News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 71 so far |
Thu 27 Feb 2025· 79 articles
-
Phishing Links in Browsers: Identifying Red Flags and Staying Safe
Phishing Links in Browsers: Identifying Red Flags and Staying Safe According to the FBI’s Internet Crime Report, phishing scams resulted in over $52 billion in losses in 2023 alone, demonstrating how this digital threat continues to evolve and challenge…
SOCRadarOriginal report -
Criminal hacker known as ALTDOS, DESORDEN, GHOSTR and 0mid16B arrested
He called himself ALTDOS when he first contacted DataBreaches in 2020. In 2021 he started contacting this site as DESORDEN. Then in 2024, he contacted this site as GHOSTR, and more recently, as 0mid16B. Under each new moniker, he denied being the individual…
DataBreachesOriginal report -
New “nRootTag” Attack Turns 1.5 Billion iPhones into Free Tracking Tools
Security researchers have uncovered a novel Bluetooth tracking vulnerability in Apple’s Find My network – the system powering AirTags and device-finding capabilities across iPhones, iPads, and Macs. Dubbed “nRootTag,” the attack transforms nearly any…
gbhackers.comOriginal report -
Cisco Patches Vulnerabilities in Nexus Switches
Cisco has patched command injection and DoS vulnerabilities affecting some of its Nexus switches, including a high-severity flaw.
SecurityWeekOriginal report -
Failure, Rinse, Repeat: Why do Both History and Security Seem Doomed to Repeat Themselves?
Security-oriented news often stays within the security community, that is until it hits home, or often millions of homes. We’ve most recently heard about breaches at National Public Data and Ticketmaster, but there are names from the past that might provoke…
SecurityWeekOriginal report -
Authorities Arrested Hacker Behind 90 Major Data Breaches Worldwide
Cybersecurity firm Group-IB, alongside the Royal Thai Police and Singapore Police Force, announced the arrest of a prolific hacker linked to over 90 major data breaches across 25 countries, including 65 attacks in the Asia-Pacific region. The cybercriminal,…
gbhackers.comOriginal report -
FBI Says North Korea Hacked Bybit as Details of $1.5B Heist Emerge
The FBI has attributed the Bybit hack to a North Korean group named TraderTraitor as more technical details of the attack have come to light.
SecurityWeekOriginal report -
How to Secure Your Mobile Banking App Against Keyloggers
How to Secure Your Mobile Banking App Against Keyloggers Mobile banking has become an essential part of daily life, offering convenience at our fingertips. With just a few taps, we can check balances, transfer money, and pay bills. However, this convenience…
SOCRadarOriginal report -
Cellebrite blocked Serbia from using its solution because misuse of the equipment for political reasons
Cellebrite blocked Serbia from using its solution after reports that police used it to unlock and infect the phones of a journalist and activist. A report published by Amnesty International in December 2024 documented the use of Cellebrite’s forensics tools…
Security AffairsOriginal report -
PolarEdge Botnet Exploits Cisco and Other Flaws to Hijack ASUS, QNAP, and Synology Devices
A new malware campaign has been observed targeting edge devices from Cisco, ASUS, QNAP, and Synology to rope them into a botnet named PolarEdge since at least the end of 2023. French cybersecurity company Sekoia said it observed the unknown threat actors…
The Hacker NewsOriginal report -
DragonForce Ransomware group is targeting Saudi Arabia
Resecurity researchers reported that DragonForce ransomware targets Saudi organizations rising cyber threats in the region. DragonForce ransomware has recently been reported to target organizations in the Kingdom of Saudi Arabia (KSA). A significant incident…
Security AffairsOriginal report -
Cisco Nexus Vulnerability Allows Attackers to Inject Malicious Commands
Cisco Systems has issued a critical security advisory for a newly disclosed command injection vulnerability affecting its Nexus 3000 and 9000 Series Switches operating in standalone NX-OS mode. Tracked as CVE-2025-20161 (CVSSv3 score: 5.1), the flaw enables…
gbhackers.comOriginal report -
New Wi-Fi Jamming Attack Can Disable Specific Devices
A newly discovered Wi-Fi jamming technique enables attackers to selectively disconnect individual devices from networks with surgical precision, raising alarms across cybersecurity and telecommunications industries. Researchers from Northeastern University…
gbhackers.comOriginal report -
Avast Privacy Breach: FTC Refunds Open Until June 2025
The U.S. Federal Trade Commission (FTC) has notified users who purchased Avast antivirus software about their eligibility for
SecurityOnlineOriginal report -
nRootTag: 1.5 Billion iPhones Used for Malicious Tracking
Apple’s Find My network leverages a crowdsourced Bluetooth system to enable remote tracking of compatible devices. For instance,
SecurityOnlineOriginal report -
Phi-4 Multimodal: Microsoft’s AI Leap in Speech, Image, Text
In addition to its ongoing collaboration with OpenAI on artificial intelligence models, Microsoft continues to enhance its Phi
SecurityOnlineOriginal report -
YouTube Podcasts Hit 1 Billion: Audio & Video Revolution
YouTube recently announced that the monthly active audience for its podcast content has surpassed one billion, underscoring its
SecurityOnlineOriginal report -
FBI confirms Lazarus hackers were behind $1.5B Bybit crypto heist
FBI has confirmed that North Korean hackers stole $1.5 billion from cryptocurrency exchange Bybit on Friday in the largest crypto heist recorded until now. [...]
