News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 66 so far |
Fri 21 Mar 2025· 66 articles
-
Critical Veeam Vulnerability (CVE-2025-23120) Enables Remote Code Execution by Domain Users
Critical Veeam Vulnerability (CVE-2025-23120) Enables Remote Code Execution by Domain Users A newly discovered vulnerability in Veeam Backup & Replication, tracked as CVE-2025-23120, has emerged as a critical threat for enterprise environments. With a…
SOCRadarOriginal report -
Former NFL, Michigan Assistant Coach Matt Weiss Charged With Hacking for Athletes’ Intimate Photos
Former NFL and University of Michigan assistant football coach Matt Weiss hacked into the computer accounts of thousands of college athletes seeking intimate photos and videos.
SecurityWeekOriginal report -
Kaspersky Links Head Mare to Twelve, Targeting Russian Entities via Shared C2 Servers
Two known threat activity clusters codenamed Head Mare and Twelve have likely joined forces to target Russian entities, new findings from Kaspersky reveal. "Head Mare relied heavily on tools previously associated with Twelve. Additionally, Head Mare attacks…
The Hacker NewsOriginal report -
Impact, Root Cause of GitHub Actions Supply Chain Hack Revealed
More details have come to light on the recent supply chain attack targeting GitHub Actions, including its root cause.
SecurityWeekOriginal report -
Threat landscape for industrial automation systems in Q4 2024
Statistics across all threats In Q4 2024, the percentage of ICS computers on which malicious objects were blocked decreased by 0.1 pp from the previous quarter to 21.9%. Percentage of ICS computers on which malicious objects were blocked, by quarter,…
securelist.comOriginal report -
VanHelsing Ransomware Targets Windows Systems with New Evasion Tactics and File Extension
The cybersecurity landscape has been recently disrupted by the emergence of the VanHelsing ransomware, a sophisticated strain identified by the CYFIRMA Research and Advisory Team. This ransomware targets Windows systems, employing advanced encryption…
gbhackers.comOriginal report -
I-SOON’s ‘Chinese Fishmonger’ APT Targets Government Entities and NGOs
In a recent development, the U.S. Department of Justice unsealed an indictment against employees of the Chinese contractor I-SOON, revealing their involvement in multiple global espionage operations. These operations are attributed to the FishMonger APT…
gbhackers.comOriginal report -
Cisco Smart Licensing Utility flaws actively exploited in the wild
Experts warn of the active exploitation of two recently patched security vulnerabilities affecting Cisco Smart Licensing Utility. Cisco disclosed two vulnerabilities in its Smart Licensing Utility: CVE-2024-20439, a static credential backdoor, and…
Security AffairsOriginal report -
Cyberhaven Supply Chain Attack: Exploiting Browser Extensions
In late 2024, Darktrace detected unusual activity linked to Cyberhaven's Chrome browser extension. Read more about Darktrace’s investigation here.
darktrace.comOriginal report -
Apple Sued in Federal Court for Delaying Apple Intelligence Features
Tech giant Apple has found itself at the center of a new legal battle after a class-action lawsuit was filed in the U.S. District Court in San Jose. The suit accuses Apple of false advertising and unfair competition related to its much-anticipated Apple…
gbhackers.comOriginal report -
Caido v0.47.0 Released – A Web Pentesting Tool Alternative to Burp Suite
Caido has unveiled version 0.47.0 of its web pentesting tool, cementing its position as a robust alternative to Burp Suite. This release is marked by several key enhancements that improve user experience and expand the tool’s capabilities in web application…
gbhackers.comOriginal report -
Infosys to Pay $17.5M in Settlement for 2023 Data Breach
Infosys, a leading IT services company, has announced that it has reached an agreement in principle to settle a series of class action lawsuits related to a data breach incident involving its subsidiary, Infosys McCamish Systems LLC. The proposed settlement…
gbhackers.comOriginal report -
Tomcat RCE Vulnerability Exploited in the Wild – Mitigation Steps Outlined
A recent vulnerability in Apache Tomcat, identified as CVE-2025-24813, has sparked concerns among cybersecurity professionals due to its potential for exploitation in unauthenticated remote code execution (RCE), severe information leakage, and malicious…
gbhackers.comOriginal report -
Cloudflare Shifts to HTTPS-Only for APIs, Closing All HTTP Ports
Cloudflare has announced that it will shift its APIs to HTTPS-only connections, effectively closing all HTTP ports. This strategic decision aims to protect sensitive data from being intercepted by unauthorized parties during transmission. The change marks a…
gbhackers.comOriginal report -
CISA Issues Five Advisories on Industrial Control System Vulnerabilities and Exploits
The Cybersecurity and Infrastructure Security Agency (CISA) released five critical advisories related to vulnerabilities and exploits affecting Industrial Control Systems (ICS). These advisories highlight significant security issues across various industrial…
gbhackers.comOriginal report -
Ongoing Cyber Attacks Exploit Critical Vulnerabilities in Cisco Smart Licensing Utility
Two now-patched security flaws impacting Cisco Smart Licensing Utility are seeing active exploitation attempts, according to SANS Internet Storm Center. The two critical-rated vulnerabilities in question are listed below - CVE-2024-20439 (CVSS score: 9.8) -…
The Hacker NewsOriginal report -
Cyberhaven Supply Chain Attack: Exploiting Browser Extensions
In late 2024, Darktrace detected unusual activity linked to Cyberhaven's Chrome browser extension. Read more about Darktrace’s investigation here.
darktrace.comOriginal report -
CVE-2024-10442: Synology Replication Service Vulnerability Scores Maximum CVSS Rating
Synology has released updated security advisories detailing a critical vulnerability in its Replication Service. The vulnerability allows remote
SecurityOnlineOriginal report -
Spring Security Updates Address Authorization Bypass and Password Length Vulnerabilities
Spring, a widely used framework for Java-based applications, has disclosed two significant security vulnerabilities that could lead to
SecurityOnlineOriginal report -
Web Shell to Ransomware: New VMware Attack Vector Exposed by Sygnia
Cybersecurity researchers at Sygnia have uncovered a new attack method that exploits recent VMware vulnerabilities (CVE-2025-22224, CVE-2025-22225, and
SecurityOnlineOriginal report -
Critical WordPress Plugin Vulnerability Exposes Over 40,000 Websites to Code Execution Attacks
A critical security vulnerability has been discovered in the popular Age Gate plugin for WordPress, potentially exposing over
SecurityOnlineOriginal report -
New “Arcane Stealer” Malware Targets Gamers Through YouTube Cheats
A new and sophisticated stealer malware named “Arcane” is targeting gamers byDistribution through YouTube videos promoting game cheats,
SecurityOnlineOriginal report -
Rust Beacon Deploys Cobalt Strike in South Korean Cyber Intrusion Campaign
Hunt researchers have uncovered a cyber intrusion campaign targeting South Korean organizations, utilizing a sophisticated combination of tools
SecurityOnlineOriginal report -
IBM AIX Security Breach: CVE-2024-56346 (CVSS 10) & CVE-2024-56347 Explained
IBM has released a security bulletin detailing critical vulnerabilities in AIX that could allow remote attackers to execute
SecurityOnlineOriginal report -
VenomRAT Malware Delivered via Virtual Hard Disk Images
Threat actors are constantly evolving their methods to slip past security measures and deliver malware. A recent report
SecurityOnlineOriginal report -
CVE-2024-23943 (CVSS 9.1): Critical Flaw Found in Industrial Communication Devices
A pair of security advisories released by CERT@VDE, in coordination with MB connect line and Helmholz, have revealed
SecurityOnlineOriginal report