News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 17 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 15 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 1 |
| Mon 26 Oct | 75 | 13 |
| Today, Tue 27 Oct | 37 so far | 8 |
Developing
Mon 10 Feb 202572 articles
- Massive Brute Force Attack Targets VPN & Firewall Logins Using 2.8 Million IPs
Massive brute force attacks targeting VPNs and firewalls have surged in recent weeks, with cybercriminals using as many as 2.8 million unique IP addresses daily to conduct relentless login attempts. The Shadowserver Foundation, a nonprofit cybersecurity…
gbhackers.com - Penetration Testers Arrested During Approved Physical Penetration Testing
A routine physical penetration test conducted by cybersecurity professionals took an unexpected turn when armed police officers arrested two security experts during a simulated breach of a corporate office in Malta. Physical penetration testing is a critical…
gbhackers.com - Massive OpenAI Leak, WordPress Admin Exploit, Inkafarma Data Breach
Massive OpenAI Leak, WordPress Admin Exploit, Inkafarma Data Breach SOCRadar’s Dark Web Team has detected a wave of cyber threats on hacker forums this week, including an alleged leak of millions of OpenAI user accounts. Meanwhile, a WordPress admin exploit…
SOCRadar - SolarWinds Taken Private in $4.4 Billion Turn/River Capital Acquisition
SolarWinds will become a privately held company following its acquisition by Turn/River Capital for $4.4 billion in cash.
SecurityWeek - DragonRank Exploits IIS Servers with BadIIS Malware for SEO Fraud and Gambling Redirects
Threat actors have been observed targeting Internet Information Services (IIS) servers in Asia as part of a search engine optimization (SEO) manipulation campaign designed to install BadIIS malware. "It is likely that the campaign is financially motivated…
The Hacker News - Zimbra Releases Security Updates for SQL Injection, Stored XSS, and SSRF Vulnerabilities
Zimbra has released software updates to address critical security flaws in its Collaboration software that, if successfully exploited, could result in information disclosure under certain conditions. The vulnerability, tracked as CVE-2025-25064, carries a…
The Hacker News - UK Gov demands backdoor to access Apple iCloud backups worldwide
UK secretly demands Apple create an iCloud backdoor via a Technical Capability Notice, raising privacy concerns over end-to-end encryption. The UK demands Apple to create a backdoor to access any iCloud backups, the request raises concerns about user privacy…
Security Affairs - Cisco Data Breach – Ransomware Group Allegedly Breached Internal Network
Sensitive credentials from Cisco’s internal network and domain infrastructure were reportedly made public due to a significant data breach. According to a Cyber Press Research report, the new Kraken ransomware group has allegedly leaked a dataset on their…
gbhackers.com - A week in security (February 3 – February 9)
Last week on Malwarebytes Labs: WhatsApp says Paragon is spying on specific users New AI “agents” could hold people for ransom in 2025 Valley News Live exposed more than a million job seeker’s resumes Small business owners, secure your web shop...
Malwarebytes - Microsoft Integrates AI Agents into GitHub Copilot
Microsoft recently announced the full integration of agent-based automation tools into its GitHub Copilot service, enabling developers to
SecurityOnline - Linux Kernel 6.14-rc2 Released – What’s Newly Added !
Linus Torvalds, lead developer of the Linux kernel, announced the second release candidate (rc2) of Linux Kernel 6.14, providing developers and enthusiasts with a glimpse at the latest updates and fixes in the kernel’s development cycle. The announcement was…
gbhackers.com - Cloudflare R2 Outage Explained: Accidental Shutdown
Earlier, multiple Cloudflare services, including R2, experienced an outage, once again stemming from an internal system issue. As
SecurityOnline - PlayStation Network Down: Players Get 5-Day Extension
Sony’s PlayStation Network experienced a widespread and prolonged outage last weekend, with disruptions seemingly beginning at 6 PM
SecurityOnline - Critical Zimbra Flaws Allow Attackers to Gain Unauthorized Access to Sensitive Data
Serious vulnerabilities in Zimbra Collaboration Suite (ZCS), a popular enterprise email and collaboration platform, have raised alarm in the cybersecurity community. Security researchers have identified several critical flaws that allow attackers to access…
gbhackers.com - Tor Browser 14.0.6 Released, What’s New!
