing Writer / 7d

The vast majority of organizations are encountering AI-augmented threats, but remain confident in their defenses, despite inadequate detection investment and more than half falling to successful attacks.

Commentary Section Launches New, More Opinionated Era

by Becky Bracken / 7d

Dark Reading is looking for leading industry experts with a point of view they want to share with the rest of the cybersecurity community for our new Commentary section.

End of feed