Pierluigi Paganini
September 14, 2025
Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.
International Press – Newsletter
New LunaLock ransomware group emerges with unique extortion tactic
ACE and DAZN Shut Down Calcio, One of Italy’s Most-Visited Illicit Sports Streaming Networks
KillSec Ransomware is Attacking Healthcare Institutions in Brazil
Jaguar Land Rover admits hackers may have taken data
Watch Out for Salty2FA: New Phishing Kit Targeting US and EU Enterprises
Kosovo National Pleads Guilty To Operating An Online Criminal Marketplace
Off Your Docker: Exposed APIs Are Targeted in New Malware Strain
Bulletproof Host Stark Industries Evades EU Sanctions
Malware
Trojanized ScreenConnect installers evolve, dropping multiple RATs on a single machine
AsyncRAT in Action: Fileless Malware Techniques and Analysis of a Remote Access Trojan
ChillyHell: A Deep Dive into a Modular macOS Backdoor
Hacking
GitHub Account Compromise Led to Salesloft Drift Breach Affecting 22 Companies
npm debug and chalk packages compromised
Critical Chrome Vulnerability Earns Researcher $43,000
Akira Ransomware Group Utilizing SonicWall Devices for Initial Access
NT OS Kernel Information Disclosure Vulnerability – CVE-2025-53136
Samsung patches actively exploited zero-day reported by WhatsApp
Intelligence and Information Warfare
Venezuela’s president thinks American spies can’t hack Huawei phones
Handbook “Weapons of Information Warfare”
France says Apple notified victims of new spyware attacks
Geedge & MESA Leak: Analyzing the Great Firewall’s Largest Document Leak
APT37 Targets Windows with Rust Backdoor and Python Loader
Cybersecurity
Lovesac confirms data breach after ransomware attack claims
Introducing Signal Secure Backups
The September 2025 Security Update Review
Memory Integrity Enforcement: A complete vision for memory safety in Apple devices
How Pixel and Android are bringing a new level of trust to your images with C2PA Content Credentials
Treasury Sanctions Southeast Asian Networks Targeting Americans with Cyber Scams
UK Train Operator LNER Warns Customers of Data Breach
U.S. Senator accuses Microsoft of “gross cybersecurity negligence”
Sam Altman says that bots are making social media feel ‘fake’
Tenable Confirms Data Breach – Hackers Accessed Customers’ Contact Details
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, newsletter)
Malware / September 13, 2025
