News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 16 so far |
Wed 12 Mar 2025· 82 articles
-
March 2025 Patch Tuesday: Microsoft Fixes 6 Critical & 6 Exploited Security Vulnerabilities
March 2025 Patch Tuesday: Microsoft Fixes 6 Critical & 6 Exploited Security Vulnerabilities Microsoft has released its highly anticipated March 2025 Patch Tuesday update, tackling a staggering 57 security flaws. Among these, six vulnerabilities are deemed…
SOCRadarOriginal report -
CISA Warns of Exploitable Fast FAT Vulnerability in Microsoft Windows
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding a critical vulnerability in the Microsoft Windows Fast FAT File System Driver. This vulnerability, identified as CVE-2025-24985, poses a significant threat as it…
gbhackers.comOriginal report -
Over 400 IPs Exploiting Multiple SSRF Vulnerabilities in Coordinated Cyber Attack
Threat intelligence firm GreyNoise is warning of a "coordinated surge" in the exploitation of Server-Side Request Forgery (SSRF) vulnerabilities spanning multiple platforms. "At least 400 IPs have been seen actively exploiting multiple SSRF CVEs…
The Hacker NewsOriginal report -
PowerSchool Portal Compromised Months Before Massive Data Breach
Hackers used compromised credentials to access PowerSchool’s PowerSource portal months before the December 2024 data breach.
SecurityWeekOriginal report -
Webinar Today: Protecting Executives and Enterprises from Digital, Narrative and Physical Attacks
How hyper agenda-driven threat actors, cybercriminals, and nation-states integrate digital, narrative, and physical attacks to target organizations through their executives.
SecurityWeekOriginal report -
CISA Warns of Microsoft Windows Win32 Kernel Subsystem Vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) highlighted a critical vulnerability affecting the Microsoft Windows Win32 kernel subsystem. Identified as CVE-2025-24983, this use-after-free vulnerability in the Win32k component could potentially…
gbhackers.comOriginal report -
Fully Undetected Anubis Malware Enables Hackers to Execute Remote Commands
A recent alert has highlighted the emergence of the AnubisBackdoor, a Python-based backdoor attributed to the Savage Ladybug group, which is reportedly linked to the notorious FIN7 cybercrime gang. This malware is designed to provide remote access, execute…
gbhackers.comOriginal report -
US Hasn’t Determined Who Was Behind Cyberattack That Caused Outage on Musk’s X
US officials have not determined who was behind an apparent cyberattack on the social media site X that limited access to the platform for thousands of users.
SecurityWeekOriginal report -
DCRat Malware Spreading via YouTube to Steal Login Credentials
Cybersecurity researchers have identified a renewed wave of attacks involving the Dark Crystal RAT (DCRat), a dangerous remote access Trojan that has resurfaced through a Malware-as-a-Service (MaaS) model. Attackers are actively targeting gamers by…
gbhackers.comOriginal report -
Microsoft: Recent Windows updates make USB printers print random text
Microsoft says that some USB printers will start printing random text after installing Windows updates released since late January 2025. [...]
BleepingComputerOriginal report -
Java Axios Package Vulnerability Threatens Millions of Servers with SSRF Exploit
A critical security issue has been identified in the Axios package for JavaScript, which poses significant risks to millions of servers due to server-side request forgery (SSRF) and credential leakage. This vulnerability occurs when absolute URLs are used in…
gbhackers.comOriginal report -
Microsoft Patch Tuesday March 2025 – 6 Actively Exploited Zero-Days & 57 Vulnerabilities Are Fixed
Microsoft has rolled out its March 2025 Patch Tuesday update, addressing a total of 57 vulnerabilities across its software ecosystem, including 6 actively exploited Zero-day vulnerabilities. This release includes fixes for: Issued on the second Tuesday of…
gbhackers.comOriginal report -
Android devices track you before you even sign in
Google is spying on Android users, starting from even before they have logged in to their Google account. That’s what researchers from Dublin’s Trinity College found after they conducted a measurement study to investigate the cookies, identifiers and other…
MalwarebytesOriginal report -
Apache Camel Vulnerability (CVE-2025-27636) Exposes Applications to RCE, PoC Releases
A recently patched vulnerability in the popular Apache Camel Java library is under scrutiny by security researchers, with
SecurityOnlineOriginal report -
Pentesters: Is AI Coming for Your Role?
