News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 0 |
| Thu 22 Oct | 84 | 3 |
| Fri 23 Oct | 68 | 8 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 0 |
| Mon 26 Oct | 75 | 5 |
| Today, Tue 27 Oct | 0 so far | 0 |
Developing
Tue 25 Feb 202566 articles
- 2,500+ Truesight.sys Driver Variants Exploited to Bypass EDR and Deploy HiddenGh0st RAT
A large-scale malware campaign has been found leveraging a vulnerable Windows driver associated with Adlice's product suite to sidestep detection efforts and deliver the Gh0st RAT malware. "To further evade detection, the attackers deliberately generated…
The Hacker News - GitVenom Malware Steals $456K in Bitcoin Using Fake GitHub Projects to Hijack Wallets
Cybersecurity researchers are calling attention to an ongoing campaign that's targeting gamers and cryptocurrency investors under the guise of open-source projects hosted on GitHub. The campaign, which spans hundreds of repositories, has been dubbed GitVenom…
The Hacker News - LightSpy Malware Expands With 100+ Commands to Target Users Across All Major OS Platforms
The LightSpy surveillance framework has significantly evolved its operational capabilities, now supporting over 100 commands to infiltrate Android, iOS, Windows, macOS, and Linux systems, and routers, according to new infrastructure analysis. First…
gbhackers.com - Russia warns financial sector organizations of IT service provider LANIT compromise
Russia’s NKTsKI warns financial sector organizations about a breach at major Russian IT service and software provider LANIT. Russia’s National Coordination Center for Computer Incidents (NKTsKI) warns the financial sector of security breach at IT service and…
Security Affairs - Leadership Shift: Mozilla’s Future with New Executive Team
Mozilla President Mark Surman recently announced a series of leadership transitions within the organization, unveiling a newly restructured
SecurityOnline - Android’s Future: 8 Years of Security with Qualcomm & Google
Google has long expressed its ambition to extend software and security updates for Android devices, aiming to enhance
SecurityOnline - Critical RCE Vulnerability in MITRE Caldera – Proof of Concept Released
A critical remote code execution (RCE) vulnerability has been uncovered in MITRE Caldera, a widely used adversarial emulation framework. The flaw (CVE-2025-27364) affects all versions prior to commit 35bc06e, potentially exposing systems running Caldera…
gbhackers.com - CISA Alerts: Oracle Agile Vulnerability Actively Exploited
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding active exploitation of a severe deserialization vulnerability (CVE-2024-20953) in Oracle Agile Product Lifecycle Management (PLM) software. Added to CISA’s…
gbhackers.com - Hackers Evade Outlook Spam Filters to Deliver Malicious ISO Files
A newly discovered technique allows threat actors to circumvent Microsoft Outlook’s spam filters to deliver malicious ISO files, exposing organizations to sophisticated phishing campaigns. The bypass leverages hyperlink obfuscation to disguise malicious…
gbhackers.com - FatalRAT Phishing Attacks Target APAC Industries Using Chinese Cloud Services
Various industrial organizations in the Asia-Pacific (APAC) region have been targeted as part of phishing attacks designed to deliver a known malware called FatalRAT. "The threat was orchestrated by attackers using legitimate Chinese cloud content delivery…
The Hacker News - KernelSnitch: Uncovering a New Side-Channel Attack on Data Structures
Researchers at Graz University of Technology have uncovered a groundbreaking software-based side-channel attack, KernelSnitch, which exploits timing variances in Linux kernel data structures. Unlike hardware-dependent attacks, KernelSnitch targets hash…
gbhackers.com - CVE-2025-27364 (CVSS 10): Remote Code Execution Flaw Found in MITRE Caldera, PoC Releases
A newly discovered vulnerability in MITRE Caldera, tracked as CVE-2025-27364, has been assigned a critical CVSS score of
SecurityOnline - Two Actively Exploited Security Flaws in Adobe and Oracle Products Flagged by CISA
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security flaws impacting Adobe ColdFusion and Oracle Agile Product Lifecycle Management (PLM) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active…
The Hacker News - PoC Released: CVE-2024-13159 (CVSS 9.8) in Ivanti EPM Poses Severe Security Threat
Security researcher Zach Hanley (@hacks_zach) of Horizon3.ai published the technical details and a proof-of-concept (PoC) exploit code for
SecurityOnline - CVE-2025-1128: Everest Forms Plugin Exposes 100,000+ WordPress Sites to Complete Takeover
A severe security vulnerability, tracked as CVE-2025-1128, has been uncovered in the popular WordPress plugin, Everest Forms, placing
SecurityOnline - Search Engine Manipulation Leads to Backdoored App Downloads
Threat hunters at Hunt.io have uncovered a widespread malware campaign targeting Chinese-speaking users by distributing backdoored versions of
SecurityOnline - Critical Mattermost Flaws (CVE-2025-20051, CVE-2025-24490, CVE-2025-25279) Expose Systems to File Read and SQL Injection Attacks
Mattermost, an open-source platform for team communication and collaboration, has addressed three critical security vulnerabilities affecting its Boards
SecurityOnline - Free Office: Ads & Limits, Microsoft’s New Play
First spotted by Beebom, Microsoft is currently testing a free version of Microsoft Office for users in select
SecurityOnline - OpenAI Purges ChatGPT Accounts: China and North Korea Weaponizing AI for Propaganda
OpenAI has confirmed that it has begun blocking accounts linked to Chinese and North Korean users who have
SecurityOnline - CISA Flags Actively Exploited Security Vulnerabilities in Adobe ColdFusion and Oracle Agile PLM
Cybersecurity and Infrastructure Security Agency (CISA) has added two critical security vulnerabilities to its Known Exploited Vulnerabilities (KEV)
SecurityOnline - Stately Taurus Cyber Attacks in Southeast Asia Tied to Bookworm Malware
A new report from Unit 42 has linked the Stately Taurus threat actor to Bookworm malware, revealing a
SecurityOnline - From Confluence Vulnerability (CVE-2023-22527) to LockBit Encryption: A Rapid Attack Chain
Security researchers at The DFIR Report have uncovered a highly coordinated attack that leveraged a critical remote code
SecurityOnline - Beyond OpenAI: Apple Tests Google’s Gemini in Latest iOS Beta
Apple Intelligence is currently powered primarily by OpenAI, but Apple has previously indicated that it plans to expand
SecurityOnline - Google Under Fire Again: EU Prepares Antitrust Lawsuit Over Search Practices
Reuters, citing sources familiar with the matter, reports that EU competition regulators may file an antitrust lawsuit against
SecurityOnline - AI-Powered Job Hunt: Google’s Career Dreamer Launches
Google has recently launched “Career Dreamer,” an AI-powered job-matching service designed to help users find opportunities that best
SecurityOnline - Poseidon Stealer Malware Targets Mac Users via Fake DeepSeek Site
The eSentire Threat Response Unit (TRU) has uncovered a new campaign targeting Mac users with the Poseidon Stealer
SecurityOnline