Security Affairs newsletter Round 541 by Pierluigi Paganini

Pierluigi Paganini
September 14, 2025

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

International Press – Newsletter

Cybercrime

New LunaLock ransomware group emerges with unique extortion tactic 

ACE and DAZN Shut Down Calcio, One of Italy’s Most-Visited Illicit Sports Streaming Networks  

KillSec Ransomware is Attacking Healthcare Institutions in Brazil

Jaguar Land Rover admits hackers may have taken data 

Watch Out for Salty2FA: New Phishing Kit Targeting US and EU Enterprises

Kosovo National Pleads Guilty To Operating An Online Criminal Marketplace  

Off Your Docker: Exposed APIs Are Targeted in New Malware Strain

Employee at Multinational DVD Company Sentenced to Over Four Years Prison for Stealing, Selling Pre-Release Commercial DVDs for Blockbuster Films 

Bulletproof Host Stark Industries Evades EU Sanctions

Cyber Criminal Groups UNC6040 and UNC6395 Compromising Salesforce Instances for Data Theft and Extortion 

Malware

GPUGate Malware: Malicious GitHub Desktop Implants Use Hardware-Specific Decryption, Abuse Google Ads to Target Western Europe

Trojanized ScreenConnect installers evolve, dropping multiple RATs on a single machine

AsyncRAT in Action: Fileless Malware Techniques and Analysis of a Remote Access Trojan  

ChillyHell: A Deep Dive into a Modular macOS Backdoor

Hacking

GitHub Account Compromise Led to Salesloft Drift Breach Affecting 22 Companies

npm debug and chalk packages compromised 

Critical Chrome Vulnerability Earns Researcher $43,000  

Akira Ransomware Group Utilizing SonicWall Devices for Initial Access 

NT OS Kernel Information Disclosure Vulnerability – CVE-2025-53136 

Samsung patches actively exploited zero-day reported by WhatsApp

Intelligence and Information Warfare

NÚKIB issued a warning against the threat of data transfer and remote administration from the People’s Republic of China 

Venezuela’s president thinks American spies can’t hack Huawei phones     

Handbook “Weapons of Information Warfare”  

France says Apple notified victims of new spyware attacks  

Geedge & MESA Leak: Analyzing the Great Firewall’s Largest Document Leak

APT37 Targets Windows with Rust Backdoor and Python Loader    

Cybersecurity

Lovesac confirms data breach after ransomware attack claims

Introducing Signal Secure Backups

The September 2025 Security Update Review     

Memory Integrity Enforcement: A complete vision for memory safety in Apple devices     

How Pixel and Android are bringing a new level of trust to your images with C2PA Content Credentials

Treasury Sanctions Southeast Asian Networks Targeting Americans with Cyber Scams 

UK Train Operator LNER Warns Customers of Data Breach 

U.S. Senator accuses Microsoft of “gross cybersecurity negligence”

Sam Altman says that bots are making social media feel ‘fake’ 

AI Startup Says It Will End Crime by Blanketing the Entire United States in Ever-Watching Spy Cameras 

Tenable Confirms Data Breach – Hackers Accessed Customers’ Contact Details 

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

facebook
linkedin
twitter

Cybercrime
data breach
Hacking
hacking news
information security news
IT Information Security
malware
Newsletter
Security Affairs
Security News