We’ve been hearing the same story for years: AI is coming for your job. In fact, in 2017, McKinsey printed a report, Jobs Lost, Jobs Gained: Workforce Transitions in a Time of Automation, predicting that by 2030, 375 million workers would need to find new…
The Hacker NewsOriginal report -
PHP XXE Injection Vulnerability Allows Attackers to Access Config Files & Private Keys
A newly uncovered XML External Entity (XXE) injection vulnerability in PHP has demonstrated how attackers can bypass multiple security mechanisms to access sensitive configuration files and private keys. The vulnerability, detailed by web application…
gbhackers.comOriginal report -
Hackers Exploit Advanced MFA Bypass Techniques to Compromise User Accounts
In recent years, phishing has remained the most prevalent form of cyberattack, with approximately 1.2% of global email traffic being phishing attempts, amounting to about 3.4 billion emails daily. Despite a low success rate, with only 3% of employees…
gbhackers.comOriginal report -
URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited Zero-Days
Microsoft on Tuesday released security updates to address 57 security vulnerabilities in its software, including a whopping six zero-days that it said have been actively exploited in the wild. Of the 56 flaws, six are rated Critical, 50 are rated Important,…
The Hacker NewsOriginal report -
New Ballista Botnet spreads using TP-Link flaw. Is it an Italian job?
The Ballista botnet is exploiting an unpatched TP-Link vulnerability, targeting over 6,000 Archer routers, Cato CTRL researchers warn. Cato CTRL researchers observed a new botnet, called Ballista botnet, which is exploiting a remote code execution (RCE)…
Security AffairsOriginal report -
Over 400 IPs Actively Exploiting Multiple SSRF Vulnerabilities in the Wild
A recent surge in Server-Side Request Forgery (SSRF) exploitation has been detected by GreyNoise, highlighting the ongoing threat posed by these vulnerabilities. GreyNoise observed a coordinated increase in SSRF attacks, with at least 400 unique IPs actively…
gbhackers.comOriginal report -
ICS Patch Tuesday: Advisories Published by CISA, Schneider Electric, Siemens
Industrial giants Siemens and Schneider Electric have released March 2025 Patch Tuesday ICS security advisories.
SecurityWeekOriginal report -
Chinese Hackers Deploy New ‘Squidoor’ Malware to Target Global Organizations
A recent cybersecurity threat has emerged in the form of a sophisticated backdoor malware named Squidoor, attributed to a suspected Chinese threat actor. This malware has been targeting various sectors globally, including governments, defense,…
gbhackers.comOriginal report -
Enhanced XCSSET Malware Targets macOS Users with Advanced Obfuscation
Microsoft Threat Intelligence has recently uncovered a new variant of the XCSSET malware, a sophisticated modular macOS malware known for infecting Xcode projects. This latest iteration features enhanced obfuscation methods, updated persistence mechanisms,…
gbhackers.comOriginal report -
NVIDIA Addresses Security Vulnerabilities in NVIDIA Riva with Software Update
NVIDIA has released a software update for NVIDIA Riva to address potential security vulnerabilities. The security update addresses
SecurityOnlineOriginal report -
Incident response analyst report 2024
Kaspersky provides rapid and fully informed incident response services to organizations, ensuring impact analysis and effective remediation. Our annual report shares anonymized data about the investigations carried out by the Kaspersky Global Emergency…
securelist.comOriginal report -
Jaguar Land Rover Allegedly Hit by Cyberattack, Hacker Claims
A threat actor known as “Rey” has come forward on a prominent dark web forum, claiming responsibility for a significant cyberattack on Jaguar Land Rover. The British multinational automotive company, renowned for its luxury and off-road vehicles, is said to…
