News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 12 Oct | 56 | 6 |
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 0 |
| Thu 22 Oct | 84 | 3 |
| Fri 23 Oct | 68 | 8 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 0 |
| Today, Mon 26 Oct | 74 so far | 5 |
Developing
Wed 26 Feb 202580 articles
- Australian IVF giant Genea breached by Termite ransomware gang
The Termite ransomware gang has claimed responsibility for breaching and stealing sensitive healthcare data belonging to Genea patients, one of Australia's largest fertility services providers. [...]
BleepingComputer - The Adversarial Misuse of AI: How Threat Actors Are Leveraging AI for Cyber Operations
The Adversarial Misuse of AI: How Threat Actors Are Leveraging AI for Cyber Operations Artificial intelligence (AI) has long been heralded as a force for innovation, revolutionizing industries and redefining the way we interact with technology. However, as…
SOCRadar - New ‘Auto-Color’ Linux Malware Targets North America, Asia
New Linux malware named Auto-Color, which allows full remote access to compromised devices, targets North America and Asia.
SecurityWeek - Virtual Event Today: Ransomware Resilience & Recovery Summit
SecurityWeek's 2025 Ransomware Resilience & Recovery Summit takes place today, February 26th, as a fully immersive virtual event.
SecurityWeek - OpenAI's GPT 4.5 spotted in Android beta, launch imminent
OpenAI's newest model, GPT-4.5, is coming sooner than we expected. A new reference has been spotted on ChatGPT's Android app that points to a model called "GPT-4.5 research preview," but it looks like it will initially be limited to those with a Pro…
BleepingComputer - Belgian prosecutor probes alleged Chinese hacking of intelligence service
The Straits Times reports: The Belgian federal prosecutor said on Wednesday it had started a probe into alleged Chinese hacking of Belgium’s intelligence service VSSE in November 2023, confirming an earlier report by Belgian daily Le Soir. The prosecutor…
DataBreaches - 23 Billion Rows of Stolen Records: What You Need to Know?
23 Billion Rows of Stolen Records: What You Need to Know? Infostealer malware continues to pose a severe threat, with billions of stolen records circulating in cybercriminal markets. A recent analysis of a stealer log showed the vast scale of these breaches,…
SOCRadar - Ransomware attack on Southern Water cost £4.5 million
Penny Horwood reports: The ransomware attack on Southern Water approximately one year ago by the Russia-linked Black Basta group has cost the utility provider more than £4.5 million to date, according to the utility company’s annual report. An extract from…
DataBreaches - Genea IVF Clinic Cyberattack Threatens Thousands of Patient Records
A significant cybersecurity breach at Genea, one of Australia’s largest in vitro fertilization (IVF) providers, has raised alarms among thousands of patients amid concerns that sensitive medical data and treatment schedules may be compromised. The clinic…
gbhackers.com - OpenSSF Releases Security Baseline for Open Source Projects
The Open Source Security Foundation (OpenSSF) has created a structured set of security requirements for open source projects.
SecurityWeek - SOC 3.0 - The Evolution of the SOC and How AI is Empowering Human Talent
Organizations today face relentless cyber attacks, with high-profile breaches hitting the headlines almost daily. Reflecting on a long journey in the security field, it’s clear this isn’t just a human problem—it’s a math problem. There are simply too many…
The Hacker News - Qualcomm Extends Security Support for Android Devices to 8 Years
Qualcomm says it’s working with Google to ensure that Android device manufacturers will be able to provide security updates for 8 years.
SecurityWeek - New Linux Malware ‘Auto-Color’ Grants Hackers Full Remote Access to Compromised Systems
Universities and government organizations in North America and Asia have been targeted by a previously undocumented Linux malware called Auto-Color between November and December 2024, according to new findings from Palo Alto Networks Unit 42. "Once…
The Hacker News - 3.3 Million People Impacted by DISA Data Breach
Background and drug screening giant DISA has revealed that a 2024 data breach impacts more than 3.3 million people.
SecurityWeek - Three Password Cracking Techniques and How to Defend Against Them
Passwords are rarely appreciated until a security breach occurs; suffice to say, the importance of a strong password becomes clear only when faced with the consequences of a weak one. However, most end users are unaware of just how vulnerable their passwords…
The Hacker News - CERT-UA Warns of UAC-0173 Attacks Deploying DCRat to Compromise Ukrainian Notaries
The Computer Emergency Response Team of Ukraine (CERT-UA) on Tuesday warned of renewed activity from an organized criminal group it tracks as UAC-0173 that involves infecting computers with a remote access trojan named DCRat (aka DarkCrystal RAT). The…
The Hacker News - Malicious PyPI Package "automslc" Enables 104K+ Unauthorized Deezer Music Downloads
Cybersecurity researchers have flagged a malicious Python library on the Python Package Index (PyPI) repository that facilitates unauthorized music downloads from music streaming service Deezer. The package in question is automslc, which has been downloaded…
The Hacker News - GRUB2 Flaws Expose Millions of Linux Devices to Exploitation
A critical set of 20 security vulnerabilities in GRUB2, the widely used bootloader for Linux systems, has been revealed, exposing millions of devices to potential secure boot bypass and remote code execution attacks. Discovered during a proactive hardening…
gbhackers.com - Exploits and vulnerabilities in Q4 2024
Q4 2024 saw fewer published exploits for Windows and Linux compared to the first three quarters. Although the number of registered vulnerabilities continued to rise, the total number of Proof of Concept (PoC) instances decreased compared to 2023. Among…
securelist.com - Quantum Leap: Researchers Achieve Unprecedented Speed and Range in Secure Direct Communication
Chinese researchers have announced a groundbreaking advancement in the field of quantum secure direct communication (QSDC). According to
SecurityOnline - Master Cybersecurity with Agentic AI: Exclusive Training on February 27, 2025!
