VirusTotal’s YARA-X releases version 1.20.0, adding 14 improvements and 13 bug fixes aimed at tightening detection reliability and developer experience. For defenders, the update is a reminder that signature tooling evolves quickly—keeping detection pipelines current can reduce false negatives and improve rule compatibility. Teams running YARA-X in production should review release notes and validate critical rules after upgrading.
Source: VirusTotal / GitHub
Rhysida Ransomware Extortion Strikes Berlin Government Ahead of Elections
Berlin’s state government disclosed it is facing a Rhysida ransomware extortion attempt tied to an August attack on its administrative network. Officials have refused the requested ransom despite the group’s claim of roughly 5.79 TB of data stolen, signaling a continued trend of “leak-first” pressure tactics. The case highlights the importance of resilient incident response and legal/communications coordination before an extortion window closes.
Source: Security Affairs
Suspected Chinese Operator Targets Philippine Nuclear/Maritime Entities via OwnCloud and WordPress Flaws
A suspected Chinese-speaking actor allegedly compromised Philippine nuclear and naval-related targets by exploiting known vulnerabilities in internet-facing ownCloud and WordPress installations. The reporting indicates data theft occurred after attackers leveraged publicly documented weaknesses rather than relying purely on bespoke exploits. This underscores a persistent operational reality: patch hygiene on externally reachable content platforms remains a high-value control for national and critical infrastructure defense.
Source: Security Affairs
Unitree G1 Humanoid Robot Flaws Chained to Enable Remote Root Access
A security researcher demonstrated how two Unitree G1 vulnerabilities can be chained to gain root access remotely, without physically plugging in cables. The proof-of-concept suggests a compromised robot could become a pivot point to attack other devices in proximity, expanding the threat model for consumer and industrial robotics. Organizations deploying robots in shared environments should treat devices as network endpoints requiring segmentation, monitoring, and rapid firmware updates.
Source: Security Affairs
Hasbro Discloses Data Breach Exposing Employee Personal Information
Hasbro disclosed that a cyberattack earlier this year caused disruptions and has now resulted in a confirmed data breach affecting employee personal information. While the full scope and remediation steps aren’t detailed in the brief, the update illustrates how breaches can continue to unfold after initial detection—especially around data access and exfiltration claims. HR and security teams should align on employee notification workflows, identity risk controls, and long-term monitoring for credential or identity misuse.
Source: SecurityWeek
TerminalFix Campaign Uses Fake “Cloudflare” CAPTCHAs to Deliver PowerShell/Windows Terminal Backdoors
A new ClickFix-style variant dubbed “TerminalFix” is designed to trick victims into executing malicious commands via Windows Terminal or PowerShell, not just the classic Run-dialog approach. By steering users into a higher-friction interface, the campaign may improve execution success rates where victims follow prompts more readily. Defenders should reinforce user-awareness controls and strengthen endpoint hardening to reduce the blast radius of social-engineering-driven command execution.
Source: The Hacker News
Microsoft Issues Windows Update Changes: Force Restarts and a Windows Security “Antivirus Turned Off” Mistake
Two separate Microsoft-related developments surfaced: Windows PCs may undergo forced restarts next month for Windows Update, and Microsoft also confirmed a Windows Update-related mistake where antivirus could appear turned off. No fix was available at the time of reporting, with guidance indicating an upcoming resolution. For security teams, these events increase the risk window—prioritize patch management planning, verify endpoint protection status post-update, and consider staged rollouts to reduce operational impact.
Source: Forbes Security
You May Also Be Interested In...
Turns out Brits would quite like their private messages to stay private
The Cybersecurity Apocalypse Is Coming in ‘Months,’ AI Giants Warn
I asked 100 companies for my data. Some deleted it instead.