News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 0 |
| Thu 22 Oct | 84 | 3 |
| Fri 23 Oct | 68 | 8 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 0 |
| Mon 26 Oct | 75 | 5 |
| Today, Tue 27 Oct | 16 so far | 3 |
Developing
Thu 3 Apr 202581 articles
- Lazarus Group Targets Job Seekers With ClickFix Tactic to Deploy GolangGhost Malware
The North Korean threat actors behind Contagious Interview have adopted the increasingly popular ClickFix social engineering tactic to lure job seekers in the cryptocurrency sector to deliver a previously undocumented Go-based backdoor called GolangGhost on…
The Hacker News - Hackers Actively Scanning for Juniper Smart Routers Using Default Passwords
Recent cybersecurity findings reveal an alarming increase in malicious activity targeting Juniper’s Session Smart Networking Platform (SSR). According to SANS tech reports, Attackers are focusing their efforts on exploiting devices using the default…
gbhackers.com - Google’s Quick Share for Windows Vulnerability Allows Remote Code Execution
Cybersecurity researchers from SafeBreach Labs have revealed new vulnerabilities in Google’s Quick Share file-transfer utility for Windows, including a critical flaw that allows attackers to execute code on targeted devices. The findings, disclosed this…
gbhackers.com - Cybersecurity M&A Roundup: 23 Deals Announced in March 2025
Less than two dozen cybersecurity merger and acquisition (M&A) deals were announced in March 2025.
SecurityWeek - Multiple Jenkins Plugin Vulnerabilities Expose Sensitive Information to Attackers
Jenkins, the widely used open-source automation server, faces heightened security risks after researchers disclosed 11 critical vulnerabilities across its core software and eight plugins. These flaws expose sensitive data, enable code execution, and allow…
gbhackers.com - Hacking Verizon Call Records: A Security Breach with National Security Implications
Kirsten Doyle reports: Security researcher Evan Connelly recently identified a security vulnerability in the Verizon Call Filter iOS app which made it possible for a malicious actor to leak call history logs of Verizon Wireless customers. Call logs can be…
DataBreaches - Sensitive data was leaked in 2024 Highline Public Schools ransomware attack
Caitlyn Freeman reports: Personal information including Social Security numbers was compromised during the ransomware attack that hit Highline Public Schools in September, officials announced Wednesday. School officials noticed malicious activity on its…
DataBreaches - AI Threats Are Evolving Fast — Learn Practical Defense Tactics in this Expert Webinar
The rules have changed. Again. Artificial intelligence is bringing powerful new tools to businesses. But it's also giving cybercriminals smarter ways to attack. They’re moving quicker, targeting more precisely, and slipping past old defenses without being…
The Hacker News - 39 Million Secrets Leaked on GitHub in 2024
GitHub has announced new capabilities to help organizations and developers keep secrets in their code protected.
SecurityWeek - AI Adoption in the Enterprise: Breaking Through the Security and Compliance Gridlock
AI holds the promise to revolutionize all sectors of enterpriseーfrom fraud detection and content personalization to customer service and security operations. Yet, despite its potential, implementation often stalls behind a wall of security, legal, and…
The Hacker News - Details Emerge on CVE Controversy Around Exploited CrushFTP Vulnerability
Two CVEs now exist for an actively exploited CrushFTP vulnerability and much of the security industry is using the ‘wrong one’.
SecurityWeek - Vulnerabilities Expose Cisco Meraki and ECE Products to DoS Attacks
Cisco fixes two high-severity denial-of-service vulnerabilities in Meraki devices and Enterprise Chat and Email.
SecurityWeek - Hackers Selling SnowDog RAT Malware With Remote Control Capabilities Online
A sophisticated remote access trojan (RAT) dubbed SnowDog has surfaced on underground cybercrime forums, prompting alarms among cybersecurity experts. Advertised as a tool for “corporate espionage and advanced intrusions,” the malware is being sold by an…
gbhackers.com - Google Released Second Fix for Quick Share Flaws After Patch Bypass
Google’s patches for Quick Share for Windows vulnerabilities leading to remote code execution were incomplete and could be easily bypassed.
