ConnectWise fixes Automate bug allowing AiTM update attacks

Published on October 17, 2025

ConnectWise released a security update to address vulnerabilities, one of them with critical severity, in Automate product that could expose sensitive communications to interception and modification. [...]

Continue reading on website
Other news

American Airlines subsidiary Envoy confirms Oracle data theft attack

October 17, 2025
Envoy Air, a regional airline carrier owned by American Airlines, confirms that data was compromised from its Oracle E-Business Suite application after the Clop extortion gang listed American Airlines on its data leak site. [...]

Silver Fox Expands Winos 4.0 Attacks to Japan and Malaysia via HoldingHands RAT

October 18, 2025
The threat actors behind a malware family known as Winos 4.0 (aka ValleyRAT) have expanded their targeting footprint from China and Taiwan to target Japan and Malaysia with another remote access trojan (RAT) tracked as HoldingHands RAT (aka Gh0stBins)."The campaign relied on phishing emails with PDFs that contained embedded malicious links," Pei Han Liao, researcher with Fortinet's FortiGuard