News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 17 so far |
Mon 10 Mar 2025· 74 articles
-
Mass Exploitation of Critical PHP Vulnerability Begins
GreyNoise warns of mass exploitation of a critical vulnerability in PHP leading to remote code execution on vulnerable servers.
SecurityWeekOriginal report -
North Korea-linked APT Moonstone used Qilin ransomware in limited attacks
Microsoft researchers reported that North Korea-linked APT tracked as Moonstone Sleet has employed the Qilin ransomware in limited attacks. Microsoft observed a North Korea-linked APT group, tracked as Moonstone Sleet, deploying Qilin ransomware in limited…
Security AffairsOriginal report -
New Bank Log Service, TP-Link Zero-Day, Wizz Air Data Leak, and D2C Fraud Scheme
New Bank Log Service, TP-Link Zero-Day, Wizz Air Data Leak, and D2C Fraud Scheme Hacker forums continue to see a high level of cybercriminal activity, and this week, SOCRadar’s Dark Web Team discovered a number of new threats. Key discoveries include a bank…
SOCRadarOriginal report -
Critical Vulnerabilities in Moxa Switches Enable Unauthorized Access
A critical vulnerability identified as CVE-2024-12297 has been discovered in Moxa’s PT series of network switches, affecting multiple models across different product lines. This security flaw involves an authorization logic disclosure that can be exploited…
gbhackers.comOriginal report -
Cobalt Strike Exploitation by Hackers Drops, Report Reveals
A collaborative initiative involving Microsoft’s Digital Crimes Unit (DCU), Fortra, and the Health Information Sharing and Analysis Center (Health-ISAC) has reported a major drop in the use of unauthorized versions of the cyber tool Cobalt Strike by hackers.…
gbhackers.comOriginal report -
560,000 People Impacted Across Four Healthcare Data Breaches
Several healthcare organizations in different US states have disclosed data breaches affecting 100,000-200,000 individuals.
SecurityWeekOriginal report -
Why The Modern Google Workspace Needs Unified Security
The Need For Unified Security Google Workspace is where teams collaborate, share ideas, and get work done. But while it makes work easier, it also creates new security challenges. Cybercriminals are constantly evolving, finding ways to exploit…
The Hacker NewsOriginal report -
Large-scale cryptocurrency miner campaign targets Russian users with SilentCryptoMiner
Experts warn of a large-scale cryptocurrency miner campaign targeting Russian users with SilentCryptoMiner. Kaspersky researchers discovered a mass malware campaign spreading SilentCryptoMiner by disguising it as a tool to bypass internet restrictions. While…
Security AffairsOriginal report -
SideWinder targets the maritime and nuclear sectors with an updated toolset
Last year, we published an article about SideWinder, a highly prolific APT group whose primary targets have been military and government entities in Pakistan, Sri Lanka, China, and Nepal. In it, we described activities that had mostly happened in the first…
securelist.comOriginal report -
⚡ THN Weekly Recap: New Attacks, Old Tricks, Bigger Impact
Cyber threats today don't just evolve—they mutate rapidly, testing the resilience of everything from global financial systems to critical infrastructure. As cybersecurity confronts new battlegrounds—ranging from nation-state espionage and ransomware to…
The Hacker NewsOriginal report -
A week in security (March 3 – March 9)
Last week on Malwarebytes Labs: TikTok: Major investigation launched into platform’s use of children’s data PayPal scam abuses Docusign API to spread phishy emails Android zero-day vulnerabilities actively abused. Update as soon as you can I spoke to...
