September 23, 2025 - Cyber Briefing

If you like what you hear, please subscribe, leave us a review and tell a friend!👉 What's happening in cybersecurity today?Chrome patched its sixth zero-day of 2025, while Nimbus Manticore launched a new malware campaign targeting Europe. NPM packages were caught abusing QR codes to deliver cookie-stealing malware, and GitHub strengthened npm supply chain security by mandating 2FA and short-lived tokens. Stellantis investigated a data breach linked to a third-party provider, and ENISA confirmed a ransomware attack caused major airport disruptions. UXLINK suffered an exploit allowing hackers to seize admin rights, mint tokens, and steal millions. Meanwhile, ChatGPT was tricked into solving CAPTCHAs, and a $150K reward was awarded for the L1TF Reloaded exploit that bypasses cloud mitigations.👉 Important Links:Cyber Events: https://cybersecurity.cybermaterial.com/s/cyber-events Cyber Jobs: https://cybersecurity.cybermaterial.com/s/cyber-jobs Cyber Book Club: https://cybersecurity.cybermaterial.com/s/cyber-book-clubCyber Book of the day:  https://amzn.to/45ymr64 Cyber Tools: https://cybersecurity.cybermaterial.com/s/tools  Visit 911Cyber: https://911cyber.app/ Visit Cybermaterial: https://cybermaterial.com/