News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 53 so far |
Mon 3 Mar 2025· 76 articles
-
JavaGhost: Exploiting Amazon IAM Permissions for Phishing Attacks
Unit 42 researchers have observed a threat actor group known as JavaGhost exploiting misconfigurations in Amazon Web Services (AWS) environments to conduct sophisticated phishing campaigns. Active for over five years, JavaGhost has pivoted from website…
gbhackers.comOriginal report -
Black Basta Leak Offers Glimpse Into Group’s Inner Workings
A massive hoard of internal chats has been leaked from Black Basta, rivalling the Conti leaks of late February 2022.
SecurityWeekOriginal report -
The New Ransomware Groups Shaking Up 2025
In 2024, global ransomware attacks hit 5,414, an 11% increase from 2023. After a slow start, attacks spiked in Q2 and surged in Q4, with 1,827 incidents (33% of the year's total). Law enforcement actions against major groups like LockBit caused…
The Hacker NewsOriginal report -
New Poco RAT Via Weaponized PDF Attacking Users to Capture Sensitive Data
A new variant of malware, dubbed “Poco RAT,” has emerged as a potent espionage tool in a campaign targeting Spanish-speaking users in Latin America. Security researchers at Positive Technologies Expert Security Center (PT ESC) have linked this malware to the…
gbhackers.comOriginal report -
U.S. Suspends Cyberattacks Against Russia
The United States has suspended offensive cyber operations against Russia under an order issued by Defense Secretary Pete Hegseth, according to multiple confirmed reports. The directive, first revealed by The Record and corroborated by The New York Times…
gbhackers.comOriginal report -
Hackers Abused Google and PayPal’s Infrastructure to Steal Users Personal Data
Cybersecurity researchers have uncovered a sophisticated phishing campaign leveraging Google Ads and PayPal’s infrastructure to deceive users and steal sensitive personal data. The attackers exploited vulnerabilities in Google’s ad policies and PayPal’s…
gbhackers.comOriginal report -
Latest Dark Web Findings: Discord Credentials, Orange Customer Records, and Australian Bank Data
Latest Dark Web Findings: Discord Credentials, Orange Customer Records, and Australian Bank Data Once again, hacker forums are filled with new cyber threats, with SOCRadar’s Dark Web Team identifying several alarming activities this week. Notable findings…
SOCRadarOriginal report -
Goodbye Spam: Google’s Shielded Email for Android Arrives
Apple’s iOS features a Hide My Email service that enables users to generate randomized email addresses for signing
SecurityOnlineOriginal report -
Mobile malware evolution in 2024
These statistics are based on detection alerts from Kaspersky products, collected from users who consented to provide statistical data to Kaspersky Security Network. The statistics for previous years may differ from earlier publications due to a data and…
securelist.comOriginal report -
Android Updates: 7 Years Now? Honor Joins Google, Samsung
Google and Qualcomm are actively working to extend software and security update support for Android devices. Currently, only
SecurityOnlineOriginal report -
Meta’s AI Push: From Llama to Chatbot, Subscription Model Coming
Meta Platforms, the social media conglomerate, has significantly bolstered the industry with its open-source AI models from the
SecurityOnlineOriginal report -
Njrat Exploits Microsoft Dev Tunnels for C2 Communication
A new campaign involving the notorious remote access trojan (RAT) Njrat has been uncovered, leveraging Microsoft’s Dev Tunnels service for command-and-control (C2) communication. This service, intended to help developers securely expose local services to the…
gbhackers.comOriginal report -
North Korean IT Workers Hide Their IPs Using Astrill VPN
Security researchers have uncovered new evidence that North Korean threat actors, particularly the Lazarus Group, are actively using Astrill VPN to conceal their true IP addresses during cyberattacks and fraudulent IT worker schemes. Silent Push, a…
gbhackers.comOriginal report -
Paragon Partition Manager Vulnerabilities Allow Attackers to Escalate Privileges and Trigger DoS Attacks
Security researchers have uncovered five significant vulnerabilities in Paragon Partition Manager’s BioNTdrv.sys driver, affecting versions prior to 2.0.0. These flaws, identified as CVE-2025-0285, CVE-2025-0286, CVE-2025-0287, CVE-2025-0288, and…
gbhackers.comOriginal report -
Space Pirates Hackers Attacking IT Organizations With LuckyStrike Using OneDrive
A recent investigation by cybersecurity experts has unveiled a series of advanced cyberattacks orchestrated by the notorious Advanced Persistent Threat (APT) group known as “Space Pirates.” Leveraging their customized malware arsenal, including the…
gbhackers.comOriginal report -
Serbian student activist’s phone hacked using Cellebrite zero-day exploit
Amnesty International reports that a Cellebrite zero-day exploit was used to unlock a Serbian activist’s Android phone. Amnesty International reported that a Cellebrite zero-day exploit was used to unlock the Android smartphone of a Serbian activist. In a…
Security AffairsOriginal report -
Bitdefender Premium Security Review: The Ultimate All-In-One Security & Privacy Fortress
In today’s digital world, protecting your devices and your personal information is more critical than ever. You need
SecurityOnlineOriginal report -
CCleaner Review: Breathe New Life into Your Aging PC – Is It Still Relevant in 2025?
