News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 17 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 15 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 1 |
| Mon 26 Oct | 75 | 13 |
| Today, Tue 27 Oct | 53 so far | 11 |
Developing
Fri 11 Apr 202569 articles
- Critical Vulnerability Exposes Langflow Servers to Full Compromise
A newly discovered vulnerability in Langflow, a popular tool for building agentic AI workflows, poses a significant security risk. Security researcher Naveen Sunkavally at Horizon3.ai has identified this easily exploitable flaw, designated CVE-2025-3248,…
SecurityOnline - Rising Tides: Bryson Bort on Cyber Entrepreneurship and the Needed Focus on Critical Infrastructure
Very few people in the cybersecurity industry do not know, or know of, Bryson Bort. Yes, he’s the CEO/Founder of SCYTHE, but he’s also the co-founder of ICS Village (the next one at RSA Conference from April 28 to May 1, 2025). This event, and all of our…
SecurityWeek - InstaWP Connect Plugin Exposes WordPress Sites to Critical File Inclusion Vulnerability
A severe security vulnerability has been identified in the InstaWP Connect WordPress plugin, posing a significant risk to websites using this tool. The vulnerability, tracked as CVE-2025-2636, is an unauthenticated Local PHP File Inclusion flaw that could…
SecurityOnline - TROX Stealer Harvests Sensitive Data Including Stored Credit Cards and Browser Credentials
Cybersecurity experts at Sublime have uncovered a complex malware campaign revolving around TROX Stealer, an information stealer that employs urgency to deceive victims. This malware, first detected in December 2024, highlights an intricate attack chain…
gbhackers.com - Chinese eCrime Group Targets Users in 120+ Countries to Steal Banking Credentials
Smishing Triad, a Chinese eCrime group, has launched an extensive operation targeting users across more than 121 countries. This campaign, primarily focused on stealing banking credentials, has evolved to include diverse industries, from postal and logistics…
gbhackers.com - Palo Alto Networks Warns of Brute-Force Attempts Targeting PAN-OS GlobalProtect Gateways
Palo Alto Networks has revealed that it's observing brute-force login attempts against PAN-OS GlobalProtect gateways, days after threat actors warned of a surge in suspicious login scanning activity targeting its appliances. "Our teams are observing evidence…
The Hacker News - Calix Devices Vulnerable to Pre-Auth RCE on Port 6998, Root Access Possible
A severe security flaw enabling unauthenticated remote code execution (RCE) with root privileges has been uncovered in select Calix networking devices, raising alarms for organizations using legacy hardware. The vulnerability resides in TCP port 6998 and…
gbhackers.com - Microsoft Boosts Exchange and SharePoint Security with Updated Antimalware Scan
Microsoft has fortified its Exchange Server and SharePoint Server security by integrating advanced Antimalware Scan Interface (AMSI) capabilities. This measure, aimed at countering sophisticated attack vectors, represents a crucial step to safeguard…
gbhackers.com - SpyNote, BadBazaar, MOONSHINE Malware Target Android and iOS Users via Fake Apps
Cybersecurity researchers have found that threat actors are setting up deceptive websites hosted on newly registered domains to deliver a known Android malware called SpyNote. These bogus websites masquerade as Google Play Store install pages for apps like…
The Hacker News - AMD CPU Signature Verification Vulnerability Enables Unauthorized Microcode Execution
A vulnerability in AMD CPUs has been uncovered, enabling attackers with administrative privileges to bypass microcode signature verification and execute malicious code. Designated as CVE-2024-36347 (CVSS score: 6.4, Medium), the flaw impacts multiple…
gbhackers.com - ChatGPT Introduces “Memory” Feature for Personalized Interactions
OpenAI CEO Sam Altman recently announced via his personal X account the introduction of the “Memory” feature within the ChatGPT service. This capability enables the system to recall users’ previous interactions, sparing them from having to repeatedly…
SecurityOnline - Researchers Exploit Windows Defender with XOR and System Calls
A recent cybersecurity revelation has demonstrated how researchers successfully bypassed Windows Defender antivirus mechanisms using advanced techniques involving XOR encryption and direct system calls. This breakthrough has sparked discussions about the…
gbhackers.com - Gamaredon targeted the military mission of a Western country based in Ukraine
Gamaredon targeted a foreign military mission in Ukraine with updated GammaSteel malware on Feb 26, 2025, per Symantec. Symantec Threat Hunter researchers reported that the Russia-linked APT group Gamaredon (a.k.a. Shuckworm, Armageddon, Primitive Bear,…
Security Affairs - Ivanti 0-Day RCE Flaw Exploitation Details Revealed
A critical unauthenticated Remote Code Execution (RCE) vulnerability, CVE-2025-22457, has been disclosed by Ivanti, sparking concerns across the cybersecurity industry. The flaw, which affects several Ivanti products, allows attackers to execute arbitrary…
