News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 48 so far |
Wed 19 Mar 2025· 85 articles
-
Attackers Hide Malicious Word Files Inside PDFs to Evade Detection
A newly identified cybersecurity threat involves attackers embedding malicious Word files within PDFs to deceive detection systems. This technique, confirmed by JPCERT/CC, exploits the fact that files created using MalDoc in PDF can be opened in Microsoft…
gbhackers.comOriginal report -
Global Technology Provider Transforms Email Threat Detection with Darktrace
To strengthen its distributed and complex operations, this global technology leader implemented Darktrace / EMAIL to monitor, detect, and mitigate potential email threats. Read the blog to discover their results.
darktrace.comOriginal report -
Windows Shortcut Zero-Day (ZDI-CAN-25373) Exploited by State-Backed Threat Actors Since 2017: Overview of Key Details
Windows Shortcut Zero-Day (ZDI-CAN-25373) Exploited by State-Backed Threat Actors Since 2017: Overview of Key Details A sophisticated zero-day vulnerability, ZDI-CAN-25373, has been secretly exploited for years by multiple state-backed hacking groups,…
SOCRadarOriginal report -
SpyCloud’s 2025 Identity Exposure Report Reveals the Scale and Hidden Risks of Digital Identity Threats
Austin, TX, United States, 19th March 2025, CyberNewsWire
SecurityOnlineOriginal report -
Scareware Combined With Phishing in Attacks Targeting macOS Users
A long-running campaign phishing for credentials through scareware recently switched to targeting macOS users.
SecurityWeekOriginal report -
Sperm bank breach deposits data into hands of cybercriminals
Sperm donor giant California Cryobank has announced it has suffered a data breach that exposed customers’ personal information. California Cryobank (CCB) is a sperm donation and cryopreservation firm and one of the US’ top sperm banks. As such, it services…
MalwarebytesOriginal report -
Watch This Webinar to Learn How to Eliminate Identity-Based Attacks—Before They Happen
In today’s digital world, security breaches are all too common. Despite the many security tools and training programs available, identity-based attacks—like phishing, adversary-in-the-middle, and MFA bypass—remain a major challenge. Instead of accepting…
The Hacker NewsOriginal report -
US Sperm Donor Giant California Cryobank Hit by Data Breach
California Cryobank, a leading sperm donation facility based in Los Angeles, has been impacted by a significant data breach, potentially affecting both its clients and donors. The breach was reported, involving personal identifiers which could include names…
gbhackers.comOriginal report -
Cloudflare Introduces Cloudforce One to Detect and Analyze IoCs, IPs, and Domains
Cloudflare, a leading web infrastructure and security company, has launched the Cloudforce One threat events platform, designed to revolutionize how security professionals detect and analyze indicators of compromise (IOCs), including IP addresses, domains,…
gbhackers.comOriginal report -
New Jailbreak Technique Bypasses DeepSeek, Copilot, and ChatGPT to Generate Chrome Malware
A threat intelligence researcher from Cato CTRL, part of Cato Networks, has successfully exploited a vulnerability in three leading generative AI (GenAI) models: OpenAI’s ChatGPT, Microsoft’s Copilot, and DeepSeek. The researcher developed a novel Large…
gbhackers.comOriginal report -
Extortion Reboot: Ransomware Crew Threatens Leak to Snowden
There are those who might say that any media coverage is valuable or desirable, but when a ransomware group winds up drawing snickers, maybe not. Kristina Beek reports: A threat group known as Ox Thief recently tried to entice its victim to pay to protect…
DataBreachesOriginal report -
ClearFake Infects 9,300 Sites, Uses Fake reCAPTCHA and Turnstile to Spread Info-Stealers
The threat actors behind the ClearFake campaign are using fake reCAPTCHA or Cloudflare Turnstile verifications as lures to trick users into downloading malware such as Lumma Stealer and Vidar Stealer. ClearFake, first highlighted in July 2023, is the name…
The Hacker NewsOriginal report -
Hackers Exploit Azure App Proxy Pre-Authentication to Access Private Networks
Hackers are exploiting a vulnerability in Microsoft’s Azure App Proxy by manipulating the pre-authentication settings to gain unauthorized access to private networks. The Azure App Proxy is designed to securely publish on-premises applications to the public…
gbhackers.comOriginal report -
Rules File Backdoor: AI Code Editors exploited for silent supply chain attacks
The Rules File Backdoor attack targets AI code editors like GitHub Copilot and Cursor, making them inject malicious code via a supply chain vulnerability. Pillar Security researchers uncovered a dangerous new supply chain attack vector called ‘Rules File…
