News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 22 so far |
Fri 7 Mar 2025· 82 articles
-
Many Schools Report Data Breach After Retirement Services Firm Hit by Ransomware
Dozens of schools and thousands of individuals are impacted by a data breach resulting from a ransomware attack on Carruth Compliance Consulting.
SecurityWeekOriginal report -
Webinar: Learn How ASPM Transforms Application Security from Reactive to Proactive
Are you tired of dealing with outdated security tools that never seem to give you the full picture? You’re not alone. Many organizations struggle with piecing together scattered information, leaving your apps vulnerable to modern threats. That’s why we’re…
The Hacker NewsOriginal report -
Securing Your Browser Against Cross-Site Scripting (XSS) Attacks
Securing Your Browser Against Cross-Site Scripting (XSS) Attacks Cross-site scripting (XSS) is one of the most common web security vulnerabilities. Despite the fact that it is not frequently exploited, it can cause significant impact. XSS attacks target…
SOCRadarOriginal report -
New AI Protection from Google Cloud Tackles AI Risks, Threats, and Compliance
Google Cloud’s AI Protection helps discover AI inventory, secure AI assets, and manage threats with detect, investigate, and respond capabilities.
SecurityWeekOriginal report -
Researchers Jailbreak 17 Popular LLM Models to Reveal Sensitive Data
In a recent study published by Palo Alto Networks’ Threat Research Center, researchers successfully jailbroke 17 popular generative AI (GenAI) web products, exposing vulnerabilities in their safety measures. The investigation aimed to assess the…
gbhackers.comOriginal report -
Phantom Goblin Uses Social Engineering Tactics to Deploy Stealer Malware
A sophisticated malware operation, dubbed “Phantom Goblin,” has been identified by cybersecurity researchers, highlighting the increasing use of social engineering tactics to deploy information-stealing malware. This operation leverages deceptive techniques…
gbhackers.comOriginal report -
What PCI DSS v4 Really Means – Lessons from A&F Compliance Journey
Access on-demand webinar here Avoid a $100,000/month Compliance Disaster March 31, 2025: The Clock is Ticking. What if a single overlooked script could cost your business $100,000 per month in non-compliance fines? PCI DSS v4 is coming, and businesses…
The Hacker NewsOriginal report -
International law enforcement operation seized the domain of the Russian crypto exchange Garantex
The U.S. Secret Service and global law enforcement seized the domain of sanctioned Russian crypto exchange Garantex. An international law enforcement operation led by U.S. Secret Service seized the website (“garantex[.]org”) of the sanctioned Russian crypto…
Security AffairsOriginal report -
GitHub Explains How Security Professionals Can Use Copilot for Log Analysis
GitHub Copilot, once a developer-centric tool, is now revolutionizing workflows across technical and non-technical roles. With features like Agent Mode, CLI integration, and Project Padawan, Copilot is emerging as a universal productivity enhancer. This…
gbhackers.comOriginal report -
Microsoft Introduces 365 E5 Security Add-On for Business Premium Customers
Microsoft has launched Microsoft 365 E5 Security as an add-on to its Business Premium suite, providing small and medium-sized businesses (SMBs) with advanced tools to combat escalating cyber threats. The offering integrates enterprise-grade security features…
gbhackers.comOriginal report -
AMD Microcode Vulnerability Allows Attackers to Load Malicious Patches
A critical vulnerability in AMD’s Zen 1 through Zen 4 processors allows attackers to bypass microcode signature validation, potentially undermining hardware-based security mechanisms. The flaw stems from AMD’s use of AES-CMAC as a hash function during…
gbhackers.comOriginal report -
Secret Service-Led Operation Seizes Garantex Cryptocurrency Exchange
Recently, an international law enforcement coalition, spearheaded by the United States Secret Service, has taken decisive action against
SecurityOnlineOriginal report -
Medusa Ransomware Attacks Increase
The number of Medusa ransomware attacks observed in the first two months of 2025 doubled compared to the same period last year.
