News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 17 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 15 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 1 |
| Mon 26 Oct | 75 | 13 |
| Today, Tue 27 Oct | 19 so far | 5 |
Developing
Mon 7 Apr 202568 articles
- Malicious Python Packages Target Popular Cryptocurrency Library to Steal Sensitive Data
In a recent development, the ReversingLabs research team has uncovered a sophisticated software supply chain attack targeting developers of cryptocurrency applications. The attack involved the creation of two malicious Python packages, bitcoinlibdbfix and…
gbhackers.com - Lazarus Adds New Malicious npm Using Hexadecimal String Encoding to Evade Detection Systems
North Korean state-sponsored threat actors associated with the Lazarus Group have intensified their Contagious Interview campaign by deploying novel malicious npm packages leveraging hexadecimal string encoding to bypass detection mechanisms. These packages…
gbhackers.com - 50,000+ WordPress Sites Vulnerable to Privilege Escalation Attacks
In a recent cybersecurity development, over 50,000 WordPress websites using the Uncanny Automator plugin have been identified as vulnerable to a critical privilege escalation attack. This vulnerability, discovered by security researcher mikemyers through the…
gbhackers.com - Python JSON Logger Vulnerability Enables Remote Code Execution – PoC Released
A recent security disclosure has revealed a remote code execution (RCE) vulnerability, CVE-2025-27607, in the Python JSON Logger package, affecting versions between 3.2.0 and 3.2.1. This vulnerability arises from a missing dependency,…
gbhackers.com - EDR-as-a-Service makes the headlines in the cybercrime landscape
Cybercriminals exploit compromised accounts for EDR-as-a-Service (Emergency Data Requests – EDR), targeting major platforms According to a detailed analysis conducted by Meridian Group, an increasingly complex and structured phenomenon, commonly referred to…
Security Affairs - PoisonSeed Exploits CRM Accounts to Launch Cryptocurrency Seed Phrase Poisoning Attacks
A malicious campaign dubbed PoisonSeed is leveraging compromised credentials associated with customer relationship management (CRM) tools and bulk email providers to send spam messages containing cryptocurrency seed phrases in an attempt to drain victims'…
The Hacker News - A week in security (March 31 – April 6)
Last week on Malwarebytes Labs: Why we’re no longer doing April Fools’ Day Intimate images from kink and LGBTQ+ dating apps left exposed online “Urgent reminder” tax scam wants to phish your Microsoft credentials “Nudify” deepfakes stored unprotected...
Malwarebytes - Sakura RAT Released on GitHub Can Bypass Antivirus and EDR Tools
A newly developed remote administration tool (RAT) named “Sakura RAT” has been released on GitHub, raising alarms for its powerful capabilities and ability to bypass modern detection systems like antivirus (AV) software and endpoint detection and response…
gbhackers.com - Dell PowerProtect Flaw Allows Remote Attackers to Execute Arbitrary Commands
Dell Technologies has released a security update addressing a critical vulnerability (CVE-2025-29987) in its PowerProtect Data Domain Operating System (DD OS). The vulnerability allows authenticated attackers to execute arbitrary commands with root…
gbhackers.com - MediaTek’s April 2025 Security Bulletin: Critical WLAN Vulnerability Exposes Chipsets
MediaTek has released its April 2025 Product Security Bulletin, detailing a range of security vulnerabilities affecting its various chipsets. The bulletin covers vulnerabilities in chipsets used in smartphones, tablets, AIoT devices, smart displays, smart…
SecurityOnline - Critical pgAdmin Flaw Allows Remote Code Execution
A severe Remote Code Execution (RCE) vulnerability in pgAdmin (CVE-2025-2945), the popular PostgreSQL database management tool, has been patched after researchers discovered attackers could hijack servers through malicious API requests. The flaw affects…
gbhackers.com - OpenAI Delays GPT-5 Launch, Will Release GPT-o3 and o4-mini
Back in February, OpenAI unveiled its roadmap for future AI models, stating at the time that GPT-4.5 would be the company’s final non-reasoning-chain model. GPT-5, according to OpenAI, was intended to integrate both non-chain-of-thought architecture and…
SecurityOnline - Bitdefender GravityZone Console PHP Vulnerability Lets Hackers Execute Arbitrary Commands
Cybersecurity firm Bitdefender has patched a severe flaw (CVE-2025-2244) in its GravityZone Console, which could allow unauthenticated attackers to execute arbitrary commands on vulnerable systems. The vulnerability, discovered by researcher Nicolas Verdier…
gbhackers.com - EU Targets Musk’s X with Potential $1B Fine for Violating Digital Services Act
Following prior investigations and penalties under the Digital Markets Act against companies including Google, the European Union has now turned its attention to Elon Musk’s platform, X, which may become the first online platform to face fines under the…
