News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 0 |
| Thu 22 Oct | 84 | 3 |
| Fri 23 Oct | 68 | 8 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 0 |
| Mon 26 Oct | 75 | 5 |
| Today, Tue 27 Oct | 8 so far | 1 |
Developing
Fri 21 Feb 202564 articles
- Adversary-in-the-Middle Hackers Exploit Vulnerabilities to Deploy Advanced Malware
Cybercriminals are increasingly leveraging sophisticated Adversary-in-the-Middle (AiTM) phishing techniques, enabled by the rise of Phishing-as-a-Service (PhaaS) ecosystems. These operations target financial institutions globally, bypassing multi-factor…
gbhackers.com - Angry Likho: Old beasts in a new forest
Angry Likho (referred to as Sticky Werewolf by some vendors) is an APT group we’ve been monitoring since 2023. It bears a strong resemblance to Awaken Likho, which we’ve analyzed before, so we classified it within the Likho malicious activity cluster.…
securelist.com - Europol Cracks Down on European Document Forgery and Smuggling Ring
Europol has announced a successful operation against a significant organized crime group involved in forging official documents and
SecurityOnline - Atlassian fixed critical flaws in Confluence and Crowd
Australian software firm Atlassian patched 12 critical and high-severity flaws in Bamboo, Bitbucket, Confluence, Crowd, and Jira. Software firm Atlassian released security patches to address 12 critical- and high-severity vulnerabilities in Bamboo,…
Security Affairs - Cisco Confirms Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks
Cisco has confirmed that a Chinese threat actor known as Salt Typhoon gained access by likely abusing a known security flaw tracked as CVE-2018-0171, and by obtaining legitimate victim login credentials as part of a targeted campaign aimed at major U.S.…
The Hacker News - CISA Flags Craft CMS Vulnerability CVE-2025-23209 Amid Active Attacks
A high-severity security flaw impacting the Craft content management system (CMS) has been added by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active…
The Hacker News - CISA Issues Seven ICS Advisories Highlighting Critical Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) released seven Industrial Control Systems (ICS) advisories on February 20, 2025, addressing critical vulnerabilities in products from ABB, Siemens, Mitsubishi Electric, and other industrial…
gbhackers.com - Apple’s Spyware Detection: Only 50% Effective?
The Pegasus spyware, developed by Israeli commercial surveillance firm NSO Group, remains one of the most formidable threats
SecurityOnline - ChatGPT Hits 400 Million Weekly Users
In December, 2024, OpenAI revealed that ChatGPT’s weekly active users had surpassed 300 million. This marks a significant
SecurityOnline - Pegasus Spyware Now Targeting Business Executives and Financial Sector Professionals
The once-shadowy realm of Pegasus spyware has breached new frontiers, with forensic analyses revealing a stark pivot from targeting journalists and activists to infiltrating the private sector. In December 2024, mobile security firm iVerify detected 11 new…
gbhackers.com - Apple C2 Modem: Next-Gen 5G in the Works?
Apple has recently unveiled the iPhone 16e, marking the debut of its first proprietary 5G modem chip, the
SecurityOnline - Amazon Appstore on Android to Shut Down in 2025: What It Means for Users and Developers
The Amazon Appstore, introduced by Amazon as an alternative to the Google Play Store, serves as a reliable
SecurityOnline - Google Releases PoC for CVE-2025-0110 Command Injection in PAN-OS Firewalls
A Google researcher has disclosed details and a proof-of-concept (PoC) exploit for a vulnerability (CVE-2025-0110) in Palo Alto
SecurityOnline - CVE-2025-23115 & CVE-2025-23116: Hackers Can Hijack Ubiquiti UniFi Protect Cameras
Ubiquiti, a leading provider of networking equipment, has issued a critical security advisory concerning multiple vulnerabilities discovered in
SecurityOnline - CVE-2025-0111 & CVE-2025-23209: Palo Alto Firewalls and Craft CMS Under Active Attack
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical security vulnerabilities to its Known Exploited
SecurityOnline - China’s Cybersecurity Firms Reveal Alleged NSA (Equation Group) Tactics in University Hack
A newly surfaced Chinese cybersecurity report claims to provide a detailed look into NSA (Equation Group) tactics, techniques,
SecurityOnline - CVE-2024-39327 (CVSS 9.9): Critical IDPKI Flaw Could Allow Illegitimate Certificate Issuance
Eviden, an Atos business, has released a security bulletin addressing multiple vulnerabilities discovered in IDPKI, its Identity and
SecurityOnline - ACRStealer Malware Exploits Google Docs as Command-and-Control Infrastructure
Cybersecurity researchers at AhnLab Security Intelligence Center (ASEC) have identified a new surge in ACRStealer, a stealthy infostealer
SecurityOnline - Fluent Bit Vulnerabilities (CVE-2024-50608 & CVE-2024-50609) Could Disrupt Millions of Enterprise Systems
Cybersecurity researchers at Ebryx have identified two vulnerabilities in Fluent Bit, a widely used open-source log processor and
SecurityOnline - TA2726 & TA2727: Hackers Deploy Fake Updates to Spread Malware
Cybersecurity researchers at Proofpoint have identified two new cybercriminal threat actors, TA2726 and TA2727, actively exploiting fake browser
SecurityOnline - Updated ShadowPad Malware Facilitates Ransomware Deployment in Global Attacks
A new report from Trend Micro has revealed that ShadowPad, a modular malware with deep ties to Chinese
SecurityOnline - JavaScript-Based Malware Exploits Steganography for Covert Data Theft
Cybersecurity firm CYFIRMA has uncovered a highly sophisticated malware campaign leveraging JavaScript to establish covert communication with a
SecurityOnline - Secure Boot Bypass: U-Boot Vulnerabilities Expose Embedded Devices
U-Boot, a popular bootloader used in a wide range of embedded devices, has received a crucial update to
SecurityOnline - REF7707: Espionage Campaign Targets South America and Southeast Asia
Elastic Security Labs has recently uncovered an expansive cyber espionage campaign, codenamed REF7707, that spans across South America
SecurityOnline