SecurityWeekOriginal report -
This Malicious PyPI Package Stole Ethereum Private Keys via Polygon RPC Transactions
Cybersecurity researchers have discovered a malicious Python package on the Python Package Index (PyPI) repository that's equipped to steal a victim's Ethereum private keys by impersonating popular libraries. The package in question is set-utils, which has…
The Hacker NewsOriginal report -
Activating Incognito Mode in RDP to Erase All Traces
The Remote Desktop Protocol (RDP) is a widely used tool for remote access, but it often leaves behind traces of user activity, which can be a concern for privacy and security. Recently, the use of the “/public” command-line option in MSTSC, the RDP client,…
gbhackers.comOriginal report -
Medusa Ransomware Attacks Surge 42% with Advanced Tools & Tactics
Medusa ransomware attacks have seen a significant increase, rising by 42% between 2023 and 2024, with a further escalation in early 2025. This surge is attributed to the group Spearwing, which operates Medusa as a ransomware-as-a-service (RaaS) model.…
gbhackers.comOriginal report -
Dark Peep #18: If It’s Easy for You, It’s Easy for Hackers
Dark Peep #18: If It’s Easy for You, It’s Easy for Hackers Some dark web stories are scary, some are shocking, and then there are the ones that make you go “Wait… what?” This is one of those. In this edition, cybercriminals never seem to run out of…
SOCRadarOriginal report -
Peaklight Malware Targets Users to Steal Credentials, Browser History, and Financial Data
Peaklight malware has emerged as a significant threat, designed to steal sensitive information from compromised endpoints. This information stealer is often distributed through underground channels and is sometimes offered as a Malware-as-a-Service (MaaS),…
gbhackers.comOriginal report -
U.S. Secret Service Seizes Russian Garantex Crypto Exchange Website
A coalition of international law enforcement agencies has seized the website associated with the cryptocurrency exchange Garantex ("garantex[.]org"), nearly three years after the service was sanctioned by the U.S. Treasury Department in April 2022. "The…
The Hacker NewsOriginal report -
Medusa Ransomware targeted over 40 organizations in 2025
Medusa ransomware has claimed nearly 400 victims since January 2023, with attacks increasing by 42% between 2023 and 2024. The Symantec Threat Hunter Team reported that the Medusa ransomware operators have claimed nearly 400 victims since January 2023.…
Security AffairsOriginal report -
Apache Pinot Vulnerability Allows Remote Attackers to Bypass Authentication
A critical security flaw (CVE-2024-56325) in Apache Pinot, a real-time distributed OLAP datastore, has been disclosed, allowing unauthenticated attackers to bypass authentication controls and gain unauthorized access to sensitive systems. Rated 9.8 on the…
gbhackers.comOriginal report -
FBI Warns: Threat Actors Impersonating BianLian Group to Target Corporate Executives
The Federal Bureau of Investigation (FBI) issued a critical alert through its Internet Crime Complaint Center (IC3) warning of a novel cyber extortion campaign targeting corporate executives. Criminal actors impersonating the notorious BianLian ransomware…
gbhackers.comOriginal report -
Edimax Camera Zero-Day Disclosed by CISA Exploited by Botnets
Multiple Mirai-based botnets are exploiting CVE-2025-1316, an Edimax IP camera vulnerability that allows remote command execution.
SecurityWeekOriginal report -
Android 16: June Release Confirmed by Google at MWC
Google initially released the developer preview of Android 16 in late November last year, confirming that the official
SecurityOnlineOriginal report -
Apple AI: Summarizing App Reviews, No More Scrolling
Apple is currently testing an AI-generated review summarization feature for select apps and games in the U.S. market.
