Two recent vulnerabilities in Dassault Systèmes’ DELMIA Apriso manufacturing software have been exploited in active attacks, prompting urgent patches. These flaws enable attackers to escalate privileges and execute arbitrary code, risking industrial system security. #CISA #DELMIAApriso #CVE6204 #CVE6205 #IndustrialControlSystems…
Category: Cyber Security News
Google will make HTTPS the default setting in Chrome starting in October 2026 to enhance user security by preventing attackers from hijacking connections. This change aims to reduce insecure HTTP traffic and encourage website migration to encrypted protocols, reducing risks of malware and exploitation. #Chrome #HTTPS #Cybersecurity…
The Apache Software Foundation has disclosed two critical security vulnerabilities in Apache Tomcat, prompting immediate updates to mitigate potential exploitation. These flaws include directory traversal leading to remote code execution and console manipulation through log injections, affecting multiple versions of Tomcat. #ApacheTomcat #CVE202555752 #CVE202555754…
Cheating in esports and online gaming remains a significant issue, often involving paid cheats and malicious malware campaigns. Threat actors exploit platforms like YouTube and Discord to distribute info-stealing malware disguised as free cheats, posing security risks to players. #ESportsCheating #StealerMalware
North Korean APT group BlueNoroff has launched sophisticated cyber-espionage and financial theft campaigns using social engineering, AI, and multi-platform malware. Their operations now include AI-enhanced visuals, macOS targeting, and complex infection chains to evade detection and steal valuable data. #BlueNoroff #GhostCall #GhostHire #DownTroy #SilentSiphon…
The Python Software Foundation withdrew a $1.5 million NSF grant due to restrictive funding terms that conflicted with its commitment to diversity, equity, and inclusion. The foundation emphasized the importance of DEI to its mission, leading to the rejection of the funding that could have supported security improvements for Python and relevant open-source platforms. #OpenSourceSecurity #PythonFoundation #DEI
Microsoft has released the KB5067036 preview update for Windows 11 24H2 and 25H2, introducing features like a redesigned Start Menu and Administrator Protection to enhance security and user experience. The update includes bug fixes, UI improvements, and new tools, with certain features rolling out gradually. #Windows11 #KB5067036 #AdministratorProtection #StartMenuDesign
![Cybersecurity News | Daily Recap [28 Oct 2025]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [28 Oct 2025]")
Daily Recap, The week highlights new Android malware like Herodotus and Baohuo, a Chrome zero-day delivering Memento Labs/LeetAgent spyware, and SideWinder shifting to a PDF/ClickOnce chain targeting South Asian diplomacy with StealerBot. These items underscore evolving threat techniques across APTs, ransomware, and supply-chain incidents—watch for updates on Xortec, Dublin Airport data, and Oracle-related vulnerabilities. #Herodotus #Baohuo #MementoLabs #LeetAgent #SideWinder #StealerBot #Xortec #DublinAirport #OracleHack
Researchers have developed TEE.Fail, a side-channel attack capable of extracting cryptographic keys from trusted execution environments in modern CPUs, including Intel’s SGX and TDX, and AMD’s SEV-SNP. This attack leverages physically inspecting memory traffic on DDR5 servers, risking data breaches and virtual machine integrity. #IntelSGX #AMDSEVSNP…
The FCC has implemented new rules to enhance caller ID information and combat the rising issue of overseas robocalls. These regulations will improve caller verification, display more detailed caller data, and aim to reduce fraudulent calls from foreign sources. #FCC #Robocalls #CallerID #OverseasFraud…
A recent UK data leak involving Afghan asylum seekers has exposed individuals to serious threats, including violence and family displacement. The report criticizes the inadequate security advice given by the Ministry of Defence and calls for urgent government action. #AfghanDataLeak #RefugeeProtection…
Two vulnerabilities in DELMIA Apriso manufacturing software have been added to the CISA Known Exploited Vulnerabilities catalog, posing significant risks to organizations. These vulnerabilities include high-severity flaws that could lead to privilege escalation and arbitrary code execution. #DassaultSystèmes #DELMIAApriso…
The ACCC is suing Microsoft for allegedly misleading Australian users into paying for the Copilot AI assistant in Microsoft 365 by hiding the option to retain their existing plans. This legal action follows accusations of deceptive practices related to pricing and renewal notifications. #MicrosoftCopilot #AustralianConsumerLaw
Microsoft introduces new Copilot agents—App Builder and Workflows—that enable quick app creation and task automation within Microsoft 365, enhancing productivity and security. These tools are available exclusively to enrolled customers and integrate seamlessly with Microsoft 365 data, emphasizing enterprise security and management. #Microsoft365Copilot #AppBuilder #Workflows #EnterpriseSecurity #Automation
CISA has issued a warning about active exploitation of two critical vulnerabilities in Dassault Systèmes’ DELMIA Apriso software, which affects manufacturing operations. These flaws include a remote privilege escalation (CVE-2025-6205) and a code injection (CVE-2025-6204), prompting urgent patching efforts. #DELMIAApriso #CVE20256205 #CVE20256204