CCleaner. The name is practically synonymous with PC cleanup and optimization. For years, it’s been a go-to tool
SecurityOnlineOriginal report -
McAfee+ Premium Review: All-Around Protection for Your Digital Life – But Is It the Best?
McAfee is a name that’s been synonymous with computer security for decades. With McAfee+ Premium, the company aims
SecurityOnlineOriginal report -
A week in security (February 24 – March 2)
Last week on Malwarebytes Labs: Millions of stalkerware users exposed again PayPal’s “no-code checkout” abused by scammers Countries and companies are fighting at the expense of our data privacy Roblox called “real-life nightmare for children” as Rob...
MalwarebytesOriginal report -
Pentest-Tools.com Review: Your All-in-One Platform for Streamlined Penetration Testing and Vulnerability Management
In the world of cybersecurity, staying ahead of attackers requires proactive, comprehensive security testing. Penetration testing (pentesting) and
SecurityOnlineOriginal report -
Bitdefender GravityZone Small Business Security Review: Enterprise-Grade Protection Without the Enterprise Headache
Small businesses are increasingly targeted by cyberattacks. Ransomware, phishing scams, and data breaches aren’t just problems for large
SecurityOnlineOriginal report -
10 New Vulnerabilities Found in MediaTek Chipsets
MediaTek has unveiled its March 2025 Product Security Bulletin, detailing a series of newly identified security vulnerabilities that
SecurityOnlineOriginal report -
Vo1d Botnet's Peak Surpasses 1.59M Infected Android TVs, Spanning 226 Countries
Brazil, South Africa, Indonesia, Argentina, and Thailand have become the targets of a campaign that has infected Android TV devices with a botnet malware dubbed Vo1d. The improved variant of Vo1d has been found to encompass 800,000 daily active IP addresses,…
The Hacker NewsOriginal report -
Windows Hyper-V Zero-Day CVE-2025-21333: PoC Drops, SYSTEM Access Exposed
Security researcher Alessandro Iandoli has published a proof-of-concept (PoC) exploit for CVE-2025-21333, a zero-day vulnerability in Windows Hyper-V
SecurityOnlineOriginal report -
CVE-2025-27154: Spotipy Vulnerability Exposes Spotify Auth Tokens
Spotipy, a popular Python library for interacting with the Spotify Web API, recently addressed a security vulnerability that
SecurityOnlineOriginal report -
Extreme Networks Addresses Critical Security Vulnerabilities in HiveOS
Extreme Networks has recently released security advisories to address three critical vulnerabilities affecting its IQ Engine (HiveOS) product
SecurityOnlineOriginal report -
Webmin Vulnerability Allows Bypassing of SSL Certificate Authentication
A security vulnerability has been discovered in Webmin, a widely used web-based system administration tool for Unix-like servers.
SecurityOnlineOriginal report -
Lotus Blossom Hackers Target Southeast Asia with Sagerunex Backdoor
A sophisticated cyber espionage operation linked to the Lotus Blossom group has been discovered targeting government, manufacturing, telecommunications,
SecurityOnlineOriginal report -
Arista EOS Devices Vulnerable to Unauthorized Data Access and Configuration Changes (CVE-2025-1259 & CVE-2025-1260)
Arista Networks, a leading provider of network switching solutions, has issued a security advisory warning of two vulnerabilities
SecurityOnlineOriginal report -
Phishing Campaign Delivers Winos 4.0: Keyloggers, UAC Bypass, and More
FortiGuard Labs has reported a new wave of cyberattacks targeting companies in Taiwan, utilizing the Winos 4.0 malware
SecurityOnlineOriginal report -
CVE-2024-47051 (CVSS 9.1): Critical RCE and File Deletion Flaws Expose 200,000+ Organizations
The Mautic project has disclosed a severe security vulnerability, CVE-2024-47051, affecting versions before 5.2.3, with a CVSS score
SecurityOnlineOriginal report -
New Stealthy Backdoor “Squidoor” Linked to Chinese Threat Actor
A newly discovered stealthy backdoor named Squidoor has been identified targeting high-profile organizations across Southeast Asia and South
SecurityOnlineOriginal report -
Critical LDAP Injection Flaw in IBM TXSeries for Multiplatforms
IBM has released a security bulletin addressing a vulnerability in the Apache Derby package shipped with IBM TXSeries
SecurityOnlineOriginal report -
3.2 Million Users Exposed by Malicious Browser Extensions
A newly uncovered cybersecurity threat has revealed that at least 3.2 million users have been affected by malicious
SecurityOnlineOriginal report -
Qilin ransomware gang claimed responsibility for the Lee Enterprises attack
The Qilin ransomware group claims responsibility for attacking the newspaper Lee Enterprises, stealing 350GB of data. The Qilin ransomware group claimed responsibility for the recent cyberattack on Lee Enterprises, which impacted dozens of local newspapers.…
Security AffairsOriginal report