News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 0 |
| Thu 22 Oct | 84 | 3 |
| Fri 23 Oct | 68 | 8 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 0 |
| Mon 26 Oct | 75 | 5 |
| Today, Tue 27 Oct | 15 so far | 2 |
Developing
Wed 2 Apr 202582 articles
- Helping Your Clients Achieve NIST Compliance: A Step by Step Guide for Service Providers
Introduction As the cybersecurity landscape evolves, service providers play an increasingly vital role in safeguarding sensitive data and maintaining compliance with industry regulations. The National Institute of Standards and Technology (NIST) offers a…
The Hacker News - North Korea IT Workers Expand Their Employment Across Europe To Infiltrate the Company Networks
North Korean IT workers have intensified their global operations, expanding their employment footprint across Europe to infiltrate corporate networks and generate revenue for the regime. According to the latest report by Google Threat Intelligence Group…
gbhackers.com - Hackers Hijack Telegram Accounts via Default Voicemail Passwords
The Israeli Internet Association has issued a public warning about a surge in cyberattacks targeting Telegram accounts in Israel. The campaign, traced to hackers in Bangladesh and Indonesia, exploits vulnerabilities in voicemail systems to hijack accounts…
gbhackers.com - Gootloader Malware Spreads via Google Ads with Weaponized Documents
The notorious Gootloader malware has resurfaced with a new campaign that combines old tactics with modern delivery methods. This latest iteration leverages Google Ads to target users searching for legal document templates, such as non-disclosure agreements…
gbhackers.com - UK data centres, hospitals, and energy companies targeted by new cybersecurity laws
Georgia Sweeting reports: The UK government has announced the full scope of its upcoming Cyber Security and Resilience Bill, which aims to strengthen the country’s digital defences and reduce the growing risks posed by cyber threats. Set to be introduced…
DataBreaches - China Regulator Proposes Amendments to Cybersecurity Law
Hunton Andrews Kurth writes: On March 28, 2025, the Cyberspace Administration of China issued draft amendments to China’s Cybersecurity Law (“Draft Amendment”) for public comment until April 27, 2025. The Draft Amendment aims to harmonize relevant provisions…
DataBreaches - Lazarus Uses ClickFix Tactics in Fake Cryptocurrency Job Attacks
North Korea’s Lazarus hackers are using the ClickFix technique for malware deployment in fresh attacks targeting the cryptocurrency ecosystem.
SecurityWeek - Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers
Cybersecurity researchers have shed light on an "auto-propagating" cryptocurrency mining botnet called Outlaw (aka Dota) that's known for targeting SSH servers with weak credentials. "Outlaw is a Linux malware that relies on SSH brute-force attacks,…
The Hacker News - Questions Remain Over Attacks Causing DrayTek Router Reboots
DrayTek has shared some clarifications regarding the recent attacks causing router reboots, but some questions remain unanswered.
SecurityWeek - CVE-2025-0676: High-Severity Vulnerability Threatens Moxa Network Devices
A security vulnerability has been identified in several Moxa secure routers, cellular routers, and network security appliances, posing
SecurityOnline - Google Brings End-to-End Encrypted Emails to All Enterprise Gmail Users
Gmail now allows enterprise users to send end-to-end encrypted emails to colleagues, and will soon allow sending to any inbox.
SecurityWeek - TookPS: DeepSeek isn’t the only game in town
In early March, we published a study detailing several malicious campaigns that exploited the popular DeepSeek LLM as a lure. Subsequent telemetry analysis indicated that the TookPS downloader, a malware strain detailed in the article, was not limited to…
securelist.com - How SSL Misconfigurations Impact Your Attack Surface
When assessing an organization’s external attack surface, encryption-related issues (especially SSL misconfigurations) receive special attention. Why? Their widespread use, configuration complexity, and visibility to attackers as well as users make them more…
The Hacker News - Google Introduces End-to-End Encryption for Gmail Business Users
Google has unveiled end-to-end encryption (E2EE) capabilities for Gmail enterprise users, simplifying encrypted email communication for businesses of all sizes. This feature, launched in beta today to coincide with Gmail’s birthday, aims to bridge the gap…
gbhackers.com - New Outlaw Linux Malware Using SSH brute-forcing To Maintain Botnet Activities for long Time
A persistent Linux malware known as “Outlaw” has been identified leveraging unsophisticated yet effective techniques to maintain a long-running botnet. Despite its lack of advanced evasion mechanisms, Outlaw continues to propagate and monetize its activities…
gbhackers.com - Chrome 135, Firefox 137 Patch High-Severity Vulnerabilities
Chrome 135 and Firefox 137 were released on Tuesday with fixes for several high-severity memory safety vulnerabilities.
SecurityWeek - Apple backported fixes for three actively exploited flaws to older devices
Apple backports three critical vulnerabilities actively exploited in attacks against older iOS and macOS models. Apple has backported fixes for three actively exploited vulnerabilities to older devices and OS versions. The three vulnerabilities are: CVE-2...
