News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Today, Wed 28 Oct | 11 so far | 1 |
Developing
Wed 22 Jan 202569 articles
- Cloudflare blocked a record-breaking 5.6 Tbps DDoS attack
Cloudflare announced that it has blocked a record-breaking 5.6 terabit-per-second (Tbps) distributed denial-of-service (DDoS) attack. Cloudflare announced that during the week of Halloween 2024, it autonomously detected and blocked a 5.6 Terabit per second…
Security Affairs - PlushDaemon APT Targets South Korean VPN Provider in Supply Chain Attack
A previously undocumented China-aligned advanced persistent threat (APT) group named PlushDaemon has been linked to a supply chain attack targeting a South Korean virtual private network (VPN) provider in 2023, according to new findings from ESET. "The…
The Hacker News - Record Breaking 5.6 Tbps DDoS attack Launched by Mirai Botnet
The Mirai botnet unleashed a record-breaking Distributed Denial of Service (DDoS) attack on October 29, 2024, peaking at an astonishing 5.6 terabits per second (Tbps). This mega surge of malicious traffic targeted a Cloudflare customer, an Internet Service…
gbhackers.com - A 7-Zip bug allows to bypass the Mark of the Web (MotW) feature
A vulnerability in the 7-Zip file software allows attackers to bypass the Mark of the Web (MotW) Windows security feature. Attackers can exploit a vulnerability, tracked as CVE-2025-0411, in the free, open-source file archiver software 7-Zip to bypass the…
Security Affairs - Breaking News: Introducing the Stargate Project – OpenAI’s Transformative AI Infrastructure
In conjunction with Donald Trump’s inauguration as the 47th President of the United States, a groundbreaking initiative titled
SecurityOnline - Criminal IP and OnTheHub Partner to Deliver Advanced Cybersecurity Solutions for Education
AI SPERA, a leading Cyber Threat Intelligence (CTI) provider, has collaborated with OnTheHub, a global provider of software in education, to deliver its integrated cybersecurity solution, Criminal IP, to students and educational institutions. This strategic…
gbhackers.com - SQL Injection Vulnerability in Microsoft’s DevBlogs Lets Hackers Injecting Malicious SQL
In a recent discovery, a security researcher uncovered a critical SQL injection vulnerability on Microsoft’s DevBlogs website (accessible at https://devblogs.microsoft.com). This vulnerability could allow attackers to manipulate the site’s underlying…
gbhackers.com - Mirai Botnet Unleashes Record-Breaking DDoS Attack, Cloudflare Thwarts Threat
On October 29, 2024, Cloudflare revealed details of a DDoS attack orchestrated using a Mirai botnet comprising 13,000
SecurityOnline - Oracle Releases January 2025 Patch to Address 318 Flaws Across Major Products
Oracle is urging customers to apply its January 2025 Critical Patch Update (CPU) to address 318 new security vulnerabilities spanning its products and services. The most severe of the flaws is a bug in the Oracle Agile Product Lifecycle Management (PLM)…
The Hacker News - ASUS and AdGuard Team Up to Deliver Ad-Free Wi-Fi 7 Experience
ASUS, a leading name in networking hardware, has partnered with AdGuard to integrate AdGuard DNS directly into its
SecurityOnline - Mandatory MFA, Biometrics Make Headway in Middle East, Africa
Despite lagging in technology adoption, African and Middle Eastern organizations are catching up, driven by smartphone acceptance and national identity systems.
