News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 0 |
| Thu 22 Oct | 84 | 3 |
| Fri 23 Oct | 68 | 8 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 0 |
| Mon 26 Oct | 75 | 5 |
| Today, Tue 27 Oct | 14 so far | 2 |
Developing
Wed 19 Feb 202578 articles
- OpenSSH bugs allows Man-in-the-Middle and DoS Attacks
Two OpenSSH vulnerabilities could allow machine-in-the-middle (MitM) and denial-of-service (DoS) attacks under certain conditions. The Qualys Threat Research Unit (TRU) has discovered two vulnerabilities in OpenSSH. The first, tracked as CVE-2025-26465 (CVSS…
Security Affairs - $10 Infostealers Are Breaching Critical US Security: Military and Even the FBI Hit
Waqas reports: A new report reveals how inexpensive cybercrime can compromise even the most secure organizations. According to Hudson Rock, employees at key US defence entities, including the Pentagon, major contractors like Lockheed Martin and Honeywell,…
DataBreaches - Darktrace Releases Annual 2024 Threat Insights
Explore Darktrace's Annual Threat Report 2024 for insights on the latest cyber threats and trends observed throughout the year.
darktrace.com - Free Diagram Tool Aids Management of Complex ICS/OT Cybersecurity Decisions
Admeritia has launched Cyber Decision Diagrams, a free tool designed to help organizations manage complex decisions related to ICS/OT cybersecurity.
SecurityWeek - Russian phishing campaigns exploit Signal's device-linking feature
Russian threat actors have been launching phishing campaigns that exploit the legitimate "Linked Devices" feature in the Signal messaging app to gain unauthorized access to accounts of interest. [...]
BleepingComputer - Raymond IT Systems Hit by Cyber Attack, Authorities Investigating
Textile and apparel conglomerate Raymond Limited confirmed a cybersecurity breach affecting portions of its IT infrastructure on Wednesday, February 19, 2025, according to regulatory filings submitted to the BSE and NSE stock exchanges. The Mumbai-based…
gbhackers.com - Firefox 135.0.1 Released to Address High-Severity Memory Safety Vulnerabilities
Mozilla released Firefox 135.0.1 on February 18, 2025, as an emergency security update to patch multiple high-severity memory safety vulnerabilities. The update specifically addresses CVE-2025-1414, a critical flaw that could enable arbitrary code execution…
gbhackers.com - Lee Enterprises Newspaper Disruptions Caused by Ransomware
Lee Enterprises has shared more details on the recent cyberattack, saying the attackers encrypted and stole files.
SecurityWeek - How Russian Hackers Are Exploiting Signal ‘Linked Devices’ Feature for Real-Time Spying
Mandiant warns that multiple Russian APTs are abusing a nifty Signal Messenger feature to surreptitiously spy on encrypted conversations.
SecurityWeek - The Ultimate MSP Guide to Structuring and Selling vCISO Services
The growing demand for cybersecurity and compliance services presents a great opportunity for Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs) to offer virtual Chief Information Security Officer (vCISO) services—delivering…
The Hacker News - Security Flaws in OpenSSH and Juniper Networks Demand Action (CVE-2025-26465, CVE-2025-26466, and CVE-2025-21589)
Security Flaws in OpenSSH and Juniper Networks Demand Action (CVE-2025-26465, CVE-2025-26466, and CVE-2025-21589) Recent discoveries have revealed severe vulnerabilities in two widely used networking technologies – OpenSSH and Juniper Networks’ Session Smart…
SOCRadar - 90,000 WordPress Sites Exposed to Local File Inclusion Attacks
A critical vulnerability (CVE-2025-0366) in the Jupiter X Core WordPress plugin, actively installed on over 90,000 websites, was disclosed on January 6, 2025. The flaw enables authenticated attackers with contributor-level privileges to execute remote code…
gbhackers.com - Spam and phishing in 2024
The year in figures 27% of all emails sent worldwide and 48.57% of all emails sent in the Russian web segment were spam 18% of all spam emails were sent from Russia Kaspersky Mail Anti-Virus blocked 125,521,794 malicious email attachments Our Anti-Phishing…
securelist.com - Trojanized Game Installers Deploy Cryptocurrency Miner in Large-Scale StaryDobry Attack
Users who are on the lookout for popular games were lured into downloading trojanized installers that led to the deployment of a cryptocurrency miner on compromised Windows hosts. The large-scale activity has been codenamed StaryDobry by Russian…
The Hacker News - CISA Warns of Active Exploitation of SonicWall SonicOS RCE Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding the active exploitation of critical remote code execution (RCE) vulnerability in SonicWall’s SonicOS, tracked as CVE-2024-53704. Added to CISA’s Known…
gbhackers.com - CISA Issues Warning on Palo Alto PAN-OS Security Flaw Under Attack
CISA and Palo Alto Networks are scrambling to contain widespread exploitation of a critical authentication bypass vulnerability (CVE-2025-0108) affecting firewall devices running unpatched PAN-OS software. The Cybersecurity and Infrastructure Security Agency…
gbhackers.com - Surge in IRS and Tax-Themed Cyber Attacks Driven by Fresh Domain Registrations
The months of January through April, marking the U.S. tax season, have seen a sharp rise in malicious cyber activity targeting taxpayers. Broadcom’s Symantec Security Center has identified a surge in IRS and tax-themed phishing campaigns, smishing attacks,…
gbhackers.com - Critical Flaw in Apache Ignite (CVE-2024-52577) Allows Attackers to Execute Code Remotely
A severe security vulnerability (CVE-2024-52577) in Apache Ignite, the open-source distributed database and computing platform, has been disclosed. The flaw enables remote attackers to execute arbitrary code on vulnerable servers by exploiting insecure…
gbhackers.com - Meta Announces LlamaCon Developer Conference
Following multiple updates to its Llama series of large-scale natural language models, Meta has officially announced the inaugural
SecurityOnline - Windows 11 Migration: Will Win32 Apps Make the Cut?
