Highlights from today:

- [News] [New HybridPetya ransomware can bypass UEFI Secure Boot](https://www.bleepingcomputer.com/news/security/new-hybridpetya-ransomware-can-bypass-uefi-secure-boot/)

- [News] [Windows 11 23H2 Home and Pro reach end of support in 60 days](https://www.bleepingcomputer.com/news/microsoft/windows-11-23h2-home-and-pro-reach-end-of-support-in-60-days/)

- [News] [CISA warns of actively exploited Dassault RCE vulnerability](https://www.bleepingcomputer.com/news/security/cisa-warns-of-actively-exploited-dassault-rce-vulnerability/)

- [Threat Intel] [From Fitbit to financial despair: How one woman lost her life savings and more to a scammer](https://www.malwarebytes.com/blog/scams/2025/09/from-fitbit-to-financial-despair-how-one-woman-lost-her-life-savings-and-more-to-a-scammer)

- [Threat Intel] [AI browsers or agentic browsers: a look at the future of web surfing](https://www.malwarebytes.com/blog/ai/2025/09/ai-browsers-or-agentic-browsers-a-look-at-the-future-of-web-surfing)

- [Threat Intel] [Crates.io Users Targeted by Phishing Emails](https://socket.dev/blog/crates-io-users-targeted-by-phishing-emails?utm medium=feed)

- [News] [Apple Warns French Users of Fourth Spyware Campaign in 2025, CERT-FR Confirms](https://thehackernews.com/2025/09/apple-warns-french-users-of-fourth.html)

- [News] [Samsung Fixes Critical Zero-Day CVE-2025-21043 Exploited in Android Attacks](https://thehackernews.com/2025/09/samsung-fixes-critical-zero-day-cve.html)

- [News] [The first three things you’ll want during a cyberattack](https://www.bleepingcomputer.com/news/security/the-first-three-things-youll-want-during-a-cyberattack/)

- [Threat Intel] [Introducing Custom Pull Request Alert Comment Headers](https://socket.dev/blog/introducing-custom-pr-alert-comment-headers?utm medium=feed)

- [Threat Intel] [SEO Poisoning Attack Targets Chinese-Speaking Users with Fake Software Sites](https://feeds.fortinet.com/~/924720758/0/fortinet/blog/threat-research~SEO-Poisoning-Attack-Targets-ChineseSpeaking-Users-with-Fake-Software-Sites)

- [Threat Intel] [Yurei & The Ghost of Open Source Ransomware](https://research.checkpoint.com/2025/yurei-the-ghost-of-open-source-ransomware/)

#SecOpsDaily