Microsoft Patches 172 Flaws and Six Zero-Days; F5 Discloses Nation-State Breach Stealing BIG-IP Source Code
Summary
This intelligence briefing for October 15, 2025, covers a massive Microsoft Patch Tuesday addressing 172 vulnerabilities, including three actively exploited zero-days. A critical supply chain threat emerges as F5 discloses a long-term breach by a nation-state actor who stole BIG-IP source code, prompting a CISA emergency directive. Other major developments include the return of the LockBit ransomware group with an upgraded version, a surge in overall ransomware attacks, and multiple data breach and vulnerability disclosures affecting companies like Canadian Tire and Fortinet.
Today New Articles
Canadian Tire Reveals E-Commerce Data Breach Affecting Multiple Retail Brands
Canadian Tire Corp., a major Canadian retail conglomerate, has reported a data breach affecting its e-commerce customers. Discovered on October 2, 2025, the incident involved unauthorized access to a single database serving multiple brands, including Canadian...
LockBit Ransomware Returns from Hiatus with Upgraded 'Version 5.0'
After a two-month hiatus following law enforcement disruption, the prolific LockBit ransomware group has returned, announcing the release of LockBit 5.0. This new version of the ransomware-as-a-service (RaaS) malware incorporates significant technical upgrades...
Ransomware Attacks Surge by 46% as Threat Actors Target Construction and Manufacturing
Despite a slight decrease in overall weekly cyber attacks, ransomware activity has surged by 46%, according to a new report from Check Point Research. This indicates a strategic shift by threat actors towards more focused and impactful ransomware campaigns. Th...
Israeli Defense R&D Firm 'MAYA' Targeted in Pro-Resistance Hacktivist Attack
A hacktivist group calling itself the 'Cyber Support Front' has claimed responsibility for a cyberattack against MAYA, an Israeli research and development firm with close ties to the country's Ministry of Defense and major defense contractors like Elbit System...
Fortinet Discloses High-Severity Authenticated RCE Flaw in FortiOS CLI
Fortinet has disclosed a high-severity vulnerability in the command line interface (CLI) of its FortiOS operating system. The flaw could allow an authenticated attacker to execute arbitrary commands on the underlying system. While a CVE identifier has not yet...
Article Updates
F5 Breached by Nation-State Actor; BIG-IP Source Code Stolen, CISA Issues Emergency Directive
Update:The F5 breach, previously attributed to an unnamed nation-state actor, is now linked to the China-nexus group UNC5221. This sophisticated threat actor maintained persistent access for over a year, exfiltrating BIG-IP source code and internal vulnerability data...