News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 27 so far |
Mon 17 Mar 2025· 75 articles
-
1 in 10 people do nothing to stay secure and private on vacation
This year, Spring Break vacationers are packing more than their flip-flops, bucket hats, and sunglasses—they’re also packing a few cybersecurity anxieties for the trip. According to new research from Malwarebytes, 52% of people said they “worry about being…
MalwarebytesOriginal report -
Cybercriminals Exploit CSS to Evade Spam Filters and Track Email Users' Actions
Malicious actors are exploiting Cascading Style Sheets (CSS), which are used to style and format the layout of web pages, to bypass spam filters and track users' actions. That's according to new findings from Cisco Talos, which said such malicious activities…
The Hacker NewsOriginal report -
ManageEngine Analytics Vulnerability Enables User Account Takeover
A significant security vulnerability has been identified in ManageEngine’s Analytics Plus on-premise solution, affecting all Windows builds below version 6130. This high-severity vulnerability, designated as CVE-2025-1724, allows unauthorized access to…
gbhackers.comOriginal report -
⚡ THN Weekly Recap: Router Hacks, PyPI Attacks, New Ransomware Decryptor, and More
From sophisticated nation-state campaigns to stealthy malware lurking in unexpected places, this week’s cybersecurity landscape is a reminder that attackers are always evolving. Advanced threat groups are exploiting outdated hardware, abusing legitimate…
The Hacker NewsOriginal report -
What is WikiLeaksV2 doing with a ransomware gang? Spoiler alert: It’s not extortion.
As previously reported on this site, in September 2023, Cardiovascular Consultants Ltd. (CVC) in Arizona experienced a ransomware attack. In October 2023, the Qilin ransomware group added CVC to its leak site, claiming to have exfiltrated 520,961 files and…
DataBreachesOriginal report -
Microsoft wouldn’t look at a bug report without a video. Researcher maliciously complied
Connor Jones reports: A vulnerability analyst and prominent member of the infosec industry has blasted Microsoft for refusing to look at a bug report unless he submitted a video alongside a written explanation. Senior principal vulnerability analyst Will…
DataBreachesOriginal report -
DOGE Staffer Broke Treasury Rules Transmitting Personal Data
Gregory Korte and Erik Larson report: A staffer for the Department of Government Efficiency violated Treasury Department policies when he sent a spreadsheet containing personal information to two other people in the Trump administration, a federal official…
DataBreachesOriginal report -
Nvidia Riva Vulnerabilities Allow Unauthorized Use of AI Services
Vulnerabilities in Nvidia Riva could allow hackers to abuse speech and translation AI services that are typically expensive.
SecurityWeekOriginal report -
Jaguar Land Rover Hit by HELLCAT Ransomware Using Stolen Jira Credentials
The HELLCAT ransomware group has claimed responsibility for a significant data breach at Jaguar Land Rover (JLR), exposing vast amounts of sensitive data including proprietary documents, source codes, employee information, and partner details. This attack…
gbhackers.comOriginal report -
SANS Institute Warns of Novel Cloud-Native Ransomware Attacks
The latest Palo Alto Networks Unit 42 Cloud Threat Report found that sensitive data is found in 66% of cloud storage buckets. This data is vulnerable to ransomware attacks. The SANS Institute recently reported that these attacks can be performed by abusing…
The Hacker NewsOriginal report -
AUTOSUR Breach, FiveM Database Leak, Disney+ Account Checker, Crypto Leads & Forex Scams Exposed
AUTOSUR Breach, FiveM Database Leak, Disney+ Account Checker, Crypto Leads & Forex Scams Exposed Cybercriminals continue to target industries worldwide, with SOCRadar’s Dark Web Team uncovering a range of threats this week. A hacker claims to have leaked…
SOCRadarOriginal report -
GitHub Action Compromise Puts CI/CD Secrets at Risk in Over 23,000 Repositories
Cybersecurity researchers are calling attention to an incident in which the popular GitHub Action tj-actions/changed-files was compromised to leak secrets from repositories using the continuous integration and continuous delivery (CI/CD) workflow. The…
The Hacker NewsOriginal report -
Popular GitHub Action Targeted in Supply Chain Attack
The tj-actions/changed-files GitHub Action, which is used in 23,000 repositories, has been targeted in a supply chain attack.
SecurityWeekOriginal report -
Researcher releases free GPU-Based decryptor for Linux Akira ransomware
A researcher released a free decryptor for Linux Akira ransomware, using GPU power to recover keys through brute force. Security researcher Yohanes Nugroho created a free decryptor for Linux Akira ransomware, using GPUs to brute force the decryption keys.…
Security AffairsOriginal report -
Hackers Exploit Tomcat Vulnerability to Hijack Apache Servers
A recent and significant cybersecurity threat has emerged involving a critical vulnerability in Apache Tomcat, identified as CVE-2025-24813. This vulnerability allows for remote code execution, potentially allowing hackers to hijack servers running Apache…
gbhackers.comOriginal report -
European Cyber Report 2025: 137% More DDoS Attacks Than Last Year – What Companies Need to Know
Cyberattacks are no longer an abstract threat – they dominate risk planning for companies worldwide. The latest Link11 European Cyber Report shows an alarming trend: the number of DDoS attacks has more than doubled, and they are shorter, more targeted, and…
gbhackers.comOriginal report -
Apple Introduces RCS End-to-End Encryption for iPhone Messages
Apple has announced the integration of end-to-end encryption (E2EE) for Rich Communication Services (RCS) on iPhones. This development follows the introduction of RCS in iOS 18, marking a new era in mobile messaging with enhanced privacy and security…
gbhackers.comOriginal report -
A week in security (March 10 – March 16)
Last week on Malwarebytes Labs: Research on iOS apps shows widespread exposure of secrets Don’t let your kids on Roblox if you’re not comfortable, says Roblox CEO Update your iPhone now: Apple patches vulnerability used in “extremely sophisticated attacks”...