SecurityOnline - OKX Fined $1.2M: Malta Exposes AML Failures
Cryptocurrency exchange OKX’s European subsidiary, Okcoin Europe Ltd, has been fined $1.2 million (approximately €1.05 million) by Malta’s Financial Intelligence Analysis Unit (FIAU), which uncovered significant deficiencies in the company’s risk assessment…
SecurityOnline - Android Installs Accelerated: Google’s Cloud Compilation Plan
The Android operating system utilizes Android Runtime (ART) to execute application code. When a new application is installed, Android employs a tool called dex2oat to process the APK’s .dex files, which contain the compiled bytecode of the application. The…
SecurityOnline - Free DeepSearch: ChatGPT’s Powerful AI Goes Public
DeepSearch is a recently introduced feature in ChatGPT that leverages artificial intelligence to scour the entire internet and compile tailored reports for users—a process that may take anywhere from several minutes to nearly an hour to complete. In a bid to…
SecurityOnline - How to Discover Real IPs Behind Cloudflare-Protected Websites
Cloudflare is widely known for masking the real IP addresses of websites it protects—safeguarding them from DDoS attacks, scanning, and direct targeting. However, in the hands of ethical security researchers and red teamers, tools like CF-Hero offer a way to…
SecurityOnline - Major Cybersecurity Events (31st March – 6th April 2025)
In the past week, several significant cybersecurity incidents have made headlines – including high-impact data breaches, and newly discovered or exploited vulnerabilities. Below is a structured summary of the most notable events, with key details: CISA Alert…
SecurityOnline - Linux Kernel Vulnerability Exposes Local Systems to Privilege Escalation, PoC Published
A security researcher has recently disclosed technical details and proof-of-concept (PoC) exploit code for a vulnerability in the Linux kernel’s Performance Events system component. This flaw, identified as CVE-2023-6931, carries a CVSS score of 7.8,…
SecurityOnline - Lazarus Group Expands Malicious Campaign on npm, Targets Developers with New Malware
A new report from the Socket Research Team reveals that North Korean threat actors, known for the “Contagious Interview” operation, have intensified their malicious activities within the npm ecosystem. The threat actors are deploying new npm packages that…
SecurityOnline - MinIO Urgently Patches High-Severity Incomplete Signature Validation Vulnerability
MinIO, a high-performance object storage server compatible with Amazon S3, has released a patch to address a critical security vulnerability. The vulnerability, tracked as CVE-2025-31489, involves incomplete signature validation for unsigned-trailer uploads,…
SecurityOnline - Bitdefender GravityZone Console Hit by Critical PHP Deserialization Vulnerability
A critical-severity vulnerability has been discovered in the Bitdefender GravityZone Console, posing a significant risk to affected systems. The flaw, tracked as CVE-2025-2244 (CVSSv4 9.5), is an insecure PHP deserialization issue. The vulnerability resides…
SecurityOnline - pgAdmin 4 Vulnerabilities Expose Databases to Remote Code Execution and XSS
The widely utilized PostgreSQL administration tool, pgAdmin 4, has recently addressed two significant security vulnerabilities that pose substantial risks to database environments. The latest release, version 9.2, patches critical flaws that could enable…
SecurityOnline - CVE-2025-31115: XZ Utils Hit Again with High-Severity Multithreaded Decoder Bug
XZ Utils is a widely used suite of tools and libraries that provide data compression functionality. Known for its efficient compression, XZ Utils is often preferred for creating smaller files than gzip. The native file format is .xz, but it also supports the…
SecurityOnline - New Evasive Campaign Uses Fake CAPTCHAs to Deliver LegionLoader
Netskope Threat Labs has uncovered a new malicious campaign that employs deceptive tactics to distribute the LegionLoader malware. This campaign leverages fake CAPTCHAs and CloudFlare Turnstile to trick victims into downloading malware, which ultimately…
SecurityOnline - PoisonSeed Campaign: Uncovering a Web of Cryptocurrency and Email Provider Attacks
Silent Push Threat Analysts have uncovered a sophisticated campaign targeting enterprise organizations, VIP individuals, and cryptocurrency holders, dubbed “PoisonSeed.” This campaign involves a two-pronged approach: compromising CRM and bulk email providers…
SecurityOnline - Unpatched Dell PowerProtect Systems Vulnerable to Remote Compromise
A significant security vulnerability has been identified in Dell Technologies PowerProtect Data Domain systems, posing a risk of unauthorized system compromise. The vulnerability, tracked as CVE-2025-29987, exists within Dell PowerProtect Data Domain with…
SecurityOnline