Cyber Threat Landscape: Ransomware Rises, Cisco ASA Zero-Days Exploited, and Critical VMware Flaws Patched

October Starts with a Bang: A New Report and Familiar Threats

The first day of October brought more than the start of European Cybersecurity Month. It also brought several hard hits, a reminder that the digital world never has a quiet moment. Cybercriminals show no sign of slowing down, and system administrators have their hands full.

Ransomware Attacks Are on the Rise Again

For the past few years, we could take some comfort in a slight decline in ransomware attacks. That trend has now ended. A new report from Hornetsecurity shows that in 2025, one in four companies (24%) fell victim to ransomware, a clear increase from 18.6% the year before. This is the first such increase in three years. Analysts link the trend to attackers' growing use of AI-powered tools to automate and streamline their campaigns. Fewer companies are also buying insurance against these attacks. Are we entering a new era of digital extortion? Time will tell.

Your Network Under Fire: Zero-Day Vulnerabilities in Cisco

If your organization uses Cisco Adaptive Security Appliances (ASA), we have bad news. Cybersecurity agencies around the world, including the U.S. Cybersecurity and Infrastructure Security Agency (CISA), are warning of an active campaign exploiting zero-day vulnerabilities in these widely used firewalls. The attacks are attributed to advanced state-sponsored groups. By exploiting these flaws, attackers can take control of the devices, deploy malware and gain access to internal corporate networks. CISA has even issued a directive ordering federal agencies to patch vulnerable systems immediately. This is serious. Check your firewalls before someone else does it for you.

VMware Patches Security Holes: Update Before It's Too Late

Finally, an alert for anyone running virtualized environments. VMware has just released a set of critical security updates for several of its popular products, including Aria Operations, NSX and vCenter. Technical details are still being analyzed, but the vulnerabilities have been rated "highly severe." These products are so widely deployed that the potential attack surface is huge. There's no reason to wait. Administrators, get patching!

It looks like this fall will be a busy one in cybersecurity. Keep your systems updated and stay alert.

Sources:

• Hornetsecurity report on the rise in ransomware
• CISA warning on Cisco vulnerabilities
• VMware vulnerability information

Aleksander