News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 27 so far |
Thu 6 Mar 2025· 75 articles
-
Bogus ‘BianLian’ Gang Sends Snail-Mail Extortion Letters
Elizabeth Montalbano reports: Someone claiming to represent the BianLian ransomware group is sending top executives from various organizations snail-mail extortion letters informing them that their IT network has been compromised and threatening to delete or…
DataBreachesOriginal report -
A Brief Reminder About the Florida Information Protection Act
Joseph Lazzarotti of JacksonLewis writes: According to one survey, Florida is fourth on the list of states with the most reported data breaches. No doubt, data breaches continue to be a significant risk for all business, large and small, across the U.S.,…
DataBreachesOriginal report -
Justice Department Charges 12 Chinese Contract Hackers and Law Enforcement Officers in Global Computer Intrusion Campaigns
Chinese Law Enforcement and Intelligence Services Leveraged China’s Reckless and Indiscriminate Hacker-for-Hire Ecosystem, Including the ‘APT 27’ Group, to Suppress Free Speech and Dissent Globally and to Steal Data from Numerous Organizations Worldwide…
DataBreachesOriginal report -
NHS investigates API flaw that exposed patient data
Teiss reports: The National Health Service (NHS) is investigating claims that an application programming interface (API) vulnerability at private healthcare provider Medefer left patient data exposed. The issue, initially raised by an IT whistleblower, has…
DataBreachesOriginal report -
The U.S. DoJ charges 12 Chinese nationals for state-linked cyber operations
The U.S. Department of Justice (DoJ) charges 12 Chinese nationals for their alleged involvement in state-linked cyber operations. The U.S. DoJ charged 12 Chinese nationals, including PRC security officers, employees of the hacking firm i-Soon, and members of…
Security AffairsOriginal report -
AIceberg Gets $10 Million in Seed Funding for AI Security Platform
AIceberg has launched a solution that helps governments and enterprises with the safe, secure and compliant adoption of AI.
SecurityWeekOriginal report -
Outsmarting Cyber Threats with Attack Graphs
Cyber threats are growing more sophisticated, and traditional security approaches struggle to keep up. Organizations can no longer rely on periodic assessments or static vulnerability lists to stay secure. Instead, they need a dynamic approach that provides…
The Hacker NewsOriginal report -
Critical Kibana Vulnerability (CVE-2025-25012) Exposes Systems to Code Execution, Patch Now
Critical Kibana Vulnerability (CVE-2025-25012) Exposes Systems to Code Execution, Patch Now A critical security vulnerability has been discovered in Kibana, the widely used data visualization platform for Elasticsearch. Tracked as CVE-2025-25012, the…
SOCRadarOriginal report -
Trojans disguised as AI: Cybercriminals exploit DeepSeek’s popularity
Introduction Among the most significant events in the AI world in early 2025 was the release of DeepSeek-R1 – a powerful reasoning large language model (LLM) with open weights. It’s available both for local use and as a free service. Since DeepSeek was the…
securelist.comOriginal report -
Over 1,000 WordPress Sites Infected with JavaScript Backdoors Enabling Persistent Attacker Access
Over 1,000 websites powered by WordPress have been infected with a third-party JavaScript code that injects four separate backdoors. "Creating four backdoors facilitates the attackers having multiple points of re-entry should one be detected and removed,"…
The Hacker NewsOriginal report -
Exploited VMware ESXi Flaws Put Many at Risk of Ransomware, Other Attacks
Scans show that tens of thousands of VMware ESXi instances are affected by CVE-2025-22224 and other vulnerabilities disclosed recently as zero-days.
SecurityWeekOriginal report -
Case Study: Gaining Internal Network Access Through Physical Penetration Testing
A recent physical penetration test conducted by cybersecurity firm Hackmosphere, revealed critical security flaws in a furniture company’s retail store. The test, which simulated real-world attack scenarios, exposed four major vulnerabilities that could…
gbhackers.comOriginal report -
New Malware ‘Desert Dexter’ Hits Over 900 Victims Worldwide
A newly discovered malicious campaign dubbed “Desert Dexter” has infected approximately 900 victims across multiple countries, primarily in the Middle East and North Africa. The Positive Technologies Expert Security Center (PT ESC) uncovered the operation,…
gbhackers.comOriginal report -
Chinese Lotus Blossom APT targets multiple sectors with Sagerunex backdoor
China-linked Lotus Blossom APT targets governments and industries in Asian countries with new Sagerunex backdoor variants. Talos researchers linked China-backed Lotus Blossom APT (also known as Elise and Esile) to multiple campaigns targeting organizations…
Security AffairsOriginal report -
Critical IDOR Vulnerabilities in ZITADEL Let Hackers Modify Key Settings
Security researchers have disclosed critical Insecure Direct Object Reference (IDOR) vulnerabilities in ZITADEL’s administration interface that expose organizations to account takeover risks and unauthorized configuration changes. Tracked as CVE-2025-27507…
gbhackers.comOriginal report -
LibreOffice Flaw Allows Attackers to Run Arbitrary Scripts via Macro URL
A significant security vulnerability in LibreOffice, designated as CVE-2025-1080, has been patched in versions 24.8.5 and 25.2.1, released on March 4, 2025. The flaw, which allowed attackers to execute arbitrary scripts through manipulated macro URLs, posed…
gbhackers.comOriginal report -
SecP0 Ransomware Gang Threatens to Expose Critical Vulnerabilities
A new ransomware collective dubbed SecP0 has emerged with a disruptive strategy that diverges sharply from conventional cybercriminal playbooks. Unlike traditional ransomware groups that focus on encrypting data or threatening to leak stolen information,…
gbhackers.comOriginal report -
Ransomware Attacks Build Against Saudi Construction Firms
Cybercriminals are ramping up their efforts in the Kingdom and targeting more than just petroleum firms; now, they're aiming for Middle East organizations in the IT, government, construction, and real estate sectors too.