BleepingComputerOriginal report -
Nvidia RTX 50 Crash Fix: vBIOS Update Incoming
Following the release of the NVIDIA 570 series GPU drivers, many users have encountered frequent blue screen crashes
SecurityOnlineOriginal report -
Bybit Hack Traced to Safe{Wallet} Supply Chain Attack Exploited by North Korean Hackers
The U.S. Federal Bureau of Investigation (FBI) formally linked the record-breaking $1.5 billion Bybit hack to North Korean threat actors, as the company's CEO Ben Zhou declared a "war against Lazarus." The agency said the Democratic People's Republic of…
The Hacker NewsOriginal report -
GitLab Vulnerabilities Allow Attackers to Bypass Security and Run Arbitrary Scripts
GitLab has urgently released security updates to address multiple high-severity vulnerabilities in its platform that could allow attackers to bypass security mechanisms, execute malicious scripts, and access sensitive data. The patches, included in versions…
gbhackers.comOriginal report -
LibreOffice Flaws Allow Attackers to Run Malicious Files on Windows
A high-severity security vulnerability (CVE-2025-0514) in LibreOffice, the widely used open-source office suite, has been patched after researchers discovered it could allow attackers to execute malicious files on Windows systems by exploiting hyperlink…
gbhackers.comOriginal report -
Cisco Nexus Switch Vulnerability Allows Attackers to Cause DoS
Cisco Systems has disclosed a high-severity vulnerability (CVE-2025-20111) in its Nexus 3000 and 9000 Series Switches operating in standalone NX-OS mode. The vulnerability enables unauthenticated attackers to trigger denial of service (DoS) conditions…
gbhackers.comOriginal report -
U.S. Soldier Charged in AT&T Hack Searched “Can Hacking Be Treason”
A U.S. Army soldier who pleaded guilty last week to leaking phone records for high-ranking U.S. government officials searched online for non-extradition countries and for an answer to the question “can hacking be treason?” prosecutors in the case said…
Krebs on SecurityOriginal report -
Cisco Warns of DoS Vulnerability in Nexus 3000 and 9000 Series Switches (CVE-2025-20111)
Network administrators, take note! Cisco has issued a security advisory warning of a critical vulnerability affecting several models
SecurityOnlineOriginal report -
CVE-2025-20029: Command Injection Flaw Discovered in F5 BIG-IP System, PoC Releases
A command injection vulnerability has been discovered in the F5 BIG-IP system, a popular network traffic management and
SecurityOnlineOriginal report -
Phishing Attacks Targeting Higher Education Institutions on the Rise
A significant surge in phishing attacks has been observed targeting higher education institutions in the U.S., with cybercriminals
SecurityOnlineOriginal report -
Material Theme Banned: Millions of VS Code Users Affected
Microsoft has removed the highly popular Material Theme – Free and Material Theme Icons – Free extensions from the
SecurityOnlineOriginal report -
CVE-2025-0514: LibreOffice Flaw Could Allow Unintentional Execution of Malicious Files
The Document Foundation has issued a security advisory addressing a vulnerability in LibreOffice that could allow attackers to
SecurityOnlineOriginal report -
Weaponized Excel Documents: Ghostwriter’s New Tool of Cyber Espionage
A new Ghostwriter campaign has been uncovered by SentinelLABS, targeting Ukrainian military, government entities, and Belarusian opposition activists.
SecurityOnlineOriginal report -
Bybit Heist: $1.4B Ethereum Stolen in Safe{Wallet} Exploit
The cryptocurrency exchange Bybit recently fell victim to a cyberattack, resulting in the theft of approximately $1.4 billion
SecurityOnlineOriginal report -
“SafetyCore” Exposed: Google’s Secret AI on Your Phone
Google has found itself at the center of a new privacy controversy following revelations that a system called
SecurityOnlineOriginal report -
NVIDIA Issues Security Update for Jetson AGX Orin and IGX Orin to Patch UEFI Vulnerability – CVE-2024-0148
NVIDIA has issued a security update to address a high-severity vulnerability affecting its Jetson AGX Orin Series and
SecurityOnlineOriginal report -
Malicious npm Package Targets TON Wallet Users, Stealing Cryptocurrency Keys
A newly discovered malicious npm package, @ton-wallet/create, has been found stealing mnemonic phrases from unsuspecting developers and users
SecurityOnlineOriginal report -
CVE-2025-0475 & CVE-2025-0555: GitLab’s High-Risk Patch Now
GitLab has issued a security advisory, urging all self-managed GitLab installations to upgrade immediately to versions 17.9.1, 17.8.4,
SecurityOnlineOriginal report -
Outdated and Unblocked: Legacy Driver Vulnerability Exploited in Widespread Attack
A large-scale cyberattack campaign leveraging legacy drivers to disable endpoint security solutions has been uncovered by Check Point
SecurityOnlineOriginal report -
Europe & LatAm Alert: Android Trojan TgToxic’s Expanding Attack
A newly updated version of the TgToxic Android banking trojan has been observed in the wild, showcasing enhanced
SecurityOnlineOriginal report -
EncryptHub Exposed: 600+ Targets Hit by LARVA-208
A new and highly sophisticated threat actor, LARVA-208, also known as EncryptHub, has been launching targeted spear-phishing attacks
SecurityOnlineOriginal report -
Auto-Color: New Evasive Linux Malware Targeting Governments and Universities
Researchers at Palo Alto Networks’ Unit 42 have uncovered a new and highly evasive Linux backdoor called Auto-Color.
SecurityOnlineOriginal report