News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 17 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 15 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 1 |
| Mon 26 Oct | 75 | 13 |
| Today, Tue 27 Oct | 66 so far | 13 |
Developing
Wed 5 Feb 202571 articles
- Zyxel Issues ‘No Patch’ Warning for Exploited Zero-Days
Multiple Zyxel legacy DSL CPE products are affected by exploited zero-day vulnerabilities that will not be patched.
SecurityWeek - Hackers Can Exploit GPU Flaws to Gain Full Control of Your Device
Several critical vulnerabilities affecting Mali Graphics Processing Units (GPUs) have surfaced, allowing hackers to exploit flaws in GPU drivers to gain full control of devices. The vulnerabilities tracked as CVE-2022-22706 and CVE-2021-39793, expose…
gbhackers.com - AsyncRAT Campaign Uses Python Payloads and TryCloudflare Tunnels for Stealth Attacks
A malware campaign has been observed delivering a remote access trojan (RAT) named AsyncRAT by making use of Python payloads and TryCloudflare tunnels. "AsyncRAT is a remote access trojan (RAT) that exploits the async/await pattern for efficient,…
The Hacker News - Threat Actors Exploiting DeepSeek’s Rise to Fuel Cyber Attacks
Amid the surging popularity of DeepSeek, a cutting-edge AI reasoning model from an emerging Chinese startup, cybercriminals have wasted no time leveraging the widespread attention to launch fraudulent schemes. While the innovative AI tool has captivated…
gbhackers.com - CISA Adds Actively Exploited Apache and Microsoft Vulnerabilities to its Database
The Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities Catalog with several critical security flaws, prompting heightened vigilance among organizations using affected software platforms. Among these newly…
gbhackers.com - SparkCat Malware: Sneaky Crypto Stealer Found in Google Play and App Store Apps
Kaspersky Labs researchers have uncovered a new malware campaign dubbed “SparkCat” that uses optical character recognition (OCR) technology
SecurityOnline - Microsoft Releases PowerShell Script for UEFI Certificate Update
Although support for Windows 8 has long since ended, Windows 11 still retains UEFI digital certificates issued during
SecurityOnline - Meta Unveils “Frontier AI Framework” to Address High-Risk AI
Meta recently unveiled a white paper titled “Frontier AI Framework,” which defines two categories of high-risk AI systems:
SecurityOnline - New in Windows 11: Lock Screen Widget Customization
The Windows 11 lock screen currently allows users to add widgets such as weather, traffic, and financial updates,
SecurityOnline - Google Under Investigation in China Amidst Trade Tensions
Following the Trump administration’s decision to impose a 10% tariff on Chinese imports, the Chinese government swiftly retaliated
SecurityOnline - International Civil Aviation Organization (ICAO) and ACAO Breached: Cyberespionage Groups Targeting Aviation Safety Specialists
The International Civil Aviation Organization (ICAO) is investigating a data breach affecting system and employee security. The International Civil Aviation Organization (ICAO), a specialized agency of the United Nations, is investigating a significant data…
Security Affairs - Chinese Hackers Attacking Linux Devices With New SSH Backdoor
A sophisticated cyber espionage campaign attributed to the Chinese hacking group DaggerFly has been identified, targeting Linux systems through an advanced Secure Shell (SSH) backdoor known as ELF/Sshdinjector.A!tr. This malware, part of a broader attack…
gbhackers.com - Take my money: OCR crypto stealers in Google Play and App Store
In March 2023, researchers at ESET discovered malware implants embedded into various messaging app mods. Some of these scanned users’ image galleries in search of crypto wallet access recovery phrases. The search employed an OCR model which selected images…
securelist.com - Hackers Exploit ADFS to Bypass MFA and Access Critical Systems
Hackers are targeting organizations using Microsoft’s Active Directory Federation Services (ADFS) to bypass multi-factor authentication (MFA) and infiltrate critical systems. Leveraging phishing techniques, these attackers deceive users with spoofed login…
gbhackers.com - Critical Veeam Vulnerability (CVE-2025-23114) Exposes Backup Servers to Remote Code Execution