Dark ReadingOriginal report -
Malicious Android App on Google Play Compromises 220,000+ Devices
Security researchers at ThreatLabz recently uncovered a sophisticated malware campaign operating through the Google Play Store, leveraging a seemingly benign application to distribute the Anatsa banking trojan (also known as TeaBot). The malicious app,…
gbhackers.comOriginal report -
U.S. Charges 12 Chinese Nationals in State-Backed Hacking Operations
The U.S. Department of Justice (DoJ) has announced charges against 12 Chinese nationals for their alleged participation in a wide-ranging scheme designed to steal data and suppress free speech and dissent globally. The individuals include two officers of the…
The Hacker NewsOriginal report -
Technical Analysis Released on Bybit Hot Wallet Exploit
Cryptocurrency exchange Bybit suffered a sophisticated smart contract exploit on February 21, 2025, resulting in the theft of 401,346.76 ETH (approximately $1.2 billion at the time of the incident). The attack vector leveraged advanced proxy contract…
gbhackers.comOriginal report -
Google Unveils GoStringUngarbler to Crack Go-Based Malware Encryption
Google’s FLARE team has released GoStringUngarbler, an open-source tool designed to dismantle string obfuscation in Go binaries protected by the garble compiler. This innovation addresses growing concerns over malware authors exploiting garble’s advanced…
gbhackers.comOriginal report -
Espionage Actor 'Lotus Blossom' Targets South East Asia
The threat actor, of unknown origin, is deploying a proprietary backdoor malware known as "Sagerunex" against critical infrastructure in Hong Kong, Philippines, Taiwan, and Vietnam.
Dark ReadingOriginal report -
CVE-2025-25012 (CVSS 9.9): Critical Code Execution Vulnerability Patched in Elastic Kibana
Elastic has released a security update to address a critical vulnerability in Kibana, its popular data visualization and
SecurityOnlineOriginal report -
CVE-2025-26776 (CVSS 10) in Chaty Pro Plugin Exposes Thousands of WordPress Sites to Takeover
A critical vulnerability has been discovered in the Chaty Pro plugin for WordPress, potentially allowing attackers to completely
SecurityOnlineOriginal report -
North Korean IT Workers Pose as Developers on GitHub to Infiltrate Global Companies
Cybersecurity analysts at Nisos have uncovered a North Korean (DPRK) employment fraud network using fake personas on GitHub
SecurityOnlineOriginal report -
B2B Business Email Compromise: A Sophisticated Scheme Exploiting Trusted Relationships
A recent investigation by Trend Micro has uncovered a highly sophisticated Business Email Compromise (BEC) attack targeting business-to-business
SecurityOnlineOriginal report -
Russian Cybercriminals Impersonate EFF in Targeted Attack on Albion Online Players
Cybersecurity researchers at Hunt.io have uncovered a targeted cybercriminal campaign impersonating the Electronic Frontier Foundation (EFF) to deceive
SecurityOnlineOriginal report -
Cisco Webex for BroadWorks Vulnerability Exposes User Credentials
Cisco has addressed a vulnerability in its Webex for BroadWorks platform that could potentially expose user credentials. The
SecurityOnlineOriginal report -
CVE-2025-27507 (CVSS 9.0): ZITADEL Users at Risk of Account Takeover
The ZITADEL project, an open-source identity and access management solution, has issued a critical security advisory regarding multiple
SecurityOnlineOriginal report -
Privacy First: Google’s AI Detects Fraud, No Cloud Storage
Since November 2024, Google has been testing an AI-driven fraud detection feature, powered by the Google Gemini artificial
SecurityOnlineOriginal report -
CVE-2025-1080: LibreOffice Patches Security Flaw Allowing Arbitrary Script Execution
The Document Foundation has released security updates for LibreOffice to address a vulnerability that could allow attackers to
SecurityOnlineOriginal report -
Bybit Hack: Lazarus Group Launders $1.4 Billion in Ethereum Through THORChain
On February 21, 2025, cryptocurrency exchange Bybit fell victim to a cyberattack, specifically targeting the SafaWallet utilized by
SecurityOnlineOriginal report -
Google Fights Back: Breakup Threatens National Security, Company Claims
Reports indicate that Google intends to invoke national security concerns in urging the U.S. Department of Justice to
SecurityOnlineOriginal report -
CVE-2025-1393 (CVSS 9.8): Hard-Coded Credentials in Weidmüller PROCON-WIN Expose Industrial Systems to Attack
CERT@VDE, in coordination with Weidmüller, has issued a critical security advisory regarding a vulnerability in the PROCON-WIN industrial
SecurityOnlineOriginal report