In the Windows 11 preview build, Microsoft is developing a new backup and transfer tool. While the tool
SecurityOnline - Russian Government Proposes Stricter Penalties to Tackle Cybercrime
The Russian government has unveiled sweeping legislative reforms aimed at curbing cybercrime, introducing stricter penalties, expansive law enforcement powers, and novel judicial measures. Approved on February 10, 2025, the amendments seek to modernize the…
gbhackers.com - GPT-4o Copilot Covers More Than 30 Popular Programming Languages
GitHub has launched GPT-4o Copilot, a refined code completion model now available to Visual Studio Code users. Built on the GPT-4o mini architecture and trained on over 275,000 high-quality public repositories, the update marks a leap in multi-language…
gbhackers.com - U.S. CISA adds SonicWall SonicOS and Palo Alto PAN-OS flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SonicWall SonicOS and Palo Alto PAN-OS vulnerabilities to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Apple iOS and…
Security Affairs - CISA Issues Two New ICS Advisories Addressing Exploits and Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) escalated its cybersecurity alerts on February 18, 2025, releasing two critical Industrial Control Systems (ICS) advisories targeting vulnerabilities in Delta Electronics’ CNCSoft-G2 and…
gbhackers.com - Chrome Buffer Overflow Flaws Let Hackers Execute Arbitrary Code & Gain System Access
Google has rolled out an urgent security update for its Chrome browser, patching three vulnerabilities—including two critical heap buffer overflow flaws—that could enable attackers to execute arbitrary code and seize control of affected systems. The update…
gbhackers.com - CISA Adds Palo Alto Networks and SonicWall Flaws to Exploited Vulnerabilities List
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security flaws impacting Palo Alto Networks PAN-OS and SonicWall SonicOS SSLVPN to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active…
The Hacker News - North Korea's Kimsuky Taps Trusted Platforms to Attack South Korea
The campaign heavily uses Dropbox folders and PowerShell scripts to evade detection and quickly scrapped infrastructure components after researchers began poking around.
Dark Reading - CVE-2024-52577 (CVSS 9.5): Apache Ignite Vulnerability Could Allow Remote Code Execution
A high-severity vulnerability has been discovered in Apache Ignite, a popular open-source distributed database for high-performance computing. The
SecurityOnline - CVE-2025-26519 Exposes Applications Using musl libc to Remote Code Execution
A serious vulnerability has been discovered in musl libc, the lightweight C standard library often favored in embedded
SecurityOnline - US Threatens UK Over iCloud Backdoor Demand
American lawmakers are demanding that newly appointed Director of National Intelligence Tulsi Gabbard reaffirm her firm stance on
SecurityOnline - Anonymous VPS Provider BitLaunch Under Fire for Facilitating Ransomware Attacks
Independent security researcher BushidoToken release of a report that delves deep into the murky world of anonymous VPS
SecurityOnline - Xerox Versalink Printers Vulnerable to Pass-Back Attacks, Credentials at Risk
Rapid7 researchers have discovered vulnerabilities in Xerox Versalink C7025 multifunction printers that could allow attackers to steal user
SecurityOnline - New XELERA Ransomware Campaign Spreading Through Malicious Documents
A newly discovered ransomware campaign, dubbed XELERA, is targeting job seekers in India with fraudulent Food Corporation of
SecurityOnline - Exploit Code Published for Critical GatesAir Transmitter Vulnerabilities, No Patches Available Yet
Security researcher Mohamed Shahat has disclosed three critical vulnerabilities affecting GatesAir Maxiva UAXT and VAXT transmitters. These widely
SecurityOnline - Lumma Stealer Malware Campaign Targets Educational Institutions with Deceptive PDF Lures
A new report from CloudSEK reveals an ongoing malware campaign distributing the Lumma Stealer information stealer, primarily targeting
SecurityOnline - CVE-2025-0999 & CVE-2025-1426: Chrome’s Latest Update Patches Major Security Risks
The Google Chrome stable channel has just received a crucial update, bringing it to version 133.0.6943.126/.127 for Windows
SecurityOnline - 90,000 Sites at Risk: Jupiter X Core RCE Vulnerability (CVE-2025-0366)
A vulnerability has been discovered and patched in the popular Jupiter X Core WordPress plugin, which boasts over
SecurityOnline - TRIPLESTRENGTH Threat Actor Group : Ransomware, Mining, and Server Hacks
Google’s Threat Analysis Group has unveiled information about a previously unknown threat actor group known as TRIPLESTRENGTH, which
SecurityOnline