Cybersecurity News - Page 32

In brief: Microsoft patches a WSUS flaw, a major US telecom supplier compromised by nation-state hackers, and more.

Peter Williams used his high-level access to the company’s secure network to download and transfer the classified components.

The attackers remained undetected for nearly nine months.

The October 2025 update delivers improvements across multiple sections, including techniques, groups, campaigns, and software.

Aisuru is related to “TurboMirai” malware, general class of Mirai-variant DDoS botnets capable of generating multi-tb/sec and -gpps direct-path DDoS attacks.

TEE.Fail leverages a memory-bus interposition attack on DDR5-based systems, exploiting design weaknesses in newer confidential computing architectures.

The approach involves hackers abusing software already installed on victims’ systems to carry out malicious actions.

The incident was discovered on Saturday and involved an isolated external file transfer system.

In the “Premier Pass-as-a-Service” trend multiple APT groups share information and resources, making it harder to attribute the attack.

The flaw exploits a cross-site request forgery issue that allows hackers to modify ChatGPT’s memory without user consent.