Daily Cyber News – September 24, 2025

Today’s briefing brings together the most urgent developments across the cyber landscape. We begin with Boyd Gaming confirming a data breach affecting employees, then turn to Microsoft’s patch of a dangerous Entra ID flaw that could allow Global Admin impersonation. GitHub’s changes to npm authentication highlight how supply-chain security is shifting, while Cloudflare reports blocking the largest denial-of-service attack ever measured. We also cover a U.S. federal breach through an unpatched GeoServer, the takedown of massive SIM farms near the United Nations, and emergency patches from Libraesva, SolarWinds, and SonicWall. Alongside state-linked espionage, ransomware claims, and airport disruptions, the episode paints a wide picture of how cyber risk cuts across sectors.Listeners will gain a sharper sense of what matters now—why seemingly “low-impact” bugs hide major risks, how cloud misconfigurations feed rentable botnets, and why operational downtime in manufacturing and aviation reminds us that digital incidents hit the physical world fast. Each story is delivered in clear, practical language designed to help you brief leadership, recalibrate defenses, and stay one step ahead. Hear it all, daily, at d c n dot baremetalcyber dot com.