The cybersecurity threat landscape shifted dramatically on October 30, 2025, when security researchers monitoring honeypot infrastructure detected a significantly evolved variant of the RondoDox botnet. The updated malware now features 75 distinct exploitation vectors, a fundamental expansion that transforms the threat from a primarily IoT-focused botnet into a multifaceted enterprise threat capable of targeting everything […]
The post RondoDox Botnet Swells Its Arsenal — 650% Jump in Enterprise-Focused Exploits appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
The decentralised finance (DeFi) ecosystem was rocked by a significant exploit targeting Balancer, one of the leading DeFi platforms. The breach specifically impacted Balancer’s V2 Composable Stable Pools, resulting in losses that reportedly exceed $100 million. This major incident highlights ongoing security challenges within the DeFi sector and underscores the importance of robust auditing and […]
The post Balancer DeFi Platform Hit by Major Exploit Resulting in $100M+ in Losses appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
Security researchers have identified a dangerous remote access trojan called SleepyDuck lurking in the Open VSX IDE extension marketplace, targeting developers who use code editors like Cursor and Windsurf. The malicious extension masqueraded as a legitimate Solidity programming language helper, squatting on the name of an established extension to evade detection. The compromised extension juan-bianco.solidity-vlang […]
The post ‘SleepyDuck’ Malware in Open VSX Lets Attackers Remotely Control Windows PCs appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
As October 2025 closes, Sonrai’s latest analysis of new AWS permissions reveals a continued trend: incremental privilege changes with outsized impact. This month’s additions span OpenSearch Ingestion, Aurora DSQL, QuickSight, Parallel Computing Service, ARC Region Switch, and RTB Fabric, touching critical areas of data analytics, compute orchestration, and real-time traffic systems. These updates introduce capabilities […]
The post Oct Recap: New AWS Privileged Permissions and Services appeared first on Security Boulevard.