News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 71 so far |
Mon 24 Mar 2025· 83 articles
-
VanHelsingRaaS Emerges, Targeting Linux, BSD, ARM, and ESXi Systems
VanHelsingRaaS, a newly launched ransomware-as-a-service (RaaS) program, has quickly gained traction in the cybercrime ecosystem. Introduced on March 7, 2025, this RaaS platform offers affiliates a cross-platform ransomware tool capable of targeting diverse…
gbhackers.comOriginal report -
Medusa Ransomware Uses Malicious Driver to Disable Security Tools
The Medusa ransomware relies on a malicious Windows driver to disable the security tools running on the infected systems.
SecurityWeekOriginal report -
⚡ THN Weekly Recap: GitHub Supply Chain Attack, AI Malware, BYOVD Tactics, and More
A quiet tweak in a popular open-source tool opened the door to a supply chain breach—what started as a targeted attack quickly spiraled, exposing secrets across countless projects. That wasn’t the only stealth move. A new all-in-one malware is silently…
The Hacker NewsOriginal report -
WordPress Plugin Vulnerability Opens Door to SQL Injection Exploits
A critical vulnerability in the popular WordPress plugin GamiPress has been uncovered, leaving users exposed to unauthenticated SQL injection attacks. The issue, assigned the identifier CVE-2024-13496, carries a high CVSS 3.1 score of 7.5, indicating…
gbhackers.comOriginal report -
Attackers can bypass middleware auth checks by exploiting critical Next.js flaw
A critical flaw in the Next.js React framework could be exploited to bypass authorization checks under certain conditions. Maintainers of Next.js React framework addressed a critical vulnerability tracked as CVE-2025-29927 (CVSS score of 9.1) with the…
Security AffairsOriginal report -
Next.js Middleware Vulnerability (CVE-2025-29927): What You Need to Know and How to Respond
Next.js Middleware Vulnerability (CVE-2025-29927): What You Need to Know and How to Respond A critical security flaw has recently shaken the Next.js ecosystem, bringing urgent attention to the framework’s middleware feature. Tracked as CVE-2025-29927, this…
SOCRadarOriginal report -
VSCode Marketplace Removes Two Extensions Deploying Early-Stage Ransomware
Cybersecurity researchers have uncovered two malicious extensions in the Visual Studio Code (VSCode) Marketplace that are designed to deploy ransomware that's under development to its users. The extensions, named "ahban.shiba" and "ahban.cychelloworld," have…
The Hacker NewsOriginal report -
How to Balance Password Security Against User Experience
If given the choice, most users are likely to favor a seamless experience over complex security measures, as they don’t prioritize strong password security. However, balancing security and usability doesn’t have to be a zero-sum game. By implementing the…
The Hacker NewsOriginal report -
Critical Chrome Vulnerability Allows Attackers to Execute Arbitrary Code
Google has recently rolled out a critical security update for its Chrome browser, addressing vulnerabilities that could potentially allow attackers to execute arbitrary code. This update is part of a broader effort to ensure user safety in an increasingly…
gbhackers.comOriginal report -
Arsen Introduces AI-Powered Phishing Tests to Improve Social Engineering Resilience
Paris, France, March 24th, 2025, CyberNewsWire Arsen, a leading cybersecurity company specializing in social engineering defense, today announced the full release of Conversational Phishing, a groundbreaking feature embedded in its phishing simulation…
gbhackers.comOriginal report -
NetSfere Launches Quantum-Resilient Messaging Platform for Enterprise and Government Use
NetSfere Integrates ML-KEM and AES into its text, voice and video messaging platform to meet 2027 NSA Quantum Security mandates.
SecurityWeekOriginal report -
Arsen Introduces AI-Powered Phishing Tests to Improve Social Engineering Resilience
Paris, France, 24th March 2025, CyberNewsWire
SecurityOnlineOriginal report -
Albabat Ransomware Expands Targets, Abuses GitHub
New versions of the Albabat ransomware target Windows, Linux, and macOS, and retrieve configuration files from GitHub.
SecurityWeekOriginal report -
Oracle Sale Claims Found on Hacker Forums, Crypto Wallet Service, and Empik Data Leak
Oracle Sale Claims Found on Hacker Forums, Crypto Wallet Service, and Empik Data Leak This week, SOCRadar’s Dark Web Team uncovered a series of high-risk activities surfacing on hacker forums. Key findings include a newly advertised service for processing…
SOCRadarOriginal report -
North Korea Launches Military Research Facility to Strengthen Cyber Warfare Operations
North Korea has taken a significant step in enhancing its cyber warfare capabilities by establishing a new research center, known as Research Center 227, under the military’s Reconnaissance General Bureau (RGB). This move is part of a broader strategy to…
gbhackers.comOriginal report -
SvcStealer Malware Strikes, Harvesting Sensitive Data from Browsers and Applications
A new strain of malware, known as SvcStealer, has emerged as a significant threat in the cybersecurity landscape. This malware is primarily delivered through spear phishing attacks, where malicious attachments are sent via email to unsuspecting victims. The…
gbhackers.comOriginal report -
Critical Next.js Vulnerability Allows Attackers to Bypass Middleware Authorization Checks
A critical security flaw has been disclosed in the Next.js React framework that could be potentially exploited to bypass authorization checks under certain conditions. The vulnerability, tracked as CVE-2025-29927, carries a CVSS score of 9.1 out of 10.0.…
The Hacker NewsOriginal report -
Encrypted Messaging Apps Promise Privacy. Government Transparency Is Often the Price
Public officials and private citizens are consistently warned about hacking and data leaks, but technologies designed to increase privacy often decrease government transparency.
