News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 17 so far |
Tue 11 Mar 2025· 81 articles
-
Computers containing thousands of patients’ records stolen from Belfast hospital
Deborah McAleese reports: Twenty-eight computers containing the records of thousands of patients have been stolen from a Belfast Hospital, UTV can reveal. The computers were being used to train staff on the new encompass system, a digital healthcare record…
DataBreachesOriginal report -
Hackers Take Credit for X Cyberattack
Information is coming to light on the cyberattack that caused X outages, but it should be taken with a pinch of salt.
SecurityWeekOriginal report -
Your Risk Scores Are Lying: Adversarial Exposure Validation Exposes Real Threats
In cybersecurity, confidence is a double-edged sword. Organizations often operate under a false sense of security, believing that patched vulnerabilities, up-to-date tools, polished dashboards, and glowing risk scores guarantee safety. The reality is a bit…
The Hacker NewsOriginal report -
SideWinder APT targets maritime and nuclear sectors with enhanced toolset
The APT group SideWinder targets maritime and logistics companies across South and Southeast Asia, the Middle East, and Africa. Kaspersky researchers warn that the APT group SideWinder (also known as Razor Tiger, Rattlesnake, and T-APT-04) is targeting…
Security AffairsOriginal report -
“Eleven11bot” Botnet Compromises 30,000 Webcams in Massive Attack
Cybersecurity experts have uncovered a massive Distributed Denial-of-Service (DDoS) botnet known as “Eleven11bot.” This new threat, discovered by Nokia’s Deepfield Emergency Response Team (ERT), shared in LinkedIn, has compromised a staggering 30,000 network…
gbhackers.comOriginal report -
SideWinder APT Deploys New Tools in Attacks on Military & Government Entities
The SideWinder Advanced Persistent Threat (APT) group has been observed intensifying its activities, particularly targeting military and government entities across various regions. This group, known for its aggressive expansion beyond traditional targets,…
gbhackers.comOriginal report -
Apache Pinot Vulnerability Allows Attackers to Bypass Authentication
A significant security vulnerability affecting Apache Pinot, an open-source distributed data store designed for real-time analytics, has been publicly disclosed. The flaw, identified as CVE-2024-56325, allows remote attackers to bypass authentication on…
gbhackers.comOriginal report -
Lazarus Hackers Exploit 6 NPM Packages to Steal Login Credentials
North Korea’s Lazarus Group has launched a new wave of attacks targeting the npm ecosystem, compromising six packages designed to steal login credentials and deploy backdoors. The malicious packages is-buffer-validator, yoojae-validator,…
gbhackers.comOriginal report -
CISA Added 3 Ivanti Endpoint Manager Bugs to Wildly Exploited Vulnerabilities Catalog
The Cybersecurity and Infrastructure Security Agency (CISA) has expanded its Known Exploited Vulnerabilities (KEV) catalog with the addition of three high-risk security flaws affecting Ivanti Endpoint Manager (EPM). These vulnerabilities, which involve…
gbhackers.comOriginal report -
Hackers Compromise Windows Systems Using 5000+ Malicious Packages
A recent analysis by FortiGuard Labs has revealed a significant increase in malicious software packages, with over 5,000 identified since November 2024. These packages employ sophisticated techniques to evade detection and exploit system vulnerabilities,…
gbhackers.comOriginal report -
Center for Digestive Health notifies patients of April 2024 cyberattack