The Tor Project has officially unveiled Tor Browser 14.0.6, now accessible for download from the Tor Browser download page and its distribution directory. The latest update introduces critical fixes and enhancements, ensuring a smoother and more secure…
gbhackers.com - XE Hacker Group Exploits VeraCore Zero-Day to Deploy Persistent Web Shells
Threat actors have been observed exploiting multiple security flaws in various software products, including Progress Telerik UI for ASP.NET AJAX and Advantive VeraCore, to drop reverse shells and web shells, and maintain persistent remote access to…
The Hacker News - Hackers Exploit AnyDesk Vulnerability to Gain Admin Access – PoC Released
A newly discovered vulnerability in AnyDesk, the popular remote desktop software, has sparked serious cybersecurity concerns. Identified as CVE-2024-12754 and tracked under ZDI-24-1711, this flaw allows local attackers to exploit a mechanism to handle…
gbhackers.com - Meta Sued for Training AI with 81.7TB of Copyrighted Data
Meta, the parent company of the social networking platform Facebook, is currently facing a class-action lawsuit over its
SecurityOnline - Meta’s Brain2Qwerty: Turning Brainwaves into Text with 80% Accuracy
Meta recently unveiled a white paper on its research project, “Brain2Qwerty,” a non-invasive technology designed to interpret brain
SecurityOnline - AnyDesk Exploit Alert: CVE-2024-12754 Enables Privilege Escalation—PoC Available
Security researcher Naor Hodorov has recently published an analysis of a vulnerability discovered in AnyDesk, a popular remote
SecurityOnline - CVE-2025-25064 (CVSS 9.8): Critical SQL Injection Bug in Zimbra Collaboration
Zimbra Collaboration, a widely used open-source email and collaboration platform, has been found to contain two newly discovered
SecurityOnline - Hackers Exploit Google Tag Manager to Steal Credit Card Data from Magento Sites
In a recent incident, a Magento-based eCommerce website fell victim to a sophisticated credit card skimming attack, with
SecurityOnline - CVE-2025-0674 (CVSS 9.8) & CVE-2025-0675: CISA Warns of Critical Elber Flaws – PoC Available, No Patch
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding critical vulnerabilities in Elber communications
SecurityOnline - Threat Actors Exploit SimpleHelp Vulnerabilities to Deploy Sliver Backdoor
Cybersecurity firm Field Effect has identified and thwarted a sophisticated cyberattack that leveraged newly discovered vulnerabilities in SimpleHelp’s
SecurityOnline - CVE-2024-48510 (CVSS 9.8): Critical Flaw in ABB Drive Composer Enables File System Access
Industrial automation giant ABB has issued a cybersecurity advisory addressing a critical path traversal vulnerability (CVE-2024-48510) in its
SecurityOnline - Publicly Disclosed ASP.NET Machine Keys Used in Code Injection Attacks
Microsoft Threat Intelligence has reported a concerning trend: attackers are exploiting publicly disclosed ASP.NET machine keys to inject
SecurityOnline - CVE-2025-0896 (CVSS 9.8): Orthanc DICOM Server Flaw Exposes Medical Images to Unauthorized Access
A critical-severity vulnerability has been discovered in Orthanc, an open-source DICOM server used in healthcare environments to manage
SecurityOnline - Abyss Locker Ransomware: Inside the Stealthy Network Intrusions and Destructive Attacks
Abyss Locker, an emerging ransomware group that surfaced in 2023, has swiftly escalated its cyber onslaught throughout 2024,
SecurityOnline - Massive Indian Mobile Banking Heist Uncovered: FatBoyPanel’s Trojan Network Exposes 50,000 Users’ Data
The zLabs research team has uncovered a large-scale mobile banking malware operation targeting users of Indian financial institutions.
SecurityOnline - CVE-2025-24786 (CVSS 10) & CVE-2025-24787: Critical WhoDB Vulnerabilities
The widely used database management tool WhoDB has been found to contain two critical security vulnerabilities—a path traversal
SecurityOnline - Flesh Stealer Malware Targets Browsers and Cryptocurrency Wallets
CYFIRMA has released a report on a new information-stealing malware called Flesh Stealer. This malware, written in C#,
SecurityOnline