Actively Exploited WSUS Flaw Triggers Emergency Patch; Qilin Ransomware Becomes 2025's Top Threat

A colossal collection of 183 million unique email and plaintext password combinations, dubbed 'Synthient Stealer Log Threat Data,' has been discovered on underground forums and added to Have I Been Pwned. This data was aggregated from numerous infostealer malware infections over nearly a year, not from a direct breach of any email provider. This incident underscores the escalating threat from infostealer malware, as highlighted in the Microsoft report, and creates a massive pool of credentials for widespread credential stuffing attacks, significantly increasing the risk of account takeovers and identity theft. Users are urged to check HIBP, reset passwords, and enable MFA.

A new report from Coveware indicates a significant shift in the ransomware landscape. The percentage of victims paying ransoms dropped to a historic low of 23% in Q3 2025, with average payments plummeting by 66%. This decline is attributed to large enterprises refusing to pay and major RaaS groups, including Qilin, pivoting to a 'high-volume, low-demand' model targeting mid-market companies. Despite lower payments, the overall volume of ransomware incidents remains at an all-time high, increasing pressure on SMBs. This evolution demands continued focus on resilience and robust recovery strategies.