News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 32 so far |
Wed 5 Mar 2025· 75 articles
-
Cybercriminals Impersonate Electronic Frontier Foundation to Target Gaming Community
A sophisticated phishing campaign targeting the Albion Online gaming community has been uncovered, revealing a complex operation involving impersonation of the Electronic Frontier Foundation (EFF) and deployment of advanced malware. The campaign, discovered…
gbhackers.comOriginal report -
Chrome 134, Firefox 136 Patch High-Severity Vulnerabilities
Chrome 134 and Firefox 136 are rolling out across desktop and mobile with patches for multiple high-severity vulnerabilities.
SecurityWeekOriginal report -
Chinese APT Lotus Panda Targets Governments With New Sagerunex Backdoor Variants
The threat actor known as Lotus Panda has been observed targeting government, manufacturing, telecommunications, and media sectors in the Philippines, Vietnam, Hong Kong, and Taiwan with updated versions of a known backdoor called Sagerunex. "Lotus Blossom…
The Hacker NewsOriginal report -
Knostic Secures $11 Million to Rein in Enterprise AI Data Leakage, Oversharing
Knostic provides a “need-to-know” filter on the answers generated by enterprise large language models (LLM) tools.
SecurityWeekOriginal report -
Identity: The New Cybersecurity Battleground
The rapid adoption of cloud services, SaaS applications, and the shift to remote work have fundamentally reshaped how enterprises operate. These technological advances have created a world of opportunity but also brought about complexities that pose…
The Hacker NewsOriginal report -
U.S. Cracks Down on Nemesis Darknet Admin with New Treasury Sanctions
The U.S. Department of the Treasury has intensified its global campaign against darknet-facilitated drug trafficking by sanctioning Behrouz Parsarad, the Iran-based administrator of the notorious Nemesis Marketplace. The move, announced on March 5, 2025,…
gbhackers.comOriginal report -
Vim Vulnerability (CVE-2025-27423) Allows Code Execution via Malicious TAR Archives
A high-severity security flaw in the widely used Vim text editor allows attackers to execute arbitrary code on vulnerable systems by tricking users into opening specially crafted TAR archives. Tracked as CVE-2025-27423, this vulnerability has prompted urgent…
gbhackers.comOriginal report -
Telegram EvilVideo Vulnerability Exploited to Run Malicious Code on Victims’ Devices
A newly documented exploitation technique targeting Telegram’s file-sharing infrastructure has raised alarms in cybersecurity circles. Dubbed “EvilVideo,” this attack vector leverages a vulnerability (CVE-2024-7014) in how Telegram processes multimedia…
gbhackers.comOriginal report -
Undercover miner: how YouTubers get pressed into distributing SilentCryptoMiner as a restriction bypass tool
In recent months, we’ve seen an increase in the use of Windows Packet Divert drivers to intercept and modify network traffic in Windows systems. This technology is used in various utilities, including ones for bypassing blocks and restrictions of access to…
securelist.comOriginal report -
VMware Security Alert: Active Exploitation of Zero-Day Vulnerabilities (CVE-2025-22224, CVE-2025-22225, and CVE-2025-22226)
VMware Security Alert: Active Exploitation of Zero-Day Vulnerabilities (CVE-2025-22224, CVE-2025-22225, and CVE-2025-22226) Virtualization technology is a backbone of modern enterprises, but it also presents a lucrative target for cybercriminals, such as…
SOCRadarOriginal report -
US Sanctions Iranian Administrator of Nemesis Darknet Marketplace
Iranian national Behrouz Parsarad sanctioned for running Nemesis, a marketplace used for narcotics trafficking and cybercrime.
SecurityWeekOriginal report -
Polish Space Agency POLSA disconnected its network following a cyberattack
The Polish space agency POLSA announced it has disconnected its network from the internet following a cyberattack. The Polish space agency POLSA was forced to disconnect its network from the internet in response to a cyberattack. The agency revealed that it…
Security AffairsOriginal report -
New Eleven11bot DDoS Botnet Powered by 80,000 Hacked Devices
The Eleven11bot botnet has been described as one of the largest known DDoS botnets observed in recent years.