SecurityWeek - Authorities Shut Down Kidflix Child Abuse Platform in Major Takedown
In one of the most significant operations against child sexual exploitation in recent history, authorities have announced the shutdown of “Kidflix,” one of the world’s largest platforms for the distribution of child sexual abuse material (CSAM). The…
gbhackers.com - Google Patches Quick Share Vulnerability Enabling Silent File Transfers Without Consent
Cybersecurity researchers have disclosed details of a new vulnerability impacting Google's Quick Share data transfer utility for Windows that could be exploited to achieve a denial-of-service (DoS) or send arbitrary files to a target's device without their…
The Hacker News - Massive GitHub Leak: 39M API Keys & Credentials Exposed – How to Strengthen Security
Over 39 million API keys, credentials, and other sensitive secrets were exposed on GitHub in 2024, raising considerable alarm within the developer community and enterprises globally. The scale and impact of this leak have underscored the growing risks tied…
gbhackers.com - Triada Malware Preloaded on Counterfeit Android Phones Infects 2,600+ Devices
Counterfeit versions of popular smartphone models that are sold at reduced prices have been found to be preloaded with a modified version of an Android malware called Triada. "More than 2,600 users in different countries have encountered the new version of…
The Hacker News - CVE-2025-31334: WinRAR Flaw Enables Mark-of-the-Web Bypass and Arbitrary Code Execution
A newly disclosed vulnerability in WinRAR, the world’s most widely used file compression tool with over 500 million
SecurityOnline - GoResolver: A Powerful New Tool for Analyzing Golang Malware
Analyzing malware has become increasingly challenging, especially with the growing popularity of programming languages like Golang. Golang, or Go, has captivated developers for its extensive features but has also proven to be an attractive choice for malware…
gbhackers.com - Cisco Smart Licensing Utility Flaws Allowed Attackers to Gain Admin Access
Cisco has disclosed critical vulnerabilities in its Smart Licensing Utility software, identified as CVE-2024-20439 and CVE-2024-20440, which could allow unauthenticated, remote attackers to gain administrative access or collect sensitive information from…
gbhackers.com - Verizon Call Filter App Vulnerability Exposed Call Log Data of Customers
A vulnerability in Verizon’s Call Filter app for iOS has been discovered, allowing unauthorized access to customer call logs. This flaw allowed any individual with the requisite technical knowledge to retrieve incoming call data—complete with timestamps—for…
gbhackers.com - AI Crawlers Deluge Wikimedia Commons, Consuming Over 65% of High-Cost Bandwidth
The Wikimedia Commons project, an integral part of the Wikipedia ecosystem, is currently under siege by an onslaught
SecurityOnline - Israel Enters 'Stage 3' of Cyber Wars With Iran Proxies
While Israel and Iranian proxies fight it out IRL, their conflict in cyberspace has developed in parallel. These days attacks have decelerated, but advanced in sophistication.
Dark Reading - Google Password Manager Adds Passkeys, Future Export Teased
Google’s password manager within the Android operating system now supports the use of passkeys—offering users a more secure
SecurityOnline - Amazon Eyes TikTok: Acquisition Race Heats Up
As the deadline imposed by the Trump administration for TikTok’s U.S. operations to resolve their future approaches, an
SecurityOnline - New Triada Trojan comes preinstalled on Android devices
A new Triada trojan variant comes preinstalled on Android devices, stealing data on setup, warn researchers from Kaspersky. Kaspersky researchers discovered a new Triada trojan variant preinstalled on thousands of Android devices, enabling data theft upon…
Security Affairs - Legacy Stripe API Exploited to Validate Stolen Payment Cards in Web Skimmer Campaign
Threat hunters are warning of a sophisticated web skimmer campaign that leverages a legacy application programming interface (API) from payment processor Stripe to validate stolen payment information prior to exfiltration. "This tactic ensures that only…
The Hacker News - Europol Dismantles Kidflix With 72,000 CSAM Videos Seized in Major Operation
In one of the largest coordinated law enforcement operations, authorities have dismantled Kidflix, a streaming platform that offered child sexual abuse material (CSAM). "A total of 1.8 million users worldwide logged on to the platform between April 2022 and…
The Hacker News - Verizon Call Filter App Vulnerability Exposed Call Records of Millions
A security vulnerability in the Verizon Call Filter iOS app allowed attackers to potentially leak the call history
SecurityOnline - Multiple Jenkins Plugin and Core Vulnerabilities Expose Sensitive Data and Execution Paths
The Jenkins project has released a new security advisory highlighting several medium to high severity vulnerabilities affecting Jenkins
SecurityOnline - CVE-2025-31137: React Router Vulnerability Exposes Web Apps to Cache Poisoning and WAF Bypass Attacks
A newly discovered vulnerability, CVE-2025-31137, has been identified in React Router, a popular library used for managing routing
SecurityOnline - CVE-2025-0415 (CVSSv4 9.2): Critical Vulnerability Discovered in Moxa Network Devices
A critical security vulnerability, identified as CVE-2025-0415 (CVSSv4 9.2), has been found in multiple Moxa secure routers, cellular
SecurityOnline - Multiple Vulnerabilities in Zabbix Open the Door to XSS, DoS, and SQL Injection
Zabbix, a cornerstone in IT infrastructure monitoring fixed five newly disclosed security vulnerabilities ranging from low-severity information leaks
SecurityOnline - Outlaw Linux Malware: Persistent Threat Leveraging Simplicity
Elastic Security Labs has published an analysis on the Outlaw Linux malware, describing it as a persistent yet
SecurityOnline - DLL Sideloading Exposed: TookPS Hides with TeamViewer
Kaspersky Labs has released a report detailing the activities of the TookPS downloader, a malware strain initially observed
SecurityOnline - Rancher Users: Update Now to Fix Admin Takeover Bug (CVE-2025-23391)
A security vulnerability has been identified in Rancher, an open-source container management platform that makes it easy to
SecurityOnline - DPRK IT Workers: A Global Threat Expanding in Scope and Scale
A recent report by Google Threat Intelligence Group (GTIG) reveals that the threat posed by Democratic People’s Republic
SecurityOnline - High-Severity Vulnerabilities in Bruno API Client Expose Users to Potential RCE
A security advisory from the Bruno project has revealed critical vulnerabilities in the Bruno API client, highlighting the
SecurityOnline - The Rise of Quishing: QR Codes as a Gateway to Phishing Attacks
A new wave of phishing attacks is leveraging the widespread use of QR codes to deceive victims and
SecurityOnline