In May, 2024, the threat actors known as BianLian added the Center for Digestive Health in Florida to their dark web leak site. In June, they leaked what they claimed was 2.2 TB of files that they described as: A physical and medical history examination.…
DataBreachesOriginal report -
Telecom Giant NTT Confirms Data Breach Affecting 18,000 Corporate Customers
Japanese telecom giant NTT Communications (NTT Com) has confirmed a data breach that compromised the information of nearly 18,000 corporate customers. The breach, which occurred in February, involved unauthorized access to an internal system used for…
gbhackers.comOriginal report -
Apache Camel RCE Vulnerability PoC Exploit Released in GitHub
A Proof of Concept (PoC) exploit for the Apache Camel vulnerability CVE-2025-27636 has been released on GitHub. This vulnerability affects Apache Camel versions 4.10.0-4.10.1, 4.8.0-4.8.4, and 3.10.0-3.22.3, allowing attackers to inject arbitrary headers and…
gbhackers.comOriginal report -
CVE-2025-27494 (CVSS 9.1):Critical Flaw Found in Siemens SiPass Access Control Systems
Siemens has issued a security advisory warning of multiple vulnerabilities in SiPass integrated access control systems. The vulnerabilities
SecurityOnlineOriginal report -
Sunflower Medical Group notifies 220,968 of December cyberattack by Rhysida
Sunflower Medical Group has notified 220,968 people of a December attack by Rhysida. According to their submission to the Maine Attorney General’s Office and their notification letter to those affected, the Kansas-based group of independent physicians…
DataBreachesOriginal report -
Beware of “Cheats” and “Cracks”: DCRat Backdoor Lurks on YouTube
Kaspersky Labs has issued a warning about a resurgence of the DCRat backdoor, a remote access trojan (RAT)
SecurityOnlineOriginal report -
Steganography Explained: How XWorm Hides Inside Images
Inside the most innocent-looking image, a breathtaking landscape, or a funny meme, something dangerous could be hiding, waiting for its moment to strike. No strange file names. No antivirus warnings. Just a harmless picture, secretly concealing a payload…
The Hacker NewsOriginal report -
SAP Security Update Released to Fix Multiple Vulnerabilities
SAP announced 21 new Security Notes and updates to 3 previously released notes on its latest Security Patch Day. This release addresses critical vulnerabilities within SAP products, underscoring the company’s commitment to safeguarding enterprise software.…
gbhackers.comOriginal report -
DCRat backdoor returns
Since the beginning of the year, we’ve been tracking in our telemetry a new wave of DCRat distribution, with paid access to the backdoor provided under the Malware-as-a-Service (MaaS) model. The cybercriminal group behind it also offers support for the…
securelist.comOriginal report -
X Faces Cyberattack: Dark Storm Team Takes Credit, Musk Blames Ukraine
X Faces Cyberattack: Dark Storm Team Takes Credit, Musk Blames Ukraine Yesterday, X (formerly Twitter) allegedly suffered a large-scale cyberattack, causing widespread outages. While Elon Musk claimed the attack was linked to Ukraine, but the pro-Palestinian…
SOCRadarOriginal report -
Critical Veritas Vulnerability Allows Attackers to Execute Malicious Code
A critical vulnerability has been discovered in Veritas’ Arctera InfoScale product, a solution widely used for disaster recovery and high availability scenarios. The issue lies in the insecure deserialization of untrusted data in the .NET remoting endpoint,…
gbhackers.comOriginal report -
U.S. CISA adds Advantive VeraCore and Ivanti EPM flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Advantive VeraCore and Ivanti EPM flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities t...