Dark Reading - Three New ICS Advisories Released by CISA Detailing Vulnerabilities & Mitigations
The Cybersecurity and Infrastructure Security Agency (CISA) announced three new Industrial Control Systems (ICS) advisories. These advisories provide critical insights into vulnerabilities impacting Traffic Alert and Collision Avoidance Systems (TCAS) II,…
gbhackers.com - Mirai Botnet Launches Record 5.6 Tbps DDoS Attack with 13,000+ IoT Device
Web infrastructure and security company Cloudflare on Tuesday said it detected and blocked a 5.6 Terabit per second (Tbps) distributed denial-of-service (DDoS) attack, the largest ever attack to be reported to date. The UDP protocol-based attack took place…
The Hacker News - Security Researchers Discover Critical RCE Vulnerability, Earn $40,000 Bounty
Cybersecurity researchers Abdullah Nawaf and Orwa Atyat, successfully escalated a limited path traversal vulnerability into a full-blown remote code execution (RCE). Their discovery earned a massive $40,000 bounty from the targeted organization’s bug bounty…
gbhackers.com - IBM i Access Client Solutions Might Be Leaking Your Passwords
A potential security flaw in IBM i Access Client Solutions (ACS) has raised serious concerns about password leakage, leaving users vulnerable to exploitation. Research published yesterday by a vulnerability assessment team revealed that the *WINLOGON…
gbhackers.com - Weaponized VS Code Impersonate Zoom App Steals Cookies From Chrome
A newly identified extension for Visual Studio Code (VS Code) has been found to impersonate a legitimate Zoom application, enabling cybercriminals to steal sensitive cookies from Google Chrome. This incident marks a significant escalation in the tactics…
gbhackers.com - CVE-2024-12857: Critical Flaw in AdForest Theme Allows Complete Account Takeover, Thousands of Sites at Risk
A severe security flaw (CVE-2024-12857) has been discovered in the AdForest WordPress theme, a popular premium classified ads
SecurityOnline - CVE-2025-23083: Node.js Vulnerability Exposes Sensitive Data and Resources
The Node.js project has released updates to address several security vulnerabilities, including a high-severity flaw that could allow
SecurityOnline - 400,000+ Systems Infected: DigitalPulse Proxyware Returns with New Tricks
A recent report from the AhnLab Security Intelligence Center (ASEC) detailed the spread of DigitalPulse proxyware via ad
SecurityOnline - Critical Apache Ambari Security Vulnerabilities Discovered: What You Need to Know
Critical flaws in the popular Hadoop management platform leave systems open to remote code execution and data breaches.
SecurityOnline - Zendesk Infrastructure Exploited in Phishing and Pig Butchering Schemes
A new report from CloudSEK reveals threat actors are leveraging Zendesk’s free trial to create convincing phishing campaigns.
SecurityOnline - CVE-2024-52320 and More: Planet Switches Expose Networks to Attack
In a recent report from Claroty researcher Tomer Goldschmidt, three critical vulnerabilities were uncovered in the Planet WGS-804HPT
SecurityOnline - From Dream Jobs to Dangerous Passwords: Lazarus Group’s LinkedIn Attacks
Cybersecurity researcher Shusei Tomonaga from JPCERT/CC has issued a warning about LinkedIn being exploited as an initial infection
SecurityOnline - Black Myth: Wukong DDoS Attackers Return with New AIRASHI Botnet
The threat actors behind a series of distributed denial-of-service (DDoS) attacks targeting the distribution platforms of the Chinese
SecurityOnline - Today’s reminder not to just repeat threat actors’ claims without checking or attempting to verify them first.
Here’s today’s reminder not to just repeat threat actors’ claims without checking or attempting to verify them first: Qilin added a company to their dark web leak site that they misidentified as Richardson Sales Performance. It wasn’t Richardson Sales…
DataBreaches - NTLMv1 Group Policy Bypass Discovered: A Wake-Up Call for Active Directory Administrators
Research from Silverfort has revealed a significant flaw in the Group Policy mechanism used to disable the outdated
SecurityOnline - DLL Sideloading & Proxying: New Campaign Delivers Sliver Implants to German Targets
Cyble Research and Intelligence Labs (CRIL) has uncovered an ongoing cyber campaign targeting German organizations using sophisticated tactics
SecurityOnline - Meta’s Advertising System Exploited by Russian Propaganda Network
A recent report, authored by Check First in collaboration with Reset.tech and AI Forensics, unveils a narrative of
SecurityOnline - ModiLoader Malware Leveraging CAB Header Batch Files to Evade Detection
The AhnLab Security Intelligence Center (ASEC) warns a novel malware distribution tactic involving the use of Microsoft Windows
SecurityOnline