gbhackers.com - Jenkins Docker Vulnerability Allows Hackers to Hijack Network Traffic
A newly disclosed vulnerability affecting Jenkins Docker images has raised serious concerns about network security. The vulnerability, stemming from the reuse of SSH host keys, could allow attackers to impersonate Jenkins build agents and hijack sensitive…
gbhackers.com - Microsoft Issues Urgent Patch to Fix Office Update Crash
Microsoft has released an urgent patch for Office 2016 to address a critical issue causing key applications like Word, Excel, and Outlook to crash unexpectedly. The new update, KB5002623, was issued on April 10, 2025, following widespread reports of…
gbhackers.com - OttoKit WordPress Plugin Admin Creation Vulnerability Under Active Exploitation
A newly disclosed high-severity security flaw impacting OttoKit (formerly SureTriggers) has come under active exploitation within a few hours of public disclosure. The vulnerability, tracked as CVE-2025-3102 (CVSS score: 8.1), is an authorization bypass bug…
The Hacker News - Ivanti Zero-Day CVE-2025-22457 Exploit Details Released
Researchers at Rapid7 published technical details and proof-of-concept exploit code for a critical zero-day vulnerability in Ivanti Connect Secure, tracked as CVE-2025-22457. This flaw, rooted in a stack-based buffer overflow, is now confirmed to be actively…
SecurityOnline - Jenkins Docker Images Vulnerable to SSH Host Key Reuse
In the ever-evolving world of DevOps automation, Jenkins is a cornerstone tool powering countless build pipelines across organizations of all sizes. But a recently disclosed vulnerability has revealed a threat lurking in the background of some Jenkins build…
SecurityOnline - RemoteMonologue: New DCOM Attack Bypasses LSASS Protection
In a technical deep-dive, IBM’s X-Force Red has revealed a stealthy new lateral movement and credential access technique dubbed RemoteMonologue. This novel attack method weaponizes Windows’ Distributed Component Object Model (DCOM) to coerce remote NTLM…
SecurityOnline - Microsoft Releases Emergency Fix for Office 2016 Update Crashes
Yesterday, we reported that the April 2025 cumulative security update KB5002700 for Microsoft Office 2016 has triggered widespread application crashes. These issues affect Word, Excel, and Outlook, occurring both at launch and during active use, and are…
SecurityOnline - Windows 11 Updates Now Show Estimated Installation Time
Microsoft has previously tested a feature that informs users of the estimated time required to install Windows 11 updates—a change designed to help users better plan system restarts, especially for updates that may take longer to complete and could interrupt…
SecurityOnline - Joomla Security Alert: Critical SQL Injection & MFA Bypass Vulnerabilities Uncovered
The Joomla Project has issued two security announcements addressing two significant vulnerabilities affecting its CMS and database packages, including a critical SQL injection flaw (CVE-2025-25226) and a two-factor authentication bypass (CVE-2025-25227). The…
SecurityOnline - Critical Vulnerabilities in Spotfire Products Allow Code Execution (CVE-2025-3114, CVE-2025-3115)
Cloud Software Group has released security advisories addressing critical vulnerabilities in its Spotfire products that could allow attackers to execute arbitrary code and compromise systems. The advisories detail two distinct vulnerabilities: CVE-2025-3114…
SecurityOnline - Microsoft Enhances Exchange and SharePoint Security with AMSI Integration
Microsoft has announced enhanced security measures for its Exchange Server and SharePoint Server products, both of which are critical assets for many organizations. The core of this enhancement is the integration with the Windows Antimalware Scan Interface…
SecurityOnline - Sapphire Werewolf’s Amethyst Stealer Targets Energy Companies
A new report from BI.ZONE Threat Intelligence reveals that the threat actor Sapphire Werewolf is actively refining its tools, with a focus on the updated Amethyst stealer malware. The latest campaigns employing this malware have been specifically targeting…
SecurityOnline - Arista EOS: Critical Vulnerability Exposes Cleartext Transmission (CVE-2024-12378)
Arista Networks has released a security advisory addressing a critical vulnerability in its EOS (Extensible Operating System) that could lead to the transmission of sensitive information in cleartext. The vulnerability, identified as CVE-2024-12378, carries…
SecurityOnline - SideCopy APT Group Evolves Tactics, Targets Critical Indian Infrastructure
The cyber threat landscape is in constant flux, with threat actors continuously refining their techniques to breach defenses and achieve their malicious objectives. A recent report by Seqrite Labs’ APT team sheds light on the evolving tactics of the…
SecurityOnline - Critical Vulnerability (CVE-2025-31498) Patched in c-ares DNS Library
The Domain Name System (DNS) plays a pivotal role, translating human-friendly domain names into the numerical IP addresses that computers understand. And at the heart of many applications facilitating this translation lies c-ares, a robust, asynchronous DNS…
SecurityOnline