Security AffairsOriginal report -
VPN No More: Xbox Targets Gamers Buying Games from Cheaper Regions
Technology companies typically employ differentiated pricing strategies across various markets, taking into account factors such as purchasing power
SecurityOnlineOriginal report -
Cybersecurity Challenges in Cross-Border Data Transfers and Regulatory Compliance Strategies
Cross-border data transfers enable global business but face challenges from varying cybersecurity laws, increasing risks of cyberattacks and data breaches. The digital revolution has enabled organizations to operate seamlessly across national boundaries,…
Security AffairsOriginal report -
SAP Patches High-Severity XSS and Authorization Flaws in Latest Security Updates
SAP has released its latest round of security updates, addressing 21 new vulnerabilities and providing 3 updates to
SecurityOnlineOriginal report -
SideWinder APT Targets Maritime, Nuclear, and IT Sectors Across Asia, Middle East, and Africa
Maritime and logistics companies in South and Southeast Asia, the Middle East, and Africa have become the target of an advanced persistent threat (APT) group dubbed SideWinder. The attacks, observed by Kaspersky in 2024, spread across Bangladesh, Cambodia,…
The Hacker NewsOriginal report -
Apache Tomcat Flaw Could Allow RCE Attacks on Servers
Apache Tomcat, a widely used open-source web server software, has faced numerous security vulnerabilities in recent years. Some critical issues put servers at risk of remote code execution (RCE) and other attacks. These vulnerabilities highlight the…
gbhackers.comOriginal report -
Moxa Issues Fix for Critical Authentication Bypass Vulnerability in PT Switches
Taiwanese company Moxa has released a security update to address a critical security flaw impacting its PT switches that could permit an attacker to bypass authentication guarantees. The vulnerability, tracked as CVE-2024-12297, has been assigned a CVSS v4…
The Hacker NewsOriginal report -
Latest Chrome Update Addresses Multiple High-Risk Security Issues
Google has released a critical update for its Chrome browser, advancing the stable channel to version 134.0.6998.88 for Windows, Mac, and Linux, and 134.0.6998.89 for Windows and Mac on the Extended Stable channel. This update includes several high-priority…
gbhackers.comOriginal report -
Ghost Plugin Plagues Over a Million Terminals, Hijacking Search Results and User Data
The Qi’anxin Threat Intelligence Center has uncovered a massive cyber operation impacting over a million internet users worldwide.
SecurityOnlineOriginal report -
CISA Adds Five Actively Exploited Vulnerabilities in Advantive VeraCore and Ivanti EPM to KEV List
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added five security flaws impacting Advantive VeraCore and Ivanti Endpoint Manager (EPM) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation…
The Hacker NewsOriginal report -
CVE-2025-24813 Flaw in Apache Tomcat Exposes Servers to RCE, Data Leaks: Update Immediately
A serious vulnerability, CVE-2025-24813, has been discovered in Apache Tomcat, potentially allowing attackers to execute remote code, disclose
SecurityOnlineOriginal report -
CVE-2025-27816 (CVSS 9.8): Critical Vulnerability in Veritas InfoScale Could Allow RCE
Veritas has issued a critical security advisory regarding a vulnerability in its Arctera InfoScale product that could allow
SecurityOnlineOriginal report -
CVE-2024-56325 (CVSS 9.8): Authentication Bypass Vulnerability Discovered in Apache Pinot
Apache Pinot, the high-performance real-time OLAP datastore originally developed by LinkedIn and Uber, has become a critical tool
SecurityOnlineOriginal report -
DDoS Strikes X: Cloudflare Saves Platform, Dark Storm Suspected
Today, the social media platform X/Twitter experienced multiple outages, each affecting different regions for varying durations. Following these
SecurityOnlineOriginal report -
EByte Ransomware: A New Go-Based Threat with Advanced Encryption Techniques
CYFIRMA has identified a new ransomware variant, EByte Ransomware, written in Go Language and actively targeting Windows systems.
SecurityOnlineOriginal report -
Popular JavaScript Library ‘Axios’ Exposes Millions to Server-Side Vulnerabilities (CVE-2025-27152)
A newly discovered vulnerability in the widely-used JavaScript library ‘Axios’ could leave millions of users at risk of
SecurityOnlineOriginal report -
Chrome Update: 5 Security Fixes, High-Risk Flaws Addressed ASAP
An important security update has been released for the Chrome Stable channel, addressing five vulnerabilities, including three high-severity
SecurityOnlineOriginal report -
Strela Stealer Malware Targets European Email Credentials with Advanced Techniques
Trustwave SpiderLabs has published a report on Strela Stealer, a sophisticated infostealer malware that has been active since
SecurityOnlineOriginal report -
CVE-2025-27509 (CVSS 9.3): Fleet Patches Critical SAML Authentication Vulnerability
Fleet, an open-source platform widely used for IT and security operations, has released a critical security update addressing
SecurityOnlineOriginal report