News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 17 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 15 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 1 |
| Mon 26 Oct | 75 | 13 |
| Today, Tue 27 Oct | 19 so far | 5 |
Developing
Fri 14 Feb 202562 articles
- Device Code Phishing Attack Exploits Authentication Flow to Hijack Tokens
A sophisticated phishing campaign leveraging the device code authentication flow has been identified by Microsoft Threat Intelligence, targeting a wide range of sectors, including government, NGOs, IT services, and critical industries such as defense and…
gbhackers.com - Dutch Authorities Dismantle Network of 127 Command-and-Control Servers
Dutch police and the Public Prosecution Service have taken down a network of 127 command-and-control servers. This network was operated by ZServers/XHost, a so-called bulletproof hosting provider offering cybercriminals a safe haven to facilitate illegal…
gbhackers.com - Valve removed the game PirateFi from the Steam video game platform because contained a malware
Valve removed a game from Steam because it contained malware, the company also warned affected users to reformat their operating systems. Valve removed the game PirateFi from the Steam video game platform because it contained a Windows malicious code to…
Security Affairs - Apache Fineract SQL Injection Vulnerability Allows Malicious Data Injection
The Apache Software Foundation has disclosed a critical SQL injection vulnerability in its widely utilized financial platform, Apache Fineract. The flaw, tracked as CVE-2024-32838, affects multiple API endpoints and poses a significant risk to applications…
gbhackers.com - AMD Ryzen Flaw Enables Code Execution Through DLL Hijacking
A security vulnerability has been identified in the AMD Ryzen™ Master Utility, a performance-tuning tool for AMD Ryzen™ processors. This flaw, discovered by a security researcher, allows for privilege escalation and arbitrary code execution via...
gbhackers.com - Hackers Exploiting Newly Discovered PAN-OS Authentication Bypass Vulnerability
Threat actors actively exploit a new high-severity vulnerability, CVE-2025-0108, in Palo Alto Networks’ PAN-OS. This exploit allows attackers to bypass authentication, execute certain PHP scripts, and potentially gain unauthorized access to affected systems.…
gbhackers.com - WinZip Vulnerability Allows Remote Attackers to Execute Arbitrary Code
A newly discovered vulnerability in WinZip, a popular file compression and archiving utility, has raised alarms among cybersecurity experts. Identified as CVE-2025-1240, this critical flaw allows remote attackers to execute arbitrary code on a victim’s…
gbhackers.com - PostgreSQL Vulnerability Exploited Alongside BeyondTrust Zero-Day in Targeted Attacks
Threat actors who were behind the exploitation of a zero-day vulnerability in BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) products in December 2024 likely also exploited a previously unknown SQL injection flaw in PostgreSQL, according…
The Hacker News - OBS Studio vs. Fedora: Open Source Legal Battle
Even open-source projects like OBS Studio and Fedora Linux can find themselves embroiled in legal disputes. This case
SecurityOnline - Reddit Cashes In on AI: Google and OpenAI Pay $130M for User Data
Reddit, once known for its vibrant user base but lackluster financial performance, has unexpectedly soared on the wings
SecurityOnline - CVE-2025-1240: WinZip Vulnerability Opens Door to Remote Code Execution
A concerning vulnerability has been discovered in WinZip, potentially allowing remote attackers to execute arbitrary code on affected
SecurityOnline - Palo Alto Firewall Flaw (CVE-2025-0108): Active Exploits in the Wild, PoC Released
Palo Alto Networks has addressed a high-severity authentication bypass vulnerability (CVE-2025-0108) in the management web interface of its
SecurityOnline - CVE-2025-1126: Critical Lexmark Print Management Client Bug Puts Systems at Risk
Lexmark has issued a security advisory addressing a critical vulnerability in its Lexmark Print Management Client (LPMC). The
SecurityOnline - New I2PRAT Malware: Advanced, Undetectable?
Cybersecurity researchers at Sekoia have uncovered a new and sophisticated Remote Access Trojan (RAT) leveraging the Invisible Internet
SecurityOnline - CVE-2024-32838 (CVSS 9.4): Critical SQL Injection Flaw Threatens Apache Fineract Users
A significant security vulnerability has been discovered in Apache Fineract, the popular open-source platform used to build core
SecurityOnline - AMD Ryzen Master Utility Vulnerable to DLL Hijacking (CVE-2024-21966)
A newly discovered vulnerability in the AMD Ryzen Master Utility could allow attackers to escalate privileges and potentially
SecurityOnline - Hackers Can Take Over 30,000 WordPress Sites Due to Critical CleanTalk Security Flaw (CVE-2024-13365)
A critical arbitrary file upload vulnerability has been discovered in the Security & Malware scan by CleanTalk plugin
SecurityOnline - Lazarus Group’s Infostealer Malware Targets Developers in New Espionage Campaigns
North Korea’s infamous Lazarus Group is back in the spotlight, this time deploying a sophisticated infostealer malware campaign
SecurityOnline - CVE-2025-23359: NVIDIA Container Toolkit Flaw Could Lead to Code Execution and Denial of Service
NVIDIA has released a security update to address a high-severity vulnerability in its Container Toolkit for Linux and
SecurityOnline - Russian Influence Operations Target German Elections
A new report from Insikt Group reveals that Russia-linked influence operations are actively targeting the February 23, 2025,
SecurityOnline - XSS Flaw in Apache Atlas (CVE-2024-46910) Puts Data Governance at Risk
A serious security vulnerability has been uncovered in Apache Atlas, the open-source governance and metadata management tool widely
SecurityOnline - South Korean CSOs Under Cyberattack: 3-Year Study
A three-year study conducted by independent security researcher Ovie (Ovi) has exposed the scale and sophistication of digital
SecurityOnline