News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 0 |
| Thu 22 Oct | 84 | 3 |
| Fri 23 Oct | 68 | 8 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 0 |
| Mon 26 Oct | 75 | 5 |
| Today, Tue 27 Oct | 1 so far | 1 |
Developing
Mon 24 Feb 202572 articles
- Stablecoin Bank Hit by Cyberattack, Loses $49.5M to Hackers
The cryptocurrency sector faced one of its most significant security breaches this year as stablecoin banking platform @0xinfini fell victim to a sophisticated cyberattack. Hackers drained 49.5 million USD Coin ($USDC) from the platform’s reserves,…
gbhackers.com - GitVenom Campaign: Malicious GitHub Repositories Target Crypto and Credentials
Security researchers at Kaspersky Labs have uncovered a large-scale cybercrime campaign, dubbed GitVenom, that targets GitHub users by
SecurityOnline - Seraph Stealer Malware Hits the Market, Black Basta’s Internal Chaos, New Data Leak Claims
Seraph Stealer Malware Hits the Market, Black Basta’s Internal Chaos, New Data Leak Claims Cybercriminal activity continues to escalate on hacker forums, with SOCRadar’s Dark Web Team identifying several key threats this week. Notable discoveries include the…
SOCRadar - Australia Bans Kaspersky Software Over National Security and Espionage Concerns
Australia has become the latest country to ban the installation of security software from Russian company Kaspersky, citing national security concerns. "After considering threat and risk analysis, I have determined that the use of Kaspersky Lab, Inc.…
The Hacker News - $1.5 Billion Bybit Heist Linked to North Korean Hackers
Companies and experts have found evidence linking the $1.5 billion Bybit cryptocurrency heist to North Korean Lazarus hackers.
SecurityWeek - The GitVenom campaign: cryptocurrency theft using GitHub
In our modern world, it’s difficult to underestimate the impact that open-source code has on software development. Over the years, the global community has managed to publish a tremendous number of projects with freely accessible code that can be viewed and…
securelist.com - SpyLend Android malware found on Google Play enabled financial cyber crime and extortion
CYFIRMA researchers discovered that the SpyLend Android malware was downloaded 100,000 times from the official app store Google Play. CYFIRMA researchers discovered an Android malware, named SpyLend, which was distributed through Google Play as Finance…
Security Affairs - 2/24/25, 8:57 AM
Data Leak Exposes TopSec’s Role in China’s Censorship-as-a-Service Operations An analysis of a data leak from a Chinese cybersecurity company TopSec has revealed that it likely offers censorship-as-a-service solutions to prospective customers, including a…
Security Affairs - GhostSocks Malware Uses SOCKS5 Proxy to Evade Detection Systems
GhostSocks, a Golang-based SOCKS5 backconnect proxy malware, has emerged as a significant threat within the cybercrime ecosystem. First identified in October 2023 on Russian-language forums, its distribution expanded to English-speaking criminal platforms by…
gbhackers.com - LockBit Ransomware Strikes: Exploiting a Confluence Vulnerability
In a swift and highly coordinated attack, LockBit ransomware operators exploited a critical remote code execution vulnerability (CVE-2023-22527) in Atlassian Confluence servers, targeting an exposed Windows server. This vulnerability, rated CVSS 10.0,…
gbhackers.com - Leaked Black Basta chat logs reveal the gang’s operations
Leaked Black Basta chat logs reveal internal conflicts, exposing member details and hacking tools as the gang reportedly falls apart. An unknown actor, named ExploitWhispers, leaked Matrix chat logs of the Black Basta ransomware gang revealing internal…
Security Affairs - A week in security (February 17 – February 23)
Last week on Malwarebytes Labs: Healthcare security lapses keep piling up SecTopRAT bundled in Chrome installer distributed via Google Ads Google Docs used by infostealer ACRStealer as part of attack DeepSeek found to be sharing user data with TikTok...
