News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 0 |
| Thu 22 Oct | 84 | 3 |
| Fri 23 Oct | 68 | 8 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 0 |
| Mon 26 Oct | 75 | 5 |
| Today, Tue 27 Oct | 15 so far | 2 |
Developing
Mon 17 Feb 202554 articles
- xAI’s Grok 3 Debut: Musk Challenges OpenAI
Following the recent $97.4 billion acquisition proposal for OpenAI-related assets, which was formally rejected through a court filing
SecurityOnline - CVE-2022-31631 (CVSS 9.1): Critical PHP Flaw Exposes Websites to SQL Injection Attacks
A serious vulnerability has been discovered in PHP, potentially exposing websites and applications to SQL injection attacks. Users
SecurityOnline - Russian Hackers Exploit Microsoft Device Code Authentication in Targeted Attacks Against M365 Accounts
Cybersecurity researchers at Volexity have uncovered a series of targeted phishing and social engineering campaigns by multiple Russian
SecurityOnline - Metasploit-Ready: CVE-2025-1094 SQLi in PostgreSQL Exposes Systems to Remote Attacks
Rapid7 researchers have discovered a high-severity SQL injection vulnerability (CVE-2025-1094) in PostgreSQL’s interactive tool, psql. This vulnerability, found
SecurityOnline - Astaroth Phishing Kit Bypasses 2FA, Steals Accounts
Cybersecurity researchers at SlashNext have discovered a sophisticated new phishing kit dubbed “Astaroth” that is capable of bypassing
SecurityOnline - SPAWNCHIMERA: New Malware Exploits Ivanti Zero-Day Flaw (CVE-2025-0282)
Cybersecurity researchers at JPCERT/CC have uncovered a significant upgrade to the SPAWN malware family, introducing SPAWNCHIMERA, a more
SecurityOnline - North Korea’s IT Worker Scam: How the Regime Infiltrates Global Tech Firms for Cyber Espionage
Cybersecurity researchers at Insikt Group have uncovered a sophisticated North Korean IT worker scam designed to infiltrate global
SecurityOnline - AMD Patches High-Severity SMM Callout Flaw (CVE-2024-21924) in EPYC and Ryzen Threadripper Processors
AMD has released security patches addressing a high-severity vulnerability (CVE-2024-21924) affecting multiple processor families, including EPYC data center
SecurityOnline - Buffer Overflows Vulnerabilities: CISA & FBI Issue Urgent Warning
In a joint Secure by Design Alert, the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau
SecurityOnline - Mailcow Patches Password Reset Poisoning Vulnerability (CVE-2025-25198)
Popular open-source email server suite, mailcow, has released a patch addressing a serious vulnerability that could allow attackers
SecurityOnline - FINALDRAFT Malware Exploits Outlook Drafts for Covert Communication
In a recent investigation into the REF7707 intrusion set, Elastic Security Labs has identified a new malware family
SecurityOnline - CVE-2024-1709 and CVE-2023-48788: Exploits Fueling Russia’s BadPilot Campaign
Microsoft Threat Intelligence has exposed a multiyear cyber espionage campaign conducted by a subgroup of the Russian state-sponsored
SecurityOnline - Fake ‘Adobe Drive X’ App Sneaks Through Microsoft Login to Steal Credentials
Cofense’s Phishing Defense Center (PDC) has uncovered a phishing campaign that uses a legitimate Microsoft login page to
SecurityOnline - Google Chrome's AI-powered security feature rolls out to everyone
Google Chrome has updated the existing "Enhanced protection" feature with AI to offer "real-time" protection against dangerous websites, downloads and extensions. [...]
BleepingComputer