MalwarebytesOriginal report -
Adobe Acrobat Vulnerabilities Enable Remote Code Execution
A recent disclosure by Cisco Talos’ Vulnerability Discovery & Research team highlighted several vulnerability issues in Adobe Acrobat. All of these vulnerabilities have been addressed by their respective vendors, aligning with Cisco’s third-party…
gbhackers.comOriginal report -
Hackers Use CSS Tricks to Bypass Spam Filters and Monitor Users
Cybersecurity experts have uncovered how hackers use Cascading Style Sheets (CSS) to deceive spam filters and monitor user behavior. This sophisticated technique allows malicious actors to remain under the radar while gaining insights into user preferences…
gbhackers.comOriginal report -
Hackers Target TP-Link Vulnerability to Gain Full System Control
Hackers exploit a vulnerability in TP-Link routers, specifically the TL-WR845N model, to gain full control over the system. This exploit allows unauthorized users to access the root shell credentials, giving them unrestricted access to manipulate and control…
gbhackers.comOriginal report -
Tomcat Flaw CVE-2025-24813 Exploited in the Wild, PoC Released
A critical remote code execution (RCE) vulnerability, CVE-2025-24813, is now being actively exploited in the wild, allowing attackers
SecurityOnlineOriginal report -
Laravel Framework Vulnerable to Reflected XSS Attacks (CVE-2024-13918 & CVE-2024-13919)
Security researchers Fabian Funder and Philipp Adelsberger at SBA Research have discovered two reflected cross-site scripting (XSS) vulnerabilities
SecurityOnlineOriginal report -
CVE-2024-57040 (CVSS 9.8): TP-Link TL-WR845N Router Vulnerability Grants Hackers Easy Access
Security researchers from the Network Security & Cryptography (NSC) Lab have identified a severe security vulnerability (CVE-2024-57040) affecting
SecurityOnlineOriginal report -
Cryptominers Exploit Exposed Jupyter Notebooks in Novel Campaign
Cado Security Labs has uncovered a new campaign exploiting misconfigured Jupyter Notebooks to deliver cryptominers to both Windows
SecurityOnlineOriginal report -
CVE-2025-22954 (CVSS 10): Koha Library Systems at High Risk, Patch Immediately
A critical-severity security flaw has been discovered in Koha, the widely used open-source library management system. The vulnerability,
SecurityOnlineOriginal report -
CVE-2025-27407 (CVSS 9.1): Critical GraphQL-Ruby Flaw Exposes Millions to RCE
A severe vulnerability, tracked as CVE-2025-27407, has been discovered in the popular graphql-ruby gem, putting millions of applications at
SecurityOnlineOriginal report -
CVE-2025-1960 (CVSS 9.8): Schneider Electric Addresses Critical Flaw in WebHMI Component
Schneider Electric has released a security notification detailing a critical vulnerability in the WebHMI component used in its
SecurityOnlineOriginal report -
AWS SNS Abused for Data Exfiltration and Phishing, Elastic Report Reveals
A new report from Elastic details how threat actors are abusing Amazon Web Services (AWS) Simple Notification Service
SecurityOnlineOriginal report -
Xbox AI Boost: Copilot for Gaming, Play Anywhere Hits 1,000 Game
As Microsoft expands the deployment of Copilot AI services, the company has finally introduced Copilot technology to the
SecurityOnlineOriginal report -
Windows 11: AI Summaries in Notepad, Snipping Tool Enhanced
Microsoft continues to refine the Notepad application in the Windows 11 Insider Preview, expanding its integration with Microsoft
SecurityOnlineOriginal report -
Microsoft Edge for Android: Extension Support Finally Arrives
Early in 2024, Microsoft began testing extension support for Microsoft Edge on Android. During the initial testing phase,
SecurityOnlineOriginal report -
Google Antitrust: Mozilla Warns of Browser Choice Collapse
The U.S. Department of Justice’s (DOJ) antitrust lawsuit against Google is ongoing, with proposed remedies that include forcing
SecurityOnlineOriginal report -
Android Revolution: Gemini Replaces Assistant on All Devices
When Google launched the Gemini Live service powered by Gemini Advanced AI with last year’s Pixel 9 series,
SecurityOnlineOriginal report -
OctoV2 Android Banking Trojan Masquerades as Deepseek AI in Phishing Attack
A new report from K7 Labs has uncovered a sophisticated Android banking Trojan campaign that uses the guise
SecurityOnlineOriginal report