News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 17 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 15 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 1 |
| Mon 26 Oct | 75 | 13 |
| Today, Tue 27 Oct | 56 so far | 12 |
Developing
Fri 7 Feb 202574 articles
- AI-Powered Social Engineering: Reinvented Threats
The foundations for social engineering attacks – manipulating humans – might not have changed much over the years. It’s the vectors – how these techniques are deployed – that are evolving. And like most industries these days, AI is accelerating its…
The Hacker News - Logsign Vulnerability Allows Remote Attackers to Bypass Authentication
A critical security vulnerability has been identified and disclosed in the Logsign Unified SecOps Platform, allowing remote attackers to bypass authentication mechanisms. The vulnerability tracked as CVE-2025-1044, has been assigned a CVSS score of 9.8,…
gbhackers.com - Microsoft Identifies 3,000+ Publicly Disclosed ASP.NET Machine Keys Vulnerable to Code Injection
Microsoft is warning of an insecure practice wherein software developers are incorporating publicly disclosed ASP.NET machine keys from publicly accessible resources, thereby putting their applications in attackers' pathway. The tech giant's threat…
The Hacker News - India’s RBI Introduces Exclusive "bank.in" Domain to Combat Digital Banking Fraud
India's central bank, the Reserve Bank of India (RBI), said it's introducing an exclusive "bank.in" internet domain for banks in the country to combat digital financial fraud. "This initiative aims to reduce cyber security threats and malicious activities…
The Hacker News - CVE-2025-0994: Critical Vulnerability in Trimble Cityworks Exploited in the Wild
Trimble, a leading provider of industrial technology solutions, has issued an urgent cybersecurity advisory regarding a critical deserialization
SecurityOnline - Dark Web Profile: Tortoiseshell APT
Dark Web Profile: Tortoiseshell APT In recent years, Iran has ramped up cyber campaigns to safeguard national interests, deter adversaries, and conduct espionage. These operations are carried out by units within the IRGC and MOIS. One such Iranian advisory…
SOCRadar - Hackers Exploiting SimpleHelp Vulnerabilities to Deploy Malware on Systems
Cybercriminals are actively exploiting vulnerabilities in SimpleHelp Remote Monitoring and Management (RMM) software to infiltrate networks, create unauthorized administrator accounts, and deploy malware, including the Sliver backdoor. These flaws,…
gbhackers.com - Trimble Cityworks Customers Warned of Zero-Day Exploitation
Trimble Cityworks is affected by a zero-day vulnerability that has been exploited in attacks involving the delivery of malware.
SecurityWeek - New Facebook Fake Copyright Notices to Steal Your FB Accounts
A newly discovered phishing campaign is using fake Facebook copyright infringement notices to trick users into divulging their credentials, potentially compromising business accounts. Phishing Campaign Exploits Facebook Brand to Target Businesses Researchers…
gbhackers.com - Developers Beware! Malicious ML Models Found on Hugging Face Platform
In a concerning development for the machine learning (ML) community, researchers from ReversingLabs have uncovered malicious ML models on the Hugging Face platform, a popular hub for AI collaboration. Dubbed “nullifAI,” this novel attack method leverages…
gbhackers.com - Hackers Exploit DeepSeek & Qwen AI Models for Malware Development
Check Point Research (CPR) has revealed that cybercriminals are increasingly leveraging the newly launched AI models, DeepSeek and Qwen, to create malicious content. These models, which lack robust anti-abuse provisions, have quickly become a preferred…
gbhackers.com - Attackers used a public ASP.NET machine to conduct ViewState code injection attacks
Microsoft researchers warn that threat actors are delivering the Godzilla framework using a static ASP.NET machine. In December 2024, Microsoft Threat Intelligence researchers spotted a threat actor using a public ASP.NET machine key to deploy Godzilla…
Security Affairs - Former Google Engineer Charged for Allegedly Stealing AI Secrets for China
A federal grand jury has indicted Linwei Ding, also known as Leon Ding, a former Google software engineer, on four counts of theft of trade secrets. The charges stem from allegations that Ding stole proprietary artificial intelligence (AI) technologies from…
gbhackers.com - Arm Drops NUVIA Lawsuit Against Qualcomm
During Qualcomm’s recent announcement of its financial results for the first quarter of fiscal year 2025, CEO Cristiano
SecurityOnline - CVE-2024-21413 (CVSS 9.8): Critical Outlook Flaw Under Active Attack, PoC Available
A critical vulnerability in Microsoft Outlook, tracked as CVE-2024-21413, is being actively exploited in the wild, posing a
SecurityOnline - Dell Update Manager Plugin Flaw Exposes Sensitive Data
