Byer-Nichols Threat Brief September 15 2025

This threat brief from Byer-Nichols Cybersecurity details the cybersecurity landscape from September 1-15, 2025, highlighting an increase in compromised consumer devices from vendors like TP-Link and SonicWall. It identifies Qilin as the top ransomware, though its activity is declining, and notes the emergence of new groups such as The Gentlemen. The report also discusses trending adversaries like APT28 and Mustang Panda, along with actively exploited vulnerabilities, particularly those affecting end-of-life TP-Link devices and a significant WhatsApp zero-click vulnerability. Additionally, it outlines trending malware like Brokewell and RatOn, which target Android users, and summarizes major cybersecurity news during the period.