Skip to content

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Articles per day, last 14 days

Most articles on Wed 21 Oct (96); 10–13 on weekend days.

14 Oct16182096222426Today20 so faravg 60
  • On CISA KEV CVEs
  • Other coverage
  • Closed-day average
Show as table
Articles per day, last 14 days
DayArticlesOn CISA KEV CVEs
Wed 14 Oct8625
Thu 15 Oct7815
Fri 16 Oct6112
Sat 17 Oct101
Sun 18 Oct100
Mon 19 Oct6012
Tue 20 Oct8616
Wed 21 Oct9618
Thu 22 Oct8411
Fri 23 Oct6816
Sat 24 Oct134
Sun 25 Oct132
Mon 26 Oct7620
Tue 27 Oct9518
Today, Wed 28 Oct20 so far4

Developing

Exploited only
57 articles

Latest days

Mon 20 Jan 202557 articles

  1. o3-mini: OpenAI’s New AI Model Coming Soon

    OpenAI CEO Sam Altman has revealed plans to launch the o3-mini artificial intelligence model within the coming weeks.

    SecurityOnline
  2. Rhino Linux 2025.1 Released – Update Now!

    Rhino Linux is roaring into the new year with the exciting release of Rhino Linux 2025.1! After a brief pause to refine the system, this latest snapshot introduces an array of updates and improvements, solidifying Rhino Linux as a reliable and…

    gbhackers.com
  3. Researchers Accessed Windows BitLocker Encrypted Files Disassembling the Laptop

    Cybersecurity researchers have uncovered a major flaw in the Windows BitLocker encryption system, allowing attackers to access encrypted data without requiring physical disassembly of the target laptop. The exploit, named “bitpixie”, demonstrates how…

    gbhackers.com
  4. PoC Exploit Released for QNAP RCE Vulnerability

    A critical remote code execution (RCE) vulnerability, tracked as CVE-2024-53691, has recently come to light, affecting users of QNAP’s QTS and QuTS Hero operating systems. This vulnerability enables remote attackers with user access privileges to traverse…

    gbhackers.com
  5. Hackers Deploy Malicious npm Packages to Steal Solana Wallet Keys via Gmail SMTP

    Cybersecurity researchers have identified three sets of malicious packages across the npm and Python Package Index (PyPI) repository that come with capabilities to steal data and even delete sensitive data from infected systems. The list of identified…

    The Hacker News
  6. Multiple HPE Aruba Network Vulnerabilities Allows Remote Arbitrary Code Execution

    Hewlett Packard Enterprise (HPE) has confirmed multiple vulnerabilities in its Aruba Networking products that could allow remote arbitrary code execution. These vulnerabilities, CVE-2025-23051 and CVE-2025-23052, affect various versions of the AOS-8 and…

    gbhackers.com
  7. TikTok Ban Extended as Trump Pushes for U.S. Equity in Joint Venture

    After ByteDance voluntarily ceased TikTok’s operations within the United States, it issued a statement within less than a

    SecurityOnline
  8. Zero-Day Vulnerability in Windows Exploited: CVE-2024-49138 PoC Code Released

    Security researcher MrAle_98 recently published a proof-of-concept (PoC) exploit for a zero-day vulnerability, CVE-2024-49138. This flaw, which affects

    SecurityOnline
  9. Star Blizzard Shifts Tactics: Spear-Phishing Campaign Targets WhatsApp Accounts

    Microsoft Threat Intelligence has uncovered a new spear-phishing campaign orchestrated by the Russian threat actor known as Star

    SecurityOnline
  10. CVE-2025-2306 (CVSS 9.0): Mongoose Flaw Leaves Millions of Downloads Exposed to Search Injection

    A newly discovered vulnerability in Mongoose, a popular MongoDB object modeling tool, could leave millions of users susceptible

    SecurityOnline
  11. Malicious PyPI Package Targets Discord Developers with Token Theft and Backdoor Exploit

    The Socket research team has identified a malicious Python package on PyPI named pycord-self, targeting developers working with

    SecurityOnline
  12. Sneaky 2FA: A New Adversary-in-the-Middle Phishing-as-a-Service Threat

    SEKOIA’s Threat Detection & Research (TDR) team has exposed a new Adversary-in-the-Middle (AiTM) phishing kit, dubbed “Sneaky 2FA.”

    SecurityOnline
  13. Black Basta Exploits Microsoft Teams for Phishing Attacks

    NVISO Labs has uncovered a sophisticated phishing campaign attributed to the ransomware group Black Basta, leveraging Microsoft Teams

    SecurityOnline
  14. Critical Vulnerabilities in QNX Software Development Platform Image Codecs Expose Systems to Attacks

    BlackBerry’s QNX Software Development Platform (SDP), a widely used real-time operating system in safety-critical industries, is the subject

    SecurityOnline
  15. Scammers Exploit Truth Social to Launch Phishing and Fraud Campaigns

    Truth Social, the social media platform launched by Trump Media & Technology Group in 2022, has become a

    SecurityOnline
  16. IoT Botnet Fuels Large-Scale DDoS Attacks Targeting Global Organizations

    A newly discovered IoT botnet has been linked to a series of large-scale distributed denial-of-service (DDoS) attacks targeting

    SecurityOnline
  17. Planet WGS-804HPT Industrial Switch flaws could be chained to achieve remote code execution

    Critical flaws in WGS-804HPT switches could be chained to gain remote code execution on Planet Technology’s industrial devices. The Planet WGS-804HPT industrial switch is used in building and home automation networks to provide connectivity of Internet of…

    Security Affairs
Updated AboutDevelopersSign in