Critical Veeam Vulnerability (CVE-2025-23114) Exposes Backup Servers to Remote Code Execution On February 4, 2025, a critical security vulnerability identified as CVE-2025-23114 was disclosed, affecting multiple Veeam backup products. This vulnerability,…
SOCRadar - Hackers Exploiting a Six-year-old IIS Vulnerability to Gain Remote Access
In a concerning revelation, cybersecurity firm eSentire’s Threat Response Unit (TRU) has detected active exploitation of a six-year-old vulnerability, CVE-2019-18935, in Progress Telerik UI for ASP.NET AJAX. This flaw, which affects Internet Information…
gbhackers.com - CISA Releases Nine Security Advisories on ICS Vulnerabilities and Exploits
The Cybersecurity and Infrastructure Security Agency (CISA) has released nine advisories targeting security vulnerabilities in Industrial Control Systems (ICS). These vulnerabilities pose significant risks, including denial of service (DoS), information…
gbhackers.com - Veeam Backup Vulnerability Allows Attackers to Execute Arbitrary Code
A critical vulnerability, CVE-2025-23114, has been discovered within the Veeam Updater component that poses a serious risk to organizations utilizing Veeam’s backup solutions. The flaw allows attackers to leverage a Man-in-the-Middle (MitM) attack to inject…
gbhackers.com - CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog, Urges Fixes by Feb 25
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows -…
The Hacker News - CISA Releases New Guidelines to Secure Firewalls, Routers, and Internet-Facing Servers
The Cybersecurity and Infrastructure Security Agency (CISA) has unveiled a new set of guidelines to fortify firewalls, routers, internet-facing servers, and other edge devices against cyber threats. This collaborative guidance, supported by leading…
gbhackers.com - PoC Releases for Linux Kernel Flaw CVE-2024-36972: Double Free Flaw Enables Privilege Escalation and Container Escape
Security researchers have unveiled the technical details and a proof-of-concept (PoC) exploit for a high-severity vulnerability (CVE-2024-36972, CVSS
SecurityOnline - CVE-2025-23114 (CVSS 9.0): Critical Veeam Backup Vulnerability Enables Remote Code Execution
A critical vulnerability (CVE-2025-23114, CVSS 9.0) has been discovered in the Veeam Updater component, a core part of
SecurityOnline - Google Fixes High-Severity Chrome Vulnerabilities (CVE-2025-0444 & CVE-2025-0445)
The Chrome team has just unleashed version 133 onto the stable channel for Windows, Mac, and Linux, bringing
SecurityOnline - Coyote Banking Trojan: A Multi-Stage Financial Cyber Threat Targeting Brazil
Cybersecurity researchers at FortiGuard Labs have uncovered a stealthy and highly sophisticated banking trojan dubbed Coyote, which is
SecurityOnline - Cybercriminals Exploit Big Tech Cloud IPs in Infrastructure Laundering Scheme
A new report from Silent Push reveals how a China-linked CDN called FUNNULL is exploiting major cloud providers
SecurityOnline - CISA Flags Four Actively Exploited Security Vulnerabilities in KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four critical security vulnerabilities to its Known Exploited
SecurityOnline - TAG-124: A Deep Dive into the Traffic Distribution System Powering Malware Campaigns
Cybersecurity researchers at Insikt Group have uncovered a multi-layered traffic distribution system (TDS), dubbed TAG-124, which is being
SecurityOnline - Operation Phantom Circuit: North Korea’s Global Data Exfiltration Campaign Unveiled
A newly uncovered cyber espionage campaign orchestrated by North Korea’s Lazarus Group has been exposed in SecurityScorecard’s latest
SecurityOnline - Threat Actors Exploit CVE-2019-18935 to Gain Remote Access and Elevate Privileges
The eSentire Threat Response Unit (TRU) has reported that threat actors are actively exploiting a six-year-old vulnerability, CVE-2019-18935,
SecurityOnline - Phishing Campaign Hijacks High-Profile X Accounts to Promote Crypto Scams
A new wave of phishing attacks is actively targeting high-profile X (formerly Twitter) accounts, with attackers hijacking accounts
SecurityOnline - Online food ordering and delivery platform GrubHub discloses a data breach
Online food ordering and delivery platform GrubHub suffered a data breach that exposed the personal information of drivers and customers. This week the online food ordering and delivery firm GrubHub disclosed a data breach that exposed customer and driver…
Security Affairs