SecurityWeek Briefing.

"PQC adoption, new Android spyware, FEMA data breach."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 03 October 2025, 2052 UTC.

Content and Source:  "SecurityWeek Briefing."

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

URL--https://www.securityweek.com

Please check subscription link, URL, or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

92K followers43 articles per week

#security#tech

126

Today

In Other News: PQC Adoption, New Android Spyware, FEMA Data Breach

by SecurityWeek News / 6h

Other noteworthy stories that might have slipped under the radar: cybercriminals offer money to BBC journalist, LinkedIn user data will train AI, Tile tracker vulnerabilities. The post appeared first on SecurityWeek .

Oneleet Raises $33 Million for Security Compliance Platform

Oneleet secures 33M$ funding

•

by Ionut Arghire / 8h

The cybersecurity startup will expand its engineering team, add more AI capabilities, and invest in go-to-market efforts. The post appeared first on SecurityWeek .

Unauthenticated RCE Flaw Patched in DrayTek Routers

2 TTPs

•

by Ionut Arghire / 9h

•

CVE-2025-10547

The security defect can be exploited remotely via crafted HTTP/S requests to a vulnerable device’s web user interface. The post appeared first on SecurityWeek .

Organizations Warned of Exploited Meteobridge Vulnerability

by Ionut Arghire / 10h

Patched in mid-May, the security defect allows remote unauthenticated attackers to execute arbitrary commands with root privileges. The post appeared first on SecurityWeek .

MokN Raises $3 Million for Phish-Back Solution

by Ionut Arghire / 10h

The French cybersecurity startup tricks attackers into revealing stolen credentials so they can be neutralized. The post appeared first on SecurityWeek .

Yesterday

Oracle Says Known Vulnerabilities Possibly Exploited in Recent Extortion Attacks

3 TTPs

•

by Eduard Kovacs / 10h

The software giant’s investigation showed that vulnerabilities patched in July 2025 may be involved. The post appeared first on SecurityWeek .

Chrome 141 and Firefox 143 Patches Fix High-Severity Vulnerabilities

by Ionut Arghire / 12h

High-severity flaws were patched in Chrome’s WebGPU and Video components, and in Firefox’s Graphics and JavaScript Engine components. The post appeared first on SecurityWeek .

Red Hat Confirms GitLab Instance Hack, Data Theft

4 TTPs

•

by Eduard Kovacs / 13h

•

Crimson Collective breaches Red Hat GitHub

Hackers claim to have stolen 28,000 private repositories, including data associated with major companies that use Red Hat services. The post appeared first on SecurityWeek .

Many Attacks Aimed at EU Targeted OT, Says Cybersecurity Agency

3 TTPs

•

by Eduard Kovacs / 1d

ENISA has published its 2025 Threat Landscape report, highlighting some of the attacks aimed at OT systems. The post appeared first on SecurityWeek .

1.2 Million Impacted by WestJet Data Breach

2 TTPs

•

by Ionut Arghire / 1d

•

WestJet data breach exposes passenger information

The Canadian airline fell victim to a cyberattack in June and has completed the analysis of stolen information. The post appeared first on SecurityWeek .

766,000 Impacted by Data Breach at Dealership Software Provider Motility

4 TTPs

•

by Ionut Arghire / 1d

•

Motility Software Solutions data breach

The hackers stole names, contact details, Social Security numbers, and driver’s license numbers in an August 19 ransomware attack. The post appeared first on SecurityWeek .

WireTap Attack Breaks Intel SGX Security

WireTap attack breaches Intel SGX

•

by Ionut Arghire / 1d

The attack uses a passive interposer to control the SGX enclave and extract the DCAP attestation key, breaking the mechanism. The post appeared first on SecurityWeek .

Hackers Launch Extortion Campaign Targeting Oracle E-Business Suite Customers

4 TTPs

•

by Eduard Kovacs / 1d

•

Clop gang targets Oracle users

Executives at major firms received extortion threats alleging theft of sensitive data from Oracle EBS, with possible ties to Cl0p and FIN11. The post appeared first on SecurityWeek .

Oct 1, 2025

Zania Raises $18 Million for AI-Powered GRC Platform

Zania raises 18M for AI GRC

•

by Ionut Arghire / 1d

The company plans to triple its engineering and go‑to‑market teams and to accelerate its agentic AI platform. The post appeared first on SecurityWeek .

1.5 Million Impacted by Allianz Life Data Breach

2 TTPs

•

by Ionut Arghire / 1d

•

Allianz Life data breach affects 1.5M

In July, hackers stole files containing names, addresses, dates of birth, and Social Security numbers from a cloud-based CRM. The post appeared first on SecurityWeek .

