News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 0 |
| Thu 22 Oct | 84 | 3 |
| Fri 23 Oct | 68 | 8 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 0 |
| Mon 26 Oct | 75 | 5 |
| Today, Tue 27 Oct | 14 so far | 2 |
Developing
Thu 20 Feb 202575 articles
- How federal rules on cybersecurity breach transparency for businesses were challenged in court in 2024
Dom DiFurio reports: In October, four companies collectively paid nearly $7 million as part of a settlement with the Securities and Exchange Commission for allegedly failing to properly inform investors of a cyberbreach affecting their companies, a liability…
DataBreaches - PoC Exploit Published for Critical Ivanti EPM Vulnerabilities
Proof-of-concept (PoC) code and technical details on four critical-severity Ivanti EPM vulnerabilities are now available.
SecurityWeek - Chinese-Linked Attackers Exploit Check Point Flaw to Deploy ShadowPad and Ransomware
A previously unknown threat activity cluster targeted European organizations, particularly those in the healthcare sector, to deploy PlugX and its successor, ShadowPad, with the intrusions ultimately leading to deployment of a ransomware called NailaoLocker…
The Hacker News - PCI DSS 4.0 Mandates DMARC By 31st March 2025
The payment card industry has set a critical deadline for businesses handling cardholder data or processing payments- by March 31, 2025, DMARC implementation will be mandatory! This requirement highlights the importance of preventative measures against email…
The Hacker News - Microsoft fixed actively exploited flaw in Power Pages
Microsoft addressed a privilege escalation vulnerability in Power Pages, the flaw is actively exploited in attacks. Microsoft has addressed two critical vulnerabilities, tracked as CVE-2025-21355 (CVSS score: 8.6) and CVE-2025-24989 (CVSS score: 8.2),…
Security Affairs - US Military Health Provider HNFS Pays $11M in Settlement Over Cybersecurity Failures
US military health benefits program administrator HNFS to pay $11 million in settlement over its false claims of cybersecurity compliance.
SecurityWeek - Cybercriminals Use Eclipse Jarsigner to Deploy XLoader Malware via ZIP Archives
A malware campaign distributing the XLoader malware has been observed using the DLL side-loading technique by making use of a legitimate application associated with the Eclipse Foundation. "The legitimate application used in the attack, jarsigner, is a file…
The Hacker News - 'Darcula' Phishing Kit Can Now Impersonate Any Brand
With Version 3, would-be phishers can cut and paste a big brand's URL into a template and let automation do the rest.
Dark Reading - Citrix addressed NetScaler console privilege escalation flaw
Citrix addressed a high-severity privilege escalation vulnerability impacting NetScaler Console and NetScaler Agent under certain conditions. Citrix released security updates to address a high-severity security vulnerability, tracked as CVE-2024-12284 (CVSS…
Security Affairs - Microsoft Patches Exploited Power Pages Vulnerability
Microsoft has patched CVE-2025-24989, a Power Pages privilege escalation vulnerability that has been exploited in attacks.
SecurityWeek - Best Secure Browsers for 2025: A Comparison Guide
Best Secure Browsers for 2025: A Comparison Guide Your browser is your ship on the vast internet sea. It determines your safety first, followed by your speed and path. Choosing a secure browser is not only necessary, but also essential, given the prevalence…
SOCRadar - Microsoft's End of Support for Exchange 2016 and 2019: What IT Teams Must Do Now
For decades, Microsoft Exchange has been the backbone of business communications, powering emailing, scheduling and collaboration for organizations worldwide. Whether deployed on-premises or in hybrid environments, companies of all sizes rely on Exchange for…
The Hacker News - Zero-Day Security Flaw in Microsoft Power Pages (CVE-2025-24989) Exposes Users to Privilege Escalation
Microsoft has addressed a zero-day vulnerability (CVE-2025-24989) in its Power Pages platform that could allow unauthorized attackers to
SecurityOnline - Symantec Diagnostic Tool Flaw Enables Unauthorized Privilege Escalation
Symantec, a division of Broadcom, has released a critical security update to address a high-severity vulnerability identified in its Symantec Diagnostic Tool (SymDiag). This vulnerability tracked as CVE-2025-0893, could enable unauthorized privilege…
gbhackers.com - Managed detection and response in 2024
Kaspersky Managed Detection and Response service (MDR) provides round-the-clock monitoring and threat detection, based on Kaspersky technologies and expertise. The annual MDR analyst report presents insights based on the analysis of incidents detected by…
securelist.com - New NailaoLocker ransomware used against EU healthcare orgs
A previously undocumented ransomware payload named NailaoLocker has been spotted in attacks targeting European healthcare organizations between June and October 2024. [...]