SecurityWeekOriginal report -
PoC Released for HPE Remote Support Tool Vulnerability Allowing Remote Code Execution
Security researchers have released proof-of-concept (PoC) exploit code for critical vulnerabilities in Hewlett Packard Enterprise’s (HPE) Insight Remote Support (IRS) tool, including an unauthenticated XML External Entity (XXE) injection flaw…
gbhackers.comOriginal report -
Zoho ADSelfService Plus Flaw Allows Hackers to Gain Unauthorized Access
A critical security flaw in Zoho’s widely used identity management solution, ADSelfService Plus, has been patched after researchers discovered it could enable attackers to hijack user sessions and compromise sensitive enrollment data. Tracked as…
gbhackers.comOriginal report -
Seven Malicious Go Packages Found Deploying Malware on Linux and macOS Systems
Cybersecurity researchers are alerting of an ongoing malicious campaign targeting the Go ecosystem with typosquatted modules that are designed to deploy loader malware on Linux and Apple macOS systems. "The threat actor has published at least seven packages…
The Hacker NewsOriginal report -
NVIDIA Issues Warning About Severe Security Flaws Enabling Code Attacks
NVIDIA has issued an urgent security bulletin urging customers using its Hopper HGX 8-GPU High-Performance Computing (HMC) systems to immediately install firmware updates addressing two critical vulnerabilities. Released on February 28, 2025, the patches…
gbhackers.comOriginal report -
U.S. CISA adds Linux kernel and VMware ESXi and Workstation flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Linux kernel and VMware ESXi and Workstation flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following…
Security AffairsOriginal report -
Chrome 134 Launches with Patches for 14 Crash-Inducing Vulnerabilities
Google has rolled out Chrome 134 to the stable channel for Windows, macOS, and Linux, addressing 14 security vulnerabilities—including high-severity flaws that could enable remote code execution or crashes. The update, version 134.0.6998.35 for Linux,…
gbhackers.comOriginal report -
Windows KDC Proxy RCE Vulnerability Allows Remote Server Takeover
A recently patched remote code execution (RCE) vulnerability in Microsoft Windows’ Key Distribution Center (KDC) Proxy implementation allows unauthenticated attackers to take control of vulnerable servers through manipulated Kerberos authentication traffic.…
gbhackers.comOriginal report -
Opera Browser Operator: AI Handles Web Tasks, No Cloud Needed
During MWC 2025, Opera unveiled Browser Operator, an AI-powered agent designed to assist users in performing specific tasks
SecurityOnlineOriginal report -
Data Privacy Row: Apple Takes UK Government to Court
Reports have surfaced alleging that the UK government secretly issued an order to Apple, demanding the creation of
SecurityOnlineOriginal report -
AI Notepad: Rewrite Your Text, Windows 11 Gets Smarter
Microsoft had previously been testing an AI-powered version of Notepad through the Windows Insider Preview program. Following successful
SecurityOnlineOriginal report -
Pixel Power-Ups: AI Avatars, Watch Alerts, & Android 15’s Big Leap
Google has recently unveiled four major updates for Android 15, including AI-powered fraud detection in Google Messages, real-time
SecurityOnlineOriginal report -
HPE Insight RS Flaw: CVE-2024-53676 PoC Exploit Published, RCE Risk Looms
Security researcher Robin has published technical details and a proof-of-concept (PoC) exploit for CVE-2024-53676, a critical vulnerability in
SecurityOnlineOriginal report -
CVE-2025-1723: Zoho Patches Account Takeover Vulnerability in ADSelfService Plus
Zoho Corporation has released a security advisory addressing a critical account takeover vulnerability in its ADSelfService Plus identity
SecurityOnlineOriginal report -
Malicious Go Packages Target Developers with Hidden Loader Malware on Linux and macOS
Researchers from Socket have uncovered a malicious typosquatting campaign infiltrating the Go ecosystem, using fraudulent packages that install
SecurityOnlineOriginal report -
Vim Users Warned: Crafted TAR Files Could Trigger Code Execution (CVE-2025-27423)
A newly discovered vulnerability in the popular text editor Vim could allow malicious actors to execute arbitrary code
SecurityOnlineOriginal report -
Fake BianLian ransom notes mailed to US CEOs in postal mail scam
Scammers are impersonating the BianLian ransomware gang in fake ransom notes sent to US companies via snail mail through the United States Postal Service. [...]
BleepingComputerOriginal report -
LummaStealer Expands Attack Surface with Fake Booking Sites and CAPTCHA Tricks
In a concerning evolution of malvertising tactics, threat actors have begun using fake booking websites to distribute LummaStealer,
SecurityOnlineOriginal report -
CVE-2024-0114: NVIDIA Addresses High-Severity HMC Vulnerability
Nvidia has issued a security update addressing two vulnerabilities in its Hopper HGX 8-GPU HMC, including a high-severity
SecurityOnlineOriginal report -
Operation Sea Elephant Cyber-Espionage Campaign Targeting South Asia
A recent report from Qi’anxin Threat Intelligence Center exposes an advanced cyber-espionage campaign dubbed Operation Sea Elephant, which
SecurityOnlineOriginal report -
Chrome 134 Update Addresses High-Risk Vulnerability (CVE-2025-1914)
The Google Chrome team has officially pushed Chrome 134 to the stable channel for Windows (134.0.6998.35/36), Mac (134.0.6998.44/45),
SecurityOnlineOriginal report -
CVE-2025-0912: Critical Flaw Exposes Over 100,000 WordPress Donation Sites to RCE
A severe security vulnerability has been discovered in GiveWP, the popular WordPress donation plugin, putting over 100,000 websites
SecurityOnlineOriginal report -
SharePoint Shadow: Havoc’s FUD Malware Conceals Cyber Attacks
A recent report from FortiGuard Labs has shed light on an advanced cyber campaign leveraging the open-source Havoc
SecurityOnlineOriginal report