Dell Technologies has issued a security advisory (DSA-2025-047) to address a vulnerability in the Dell Update Manager Plugin (UMP) that could expose sensitive data to malicious actors. The flaw, identified as CVE-2025-22402, is categorized as a low-risk…
gbhackers.com - Google’s SynthID Now in Magic Editor: AI Image Detection
Google has announced the integration of its digital watermarking technology, SynthID, into its photo editing tool, Magic Editor,
SecurityOnline - MMS “VidSpam”: A New Bitcoin Scam Using Old Tech
Cybersecurity researchers at Proofpoint have discovered a resurgence of an old technology being used in a new Bitcoin
SecurityOnline - DeepSeek iOS App Leaks Data to ByteDance Servers Without Encryption
DeepSeek iOS app—a highly popular AI assistant recently crowned as the top iOS app since its January 25 release—has been discovered to transmit sensitive user data to ByteDance servers without encryption. The security flaws, uncovered by mobile app security…
gbhackers.com - Critical Flaws in HPE Aruba ClearPass Expose Systems to Arbitrary Code Execution
Hewlett Packard Enterprise (HPE) has issued a high-priority security bulletin addressing multiple vulnerabilities in its Aruba ClearPass Policy Manager (CPPM). These flaws, which range from unauthorized access to arbitrary code execution, could allow…
gbhackers.com - Splunk Introduces “DECEIVE” an AI-Powered Honeypot to Track Cyber Threats
Splunk has unveiled DECEIVE (DECeption with Evaluative Integrated Validation Engine), an innovative, AI-augmented honeypot that mimics real-world systems to lure and study cyber attackers. By leveraging advanced artificial intelligence, DECEIVE provides…
gbhackers.com - Hackers Exploiting SimpleHelp RMM Flaws for Persistent Access and Ransomware
Threat actors have been observed exploiting recently disclosed security flaws in SimpleHelp's Remote Monitoring and Management (RMM) software as a precursor for what appears to be a ransomware attack. The intrusion leveraged the now-patched vulnerabilities…
The Hacker News - Maybe we should all file breach reports against Musk like Kevin did.
The Washington Post reports: Agents of billionaire Elon Musk’s Department of Government Efficiency have gained access to highly restricted government records on millions of federal employees — including Treasury and State Department officials in sensitive…
DataBreaches - NETGEAR Patches Critical Security Vulnerabilities in WiFi Routers (CVE-2025-25246) and Access Points
NETGEAR has recently issued security advisories addressing critical vulnerabilities in several of its WiFi router and access point
SecurityOnline - Kimsuky Group Leverages RDP Wrapper for Persistent Cyber Espionage
The notorious North Korean APT group Kimsuky has continued its cyber espionage operations, leveraging spear-phishing attacks and remote
SecurityOnline - CVE-2024-9643 & CVE-2024-9644: Authentication Bypass in Four-Faith F3x36 Routers Puts Networks at Risk
Two newly discovered security vulnerabilities—CVE-2024-9643 and CVE-2024-9644—affecting the Four-Faith F3x36 router (firmware v2.0.0) could allow remote attackers to
SecurityOnline - Apache James Mail Server Hit by Double Denial-of-Service Vulnerabilities
The Apache James (Java Apache Mail Enterprise Server) mail server, a widely used open-source solution, has been found
SecurityOnline - BADBOX Botnet: Pre-installed Malware Targets Android Devices
A new and insidious botnet dubbed BADBOX is infecting hundreds of thousands of Android devices, with the malware
SecurityOnline - HPE Aruba Networking Issues Security Updates for ClearPass Policy Manager
HPE Aruba Networking has released security updates to address multiple vulnerabilities in its ClearPass Policy Manager (CPPM) software.
SecurityOnline - Cyberespionage Targets Aviation: ICAO and ACAO Breached
The aviation industry is facing a growing cyber threat, with recent attacks targeting the International Civil Aviation Organization
SecurityOnline - Vitest Vulnerability Exposes Developers to Remote Code Execution – CVE-2025-24964 (CVSS 9.7)
A critical security vulnerability (CVE-2025-24964) has been discovered in Vitest, a popular unit testing framework, which could allow
SecurityOnline - Threat Actors Continue to Exploit Legitimate RMM Tool ScreenConnect
A recent report from Silent Push reveals that threat actors are still leveraging ScreenConnect, a legitimate remote monitoring
SecurityOnline - ValleyRAT Returns: Silver Fox APT Deploys New Delivery Techniques for Multi-Stage Attacks
Morphisec Threat Labs has uncovered a sophisticated multi-stage malware campaign attributed to the Silver Fox APT, leveraging updated
SecurityOnline - GreenSpot APT Phishes 163.com Users with Spoofed Domains
A recent report from Threat Hunting Platform – Hunt.io has exposed an ongoing phishing campaign orchestrated by GreenSpot
SecurityOnline