OpenSSL Vulnerabilities Allow Private Key Recovery, Code Execution, DoS Attacks

8 TTPs

•

by Eduard Kovacs / 2d

Three vulnerabilities have been patched with the release of OpenSSL updates. The post appeared first on SecurityWeek .

Chinese APT ‘Phantom Taurus’ Targeting Organizations With Net-Star Malware

7 TTPs

•

by Ionut Arghire / 2d

•

Phantom Taurus targets global governments

Focused on espionage, the threat actor shares infrastructure with Chinese APTs, but uses different TTPs in attacks. The post appeared first on SecurityWeek .

Canadian Airline WestJet Says Hackers Stole Customer Data

3 TTPs

•

by Ionut Arghire / 2d

•

WestJet data breach exposes passenger information

The company says names, contact details, and ID documents provided in connection with reservations and travel were stolen from its systems. The post appeared first on SecurityWeek .

NIST Publishes Guide for Protecting ICS Against USB-Borne Threats

by Eduard Kovacs / 2d

NIST Special Publication 1334 focuses on reducing cybersecurity risks associated with the use of removable media devices in OT environments. The post appeared first on SecurityWeek .

Descope Raises $35 Million in Seed Round Extension

Descope secures 88M seed funding

•

by Ionut Arghire / 2d

The identity and access management provider will invest in agentic identity R&D, expand to new regions, and hire new talent. The post appeared first on SecurityWeek .

Cybersecurity Awareness Month 2025:Prioritizing Identity to Safeguard Critical Infrastructure

by Torsten George / 2d

This year’s theme focuses on government entities and small and medium-sized businesses that are vital to protecting the systems and services that keep our communities running. The post appeared first on SecurityWeek .

Sep 30, 2025

Broadcom Fails to Disclose Zero-Day Exploitation of VMware Vulnerability

4 TTPs

•

by Ionut Arghire / 2d

•

CVE-2025-41244

Impacting VMware Aria Operations and VMware Tools, the flaw can be exploited to elevate privileges on the VM. The post appeared first on SecurityWeek .

Battering RAM Attack Breaks Intel and AMD Security Tech With $50 Device

3 TTPs

•

by Eduard Kovacs / 2d

•

Battering RAM attack breaches cloud security

Intel and AMD say the research is not in scope of their threat model because the attack requires physical access to a device. The post appeared first on SecurityWeek .

Call for Presentations Open for 2025 CISO Forum Virtual Summit

by SecurityWeek News / 3d

This online event is expected to attract more than 2,500 attendee registrations from around the world. The post appeared first on SecurityWeek .

Google Patches Gemini AI Hacks Involving Poisoned Logs, Search Results

8 TTPs

•

by Eduard Kovacs / 3d

Researchers found more methods for tricking an AI assistant into aiding sensitive data theft. The post appeared first on SecurityWeek .

Mondoo Raises $17.5 Million for Vulnerability Management Platform

by Eduard Kovacs / 3d

Mondoo has raised more than $32 million in total, with the latest funding round led by HV Capital. The post appeared first on SecurityWeek .

CISO Conversations: John ‘Four’ Flynn, VP of Security at Google DeepMind

by Kevin Townsend / 3d

Flynn has been DeepMind’s VP of security since May 2024. Before then he had been a CISO with Amazon, CISO at Uber, and director of information security at Facebook. The post appeared first on SecurityWeek .

New Guidance Calls on OT Operators to Create Continually Updated System Inventory

by Eduard Kovacs / 3d

Agencies in several countries have created guidance titled ‘Creating and Maintaining a Definitive View of Your OT Architecture’. The post appeared first on SecurityWeek .

California Gov. Gavin Newsom Signs Bill Creating AI Safety Measures

Newsom to sign California AI bill

•

by Mike Lennon / 3d

The Transparency in Frontier Artificial Intelligence Act (TFAIA) requires AI companies to implement and disclose publicly safety protocols to prevent their most advanced models from being used to cause major harm. The post appeared first on SecurityWeek .

High-Severity Vulnerabilities Patched in VMware Aria Operations, NSX, vCenter

3 TTPs

•

by Ionut Arghire / 3d

The flaws could allow attackers to escalate privileges, manipulate notifications, and enumerate usernames. The post appeared first on SecurityWeek .

Webinar Today: AI and the Trust Dilemma: Balancing Innovation and Risk

by SecurityWeek News / 3d

Webinar: How do you embrace AI’s potential while defending against its threats? The post appeared first on SecurityWeek .

Apple Updates iOS and macOS to Prevent Malicious Font Attacks

CVE-2025-43400

•

by Ionut Arghire / 3d

The vulnerability could lead to a denial-of-service condition or memory corruption when a malicious font is processed. The post appeared first on SecurityWeek .