InfoSecBulletin Cybersecurity for mankind
Every day a lot of cyberattack happen around the world including ransomware, Malware attack, data breaches, website defacement and so on. Its our daily security digest to cover the latest happenings in the world.
Spend a bit time to read out todays update:
Microsoft Confirms 900+ XSS Vulns Found in IT Services
Daily Security Update Dated : 15.09.2025
IBM QRadar SIEM Vuln Let Attackers Perform Unauthorized Actions
Major Australian Banks using Army of AI Bots to Scam Scammers
F5 to acquire CalypsoAI for $180M for Advanced AI Security Capabilities
AI Pentesting Tool ‘Villager’ Merges Kali Linux with DeepSeek AI for Automated Attacks
CVE-2025-21043
Samsung Patched Critical Zero-Day Flaw Exploited in Android Attacks
Albania appoints world’s first AI minister, “Diella” to Tackle Corruption
L7 DDoS Botnet Hijacked 5.76M Devices for Large Attacks
Palo Alto Networks User-ID Credential Agent Vuln Exposes password In Cleartext
01. DarkCloud Stealer is targeting financial firms via phishing emails with malicious RAR attachments, using MSBuild.exe injection and a PowerShell-downloaded JPG to decrypt an embedded .NET file and steal credentials from email, FTP, and browsers.
02. The Yurei ransomware has been exploiting open-source tools to enhance its capabilities, posing a significant threat to organizations by leveraging existing vulnerabilities in software.
03. The White Cobra malware, found in malicious Visual Studio Code cursor extensions, has been targeting developers by injecting harmful code into their environments.
04. A new variant of the HybridPetya ransomware has emerged, capable of bypassing UEFI Secure Boot protections, thus increasing its potential for widespread damage.
05. The BlackNevas ransomware group has been targeting organizations worldwide, primarily in the APAC region, as well as select countries in Europe and North America, using AES symmetric and RSA public-key encryption.