Security Affairs - Hackers Exploit JavaScript & CSS Tricks to Steal Browsing History
The web browsing history feature, designed to enhance user convenience by styling visited links differently, has inadvertently created a privacy vulnerability. Hackers have exploited this feature, using JavaScript and CSS techniques to deduce users’ online…
gbhackers.com - Spike in Palo Alto Networks scanner activity suggests imminent cyber threats
Hackers are scanning for vulnerabilities in Palo Alto Networks GlobalProtect portals, likely preparing for targeted attacks. Researchers at the threat intelligence firm GreyNoise warn of hackers that are scanning for vulnerabilities in Palo Alto Networks…
Security Affairs - Python Introduces New Standard Lock File Format for Enhanced Security
The Python Software Foundation (PSF) has officially announced the adoption of a new standardized lock file format, outlined in PEP 751. This development is a major milestone for the Python packaging ecosystem, aiming to make dependency management more…
gbhackers.com - Hackers Exploit Microsoft Teams Messages to Deliver Malware
Cybersecurity experts have uncovered a new malware campaign targeting Microsoft Teams users to infiltrate corporate systems. By exploiting the platform’s communication vulnerabilities and leveraging malicious PowerShell scripts, attackers bypassed…
gbhackers.com - FIN7 Deploys Anubis Backdoor to Hijack Windows Systems via Compromised SharePoint Sites
The financially motivated threat actor known as FIN7 has been linked to a Python-based backdoor called Anubis (not to be confused with an Android banking trojan of the same name) that can grant them remote access to compromised Windows systems. "This malware…
The Hacker News - Hackers Exploiting Vulnerabilities in SonicWall, Zoho, F5 & Ivanti Systems
A surge in cyber activity targeting critical edge technologies and management tools, including SonicWall, Zoho, F5, Ivanti, and other systems, has been flagged by cybersecurity intelligence firm GreyNoise. The sudden spike in probing and exploitation…
gbhackers.com - New Malware Loaders Use Call Stack Spoofing, GitHub C2, and .NET Reactor for Stealth
Cybersecurity researchers have discovered an updated version of a malware loader called Hijack Loader that implements new features to evade detection and establish persistence on compromised systems. "Hijack Loader released a new module that implements call…
The Hacker News - Mozilla Monetizes Thunderbird: Thundermail and Pro Features Launch
The Mozilla Foundation has recently reallocated resources toward the development of its open-source email client, Thunderbird, while also
SecurityOnline - No Consent, No Choice: Microsoft Copilot’s Surprise Windows 11 LTSC Arrival
Microsoft Copilot is currently one of the company’s flagship AI initiatives, and as such, it has been silently
SecurityOnline - Nova Act Unveiled: Amazon’s AI Web Assistant Arrives
Amazon has recently unveiled its AI-powered browser assistant, Nova Act—an intelligent agent designed to facilitate simple interactions within
SecurityOnline - €150M Fine: Apple’s Ad Dominance Under French Scrutiny
The French Competition Authority has recently imposed a €150 million fine on Apple for abusing its dominant position
SecurityOnline - CISA Alerts on Active Exploitation of Apache Tomcat Vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority alert regarding the active exploitation of CVE-2025-24813, a critical vulnerability within Apache Tomcat. This newly identified flaw poses a significant risk to…
gbhackers.com - CISA Flags Apache Tomcat CVE-2025-24813 as Actively Exploited with 9.8 CVSS
A critical vulnerability in Apache Tomcat, now actively exploited in the wild, has landed in the CISA Known
SecurityOnline - Chrome 135: 14 Security Fixes, High-Severity CVE-2025-3066 Flaw Patched
Google’s Chrome team has officially rolled out Chrome 135 to the Stable Channel for Windows, macOS, and Linux,
SecurityOnline - VyOS and Debian Systems Vulnerable to Man-in-the-Middle Attacks (CVE-2025-30095)
A critical vulnerability tracked as CVE-2025-30095 has been discovered in VyOS, a popular open-source network operating system. The
SecurityOnline - Malaysian Airport's Cyber Disruption a Warning for Asia
Transportation facilities and networks slowly adapt to changes and threats, leaving them vulnerable to agile cyberattackers, as demonstrated by the $10 million ransomware attack.
Dark Reading - MongoDB Patches: DoS & Bypass Risks Addressed
MongoDB, the popular open-source NoSQL database, has released patches addressing three newly disclosed vulnerabilities that could expose deployments
SecurityOnline - CVE-2025-30223 (CVSS 9.3): Critical XSS Vulnerability Discovered in Beego Framework
A Cross-Site Scripting (XSS) vulnerability has been identified in the Beego framework, a popular Go framework for building
SecurityOnline - Gootloader Returns with Fake Legal Document Lure via Google Ads
The Gootloader malware has resurfaced with a fresh campaign that blends old-school social engineering with modern ad-based delivery.
SecurityOnline - HijackLoader Evolves: New Modules Bring Stealth, Persistence, and Advanced VM Evasion
Originally discovered in 2023, HijackLoader—also known as IDAT Loader or GHOSTPULSE—has returned with a series of stealthy upgrades.
SecurityOnline - 8 Zero-Day Vulnerabilities Uncovered in Netgear WNR854T Router
Security researcher Dylan has disclosed a set of eight previously unknown zero-day vulnerabilities affecting the Netgear WNR854T, a
SecurityOnline - PostgreSQL Servers Hacked: 1,500+ Cloud Systems Mining Crypto via CPU_HU
A new report from Wiz Threat Research reveals a rapidly evolving malware campaign that has silently infected over
SecurityOnline - CVE-2025-30065 (CVSS 10): Critical Vulnerability Discovered in Apache Parquet Java
Apache Parquet, a widely used open-source, column-oriented data file format, has been found to contain a critical security
SecurityOnline