Security AffairsOriginal report -
5 Identity Threat Detection & Response Must-Haves for Super SaaS Security
Identity-based attacks are on the rise. Attackers are targeting identities with compromised credentials, hijacked authentication methods, and misused privileges. While many threat detection solutions focus on cloud, endpoint, and network threats, they…
The Hacker NewsOriginal report -
Hackers Exploit Cobalt Strike, SQLMap, and Other Tools to Target Web Applications
A recent cybersecurity incident has highlighted the sophisticated methods used by hackers to target web applications, particularly in South Korea. The attackers leveraged a combination of tools, including Cobalt Strike, SQLMap, dirsearch, and…
gbhackers.comOriginal report -
Arcane stealer: We want all your data
At the end of 2024, we discovered a new stealer distributed via YouTube videos promoting game cheats. What’s intriguing about this malware is how much it collects. It grabs account information from VPN and gaming clients, and all kinds of network utilities…
securelist.comOriginal report -
Microsoft Warns of New StilachiRAT Malware
Microsoft has shared details on StilachiRAT, an evasive and persistent piece of malware that facilitates sensitive data theft.
SecurityWeekOriginal report -
Severe AMI BMC Vulnerability Enables Remote Authentication Bypass by Attackers
A critical vulnerability has been discovered in AMI’s MegaRAC software, which is used in Baseboard Management Controllers (BMCs) across various server hardware. This vulnerability, identified as CVE-2024-54085, allows attackers to bypass authentication…
gbhackers.comOriginal report -
CVE-2024-11131 (CVSS 9.8): Critical Vulnerability Found in Synology Camera Firmware
Synology has updated its security advisories to disclose details of a critical vulnerability affecting its camera firmware. The
SecurityOnlineOriginal report -
CVE-2025-0755: MongoDB C Driver Vulnerability Could Lead to Buffer Overflow
A newly disclosed vulnerability in the MongoDB C driver library could allow for buffer overflow attacks, potentially leading
SecurityOnlineOriginal report -
CERT-UA Alert: DarkCrystal RAT Deployed via Signal in Ukraine
The Computer Emergency Response Team of Ukraine (CERT-UA) has issued a security alert regarding a series of targeted
SecurityOnlineOriginal report -
CISA Warns of Supply-Chain Attack Exploiting GitHub Action Vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm over a critical supply-chain attack affecting a widely used third-party GitHub Action: tj-actions/changed-files. This action, exploited under CVE-2025-30066, is designed to…
gbhackers.comOriginal report -
MirrorFace Hackers Modify AsyncRAT Execution for Stealthy Deployment in Windows Sandbox
In a significant development, the China-aligned advanced persistent threat (APT) group known as MirrorFace has been observed employing sophisticated tactics to enhance the stealthiness of its attacks. Recently, MirrorFace modified the execution of AsyncRAT,…
gbhackers.comOriginal report -
11 State-Sponsored Threat Actors Exploit 8-Year-Old Windows Shortcut Flaw
Cybersecurity researchers have discovered that multiple state-sponsored threat actors have been exploiting an eight-year-old vulnerability in Windows shortcut files. This security flaw, identified as ZDI-CAN-25373, allows malicious actors to embed hidden…
gbhackers.comOriginal report -
Advanced Cyber Attack Exploits Booking Websites to Deploy LummaStealer Malware
A sophisticated cyberattack has been uncovered, targeting booking websites to spread the LummaStealer malware. This campaign leverages fake CAPTCHA prompts and social engineering techniques to deceive users into executing malicious commands on their systems.…
gbhackers.comOriginal report -
Critical Synology Vulnerability Allows Remote Attackers to Execute Arbitrary Code
A critical vulnerability affecting Synology’s DiskStation Manager (DSM) has been disclosed, allowing remote attackers to execute arbitrary code on vulnerable systems. This severe issue, identified as CVE-2024-10441, has been reported in multiple DSM…
gbhackers.comOriginal report -
Critical mySCADA myPRO Flaws Could Let Attackers Take Over Industrial Control Systems
Cybersecurity researchers have disclosed details of two critical flaws impacting mySCADA myPRO, a Supervisory Control and Data Acquisition (SCADA) system used in operational technology (OT) environments, that could allow malicious actors to take control of…
The Hacker NewsOriginal report -
U.S. CISA adds Fortinet FortiOS/FortiProxy and GitHub Action flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet FortiOS/FortiProxy and GitHub Action flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulne...
