IT-Sentinel

> TODAY'S SUMMARY (108 articles)

Today's cybersecurity news highlights several critical incidents and trends. A global outage of Microsoft 365 services, affecting Outlook and Teams, is raising concerns about potential exploitation by cybercriminals during the disruption. In data breach news, Uber confirmed the theft of thousands of drivers' licenses due to a security incident at a cloud service provider, while TSMC reported a data breach linked to a cloud vendor, emphasizing the risks associated with third-party services. Additionally, the FBI has attributed over $400 million in cryptocurrency theft to North Korean hackers using deepfake video calls. On the malware front, the international law enforcement operation "Endgame" successfully disrupted Gootloader and CastleRAT infrastructures, while new vulnerabilities in Check Point gateways have been exploited for destructive attacks. Phishing attacks are surging, particularly in Europe, with notable increases in detection rates.

// AI-powered summary generated at 16:00

> Russian Coldriver Hackers Deploy New 'NoRobot' Malware

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2025-10-21 10:02]

The Coldriver hacking group reportedly shifted its operation quickly after the May 2025 public disclosure of its LostKeys malware

> Over 73,000 WatchGuard Firebox Devices Impacted by Recent Critical Flaw

[SOURCE] SecurityWeek [LANGUAGE: EN] [DATE: 2025-10-21 10:00]

Affecting the Fireware OS iked process, the vulnerability can lead to remote code execution and does not require authentication. The post Over 73,000 WatchGuard Firebox Devices Impacted by Recent Critical Flaw appeared first on SecurityWeek.

> Getting salty with LLMs: SophosAI unveils new defense against jailbreaking at CAMLIS 2025

[SOURCE] Naked Security [LANGUAGE: EN] [DATE: 2025-10-21 10:00]

On October 22-24, SophosAI will present research on ‘LLM salting’ (a novel countermeasure against jailbreaks) and command line classification at CAMLIS 2025

> Reducing abuse of Microsoft 365 Exchange Online’s Direct Send

[SOURCE] Cisco Talos [LANGUAGE: EN] [DATE: 2025-10-21 10:00]

Cisco Talos has observed increased activity by malicious actors leveraging Direct Send as part of phishing campaigns. Here's how to strengthen your defenses.

> Slopsquatting Attacks: How AI Phantom Dependencies Create Security Risks

[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2025-10-21 10:00]

TL;DR AI coding assistants can hallucinate package names, creating phantom dependencies that don't exist in official repositories. Attackers exploit this predictable behavior through slopsquatting, which involves registering malicious packages with names that AI models commonly suggest. This e...

> Myanmar Military Shuts Down Major Cybercrime Center and Detains Over 2,000 People

[SOURCE] SecurityWeek [LANGUAGE: EN] [DATE: 2025-10-21 09:56]

Myanmar is notorious for hosting cyberscam operations responsible for bilking people all over the world. The post Myanmar Military Shuts Down Major Cybercrime Center and Detains Over 2,000 People appeared first on SecurityWeek.

> Oracle Linux 7: ELSA-2025-14997 httpd Moderate Security Advisory