News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 12 Oct | 56 | 6 |
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 0 |
| Thu 22 Oct | 84 | 3 |
| Fri 23 Oct | 68 | 8 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 0 |
| Today, Mon 26 Oct | 74 so far | 5 |
Developing
Tue 25 Mar 202587 articles
- CYREBRO Recognized in Gartner Emerging Tech Report for Detection and Response Startups
Ramat Gan, Israel, 25th March 2025, CyberNewsWire
SecurityOnline - Numotion Data Breach Impacts Nearly 500,000 People
Email-related data breach suffered by wheelchair and other mobility equipment provider Numotion affects almost 500,000 individuals.
SecurityWeek - Everything You Need to Know About Oracle Cloud Security Incident by rose87168
Everything You Need to Know About Oracle Cloud Security Incident by rose87168 rose87168 is the alias of a hacker who claims to have breached Oracle Cloud, allegedly stealing around 6 million sensitive records, including encrypted passwords, key files, and…
SOCRadar - New Specter Insight C2 Tool Fuels ClickFix-Based Hacking Campaigns
A recent cybersecurity investigation has uncovered a previously unidentified Command and Control (C2) framework, dubbed Specter Insight C2. This discovery was made by a team of researchers who have been analyzing recent hacking campaigns, including those…
gbhackers.com - ARMO Launches First Cloud App Detection and Response to Unify Code to Cloud Runtime Security
Tel Aviv, Israel, 25th March 2025, CyberNewsWire
SecurityOnline - Chinese APT Weaver Ant Targeting Telecom Providers in Asia
Weaver Ant, a cyberespionage-focused APT operating out of China, is targeting telecom providers for persistent access.
SecurityWeek - Chinese Hackers Breach Asian Telecom, Remain Undetected for Over 4 Years
A major telecommunications company located in Asia was allegedly breached by Chinese state-sponsored hackers who spent over four years inside its systems, according to a new report from incident response firm Sygnia. The cybersecurity company is tracking the…
The Hacker News - Malicious VS Code Extensions Target Developers with ShibaCoin Ransomware
Researchers from Reversing Labs have identified two malicious Visual Studio Code (VS Code) extensions that are distributing ransomware to unsuspecting developers. The extensions, named “ahban.shiba” and “ahban.cychelloworld,” are currently under development…
gbhackers.com - Ransomware Shifts Tactics as Payouts Drop: Critical Infrastructure in the Crosshairs
Threats themselves change very little, but the tactics used are continually revised to maximize the criminals’ return on investment and effort.
SecurityWeek - Delete your DNA from 23andMe right now
Geoffrey A. Fowler writes: If you’re one of the 15 million people who shared your DNA with 23andMe, it’s time to delete your data. The genetic information company, best known for its saliva test kits, announced Sunday that it is headed to bankruptcy court to…
DataBreaches - New Phishing Attack Uses Browser-in-the-Browser Technique to Target Gamers
A sophisticated phishing campaign has been uncovered by Silent Push threat analysts, employing the browser-in-the-browser (BitB) technique to target gamers, particularly those playing Counter-Strike 2 on the Steam platform. This campaign involves creating…
gbhackers.com - Malaysia’s Anwar says ‘no way’ to US$10 million ransom demand to end airport cyberattack
Joseph Sipalan reports: Malaysia’s Prime Minister Anwar Ibrahim said on Tuesday that hackers demanded a US$10 million ransom for a cyberattack that paralysed some operations at Kuala Lumpur International Airport (KLIA) over the weekend, raising concerns…
DataBreaches - Hacker Conversations: Frank Trezza – From Phreaker to Pentester
Frank Trezza is fairly typical of most hackers. Early pranks sometimes leading to something more serious.
SecurityWeek - AI-Powered SaaS Security: Keeping Pace with an Expanding Attack Surface
Organizations now use an average of 112 SaaS applications—a number that keeps growing. In a 2024 study, 49% of 644 respondents who frequently used Microsoft 365 believed that they had less than 10 apps connected to the platform, despite the fact that…
The Hacker News - Arkana Ransomware Attack on WideOpenWest: What You Need to Know
Arkana Ransomware Attack on WideOpenWest: What You Need to Know A previously unknown threat actor has launched its first ransomware attack, marking a worrisome new chapter in the cyber threat landscape. This alarming incident involves Arkana, a previously…
SOCRadar - Microsoft Edge for Business Bolsters Security with Enhanced Data Protection for BYOD and AI
Microsoft has announced significant advancements in data protection for its Edge for Business browser, specifically targeting the challenges
SecurityOnline - Oops! Google accidentally deletes some users’ Maps Timeline data
Google has admitted it accidentally deleted some users’ Google Maps Timeline data after a “technical issue”. As reported by Forbes on March 11, users started noticing that their Google Maps Timelines had completely disappeared. At the time, we didn’t know…
Malwarebytes - 300 Arrested in Crackdown on Cybercrime Rings in Africa
Authorities in seven African countries arrested 300 suspects in an international crackdown on cybercriminal networks targeting businesses.
SecurityWeek - Astral Foods, South Africa’s largest poultry producer, lost over $1M due to a cyberattack
Astral Foods, South Africa’s largest poultry producer, lost over $1M due to a cyberattack disrupting deliveries and impacting operations. Astral Foods is a South African integrated poultry producer and one of the country’s largest food companies. It…
Security Affairs - IngressNightmare Flaws Expose Many Kubernetes Clusters to Remote Hacking
Critical remote code execution vulnerabilities found by Wiz researchers in Ingress NGINX Controller for Kubernetes.
