North Korean threat actors have ramped up their software supply chain attacks, flooding the npm JavaScript package repository with 67 malicious packages delivering the XORIndex malware loader. Security firms report over 17,000 downloads so far, primarily targeting developers and organizations with cryptocurrency holdings. This highlights the urgent need for vigilant dependency management and ongoing monitoring of open-source ecosystems to mitigate sophisticated nation-state threats.
Source: The Hacker News
Chrome and SQLite Zero-Days: Google Moves Fast to Patch Active Attacks
Google has issued a critical emergency update for Chrome users, urgently patching CVE-2025-6558—an input validation flaw in GPU components already exploited in the wild. Simultaneously, Google’s AI tool “Big Sleep” preemptively detected a critical memory corruption bug (CVE-2025-6965) in SQLite, previously known only to threat actors. These rapid-fire responses underscore the accelerating arms race between attackers and defenders, especially as generative AI fuels both sides.
Source: The Hacker News
DDoS Assaults Reach New Highs: Cloudflare Thwarts Record 7.3 Tbps Attack
Hyper-volumetric DDoS (Distributed Denial of Service) attacks are reaching unprecedented scales, with Cloudflare reporting mitigation of a 7.3 Tbps assault in Q2 2025. Though the total number of attacks has dropped, the frequency and size of ‘hyper-volumetric’ incidents have surged—an average of 71 blocked daily, posing mounting risks to critical online infrastructure globally.
Source: Cloudflare Blog
Attackers Hide JavaScript in SVG Files for Stealth Redirects, Bypass User Defenses
Security researchers warn of an uptick in phishing campaigns that embed obfuscated JavaScript inside SVG images, enabling browser-native redirections to malicious domains. This evolving attack method bypasses many traditional filters and requires no user interaction, making email and website security inspections for image files even more critical.
Source: SecurityWeek
Critical Gigabyte Motherboard Firmware Flaws Enable Bootkit Attacks
Over 100 Gigabyte motherboard models are vulnerable to memory corruption bugs in their UEFI firmware, allowing attackers to install stealthy, persistent bootkits during system startup. CERT has issued a public warning as these vulnerabilities reappear despite previous fixes, renewing concerns about hardware-level threats that are difficult to detect and eradicate.
Source: Help Net Security
AsyncRAT’s Open-Source Code Fuels Surge in Dangerous Malware Variants
Researchers are tracking the proliferation of AsyncRAT, an open-source remote access trojan widely forked and customized since 2019. Its modular design and broad feature set—including keylogging, credential theft, and screen capture—have made it a favorite for a new generation of malware, driving continued attacks against organizations worldwide.
Source: The Hacker News
US CISA Flags Train Control Vulnerability That Could Enable Remote Derailment
The US Cybersecurity and Infrastructure Security Agency (CISA) has identified a critical vulnerability (CVE-2025-1727) in train braking systems that could let attackers trigger emergency stops—and potentially derailments—using inexpensive radio equipment. Stakeholders in the transportation sector are urged to review mitigations to prevent catastrophic tampering of rail safety systems.
Source: CISO2CISO / Security Affairs
You May Also Be Interested In...