Master Cybersecurity with Agentic AI: Exclusive Training on February 27, 2025! Cyber threats are advancing at an unprecedented pace, outpacing traditional security measures and demanding innovative solutions. Enter Agentic AI, a revolutionary force in…
SOCRadar - New LightSpy spyware variant comes with enhanced data collection features targeting social media platforms
Researchers found an updated LightSpy spyware with enhanced data collection features targeting social media platforms like Facebook and Instagram. Cybersecurity researchers at Hunt.io have found an updated version of the LightSpy spyware that supports an…
Security Affairs - Silver Fox APT Targets Philips DICOM Viewers in Healthcare Espionage Campaign
A newly discovered cyberespionage campaign by the Chinese APT group Silver Fox has been found targeting Philips DICOM
SecurityOnline - U.S. CISA adds Microsoft Partner Center and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Partner Center and Synacor Zimbra Collaboration Suite vulnerabilities to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)…
Security Affairs - Windows 11 KB5052093 update released with 33 changes and fixes
Microsoft has released the February 2025 preview cumulative update for Windows 11 24H2, with 33 improvements and fixes for multiple issues, including SSH and File Explorer bugs and the volume jumping to 100% when waking the PC from sleep. [...]
BleepingComputer - GitVenom campaign targets gamers and crypto investors by posing as fake GitHub projects
GitVenom malware campaign targets gamers and crypto investors by posing as open-source projects on GitHub. Kaspersky researchers warn of a malware campaign, dubbed GitVenom, targeting GitHub users. The threat actors behind this campaign created hundreds of…
Security Affairs - Windows 11 24H2 upgrades now blocked for some AutoCAD users
Microsoft has introduced a new Windows 11 24H2 upgrade block for systems with AutoCAD 2022, addressing compatibility issues that prevent the program from launching. [...]
BleepingComputer - CISA Adds Microsoft and Zimbra Flaws to KEV Catalog Amid Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday placed two security flaws impacting Microsoft Partner Center and Synacor Zimbra Collaboration Suite (ZCS) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of…
The Hacker News - Gemini Code Assist: Google’s AI Coding Power for All
Google has officially introduced Gemini Code Assist for Individuals, a programming assistant powered by the Google Gemini AI
SecurityOnline - CVE-2024-12084 & CVE-2024-12085: Rsync Flaws Allow Hackers to Take Over Servers, PoC Published
A set of high-risk vulnerabilities has been disclosed in Rsync, the widely used file synchronization and data transfer
SecurityOnline - SoaPy: A New Tool for Stealthy Active Directory Enumeration via ADWS
IBM X-Force Research has introduced SoaPy, a new Python-based tool designed for stealthy Active Directory (AD) enumeration using
SecurityOnline - CISA Flags Actively Exploited Zimbra (CVE-2023-34192) and Microsoft (CVE-2024-49035) Vulnerabilities
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning, adding two critical vulnerabilities to its Known
SecurityOnline - $500 Bitcoin Demand: LCRYX Ransomware Cripples Windows
Ransomware attacks remain a formidable threat to individuals and organizations alike, with LCRYX ransomware making an unwelcome return
SecurityOnline - CVE-2025-24752: Massive WordPress Plugin Vulnerability Exposes Millions to XSS Attacks
A high-severity security flaw has been discovered in the widely used WordPress plugin, Essential Addons for Elementor, putting
SecurityOnline - Lumma Stealer Malware Expands Its Reach Through YouTube and Malvertising
Silent Push Threat Analysts have uncovered new developments in the spread of Lumma Stealer, a notorious infostealer malware
SecurityOnline - OpenH264 Codec Vulnerability (CVE-2025-27091): Remote Code Execution Possible
Cisco has released a security advisory concerning a high-severity vulnerability in the OpenH264 codec library. Tracked as CVE-2025-27091
SecurityOnline - Censorship as a Service: Leak Exposes Public-Private Collaboration in Chinese Cyberspace Monitoring
SentinelLABS has analyzed a significant data leak revealing the infrastructure and operational practices of TopSec (北京天融), a Chinese
SecurityOnline - GRUB2 Bootloader Vulnerabilities Expose Millions of Systems to Attacks
A series of critical vulnerabilities have been discovered in GRUB2, the popular boot loader used by many Linux
SecurityOnline - Angry Likho APT Group Resurfaces with New Attacks and Advanced Malware Tactics
Kaspersky Labs has uncovered new activity from Angry Likho, an advanced persistent threat (APT) group that has been
SecurityOnline - PolarEdge Botnet: 2,000+ IoT Devices Infected
The PolarEdge botnet, a sophisticated IoT-based malware campaign, has been discovered by Sekoia’s Threat Detection & Research (TDR)
SecurityOnline