gbhackers.comOriginal report -
CISA Warns of Windows NTFS Vulnerability Exploited for Data Theft
The Cybersecurity and Infrastructure Security Agency (CISA) highlighted a critical vulnerability in Microsoft Windows’ New Technology File System (NTFS). The vulnerability, designated as CVE-2025-24984, pertains to an information disclosure issue that could…
gbhackers.comOriginal report -
Zoom Client Security Flaws Could Lead to Data Breaches
Recent security bulletins from Zoom have highlighted several high-severity vulnerabilities in their client software, raising concerns about potential data breaches for users. The latest security updates, issued on March 11, 2025, address multiple critical…
gbhackers.comOriginal report -
CISA Alerts on Active Exploitation of Microsoft Windows MMC Vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) has warned of the active exploitation of a significant vulnerability in Microsoft Windows affecting the Microsoft Management Console (MMC). This security threat underscores the ongoing challenges…
gbhackers.comOriginal report -
Apple Releases Patch for WebKit Zero-Day Vulnerability Exploited in Targeted Attacks
Apple on Tuesday released a security update to address a zero-day flaw that it said has been exploited in "extremely sophisticated" attacks. The vulnerability has been assigned the CVE identifier CVE-2025-24201 and is rooted in the WebKit web browser engine…
The Hacker NewsOriginal report -
Are Threat Groups Belsen and ZeroSevenGroup Related?
Kela admits that its evidence for a connection between Belsen and ZeroSevenGroup is largely circumstantial, primarily based on styles.
SecurityWeekOriginal report -
CVE-2025-27363: Font Library FreeType Flaw Exploited in the Wild, Millions at Risk
A critical vulnerability in the widely used FreeType font rendering library has been revealed, potentially putting millions of
SecurityOnlineOriginal report -
Zoom Addresses Multi High-Severity Vulnerabilities in Workplace Apps and SDKs
Zoom Communications, Inc. has recently released security advisories addressing multiple vulnerabilities affecting various Zoom Workplace Apps and Zoom
SecurityOnlineOriginal report -
Critical Flaw Exposes 100,000+ WooCommerce Sites: Unauthenticated File Inclusion Threatens Total Takeover
A severe vulnerability has been discovered in the popular WordPress plugin “HUSKY – WooCommerce Products Filter Professional,” formerly
SecurityOnlineOriginal report -
Zyxel Patches Multi Vulnerabilities in DSL/Ethernet CPE, Fiber ONT, and WiFi Extender Devices
Zyxel Networks, a global leader in network technology solutions, has recently released security patches to address post-authentication command
SecurityOnlineOriginal report -
DuckDuckGo Unleashes Duck.ai: Free and Private AI-Powered Chat for Everyone
Following the earlier release of DuckAssist, a digital assistant designed to help users quickly grasp webpage summaries or
SecurityOnlineOriginal report -
From Desktop to Mobile: Thunderbird Expands its Reach with Upcoming iOS App
The open-source email client Thunderbird, developed under the Mozilla Foundation, has yet to support iOS. However, this is
SecurityOnlineOriginal report -
Microsoft Patch Tuesday (March 2025) Addresses 67 Vulnerabilities, Including Seven Zero-Day Flaws
Microsoft’s Patch Tuesday for March 2025 has rolled out critical security updates addressing 67 vulnerabilities, including six classified
SecurityOnlineOriginal report -
SideWinder APT Group: Maritime & Nuclear Targets, Evolved Malware
The SideWinder Advanced Persistent Threat (APT) group has expanded its cyber-espionage operations, targeting the maritime and nuclear sectors
SecurityOnlineOriginal report -
$405 Million Forfeited: Texas Pharmacist’s Fraudulent Compound Cream Scheme Exposes Vulnerabilities in Healthcare Systems
A Texas pharmacist, Dehshid “David” Nourian, 62, of Plano, has been sentenced to 17 years and six months
SecurityOnlineOriginal report