MalwarebytesOriginal report -
Developer Pleads Guilty to Injecting Malware and Crippling Company Systems
In a stunning case of corporate sabotage, a former software developer for Eaton Corp., Davis Lu, 55, of Houston, has been found guilty by a jury of intentionally damaging the company’s internal computer systems. This malicious act occurred after his work…
gbhackers.comOriginal report -
Feds seized $23 million in crypto stolen using keys from LastPass breaches
U.S. authorities seized $23M in crypto linked to a $150M Ripple wallet theft, experts believe the incident is linked to the 2022 LastPass breach. U.S. authorities seized $23M in crypto tied to a $150M Ripple hack, suspected to have been carried out by…
Security AffairsOriginal report -
Malwarebytes Premium Security awarded “Product of the Year” from AVLab
Malwarebytes Premium Security has once again been awarded “Product of the Year” after successfully blocking 100% of “in-the-wild” malware samples. The samples were deployed in multiple, consecutive third-party tests conducted by the AVLab Cybersecurity…
MalwarebytesOriginal report -
WinDbg Vulnerability Allows Attackers to Execute Remote Code
Microsoft recently disclosed a critical vulnerability impacting its debugging tool, WinDbg, and associated .NET packages. Tracked CVE-2025-24043, this flaw allows remote code execution (RCE) due to improper cryptographic signature verification in the SOS…
gbhackers.comOriginal report -
Cybercriminals Lose: 80% Fewer Unauthorized Cobalt Strikes
A collaborative effort led by Microsoft’s Digital Crimes Unit (DCU), Fortra, and the Health Information Sharing and Analysis
SecurityOnlineOriginal report -
Thinkware Dashcam Vulnerability Leaks Credentials to Attackers
A series of significant security vulnerabilities have been discovered in the Thinkware Dashcam, specifically the F800 Pro model, which could pose serious risks to users’ privacy and security. These issues include unauthorized access to sensitive data, denial…
gbhackers.comOriginal report -
New Apache Traffic Server Flaws Allow Malformed Request Exploits
The Apache Software Foundation has disclosed several vulnerabilities affecting its Traffic Server software. These vulnerabilities allow malicious actors to exploit malformed requests and access control list (ACL) issues, posing serious security risks to…
gbhackers.comOriginal report -
Commvault Webserver Flaw Allows Attackers to Gain Full Control
Commvault has revealed a major vulnerability in its software that could allow malicious actors to gain full control of its webservers. The issue, identified as CV_2025_03_1, has been categorized as a high-severity flaw and impacts multiple versions of the…
gbhackers.comOriginal report -
Over 43 Million Python Installations Vulnerable to Dangerous Code Execution Flaw
A significant vulnerability has been uncovered in the Python JSON Logger package (python-json-logger), affecting versions 3.2.0 and 3.2.1. This flaw, CVE-2025-27607 allows for remote code execution (RCE) due to misusing a missing dependency known as…
gbhackers.comOriginal report -
WinDbg Remote Code Execution Vulnerability: CVE-2025-24043 Exposes Critical Security Risk
A newly disclosed security vulnerability, CVE-2025-24043, affecting Microsoft’s WinDbg debugger, poses a severe remote code execution (RCE) threat
SecurityOnlineOriginal report -
SilentCryptoMiner Infects 2,000 Russian Users via Fake VPN and DPI Bypass Tools
A new mass malware campaign is infecting users with a cryptocurrency miner named SilentCryptoMiner by masquerading it as a tool designed to circumvent internet blocks and restrictions around online services. Russian cybersecurity company Kaspersky said the…
The Hacker NewsOriginal report -
Node.js Expands CVE Coverage for EOL Releases Despite MITRE Rejection
In a significant shift in its vulnerability management approach, the Node.js team has decided to extend Common Vulnerabilities
SecurityOnlineOriginal report -
1.08M Downloads at Risk: Volt Fixes Severe RCE Vulnerability (CVE-2025-27517)
Volt, a widely adopted functional API for Livewire, has recently patched a critical remote code execution (RCE) vulnerability
SecurityOnlineOriginal report -
Microsoft Uncovers Massive Malvertising Campaign Distributing Info Stealers via GitHub
In early December 2024, Microsoft Threat Intelligence uncovered a large-scale malvertising campaign that infected nearly one million devices
SecurityOnlineOriginal report -
CVE-2024-12799 (CVSS 10): OpenText Identity Manager Vulnerability Exposes Sensitive Information
OpenText Identity Manager, a comprehensive identity management suite used by organizations to manage user identities and access, has
SecurityOnlineOriginal report -
Typo DGAs: A New Tactic in Malicious Redirection Campaigns
Unit 42 researchers have uncovered a new malware campaign employing a novel technique: typo-squatting domain generation algorithms (DGAs).
SecurityOnlineOriginal report -
Critical Vulnerability in Moxa PT Switches Allows Unauthorized Access
Moxa, a leading provider of industrial networking and communication solutions, has issued a critical security advisory regarding a
SecurityOnlineOriginal report -
Medusa Ransomware Surges: Attacks Jump 42% as Cybercriminals Expand Operations
The Medusa ransomware threat continues to escalate, with attacks increasing by 42% between 2023 and 2024, according to
SecurityOnlineOriginal report -
Uniguest Tripleplay Security Alert: Multiple CVSS 10 Vulnerabilities Discovered
Uniguest’s Tripleplay, a popular AV integration solution used across various sectors, has been found to harbor multiple critical
SecurityOnlineOriginal report -
Stealthy Attacks Exploiting PHP-CGI Vulnerability Target Japanese Organizations
A sophisticated cyberattack campaign targeting organizations across multiple industries in Japan has been uncovered by Cisco Talos. Active
SecurityOnlineOriginal report -
Apache Traffic Server Patches Multiple Security Vulnerabilities
The Apache Traffic Server project has released updates to address several security vulnerabilities affecting multiple versions of its
SecurityOnlineOriginal report -
Beware of Trojanized Apps: EncryptHub Targets Cryptocurrency Wallets and Corporate Networks
A newly cybercriminal entity, EncryptHub, has gained attention from multiple threat intelligence teams, including Outpost24’s KrakenLabs. Their latest
SecurityOnlineOriginal report -
Commvault Addresses Critical Webserver Vulnerability
Commvault, a leading provider of data protection and management solutions, has recently addressed a critical webserver vulnerability that
SecurityOnlineOriginal report