SecurityWeekOriginal report -
Cloudflare Reveals AI Labyrinth to Counter Automated AI Attacks
Cloudflare has unveiled AI Labyrinth, an innovative platform designed to combat AI-powered bots that relentlessly crawl and scrape data from websites without permission. By employing AI-generated content, AI Labyrinth cleverly slows down and misdirects these…
gbhackers.comOriginal report -
A week in security (March 17 – March 23)
Last week on Malwarebytes Labs: What Google Chrome knows about you, with Carey Parker (Lock and Code S06E06) Personal data revealed in released JFK files Semrush impersonation scam hits Google Ads Targeted spyware and why it’s a concern to us...
MalwarebytesOriginal report -
FBI warns of malicious free online document converters spreading malware
The FBI warns of a significant increase in scams involving free online document converters to infect users with malware. The FBI warns that threat actors use malicious online document converters to steal users’ sensitive information and infect their systems…
Security AffairsOriginal report -
WordPress Plugin Flaw Exposes 200,000+ Sites at Risk of Code Execution
A critical security vulnerability has been discovered in the popular WordPress plugin, WP Ghost, which boasts over 200,000 active installations. This flaw, tracked as CVE-2025-26909, concerns an unauthenticated Local File Inclusion (LFI) vulnerability that…
gbhackers.comOriginal report -
Cloak ransomware group hacked the Virginia Attorney General’s Office
The Cloak ransomware group claims responsibility for a cyberattack on the Virginia Attorney General’s Office that occurred in February. The ransomware group Cloak has claimed responsibility for a February cyberattack on the Virginia Attorney General Office.…
Security AffairsOriginal report -
FCC Hunts Hidden Chinese Tech: Security Threat Investigation
The U.S. Federal Communications Commission (FCC) is currently conducting an investigation into Chinese entities that have been placed
SecurityOnlineOriginal report -
Google’s News Experiment: No Ad Revenue Hit, Legal Battles Emerge
In mid-November of last year, Google initiated a limited experiment affecting approximately one percent of search results in
SecurityOnlineOriginal report -
China’s Baidu Compromised in Data Leak, Affecting Users
Chinese tech giant Baidu has faced severe scrutiny after allegations emerged that a top executive’s teenage daughter had accessed and shared personal details of internet users online. The incident has raised significant concerns about data privacy and…
gbhackers.comOriginal report -
OneNote Windows 10: Support Ends October 2025, Migrate Now
According to an announcement published in the Microsoft 365 Message Center, support for the OneNote app designed for
SecurityOnlineOriginal report -
Fighting AI Crawlers: Cloudflare Unleashes the AI Labyrinth
Cloudflare previously introduced an AI crawler detection and mitigation system designed to prevent high-frequency data scraping by AI
SecurityOnlineOriginal report -
Gmail Search Gets Smart: AI-Powered Results to Find Emails Faster
By default, Gmail’s search function ranks results chronologically, allowing users to locate past emails based on their position
SecurityOnlineOriginal report -
Is the Middle East's Race to Digitize a Threat to Infrastructure?
As the region continues with its ambitious road map, cybersecurity must be woven into every step of the process.
Dark ReadingOriginal report -
New Browser-Based RDP Tool Enables Secure Remote Access to Windows Servers
Cloudflare has introduced a groundbreaking browser-based Remote Desktop Protocol (RDP) solution. This innovative tool allows users to securely access Windows servers directly from their web browsers, eliminating the need for native RDP clients or VPNs.…
gbhackers.comOriginal report -
Critical Next.js Middleware Vulnerability Allows Attackers to Bypass Authorization
A severe vulnerability has been identified in Next.js, a popular React framework used for building web applications, under the designation CVE-2025-29927. This critical flaw allows attackers to bypass security controls implemented by middleware, posing…
gbhackers.comOriginal report -
Google Gemini's Astra (screen sharing) rolls out on Android for some users
At MWC 2025, Google confirmed it was working on screen and video share capabilities for Gemini Live, codenamed "Project Astra". At that time, Google promised that the feature would begin rolling out soon, and now some users have spotted it in the wild. [...]
BleepingComputerOriginal report -
Urgent: Patch Your Next.js for Authorization Bypass (CVE-2025-29927)
Next.js, the popular React framework empowering developers to build full-stack web applications with speed and efficiency, has recently
SecurityOnlineOriginal report -
Inside Hunters International Group: How a Retailer Became the Latest Ransomware Victim
In the dynamic realm of cybercrime, ransomware groups continuously evolve their tactics, techniques, and procedures (TTPs) to maximize
SecurityOnlineOriginal report -
Critical Vulnerability Discovered in Popular WordPress Security Plugin WP Ghost
A high-severity security vulnerability has been identified in the popular WordPress plugin, WP Ghost. With over 200,000 active
SecurityOnlineOriginal report -
CVE-2025-29922: Critical Flaw in kcp Lets Attackers Manipulate Any Workspace
A high-severity vulnerability has been identified in the kcp project, a Kubernetes-like control plane designed for multi-tenant environments.
SecurityOnlineOriginal report -
Unmasking ALTDOS, DESORDEN, GHOSTR, and Omid16B: The Saga of a Cybercriminal
In a four-year pursuit that spanned multiple aliases and continents, law enforcement has finally apprehended a notorious cybercriminal.
SecurityOnlineOriginal report -
Don’t Click! Fake Chat Used in Meta Business Account Phishing
“What if you received an email stating, ‘YOUR ADS ARE TEMPORARILY SUSPENDED’? The urgency of the email instantly
SecurityOnlineOriginal report -
Critical Remote Code Execution Vulnerability in vLLM via Mooncake Integration
vLLM, a popular library for Large Language Model (LLM) inference and serving, has recently addressed a critical security
SecurityOnlineOriginal report