Security AffairsOriginal report -
Windows File Explorer Vulnerability Enables Network Spoofing Attacks: PoC Released
A critical vulnerability in Windows File Explorer has been discovered, allowing attackers to capture NTLM hashes and potentially exploit them for network spoofing attacks. The vulnerability, identified as CVE-2025-24071, involves the automatic processing of…
gbhackers.comOriginal report -
CISA Warns of Active Exploitation in GitHub Action Supply Chain Compromise
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a vulnerability linked to the supply chain compromise of the GitHub Action, tj-actions/changed-files, to its Known Exploited Vulnerabilities (KEV) catalog. The high-severity…
The Hacker NewsOriginal report -
CISA Issues Security Warning on Fortinet FortiOS Authentication Bypass Exploit
The Cybersecurity and Infrastructure Security Agency (CISA) issued a critical security warning regarding a severe vulnerability in Fortinet’s FortiOS and FortiProxy systems. Specifically, CVE-2025-24472, an authentication bypass vulnerability, poses a…
gbhackers.comOriginal report -
CVE-2024-10441 (CVSS 9.8): Synology Patches Critical Code Execution Flaw in Multiple Products
Synology has updated their security advisories to disclosure to a critical security vulnerability affecting several of its popular
SecurityOnlineOriginal report -
End of Windows 10: Microsoft Warns Users, Update or Pay
If you are still using Windows 10 and have logged into your Microsoft account, you might have already
SecurityOnlineOriginal report -
Hidden Threat: Zero-Day Windows Shortcut Exploited by Global APT Networks
A recently uncovered vulnerability, ZDI-CAN-25373, identified by the Trend Zero Day Initiative (ZDI), is at the center of
SecurityOnlineOriginal report -
Million-Download Node.js Library xml-crypto Hit by Critical Security Flaws (CVE-2025-29774, CVE-2025-29775)
Two critical vulnerabilities have been identified in the xml-crypto library, a popular Node.js library for XML digital signature
SecurityOnlineOriginal report -
Cybersecurity Alert: CISA Adds Fortinet and GitHub Action Vulnerabilities to Exploited List
The Cybersecurity and Infrastructure Security Agency (CISA) has recently added two significant security vulnerabilities to its Known Exploited
SecurityOnlineOriginal report -
FIN7’s New Stealth Weapon: AnubisBackdoor Emerges in the Wild
Threat intelligence company PRODAFT uncovers a new Python-based backdoor named AnubisBackdoor, wielded by the infamous FIN7 group, also
SecurityOnlineOriginal report -
CVE-2025-2000 (CVSS 9.8): Qiskit SDK Vulnerability Allows Arbitrary Code Execution
A security vulnerability has been discovered in the Qiskit Software Development Kit (SDK). The issue, tracked as CVE-2025-2000
SecurityOnlineOriginal report -
Unusual Malware Samples Discovered, Including C++/CLI IIS Backdoor
A recent report by Unit 42 highlights the discovery of several new malware samples with unique characteristics. These
SecurityOnlineOriginal report