CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 10–13 on weekend days.

  • On CISA KEV CVEs
  • Other coverage
Show as table
Articles published per day
DayArticles published
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Sun 25 Oct13
Today, Mon 26 Oct67 so far
Exploited only
14 articles

Sun 23 Mar 2025· 14 articles

  1. SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 38

    Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Decrypting Encrypted files from Akira Ransomware (Linux/ESXI variant 2024) using a bunch of GPUs Jaguar Land Rover Breached...

    Security AffairsOriginal report
  2. Security Affairs newsletter Round 516 by Pierluigi Paganini – INTERNATIONAL EDITION

    A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. U.S. Treasury…

    Security AffairsOriginal report
  3. What Google Chrome knows about you, with Carey Parker (Lock and Code S06E06)

    This week on the Lock and Code podcast… Google Chrome is, by far, the most popular web browser in the world. According to several metrics, Chrome accounts for anywhere between 52% and 66% of the current global market share for web browser use. At that higher…

    MalwarebytesOriginal report
  4. UAT-5918 ATP group targets critical Taiwan

    Cisco Talos found UAT-5918, active since 2023, using web shells and open-source tools for persistence, info theft, and credential harvesting. Cisco Talos uncovered UAT-5918, an info-stealing threat actor active since 2023, using web shells and open-source…

    Security AffairsOriginal report
  5. FBI warnings are true—fake file converters do push malware

    The FBI is warning that fake online document converters are being used to steal people's information and, in worst-case scenarios, lead to ransomware attacks. [...]

    BleepingComputerOriginal report
  6. Over 3 million applicants’ data leaked on NYU’s website

    Dharma Niles, Krish Dev and Yezen Saadah report: A hacker took over NYU’s website for at least two hours Saturday morning to expose over 3 million applicants’ names, test scores, majors and zip codes, as well as information related to family members and…

    DataBreachesOriginal report
  7. Trump Administration Begins Shifting Cyberattack Response to States

    Angus Loten and James Rundle report: The Trump administration wants state and local governments to play a bigger role in protecting water utilities, ports and other critical infrastructure from cyberattacks. In an executive order signed Tuesday, President…

    DataBreachesOriginal report
  8. Union County’s computer network breached, personal information accessed

    John Beauge reports: Personal information including Social Security numbers may be at risk as the result of unauthorized access and acquisition of data stored on a Pennsylvania county’s computer network. “We determined that the cyber criminals took certain…

    DataBreachesOriginal report
  9. Attorney General James Secures $975,000 from Auto Insurance Company over Data Breach

    From a March 20 press release from NY Attorney General Letitia James: NEW YORK – New York Attorney General Letitia James today secured $975,000 in penalties from Root, an auto insurance company, for failing to protect the personal information of…

    DataBreachesOriginal report
  10. GitHub Supply Chain Breach: Coinbase Attack Exposes 218 Repositories, Leaks CI/CD Secrets

    The supply chain attack involving the GitHub Action "tj-actions/changed-files" started as a highly-targeted attack against one of Coinbase's open-source projects, before evolving into something more widespread in scope. "The payload was focused on exploiting…

    The Hacker NewsOriginal report
  11. Fake Cloudflare Verification Prompts Deliver LummaStealer Trojan Through Infected WordPress Sites

    A widespread malware campaign is abusing fake Cloudflare verification prompts to trick users into running malicious PowerShell commands

    SecurityOnlineOriginal report
  12. CVE-2025-27888: Apache Druid Flaw Opens Door to SSRF and XSS Risks in Real-Time Analytics Platforms

    Apache has disclosed a critical security vulnerability in Apache Druid, a real-time analytics database widely used for powering

    SecurityOnlineOriginal report
  13. CVE-2025-1758: Critical Buffer Overflow in Kemp LoadMaster Opens Door to Remote Code Execution

    A high-severity vulnerability has been identified in Progress Software’s Kemp LoadMaster, a popular application delivery controller (ADC) and

    SecurityOnlineOriginal report
  14. Operation Zero Offers Millions for Telegram Zero-Click Exploits

    The Russian vulnerability broker, Operation Zero, is a company specializing in the acquisition and sale of security vulnerabilities—whether

    SecurityOnlineOriginal report

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device