News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 17 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 15 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 1 |
| Mon 26 Oct | 75 | 13 |
| Today, Tue 27 Oct | 37 so far | 8 |
Developing
Tue 8 Apr 202570 articles
- Google fixes two actively exploited zero-day vulnerabilities in Android
Google has patched 62 vulnerabilities in Android, including two actively exploited zero-days in its April 2025 Android Security Bulletin. When we say “zero-day” we mean an exploitable software vulnerability for which there was no patch at the time of the…
Malwarebytes - Agentic AI in the SOC - Dawn of Autonomous Alert Triage
Security Operations Centers (SOCs) today face unprecedented alert volumes and increasingly sophisticated threats. Triaging and investigating these alerts are costly, cumbersome, and increases analyst fatigue, burnout, and attrition. While artificial…
The Hacker News - Exploited Vulnerability Puts 5,000 Ivanti VPN Appliances at Risk
More than 5,000 Ivanti Connect Secure appliances are vulnerable to attacks exploiting CVE-2025-22457, which has been used by Chinese hackers.
SecurityWeek - UAC-0226 Deploys GIFTEDCROOK Stealer via Malicious Excel Files Targeting Ukraine
The Computer Emergency Response Team of Ukraine (CERT-UA) has revealed a new set of cyber attacks targeting Ukrainian institutions with information-stealing malware. The activity is aimed at military formations, law enforcement agencies, and local…
The Hacker News - Android Update Patches Two Exploited Vulnerabilities
Android’s latest security update resolves two exploited Kernel vulnerabilities, as well as critical-severity bugs.
SecurityWeek - Attackers distributing a miner and the ClipBanker Trojan via SourceForge
Recently, we noticed a rather unique scheme for distributing malware that exploits SourceForge, a popular website providing software hosting, comparison, and distribution services. The site hosts numerous software projects, and anyone can upload theirs. One…
securelist.com - Everest ransomware group’s Tor leak site offline after a defacement
The Tor leak site of the Everest ransomware group went offline after being hacked and defaced over the weekend. The Everest ransomware gang’s darknet site went offline after being hacked and defaced, with victim listings replaced by the following message.…
Security Affairs - Threat Actors Setting Up Persistent Access to Hosts Hacked in CrushFTP Attacks
Huntress has shared details on the post-exploitation activities of threat actors targeting the recent CrushFTP vulnerability.
SecurityWeek - Oracle Data Breach: Authenticity Confirmed Despite Denial
At the end of March, a hacker claimed to have breached Oracle’s cloud infrastructure, allegedly exfiltrating approximately six million records. These reportedly included sensitive materials such as Oracle Cloud customer security keys, encrypted credentials,…
SecurityOnline - CISA Adds CrushFTP Vulnerability to KEV Catalog Following Confirmed Active Exploitation
A recently disclosed critical security flaw impacting CrushFTP has been added by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) to its Known Exploited Vulnerabilities (KEV) catalog after reports emerged of active exploitation in the wild.…
The Hacker News - SAP April 2025 Patch Day: Critical Code Injection Risks
The SAP Security Patch Day on April 8, 2025, brought a wave of critical security updates, with a total of 18 new Security Notes and 2 updates to previously released notes. Among the fixes, several address severe code injection vulnerabilities that pose a…
SecurityOnline - Google AI Search: Gemini Expands to Search Labs
Previously available exclusively to U.S.-based users subscribed to the Google One AI Premium plan, Google’s “AI Mode” search feature is now open for broader testing through the Search Labs initiative—though access remains limited to users within the United…
SecurityOnline - Google Patches 23-Year-Old Chrome Vulnerability That Leaked Browsing History
Although Chrome itself has not yet reached its 23rd anniversary, the history of web browsers stretches much further back. A recently patched vulnerability by Google theoretically affects all browsers and could allow online advertisers to infer users’…
SecurityOnline - Google fixed two actively exploited Android zero-days
Google addressed 62 vulnerabilities with the release of Android ‘s April 2025 security update, including two actively exploited zero-days. Google released Android ‘s April 2025 security updates to address 62 vulnerabilities, including two zero-day…
Security Affairs - Google Gemini to Add Video Analysis Support with Subtitle, Summary, and OCR Capabilities
Google’s Gemini AI application already supports uploading various file formats for analysis; however, the current range of supported formats remains somewhat limited. To enhance user experience and streamline analytical workflows, Google now plans to expand…
SecurityOnline - WhatsApp for Windows Flaw Allowed Remote Code Execution via File Attachments
