News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 17 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 15 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 1 |
| Mon 26 Oct | 75 | 13 |
| Today, Tue 27 Oct | 62 so far | 13 |
Developing
Thu 6 Feb 202573 articles
- Beware of Lazarus LinkedIn Recruiting Scam Targeting Org’s to Deliver Malware
A new wave of cyberattacks orchestrated by the North Korea-linked Lazarus Group has been identified, leveraging fake LinkedIn job offers to infiltrate organizations and deliver sophisticated malware. Reports from cybersecurity firms, including Bitdefender,…
gbhackers.com - Top 3 Ransomware Threats Active in 2025
You arrive at the office, power up your system, and panic sets in. Every file is locked, and every system is frozen. A ransom demand flashes on your screen: "Pay $2 million in Bitcoin within 48 hours or lose everything." And the worst part is that even after…
The Hacker News - F5 BIG-IP SNMP Flaw Allows Attackers to Launch DoS Attacks
A recently disclosed vulnerability in F5’s BIG-IP systems has raised alarm within the cybersecurity community. The flaw, designated CVE-2025-21091, enables remote attackers to exploit SNMP configuration issues, potentially leading to Denial-of-Service (DoS)…
gbhackers.com - Notorious hacker behind 40+ cyberattacks on strategic organizations arrested
Spanish Police arrested an unnamed hacker who allegedly breached tens of government institutions in Spain and the US. Spanish National Police arrested a hacker responsible for multiple cyberattacks on government institutions in Spain and the U.S.. Targe…
Security Affairs - 7AI Raises $36 Million in Seed Funding for Agentic Security Platform
7AI has launched an agentic security platform, which uses AI agents to handle repetitive tasks, and raised $36 million in seed funding.
SecurityWeek - Windows 10 ESU Program: A Lifeline for Holdouts, But at What Cost?
If you’re a die-hard Windows 10 user dreading the impending end-of-support deadline, fear not! Microsoft has unveiled the
SecurityOnline - Cisco IOS SNMP Vulnerabilities Allow Attackers to Launch DoS Attacks”
Cisco has disclosed multiple vulnerabilities in its Simple Network Management Protocol (SNMP) subsystem affecting Cisco IOS, IOS XE, and IOS XR software. These flaws, identified as high-severity, could allow an authenticated remote attacker to trigger…
gbhackers.com - Cybercriminals Abusing ScreenConnect RMM Tool for Persistent Access
Cybersecurity experts have identified an alarming trend of cybercriminals exploiting ConnectWise ScreenConnect, a widely-used Remote Monitoring and Management (RMM) tool, to establish persistent access to compromised systems. Threat Actors Exploit Legitimate…
gbhackers.com - North Korean Hackers Use custom-made RDP Wrapper to activate remote desktop on Hacked Machines
In a concerning development, the North Korean-backed hacking group Kimsuky has intensified its use of custom-built tools to exploit Remote Desktop Protocol (RDP) for controlling compromised systems. AhnLab Security Intelligence Center (ASEC) reports that the…
gbhackers.com - New Banking Attacking Users of Indian banks to Steal Aadhar, PAN, ATM & Credit Card PINs
A sophisticated malware campaign, dubbed “FatBoyPanel,” has been uncovered by cybersecurity researchers, targeting users of Indian banks. This campaign, consisting of nearly 900 malware samples, is designed to steal sensitive financial and personal…
gbhackers.com - Password Stealing Malware Attacking macOS Users Increasing Rapidly
In a concerning trend, macOS users are facing an unprecedented rise in password-stealing malware attacks. Recent cybersecurity reports reveal a 101% surge in macOS infostealers during the latter half of 2024, marking these threats as the most significant…
gbhackers.com - Gemini 2.0 Unleashed: Pro, Flash-Lite, & More
Google DeepMind’s Chief Technology Officer, Koray Kavukcuoglu, has officially announced the full-scale launch of the Gemini 2.0 artificial
SecurityOnline - Cisco Patches Critical ISE Vulnerabilities Enabling Root CmdExec and PrivEsc
Cisco has released updates to address two critical security flaws Identity Services Engine (ISE) that could allow remote attackers to execute arbitrary commands and elevate privileges on susceptible devices. The vulnerabilities are listed below -…
The Hacker News - MobSF Framework Zero-Day Vulnerability Allows Attackers to Trigger DoS in Scan Results
A recently discovered zero-day vulnerability in the Mobile Security Framework (MobSF) has raised alarms in the cybersecurity community. The vulnerability, which allows attackers to cause a partial Denial of Service (DoS) on scan results and the iOS Dynamic…
gbhackers.com - AnyDesk Flaw Allows Admin Access Through Weaponized Windows Wallpapers
