Microsoft Scrambles to Patch Actively Exploited WSUS Flaw as Qilin Ransomware Surges
Summary
In cybersecurity news for October 27, 2025, Microsoft issued an emergency patch for a critical, actively exploited remote code execution vulnerability in Windows Server Update Services (WSUS). Concurrently, reports indicate the Qilin ransomware group has become the most prolific operator of 2025, claiming over 700 victims. Other major incidents include a massive China-linked smishing campaign using over 194,000 domains, active exploitation of a critical flaw in Adobe Commerce, and a series of data breaches affecting the retail and healthcare sectors.
Today New Articles
Critical Adobe Commerce Flaw Under Active Exploitation, CISA Warns
A critical improper input validation vulnerability in Adobe Commerce and Magento, tracked as CVE-2025-54236, is being actively exploited in the wild. Dubbed 'SessionReaper,' the flaw allows an unauthenticated remote attacker to hijack user sessions via the RES...
ChatGPT Flaw Allows 'Memory Poisoning' via CSRF Attack
A novel vulnerability discovered in OpenAI's ChatGPT Atlas web browser allows attackers to perform 'memory poisoning' through a Cross-Site Request Forgery (CSRF) attack. Researchers at LayerX Security found that this flaw can be used to invisibly inject malici...
APT-C-60 Escalates 'SpyGlace' Campaign Against Japan
The South Korea-aligned cyber-espionage group APT-C-60 has significantly intensified its campaign against Japanese organizations in the third quarter of 2025. According to JPCERT/CC and Cyble, the group has deployed at least three new versions of its custom 'S...
Data Breaches Hit Toys 'R' Us Canada, Askul, and Verisure
A wave of data breaches has impacted several consumer-facing companies globally. Toys "R" Us Canada has had customer records leaked on the dark web. Japanese retailer Askul suffered a disruptive ransomware attack that halted operations and may have resulted in...
Healthcare Sector Rocked by Breaches at ModMed, LifeBridge, and Right at Home
The healthcare sector continues to be a prime target for cyberattacks, with recent data breaches announced by Electronic Health Record (EHR) provider Modernizing Medicine (ModMed), home healthcare provider Right at Home, and Baltimore-based LifeBridge Health....
Article Updates
Ransomware Attacks Surge 50% in 2025; Qilin Group Takes the Lead
Update:The Qilin ransomware group's victim count has dramatically increased to 701 by late October, up from 441, making it the most prolific group of 2025. This surge is attributed to absorbing affiliates from the defunct RansomHub operation. High-profile attacks inc...