Malwarebytes - Fake ChatGPT Premium Phishing Scam Spreads to Steal User Credentials
A sophisticated phishing campaign impersonating OpenAI’s ChatGPT Premium subscription service has surged globally, targeting users with fraudulent payment requests to steal credentials. Cybersecurity firm Symantec recently identified emails spoofing…
gbhackers.com - Windows 11 Gets a Makeover: Redesigned “Start” and Enhanced Sharing
Microsoft has recently released Windows 11 Insider Preview Build 22635.4950 to users enrolled in the Windows Insider Program,
SecurityOnline - Parallels Desktop 0-Day Exploit Enables Root Privileges – PoC Released
A critical zero-day vulnerability in Parallels Desktop virtualization software has been publicly disclosed after seven months of unresolved reporting, enabling attackers to escalate privileges to the root level on macOS systems. The proof-of-concept (PoC)…
gbhackers.com - Exim Mail Transfer Vulnerability Allows Attackers to Inject Malicious SQL
A newly disclosed vulnerability in the Exim mail transfer agent (CVE-2025-26794) has sent shockwaves through the cybersecurity community, revealing a critical SQL injection flaw that enables attackers to compromise email systems and manipulate underlying…
gbhackers.com - Biggest Crypto Hack in History -Hackers Stolen $1.46 Billion Worth Crypto From Bybit
In what has become the largest cryptocurrency theft in history, hackers infiltrated Bybit’s Ethereum cold wallet on February 21, 2025, siphoning approximately 401,346 ETH valued at $1.46 billion. The breach, attributed to North Korea’s Lazarus Group,…
gbhackers.com - PoC Exploit Released for F5 BIG-IP Command Injection Vulnerability
Security researchers have disclosed critical details about CVE-2025-20029, a command injection vulnerability in F5’s BIG-IP Traffic Management Shell (TMSH) command-line interface. The flaw enables authenticated attackers with low privileges to bypass…
gbhackers.com - Google Introduces Quantum-Safe Digital Signatures in Cloud KMS
Google Cloud has unveiled a critical cybersecurity upgrade: quantum-safe digital signatures via its Key Management Service (Cloud KMS), now available in preview. This move aligns with the National Institute of Standards and Technology’s (NIST) 2024…
gbhackers.com - Australia Bans Kaspersky Products from Government Systems, Citing “Unacceptable Security Risk”
The Australian Government has issued a new directive banning the use of Kaspersky Lab products and web services
SecurityOnline - Kyrgyzstan Cracks Down: US.KG Offline After Cyberattacks
The US.KG domain, which previously offered free subdomains, has once again been suspended from resolution by the Kyrgyzstan
SecurityOnline - 0-Day in Parallels Desktop Allows Root Privilege Escalation, PoC Released
A newly disclosed 0-day vulnerability in Parallels Desktop has exposed a root privilege escalation flaw, bypassing the patch
SecurityOnline - Security Alert: AsyncRAT Malware Evades Detection with Null-AMSI
A new malware campaign uncovered by Cyble Research and Intelligence Labs (CRIL) is leveraging Null-AMSI to bypass Windows
SecurityOnline - CVE-2024-56171 & CVE-2025-24928: Libxml2 Flaws Could Lead to Code Execution
Libxml2,a widely used XML parsing library developed for the GNOME project but also utilized across various platforms, including
SecurityOnline - ScreamedJungle Campaign Steals Browser Fingerprints from 115+ Sites
A new report from Group-IB exposes a growing cybersecurity threat: browser fingerprint theft. Cybercriminals are using sophisticated techniques
SecurityOnline - North Korean APT-C-28 Expands Cyber Espionage Campaign
A recent report from 360 Threat Intelligence Center has detailed the persistent cyber espionage activities of APT-C-28 (ScarCruft),
SecurityOnline - GhostSocks Malware: A New Cyber Threat Leveraging SOCKS5 Backconnect for Evasion
A recent report from Infrawatch has exposed GhostSocks, a Golang-based SOCKS5 backconnect proxy malware, which has been actively
SecurityOnline - Apple Halts iCloud Advanced Data Protection in the UK After Government Demands Backdoor Access
The British government had previously demanded that Apple introduce a backdoor mechanism in iCloud, enabling law enforcement agencies
SecurityOnline - ChromeUpdate & DriverEasy: North Korea’s New macOS Cyber Espionage Tools
A recent deep dive by Christopher Lopez, Senior macOS Security Researcher at Kandji, has exposed a sophisticated cyber-espionage
SecurityOnline - Moxa PT Switches Vulnerable to CVE-2024-9404 Denial-of-Service Attack
Moxa, a leading provider of industrial networking solutions, has issued a security advisory regarding a critical denial-of-service (DoS)
SecurityOnline - Russia-Linked Threat Actors Exploiting Signal Messenger to Eavesdrop on Sensitive Communications
A recent report from Google Threat Intelligence Group (GTIG) has revealed a coordinated effort by multiple Russia-aligned threat
SecurityOnline - Thailand Targets Cyber Sweatshops to Free 1,000s of Captives
Thai police said it was expecting to soon welcome 7,000 human trafficking victims, forced to work on cybercrime scams in call centers in Mynmar, in a first wave of people being freed from captivity.
Dark Reading