Cybersecurity enthusiasts and IT administrators worldwide are voicing concerns over a newly discovered vulnerability in AnyDesk that could lead to local privilege escalation (LPE). The vulnerability, identified as CVE-2024-12754 and coordinated by Trend…
gbhackers.com - DeepSeek’s New Jailbreak Method Reveals Full System Prompt
The Wallarm Security Research Team unveiled a new jailbreak method targeting DeepSeek, a cutting-edge AI model making waves in the global market. This breakthrough has exposed DeepSeek’s full system prompt—sparking debates about the security vulnerabilities…
gbhackers.com - University site cloned to evade ad detection distributes fake Cisco installer
There is a constant “cat and mouse” game between defenders and attackers, the latter trying to outsmart and get a head start on the former. In the context of online advertising, this involves creating fake identities or using stolen ones to push out…
Malwarebytes - Ubuntu Officially Available on the Updated Windows Subsystem for Linux
Ubuntu has announced its availability on Microsoft’s new tar-based Windows Subsystem for Linux (WSL) distribution architecture. This enhancement simplifies deployment and improves scalability, making Ubuntu on WSL more accessible and optimized for enterprise…
gbhackers.com - Arch Linux on WSL 2: Microsoft Confirms Official Support
The popular open-source operating system Arch Linux has recently entered into a collaboration with Microsoft, following discussions that
SecurityOnline - Basket of Bank Trojans Defraud Citizens of East India
Cheap banking scams are often easier to pull off in a country with older devices, fewer regulations, and experienced fraudsters.
Dark Reading - CVE-2025-20124 (CVSS 9.9) & CVE-2025-20125 (CVSS 9.1): Cisco Patches Critical Flaws in Identity Services Engine
Cisco has issued a security advisory addressing two critical vulnerabilities in its Identity Services Engine (ISE), a network
SecurityOnline - F5 Warns of TLS Session Resumption Vulnerability in NGINX (CVE-2025-23419)
F5 has issued a security advisory warning of a vulnerability in NGINX, a popular web server software. The
SecurityOnline - XE Group Exploits Zero-Day Vulnerabilities in VeraCore – CVE-2024-57968 & CVE-2025-25181
Cybersecurity researchers from Intezer and Solis Security have uncovered a dramatic shift in tactics by XE Group, a
SecurityOnline - Malicious Go Package Exploits Caching for Stealthy Persistence
Socket researchers have discovered a malicious typosquatting package in the Go ecosystem that exploits the Go Module Proxy’s
SecurityOnline - Zyxel Routers Under Attack: Default Credentials (CVE-2025-0890) and Code Injection (CVE-2024-40891), No Patch!
Security researchers at VulnCheck have identified critical vulnerabilities in Zyxel Customer Premises Equipment (CPE), leaving countless users vulnerable
SecurityOnline - Kubernetes Policy Enforcement at Risk: OPA Gatekeeper Bypass Exposes Security Flaws
A recent report from Aqua Security has uncovered significant security risks in Kubernetes policy enforcement, particularly in Open
SecurityOnline - Google Security Team Uncovers AMD Microcode Vulnerability (CVE-2024-56161)
A recent disclosure from the Google Security Team has revealed a high-severity vulnerability in AMD Zen-based CPUs that
SecurityOnline - $50 for Your Data: NOVA Stealer Sold as Malware-as-a-Service
The BI.ZONE Threat Intelligence team has reported a significant ongoing campaign distributing the NOVA stealer, a new commercial
SecurityOnline - Security Flaws Discovered in Apache Cassandra: Unauthorized Access, Privilege Escalation, and JMX Credential Theft
The popular open-source NoSQL database, Apache Cassandra, is facing a barrage of critical vulnerabilities, potentially exposing sensitive data
SecurityOnline - SmartApeSG Campaign Uncovered: A Deep Dive into NetSupport RAT Distribution and Suspected Threat Actor Connections
A recent investigation by Team Cymru has revealed an intricate web of malicious infrastructure linking the SmartApeSG FakeUpdate
SecurityOnline - North Korean-Linked Malware ‘FlexibleFerret’ Expands macOS Attack Surface
Cybersecurity researchers at SentinelOne have uncovered new macOS malware variants attributed to North Korean threat actors, expanding upon
SecurityOnline - Symantec PAM Patches Critical Security Flaw – CVE-2025-24503 (CVSSv4 9.3)
Symantec has released version 4.2.1 of its Privileged Access Manager (PAM) to address multiple security vulnerabilities, including those
SecurityOnline - Lazarus APT targets crypto wallets using cross-platform JavaScript stealer
The North Korea-linked APT group Lazarus uses a cross-platform JavaScript stealer to target crypto wallets in a new hacking campaign. Bitdefender researchers reported that the North Korea-linked Lazarus group uses fake LinkedIn job offers in the…
Security Affairs