SecurityWeek - Microsoft Introduces Security Copilot Agents with Enhanced AI Protections
Microsoft has launched an expanded version of its Security Copilot platform, now equipped with advanced AI agents. These agents are designed to autonomously handle critical security tasks such as phishing detection, data security, and identity management,…
gbhackers.com - Dark Web Market: Russian Market
Dark Web Market: Russian Market Russian Market or Russian Markat is a Dark Web Market (DWM) that emerged in 2019, specializing in the sale of stolen data, including credentials, financial information, and Personally Identifiable Information (PII). It has…
SOCRadar - Security Onion 24.10 Released: Everything You Need to Know
Security Onion, a widely used open-source platform for network security monitoring, has recently released Security Onion 2.4.140. This latest update focuses on enhancing key components such as Suricata and Zeek, offering improved security and functionality…
gbhackers.com - Massive Cyberattack Disrupts Ukrainian State Railway’s Online Services
The Ukrainian State Railways, known as Ukrzaliznytsia, has experienced a massive disruption to its online services. The railway company issued a statement acknowledging an IT failure, which has temporarily suspended all online operations, impacting ticket…
gbhackers.com - Rilide Malware Poses as Browser Extension to Steal Login Credentials from Chrome and Edge Users
Rilide, a sophisticated malware, has been masquerading as a legitimate browser extension to steal sensitive information from users of Chromium-based browsers like Google Chrome and Microsoft Edge. First identified in April 2023, this malware is designed to…
gbhackers.com - Beware Developers – Fake Coding Challenges Will Deploy FogDoor on Your System
A sophisticated malware campaign has been uncovered by Cyble, targeting Polish-speaking developers with fake coding challenges. This campaign, known as “FizzBuzz to FogDoor,” exploits job seekers by disguising malware as legitimate recruitment tests on…
gbhackers.com - NIST Facing Challenges in Managing CVE Backlog in National Database
The National Institute of Standards and Technology (NIST) recently issued an update on its efforts to manage the backlog of Common Vulnerabilities and Exposures (CVEs) in the National Vulnerability Database (NVD). While NIST has regained its pre-summer 2024…
gbhackers.com - Hackers Use .NET MAUI to Target Indian and Chinese Users with Fake Banking, Social Apps
Cybersecurity researchers are calling attention to an Android malware campaign that leverages Microsoft's .NET Multi-platform App UI (.NET MAUI) framework to create bogus banking and social media apps targeting Indian and Chinese-speaking users. "These…
The Hacker News - A cyberattack hits Ukraine’s national railway operator Ukrzaliznytsia
A cyberattack on Ukraine’s national railway operator Ukrzaliznytsia disrupted online ticket services, causing long lines at Kyiv’s station. The Record Media first reported the news of a cyber attack on Ukraine’s national railway operator Ukrzaliznytsia that…
Security Affairs - Financial cyberthreats in 2024
As more and more financial transactions are conducted in digital form each year, financial threats comprise a large piece of the global cyberthreat landscape. That’s why Kaspersky researchers analyze the trends related to these threats and share an annual…
securelist.com - Linux Kernel 6.14 Released: Everything You Need to Know
Linus Torvalds released the Linux 6.14 kernel today after an unexpected quiet day yesterday, marking a new milestone in the Linux ecosystem. This version is set to power several upcoming Linux distribution releases, including Ubuntu 25.04 and Fedora 42.…
gbhackers.com - INTERPOL Arrests 306 Suspects, Seizes 1,842 Devices in Cross-Border Cybercrime Bust
Law enforcement authorities in seven African countries have arrested 306 suspects and confiscated 1,842 devices as part of an international operation codenamed Red Card that took place between November 2024 and February 2025. The coordinated effort "aims to…
The Hacker News - Cloudflare Pulls the Plug on HTTP: API Now HTTPS-Only
Cloudflare, the internet services provider, has recently announced the complete deactivation of HTTP connections to its API platform.
SecurityOnline - FBI Warns Against Using Unsafe File Converter Tools
The FBI Denver Field Office has sounded the alarm about a burgeoning scam involving purportedly free online document converter tools. This scam, which has gained traction globally, sees cybercriminals harnessing these tools to spread malware, leading to…
gbhackers.com - Linux Kernel 6.14 Arrives: New Features and Improvements Unveiled
The Linux Kernel 6.14 stable release has officially been unveiled. While this marks the latest iteration of the
SecurityOnline - AlexNet Unleashed: Groundbreaking AI Model Now Open Source
In the modern era of artificial intelligence driven by GPU-accelerated computing, the 2012 development of AlexNet—a convolutional neural
SecurityOnline - Ingress NGINX RCE Vulnerability Allows Attackers to Compromise Entire Cluster
A series of remote code execution (RCE) vulnerabilities known as “IngressNightmare” have been discovered in the Ingress NGINX Controller for Kubernetes. These vulnerabilities, identified as CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974,…
gbhackers.com - ShibaCoin Ransom: Microsoft Disables Infected VS Code Extensions
Microsoft, having previously apologized and reinstated developer themes following an erroneous deletion of two popular Visual Studio Code
SecurityOnline - CVE-2025-1974 (CVSS 9.8): Ingress NGINX Flaws Threaten Mass Kubernetes Compromise
A new cybersecurity threat has been identified by Wiz Research, dubbed “IngressNightmare,” which exposes critical vulnerabilities in the
SecurityOnline - China Chopper & INMemory: Weaver Ant’s Arsenal of Advanced Web Shells
Sygnia detailed a cyberattack targeting a major telecommunication company in Asia. The attack was orchestrated by a sophisticated
SecurityOnline