A critical vulnerability identified as CVE-2025-30401 was recently disclosed, highlighting a major security flaw in WhatsApp for Windows. This issue, which primarily affects desktop application versions prior to 2.2450.6, allowed attackers to exploit…
gbhackers.com - PoC Exploit Reveals SSH Key Exposure via Yelp Vulnerability on Ubuntu
Security researchers have uncovered a critical vulnerability (CVE-2025-3155) in Ubuntu’s default help browser Yelp that could expose sensitive system files including SSH private keys. The flaw impacts Ubuntu desktop installations and stems from improper…
gbhackers.com - Google Releases Android Update to Patch Two Actively Exploited Vulnerabilities
Google has shipped patches for 62 vulnerabilities, two of which it said have been exploited in the wild. The two high-severity vulnerabilities are listed below - CVE-2024-53150 (CVSS score: 7.8) - An out-of-bounds flaw in the USB sub-component of Kernel that…
The Hacker News - New Ransomware Tactics & Tools: An In-Depth Analysis of Emerging Threats
The digital landscape continues to be challenged by the persistent and evolving threat of ransomware. Organizations worldwide face an increasing risk of sophisticated cyberattacks that can disrupt operations, compromise sensitive data, and inflict…
SecurityOnline - TVT DVRs Under Siege: Massive Exploitation Attempts Expose Critical Flaw
A significant surge in malicious cyber activity has been detected, raising alarms for organizations utilizing TVT NVMS9000 DVRs. GreyNoise intelligence reports “a significant spike 3 times that of typical activity in exploitation attempts against TVT…
SecurityOnline - Top 5 VPN Vulnerabilities in 2025
I. Executive Summary The reliance on Virtual Private Networks (VPNs) has grown significantly as organizations embrace remote work and individuals seek enhanced online privacy and security. However, this increased dependence has also made VPNs a prime target…
SecurityOnline - WhatsApp for Windows Spoofing Vulnerability: Execute Code Risk (CVE-2025-30401)
A security advisory from Facebook details a spoofing vulnerability in WhatsApp for Windows, highlighting a potential risk where malicious actors could trick users into executing arbitrary code. The vulnerability, tracked as CVE-2025-30401, stems from how the…
SecurityOnline - CVE-2025-27520: Critical BentoML Flaw Allows Full Remote Code Execution, Exploit Available
A severe security vulnerability has been identified in BentoML, a Python library used for building online serving systems optimized for AI applications and model inference. The vulnerability, tracked as CVE-2025-27520 (CVSS 9.8), allows for remote code…
SecurityOnline - CVE-2024-11859: ToddyCat Group Hides Malware in ESET’s Scanner to Bypass Security
Advanced Persistent Threat (APT) groups are constantly evolving their techniques to evade detection. Kaspersky Labs has recently uncovered a sophisticated method employed by the ToddyCat group: hiding their malicious activity within the context of legitimate…
SecurityOnline - Smishing Triad Expands Fraud Campaign, Targets Toll Payment Services
A China-based cybercriminal group known as the Smishing Triad is escalating its smishing activities, now targeting consumers in the US and UK with fraudulent text messages related to toll payment services. The Resecurity report reveals that these campaigns…
SecurityOnline - Pexip Issues Urgent Security Update to Address Critical Vulnerabilities
Pexip, a leading provider of self-hosted video conferencing platforms, has released a security bulletin detailing critical vulnerabilities in its Infinity platform. Critical Heap-Based Buffer Overflow A critical vulnerability, tracked as CVE-2024-12084, has…
SecurityOnline - PoC Released for CVE-2025-3155: Yelp Flaw Can Expose SSH Keys on Ubuntu Systems
A security vulnerability, identified as CVE-2025-3155, has been discovered in Yelp, the GNOME user help application that comes pre-installed on Ubuntu desktop. The vulnerability involves the way Yelp handles the “ghelp://” URI scheme. The writeup begins by…
SecurityOnline - Sec-Gemini v1: Google’s AI Beats Rivals in Threat Analysis
Google has recently unveiled an experimental AI model, Sec-Gemini v1, tailored to meet cybersecurity demands. Built upon the Gemini framework, Sec-Gemini v1 integrates Google Threat Intelligence (GTI), the Open Source Vulnerabilities (OSV) database, and the…
SecurityOnline - OpenAI Prepares to Watermark GPT-4o-Generated Images with ImageGen
Developer @btibor91 on the social platform X (Twitter) has discovered that OpenAI appears to be preparing to introduce watermarking to images generated by its GPT-4o model on the Android version of ChatGPT. The watermark, labeled “ImageGen,” is intended to…
SecurityOnline - X (Twitter) to Sell Inactive Usernames!
The social platform X (formerly Twitter) has long entertained the notion of monetizing dormant usernames—handles tied to long-abandoned or suspended accounts. These usernames are considered digital assets by X and are now being positioned for auction as a…
SecurityOnline