News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 17 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 15 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 1 |
| Mon 26 Oct | 75 | 13 |
| Today, Tue 27 Oct | 82 so far | 14 |
Developing
Mon 3 Feb 202566 articles
- INDOHAXSEC Hacker Group Allegedly Breaches Malaysia’s National Tuberculosis Registry
The Indonesian hacker group “INDOHAXSEC” has allegedly breached the National Tuberculosis Registry (NTBR) of Malaysia, managed by the Ministry of Health. The group announced their claim via a post on a hacking forum, stirring fears over the safety of…
gbhackers.com - ChatGPT’s Deep Research Breakthrough Enables Faster-Than-Human Task Handling
OpenAI has introduced “Deep Research,” a cutting-edge feature within ChatGPT that promises to revolutionize the way people handle complex and time-intensive tasks. Designed to synthesize vast amounts of information from the web in mere minutes, Deep Research…
gbhackers.com - 1 Million Impacted by Data Breach at Connecticut Healthcare Provider
Community Health Center, Inc. says hackers stole the personal and health information of over one million individuals.
SecurityWeek - MediaTek’s February 2025 Security Bulletin: Critical WLAN Vulnerabilities Expose Millions to Remote Attacks
MediaTek has released its February 2025 Product Security Bulletin, addressing several critical vulnerabilities affecting its chipsets used in
SecurityOnline - Alibaba Cloud Storage Flaw Exposes Data to Unauthorized Uploads
A significant vulnerability has been discovered in the Alibaba Cloud Object Storage Service (OSS) that allows unauthorized users to upload data, posing critical security risks for organizations relying on this cloud solution. The vulnerability, caused by the…
gbhackers.com - Cristal Intelligence: SoftBank’s $3B Bet on OpenAI
In addition to recent reports suggesting a potential $25 billion investment in OpenAI, positioning itself to surpass Microsoft
SecurityOnline - Parrot 6.3 Release, What’s New
The cybersecurity realm received an exciting update this week with the release of Parrot 6.3, the latest version of the Parrot Security operating system. As one of the most trusted Linux distributions tailored for ethical hackers, penetration testers, and…
gbhackers.com - ChatGPT’s Deep Research: AI-Powered Web Exploration
Following the launch of its search functionality in ChatGPT, OpenAI has now introduced “Deep Research,” an advanced search
SecurityOnline - A week in security (January 27 – February 2)
Last week on Malwarebytes Labs: ClickFix vs. traditional download in new DarkGate campaign Cybercrime gets a few punches on the nose Microsoft advertisers phished via malicious Google ads The DeepSeek controversy: Authorities ask where does the data...
Malwarebytes - Sanctions Risk in Open Source: Linux Foundation Offers Guidance
The open-source world, built on collaboration and shared code, faces a growing challenge: navigating the complex landscape of
SecurityOnline - Texas is the first state to ban DeepSeek on government devices
Texas bans DeepSeek and RedNote on government devices to block Chinese data-harvesting AI, citing security risks. Texas Governor Greg Abbott banned Chinese AI company DeepSeek and Chinese-owned social media apps Xiaohongshu (RedNote) and Lemon8 from all…
Security Affairs - Microsoft to Kill its 365 VPN: What You Need to Know
In a move that’s sure to raise eyebrows and questions about its commitment to user privacy, Microsoft has
SecurityOnline - Law enforcement seized the domains of HeartSender cybercrime marketplaces
U.S. and Dutch authorities seized 39 domains and servers linked to the HeartSender cybercrime group based in Pakistan. A joint law enforcement operation led to the seizure of 39 domains tied to a Pakistan-based HeartSender cybercrime group (aka Saim Raza and…
Security Affairs - Crazy Evil Gang Targets Crypto with StealC, AMOS, and Angel Drainer Malware
A Russian-speaking cybercrime gang known as Crazy Evil has been linked to over 10 active social media scams that leverage a wide range of tailored lures to deceive victims and trick them into installing malware such as StealC, Atomic macOS Stealer (aka…
The Hacker News - PoC Exploit Released for macOS Kernel Vulnerability CVE-2025-24118 (CVSS 9.8)
A newly discovered race condition in Apple’s macOS kernel (XNU) could allow attackers to escalate privileges, corrupt memory,
SecurityOnline - North Korean APT Lazarus Uses Malicious npm Package to Target Developers
Cybersecurity researchers at Socket have uncovered a new supply chain attack orchestrated by Lazarus Group, the notorious North
SecurityOnline - CVE-2024-57376: End-of-Life D-Link Routers Vulnerable to Unauthenticated RCE
D-Link has updated a security advisory warning of a critical buffer overflow vulnerability affecting several end-of-life routers. The
SecurityOnline - Devil-Traff: The New SMS Phishing Platform Exploited by Cybercriminals
Security researcher Daniel Kelley at SlashNext has unveiled a new threat to cybersecurity: Devil-Traff, a bulk SMS platform
SecurityOnline - CVE-2025-0477 (CVSS 9.8): Critical Security Flaw in Rockwell Automation’s FactoryTalk AssetCentre
Industrial automation giant Rockwell Automation has issued a security advisory addressing multiple critical vulnerabilities in its FactoryTalk AssetCentre
SecurityOnline - The Hidden Cyber Trap: How Compromised Websites and Malicious AdTech Manipulate Users
In the cybersecurity world, analysts often focus on the adversary’s tactics, techniques, and procedures (TTPs), but what happens
SecurityOnline - CVE-2025-0851 (CVSS 9.8): Deep Java Library Vulnerability Allows Path Traversal Exploits
A newly discovered vulnerability in the Deep Java Library (DJL) has been found to leave systems open to
SecurityOnline - SparkRAT: A Persistent Cross-Platform Cyber Threat Targeting macOS and Beyond
Since its initial release on GitHub in 2022 by user XZB-1248, SparkRAT has evolved into a widely used
SecurityOnline - .Gov No More: Government Domains Weaponized in Phishing Surge
A recent Cofense Intelligence report has uncovered a troubling trend: threat actors are increasingly abusing .gov top-level domains
SecurityOnline - Unrestricted Access: A Simple Web Misconfiguration Exposes Critical Data
A recent report by CloudSEK’s BeVigil reveals how a common web misconfiguration, namely enabled directory listings, led to
SecurityOnline - CISA Warns of Hidden Backdoor in Contec CMS8000 Patient Monitors
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical security alert regarding the Contec CMS8000, a
SecurityOnline - Native Sensors vs. Integrations for XDR Platforms?
Native sensors vs. integrations in XDR: Native sensors offer faster deployment, real-time detection, and deeper visibility, while integrations may add complexity and delays. Learn how to optimize your XDR strategy for improved security.
trendmicro.com