News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 48 so far |
Mon 3 Mar 2025· 76 articles
-
CVE-2025-0289: Paragon Partition Manager Flaw Exploited in BYOVD Ransomware Attacks
A cluster of critical vulnerabilities in Paragon Partition Manager’s BioNTdrv.sys driver has been actively exploited in ransomware attacks,
SecurityOnlineOriginal report -
Name That Edge Toon: On the Precipice
Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 gift card.
Dark ReadingOriginal report -
Rubrik rotates authentication keys after log server breach
Rubrik disclosed last month that one of its servers hosting log files was breached, causing the company to rotate potentially leaked authentication keys. [...]
BleepingComputerOriginal report -
U.S. CISA adds Multiple Cisco Small Business RV Series Routers, Hitachi Vantara Pentaho BA Server, Microsoft Windows Win32k, and Progress WhatsUp Gold flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco Small Business RV Series Routers, Hitachi Vantara Pentaho BA Server, Microsoft Windows Win32k, and Progress WhatsUp Gold flaws to its Known Exploited Vulnerabilities catalog. The U.S.…
Security AffairsOriginal report -
TikTok's Teen Data Use Probed by UK Regulators
Investigators at the ICO are looking into how (or if) TikTok, as well as Reddit and Imgur, are enforcing UK privacy protections for 13- to 17-year-old users.
Dark ReadingOriginal report -
Qilin Cybercrime Ring Claims Credit for Lee Newspaper Breach
The ransomware-as-a-service (RaaS) cybercrime group intends to leak the stolen information in just two days, it claims; but oddly, it doesn't seek a ransom payment from its victim.
Dark ReadingOriginal report -
Phishers Wreak 'Havoc,' Disguising Attack Inside SharePoint
A complex campaign allows cyberattackers to take over Windows systems by a combining a ClickFix-style attack and sophisticated obfuscation that abuses legitimate Microsoft services.
Dark ReadingOriginal report -
DHS says CISA will not stop monitoring Russian cyber threats
The US Cybersecurity and Infrastructure Security Agency says that media reports about it being directed to no longer follow or report on Russian cyber activity are untrue, and its mission remains unchanged. [...]
BleepingComputerOriginal report -
New Microsoft 365 outage impacts Teams, causes call failures
Microsoft is investigating a new Microsoft 365 outage that is affecting Teams customers and causing call failures. [...]
BleepingComputerOriginal report -
Threat Actors Exploiting AES Encryption for Stealthy Payload Protection
Cybersecurity researchers have uncovered a surge in the use of Advanced Encryption Standard (AES) encryption by threat actors to shield malicious payloads from detection. This technique, combined with code virtualization and staged payload delivery, is being…
gbhackers.comOriginal report -
33.3 Million Cyber Attacks Targeted Mobile Devices in 2024 as Threats Surge
Kaspersky’s latest report on mobile malware evolution in 2024 reveals a significant increase in cyber threats targeting mobile devices. The security firm’s products blocked a staggering 33.3 million attacks involving malware, adware, or unwanted mobile…
gbhackers.comOriginal report -
CISA tags Windows, Cisco vulnerabilities as actively exploited
CISA has warned US federal agencies to secure their systems against attacks exploiting vulnerabilities in Cisco and Windows systems. [...]
BleepingComputerOriginal report -
Routers Under Attack as Scanning Attacks on IoT and Networks Surge to Record Highs
In a concerning trend, the frequency of scanning attacks targeting Internet of Things (IoT) devices and network routers has surged dramatically, reaching unprecedented levels. According to recent data from F5 Labs, the total number of scanning events…
gbhackers.comOriginal report -
New ClickFix attack deploys Havoc C2 via Microsoft Sharepoint
A newly uncovered ClickFix phishing campaign is tricking victims into executing malicious PowerShell commands that deploy the Havok post-exploitation framework for remote access to compromised devices. [...]
BleepingComputerOriginal report -
CISA: No Change on Defending Against Russian Cyber Threats
The CISA public clarification follows news the Trump administration is temporarily pausing offensive cyber operations against Moscow.
SecurityWeekOriginal report -
Hackers Exploit AWS Misconfigurations to Launch Phishing Attacks via SES and WorkMail
Threat actors are targeting Amazon Web Services (AWS) environments to push out phishing campaigns to unsuspecting targets, according to findings from Palo Alto Networks Unit 42. The cybersecurity company is tracking the activity cluster under the name…
The Hacker NewsOriginal report -
UK watchdog probes TikTok and Reddit over child privacy concerns
On Monday, the United Kingdom's privacy watchdog announced that it is investigating TikTok, Reddit, and Imgur because of privacy concerns about how they are processing children's data. [...]
BleepingComputerOriginal report -
EU's New Product Liability Directive & Its Cybersecurity Impact
By proactively addressing liabilities tied to software updates, data loss, and AI technologies, businesses can mitigate risks and achieve compliance.
Dark ReadingOriginal report -
FTC, MGM close to solving dispute over costly 2023 cyberattack
Richard N. Velotta reports: The Federal Trade Commission’s dispute with MGM Resorts International over providing information about 2023’s costly cyberattack against the company may be coming to a resolution. The FTC has told MGM it plans to withdraw its…
DataBreachesOriginal report -
Navigating the Evolving Cyber Threats in the Finance Industry
Navigating the Evolving Cyber Threats in the Finance Industry In the ever-evolving world of cybersecurity, staying ahead of emerging threats is crucial—especially for the financial sector. The Finance Industry Threat Landscape Report offers critical insights…
SOCRadarOriginal report -
Microsoft links recent Microsoft 365 outage to buggy update
Microsoft says a coding issue is behind a now-resolved Microsoft 365 outage over the weekend that affected Outlook and Exchange Online authentication. [...]
