SecurityWeek Briefing

"JP Morgan to invest up to $10 billion in U.S. companies with critical ties to national security."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 13 October 2025, 2048 UTC.

Content and Source:  "Security Week Briefing" via email subscription from https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

92K followers37 articles per week

#security#tech

16

Today

JPMorgan to Invest up to $10 Billion in US Companies with Crucial Ties to National Security

JPMorgan invests 10B in national security

•

by Associated Press / 2h

The investment plan will focus on areas including artificial intelligence, cybersecurity and quantum computing. The post appeared first on SecurityWeek .

Fighting the Cyber Forever War: Born Defense Blends Investment Strategy with Just War Principles

by Kevin Townsend / 5h

Emerging from stealth, Born Defense is betting that a new kind of investment model can reshape how the U.S. fights its endless cyber battles. The post appeared first on SecurityWeek .

Malicious Code on Unity Website Skims Information From Hundreds of Customers

by Eduard Kovacs / 6h

The video game software development company says the incident impacted users of its SpeedTree website. The post appeared first on SecurityWeek .

SonicWall SSL VPN Accounts in Attacker Crosshairs

by Ionut Arghire / 7h

Threat actors have rapidly compromised more than 100 SonicWall SSL VPN accounts pertaining to over a dozen entities. The post appeared first on SecurityWeek .

SimonMed Imaging Data Breach Impacts 1.2 Million

by Eduard Kovacs / 8h

SimonMed Imaging was targeted by the Medusa ransomware group, which claimed to have stolen 200 Gb of data. The post appeared first on SecurityWeek .

NPM Infrastructure Abused in Phishing Campaign Aimed at Industrial and Electronics Firms

Phishing campaign exploits npm packages

•

by Ionut Arghire / 9h

Threat actors used automation to create over 175 malicious NPM packages targeting more than 135 organizations. The post appeared first on SecurityWeek .

Oracle Patches EBS Vulnerability Allowing Access to Sensitive Data

by Eduard Kovacs / 10h

It’s unclear if the new Oracle E-Business Suite flaw, which can be exploited remotely without authentication, has been used in the wild. The post appeared first on SecurityWeek .

Yesterday

Spanish Authorities Dismantle ‘GXC Team’ Crime-as-a-Service Operation

GXC Team cybercrime leader arrested

•

by Ionut Arghire / 11h

The authorities arrested GoogleXcoder, the alleged administrator of GXC Team, which offered phishing kits and Android malware. The post appeared first on SecurityWeek .

Extortion Group Leaks Millions of Records From Salesforce Hacks

Scattered Lapsus Hunters extort Salesforce victims

•

by Ionut Arghire / 12h

The data allegedly pertains to Albertsons, Engie Resources, Fujifilm, GAP, Qantas, and Vietnam Airlines. The post appeared first on SecurityWeek .

Oct 10, 2025

In Other News: Gladinet Flaw Exploitation, Attacks on ICS Honeypot, ClayRat Spyware

by SecurityWeek News / 3d

Other noteworthy stories that might have slipped under the radar: US universities targeted by payroll pirates, Zimbra vulnerability exploited, Mic-E-Mouse attack. The post appeared first on SecurityWeek .

Cisco, Fortinet, Palo Alto Networks Devices Targeted in Coordinated Campaign

by Ionut Arghire / 3d

GreyNoise has discovered that attacks exploiting Cisco, Fortinet, and Palo Alto Networks vulnerabilities are launched from the same infrastructure. The post appeared first on SecurityWeek .

RondoDox Botnet Takes ‘Exploit Shotgun’ Approach

5 TTPs

•

by Ionut Arghire / 3d

The botnet packs over 50 exploits targeting unpatched routers, DVRs, NVRs, CCTV systems, servers, and other network devices. The post appeared first on SecurityWeek .

Juniper Networks Patches Critical Junos Space Vulnerabilities

5 TTPs

•

by Ionut Arghire / 3d

Patches were rolled out for more than 200 vulnerabilities in Junos Space and Junos Space Security Director, including nine critical-severity flaws. The post appeared first on SecurityWeek .

Oct 9, 2025

ZDI Drops 13 Unpatched Ivanti Endpoint Manager Vulnerabilities

5 TTPs

•

by Ionut Arghire / 3d

The unpatched vulnerabilities allow attackers to execute arbitrary code remotely and escalate their privileges. The post appeared first on SecurityWeek .

Apple Bug Bounty Update: Top Payout $2 Million, $35 Million Paid to Date

by Eduard Kovacs / 3d

Apple has announced significant updates to its bug bounty program, including new categories and target flags. The post appeared first on SecurityWeek .

Sophisticated Malware Deployed in Oracle EBS Zero-Day Attacks

6 TTPs

•

by Eduard Kovacs / 3d

•

CVE-2025-61882

Google researchers believe exploitation may have started as early as July 10 and the campaign hit dozens of organizations. The post appeared first on SecurityWeek .

End of feed