SecurityOnlineOriginal report -
Safe{Wallet} Confirms North Korean TraderTraitor Hackers Stole $1.5 Billion in Bybit Heist
Safe{Wallet} has revealed that the cybersecurity incident that led to the Bybit $1.5 billion crypto heist is a "highly sophisticated, state-sponsored attack," stating the North Korean threat actors behind the hack took steps to erase traces of the malicious…
The Hacker NewsOriginal report -
PHP-CGI RCE Flaw Exploited in Attacks on Japan's Tech, Telecom, and E-Commerce Sectors
Threat actors of unknown provenance have been attributed to a malicious campaign predominantly targeting organizations in Japan since January 2025. "The attacker has exploited the vulnerability CVE-2024-4577, a remote code execution (RCE) flaw in the PHP-CGI…
The Hacker NewsOriginal report -
Intel Maps New vPro Chips to MITRE's ATT&CK Framework
The PC Security Stack Mappings project improves the security posture of corporate PCs by aligning each of the security features found in vPro PC and Core Ultra chips with the techniques described in MITRE's ATT&CK.
Dark ReadingOriginal report -
Critical Flaws Uncovered in DrayTek Routers: Backdoors, RCE, and Weak Authentication Exposed
A comprehensive security audit by the Faraday Team has unveiled a series of critical vulnerabilities in DrayTek Vigor
SecurityOnlineOriginal report -
CISA Warns of Critical Edimax IP Camera Flaw (CVE-2025-1316) with Public Exploits and No Vendor Fix
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about a critical vulnerability affecting Edimax
SecurityOnlineOriginal report -
Zero-Day Attacks & Stolen Keys: Silk Typhoon Breaches Networks
Microsoft Threat Intelligence has uncovered a strategic shift in the tactics of Silk Typhoon, a Chinese state-backed cyber-espionage
SecurityOnlineOriginal report -
Fake Copyright Claims: YouTubers Tricked into Pushing Malware
In a concerning development, cybercriminals have leveraged the influence of YouTubers to distribute malware disguised as a restriction
SecurityOnlineOriginal report -
UNK_CraftyCamel: New Threat Group Using Polyglot Malware in UAE
Cybersecurity researchers at Proofpoint have identified a highly targeted cyber-espionage campaign employing polyglot malware to compromise aviation, satellite
SecurityOnlineOriginal report -
CVE-2025-20206: Cisco Secure Client Flaw Allows Code Execution with SYSTEM Privileges
Cisco has released a security advisory addressing a vulnerability in the Cisco Secure Client for Windows. The vulnerability,
SecurityOnlineOriginal report -
Massive Cyber Campaign Exploits 4,000 ISP IPs in the U.S. and China for Credential Theft and Cryptojacking
A new cybersecurity report from The Splunk Threat Research Team has uncovered a widespread infostealer and cryptomining campaign
SecurityOnlineOriginal report -
PrintSteal: Unmasking a Large-Scale KYC Document Fraud Operation
A recent investigation by CloudSEK has exposed PrintSteal, a vast cybercriminal operation engaged in the fraudulent generation and
SecurityOnlineOriginal report -
Beyond Keywords: Google’s AI Mode Redefines Search with Chat
Following the introduction of the AI Overviews feature last year, Google has now announced an expansion of its
SecurityOnlineOriginal report -
Armis Acquires OTORIO to Expand OT Exposure Management Platform
Armis will integrate OTORIO’s Titan platform with its cloud-based Centrix, bringing an on-premise option to the cloud-only offering.
Dark ReadingOriginal report -
Who is the DOGE and X Technician Branden Spikes?
At 49, Branden Spikes isn’t just one of the oldest technologists who has been involved in Elon Musk’s Department of Government Efficiency (DOGE). As the current director of information technology at X/Twitter and an early hire at PayPal, Zip2, Tesla and…
Krebs on SecurityOriginal report -
CSRF and Open Redirect: Jenkins Patches Major Vulnerabilities
Jenkins, the popular open-source automation server, has issued a security advisory addressing multiple vulnerabilities, including the exposure of
SecurityOnlineOriginal report