BleepingComputerOriginal report -
U.S. Authorities recovered $31 Million Related to 2021 Uranium Finance cyber heist
U.S. authorities have recovered $31 million in cryptocurrency stolen during the 2021 cyberattacks on Uranium Finance. U.S. authorities recovered $31 million in cryptocurrency stolen in 2021 cyberattacks on Uranium Finance, which is a decentralized finance…
Security AffairsOriginal report -
Latin American Orgs Face 40% More Attacks Than Global Average
Technological adoption, demographics, politics, and uniquely Latin American law enforcement challenges have combined to make the region uniquely fertile for cyberattacks.
Dark ReadingOriginal report -
Qualcomm’s March 2025 Security Bulletin Addresses Critical Flaws Across Multiple Products
Qualcomm has released its March 2025 Security Bulletin, addressing a range of vulnerabilities affecting various products, including automotive
SecurityOnlineOriginal report -
Hackers Use ClickFix Trick to Deploy PowerShell-Based Havoc C2 via SharePoint Sites
Cybersecurity researchers are calling attention to a new phishing campaign that employs the ClickFix technique to deliver an open-source command-and-control (C2) framework called Havoc. "The threat actor hides each malware stage behind a SharePoint site and…
The Hacker NewsOriginal report -
U.K. ICO Investigates TikTok, Reddit, and Imgur Over Children's Data Protection Practices
The U.K.'s Information Commissioner's Office (ICO) has opened an investigation into online platforms TikTok, Reddit, and Imgur to assess the steps they are taking to protect children between the ages of 13 and 17 in the country. To that end, the watchdog…
The Hacker NewsOriginal report -
Hackers Exploit Paragon Partition Manager Driver Vulnerability in Ransomware Attacks
Threat actors have been exploiting a security vulnerability in Paragon Partition Manager's BioNTdrv.sys driver in ransomware attacks to escalate privileges and execute arbitrary code. The zero-day flaw (CVE-2025-0289) is part of a set of five vulnerabilities…
The Hacker NewsOriginal report -
TikTok: Major investigation launched into platform’s use of children’s data
TikTok is the subject of yet another major investigation, reports BBC News. This time around, the UK’s Information Commissioner’s Office (ICO) is going to look at how the data of 13 to 17-year-olds feeds the algorithm that decides what further content to…
MalwarebytesOriginal report -
Quantum Wars: Google, Microsoft, and Amazon’s Competing Paths to Fault-Tolerant Qubits
Amazon claims its researchers have combined cat qubit technology and additional quantum error correction components onto a microchip that can be manufactured in a scalable fashion.
SecurityWeekOriginal report -
Mimic Raises $50 Million to Stop Ransomware Attacks
Ransomware defense startup Mimic has raised $50 million in a Series A funding round led by Google Ventures and Menlo Ventures.
SecurityWeekOriginal report -
US Seizes $31 Million Worth of Crypto Stolen in Uranium Finance Hack
The US government has seized roughly $31 million in cryptocurrency stolen in 2021 from Uranium Finance.
SecurityWeekOriginal report -
Google Launches Shielded Email to Keep Your Address Hidden from Apps
Google is rolling out a new privacy-focused feature called Shielded Email, designed to prevent apps and services from accessing users’ primary email addresses during sign-ups. The feature, first discovered in a Google Play Services APK teardown by Android…
gbhackers.comOriginal report -
Cybersecurity M&A Roundup: 28 Deals Announced in February 2025
Cybersecurity-related merger and acquisition (M&A) deals announced in February 2025.
SecurityWeekOriginal report -
Info accessed in Rainbow board data breach ‘deleted and has not been shared’
Sudbury.com reports: Data acquired by unauthorized individuals during Rainbow District School Board’s recent cyber incident “was deleted and has not been shared,” according to an update on the situation from the school board. The school board also said in…
DataBreachesOriginal report -
FBCS updates the number affected in its 2024 breach to 4,253,394
Lawrence Abrams reports: Debt collection agency Financial Business and Consumer Solutions (FBCS) has again increased the number of people impacted by a February [2024] data breach, now saying it affects 4.2 million people in the US. … The exposed data varies…
DataBreachesOriginal report -
Vulnerable Paragon Driver Exploited in Ransomware Attacks
Ransomware operators exploit a vulnerable Paragon driver in BYOVD attacks to elevate privileges to System.
SecurityWeekOriginal report -
⚡ THN Weekly Recap: Alerts on Zero-Day Exploits, AI Breaches, and Crypto Heists
This week, a 23-year-old Serbian activist found themselves at the crossroads of digital danger when a sneaky zero-day exploit turned their Android device into a target. Meanwhile, Microsoft pulled back the curtain on a scheme where cybercriminals used AI…
The Hacker NewsOriginal report -
Kenya’s Cyber Threat Landscape: The Rising Risks and How to Stay Ahead
Kenya’s Cyber Threat Landscape: The Rising Risks and How to Stay Ahead Kenya’s digital economy is thriving, but with this growth comes an alarming surge in cyber threats. Businesses, government institutions, and individuals are facing unprecedented…
SOCRadarOriginal report -
Indian Stock Broker Angel One Discloses Data Breach
Indian stock broker Angel One says client information was compromised in a data breach involving its AWS account.
SecurityWeekOriginal report -
Hackers Using PowerShell and Microsoft Legitimate Apps to Deploy Malware
Cybersecurity experts are warning of an increasing trend in fileless attacks, where hackers leverage PowerShell and legitimate Microsoft applications to deploy malware without leaving significant traces on compromised systems. These sophisticated attacks,…
gbhackers.comOriginal report