BleepingComputer - Microsoft’s Quantum Breakthrough: Majorana 1 and the Future of Computing
Microsoft has announced the launch of its first quantum processor, Majorana 1, which is built upon an entirely
SecurityOnline - CISA and FBI Issue Alert as Ghost Ransomware Targets 70+ Organizations
The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have issued a joint advisory warning about the increasing threat posed by Ghost ransomware. This malicious campaign has already impacted more than 70…
gbhackers.com - Palo Alto Networks warns that CVE-2025-0111 flaw is actively exploited in attacks
Palo Alto Networks warns that the vulnerability CVE-2025-0111 is actively exploited with two other flaws to compromise PAN-OS firewalls. Palo Alto Networks warns that threat actors are chaining the vulnerability CVE-2025-0111 with two other vulnerabilities,…
Security Affairs - Windows Disk Cleanup Tool Exploit Allows SYSTEM Privilege Escalation
Microsoft has urgently addressed a high-severity privilege escalation vulnerability (CVE-2025-21420) in the Windows Disk Cleanup Utility (cleanmgr.exe) during its February 2025 Patch Tuesday updates. The flaw, scoring 7.8 on the CVSS scale, enabled attackers…
gbhackers.com - Citrix NetScaler Vulnerability Exposes Systems to Unauthorized Commands
Cloud Software Group has raced to address a severe security flaw in its widely used NetScaler management infrastructure that could enable authenticated attackers to execute malicious commands across enterprise networks. The vulnerability tracked as…
gbhackers.com - Critical Microsoft Bing Vulnerability Enabled Remote Code Execution Attacks
A critical security flaw in Microsoft Bing tracked as CVE-2025-21355, allowed unauthorized attackers to execute arbitrary code remotely, posing severe risks to organizations and users globally. The vulnerability, rooted in a missing authentication mechanism…
gbhackers.com - Citrix Releases Security Fix for NetScaler Console Privilege Escalation Vulnerability
Citrix has released security updates for a high-severity security flaw impacting NetScaler Console (formerly NetScaler ADM) and NetScaler Agent that could lead to privilege escalation under certain conditions. The vulnerability, tracked as CVE-2024-12284,…
The Hacker News - Microsoft Patches Actively Exploited Power Pages Privilege Escalation Vulnerability
Microsoft has released security updates to address two Critical-rated flaws impacting Bing and Power Pages, including one that has come under active exploitation in the wild. The vulnerabilities are listed below - CVE-2025-21355 (CVSS score: 8.6) - Microsoft…
The Hacker News - CVE-2025-21420: Windows Disk Cleanup Tool Flaw Exploited to Gain SYSTEM Privileges, PoC Released
A vulnerability in the Windows Disk Cleanup Tool (cleanmgr.exe) has been patched by Microsoft as part of its
SecurityOnline - Rhadamanthys Infostealer Exploits Microsoft Management Console
AhnLab Security Emergency Response Center (ASEC) has issued a warning about a new distribution method for the Rhadamanthys
SecurityOnline - CVE-2025-1272: Fedora Linux Kernel Flaw Leaves Systems Vulnerable
A security vulnerability has been discovered in Fedora Linux, potentially leaving systems vulnerable to attacks. The flaw, tracked
SecurityOnline - CVE-2022-41545: Netgear C7800 Router Flaw Exposes User Credentials, No Patch!
A concerning vulnerability has been discovered in the Netgear C7800 router, potentially leaving user credentials exposed to attackers.
SecurityOnline - Australian Critical Infrastructure Faces 'Acute' Foreign Threats
The continent faces "relentless" military espionage, and increased cyber sabotage at the hands of authoritarian regimes, according to a high-ranking intelligence director.
Dark Reading - Cracked Games, Cryptojacked PCs: The StaryDobry Campaign
On December 31, cybercriminals launched a mass infection campaign, dubbed StaryDobry, leveraging the holiday season’s increased torrent traffic
SecurityOnline - Multiple Vulnerabilities in Barebox Bootloader Expose Embedded Systems to Code Execution Risks
Barebox, a widely used bootloader for embedded systems, has released version 2025.01.0 to address multiple critical vulnerabilities that
SecurityOnline - HP Warns of Critical Security Flaw in LaserJet Printers – CVE-2025-26506 (CVSSv4 9.2)
HP has issued a security advisory warning of critical vulnerabilities affecting several models of its LaserJet Pro, LaserJet
SecurityOnline - New Golang Backdoor Employs Telegram for Command and Control
Security researchers at Netskope Threat Labs have uncovered a new backdoor malware written in Golang that leverages Telegram
SecurityOnline - SICK Warns of Severe Security Flaws in MEAC300 Sensors – CVE-2025-0867 Rated 9.9 CVSS
SICK, a leading sensor manufacturer, has issued a security advisory regarding multiple vulnerabilities affecting its MEAC300 line of
SecurityOnline - Amazon Prime Phishing Scam Steals Login, Payment Info
The Cofense Phishing Defense Center (PDC) has identified a new phishing campaign that specifically targets Amazon Prime users,
SecurityOnline