News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 17 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 15 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 1 |
| Mon 26 Oct | 75 | 13 |
| Today, Tue 27 Oct | 53 so far | 11 |
Developing
Thu 10 Apr 202588 articles
- Scattered Spider Evolving: New Tactics and Spectre RAT
The threat landscape is in a constant state of flux, with cybercriminal groups continually adapting their techniques to evade detection and maximize their impact. A recent report by Silent Push delves into the evolving tactics of the Scattered Spider hacker…
SecurityOnline - NATS Server Vulnerability: Missing Access Controls in JetStream API
A security vulnerability has been discovered in NATS Server, a communications system for digital systems, services, and devices. The vulnerability, identified as CVE-2025-30215, involves missing access controls for the JetStream (JS) API. The advisory…
SecurityOnline - Critical SSRF Vulnerability Patched in LNbits Lightning Wallet Server
LNbits, the modular and extendable Lightning Network wallet server, has patched a critical Server-Side Request Forgery (SSRF) vulnerability that exposed internal services to potential exploitation via manipulated LNURL authentication flows. Tracked as…
SecurityOnline - Spyware Alert: BADBAZAAR and MOONSHINE Target Civil Society and Ethnic Groups
A recent advisory from the National Cyber Security Centre (NCSC UK) and its international partners has shed light on the activities of malicious cyber actors using sophisticated spyware to target specific groups of people. The advisory focuses on two…
SecurityOnline - High-Severity XXE Vulnerability Found in NAKIVO Backup & Replication
A high-severity security vulnerability has been identified in NAKIVO Backup & Replication, a popular data protection solution. The vulnerability, classified as an XML External Entity (XXE) issue and tracked as CVE-2025-32406, poses a significant risk to…
SecurityOnline - “Pick Your Poison” Phishing Attack: Credentials or Malware?
Cybercriminals have upped their game with a phishing campaign so cunning, it offers victims a choice—between stolen credentials or malware infection. Titled “Pick Your Poison”, this campaign was recently analyzed by the Cofense Phishing Defense Center,…
SecurityOnline - Evolving Cybercrime: Inside the Russian-Speaking Underground
The Russian-speaking cybercriminal underground remains a dominant force in the global cybercrime landscape. A recent report by Trend Micro, marking the 50th installment in their series on this subject, highlights the underground’s sophistication, resilience,…
SecurityOnline - Tool Poisoning Attacks: Critical Vulnerability Discovered in Model Context Protocol (MCP)
Invariant Labs has disclosed a critical vulnerability in the Model Context Protocol (MCP) that enables what they call Tool Poisoning Attacks (TPAs) — a class of threats that may allow sensitive data exfiltration, AI behavior hijacking, and even remote code…
SecurityOnline