News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 17 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 15 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 1 |
| Mon 26 Oct | 75 | 13 |
| Today, Tue 27 Oct | 63 so far | 13 |
Developing
Mon 14 Apr 202566 articles
- FortiGate 0-Day Exploit Allegedly Up for Sale on Dark Web
A chilling new development in the cybersecurity landscape has emerged, as a threat actor has reportedly advertised an alleged zero-day exploit targeting Fortinet’s FortiGate firewalls on a prominent dark web forum. This exploit purportedly enables…
gbhackers.com - Alleged FUD Malware ‘GYware’ Advertised on Hacker Forum for $35/Month
A new Remote Access Trojan (RAT) known as “GYware” is being marketed on a popular hacker forum at an affordable price of $35 per month. The malware, which is described by its creator as the “best of 2025,” reportedly boasts advanced self-spreading…
gbhackers.com - IEA Report: AI Boom Drives Massive Surge in Data Center Energy Demand
The International Energy Agency (IEA) has released its latest report, Energy and AI, offering an in-depth analysis of
SecurityOnline - Tycoon2FA phishing kit rolled out significant updates
The operators of the Phishing-as-a-Service (PhaaS) platform Tycoon2FA have rolled out significant updates to enhance its evasion capabilities. Tycoon2FA, a phishing kit discovered in 2023 by cybersecurity firm Sekoia, was recently updated to improve its…
Security Affairs - Malwarebytes named “Best Antivirus Software” and “Best Malware Removal Service”
Horn tooting time: We’re excited to say we’ve earned a coveted spot in PCMag’s “Best Antivirus Software for 2025” list, and been recognized as the “Best Malware Removal Service 2025” by CNET. PCMag’s rigorous evaluation process takes into account a range...
Malwarebytes - GPT-4 Retiring: GPT-4o Takes Over in ChatGPT
OpenAI recently confirmed on its technical support site that the GPT-4 model will officially be retired from the
SecurityOnline - A week in security (April 7 – April 13)
Last week on Malwarebytes Labs: The Pall Mall Pact and why it matters Child predators are lurking on dating apps, warns report Your 23andMe genetic data could be bought by China, senator warns WhatsApp for Windows vulnerable to attacks. Update now!...
Malwarebytes - Kaspersky Shares 12 Essential Tips for Messaging App Security and Privacy
In an era where instant messaging apps like WhatsApp, Telegram, Signal, iMessage, Viber, and WeChat dominate personal and professional communication, digital privacy and security have never been more critical. To help users keep their accounts secure and…
gbhackers.com - Pakistan-Linked Hackers Expand Targets in India with CurlBack RAT and Spark RAT
A threat actor with ties to Pakistan has been observed targeting various sectors in India with various remote access trojans like Xeno RAT, Spark RAT, and a previously undocumented malware family called CurlBack RAT. The activity, detected by SEQRITE in…
The Hacker News - Morocco Investigates Social Security Agency Data Leak
A threat actor has claimed responsibility for the alleged politically motivated attack and has uploaded the stolen data to a Dark Web forum.
Dark Reading - South African telecom provider Cell C disclosed a data breach following a cyberattack
Cell C, one of the biggest telecom providers in South Africa confirms a data breach following a 2024 cyberattack. Cell C is the fourth-largest mobile network operator in South Africa, ,after Vodacom, MTN, and Telkom. The company founded in 2001 offers…
Security Affairs - Fortinet Uncovers Threat Actor Persistence via Symbolic Link Exploit in FortiGate Devices
In an urgent alert to the cybersecurity community, Fortinet has detailed an active threat campaign exploiting known vulnerabilities
SecurityOnline - SSL Certificate Validity Reduced to 47 Days After Apple Proposal
Apple previously proposed to the CA/Browser Forum—an industry consortium overseeing the management of SSL/TLS certificates—that the validity period
SecurityOnline - OpenAI to Require ID Verification for Advanced AI Models
In recent months, OpenAI has suspended a significant number of API accounts that were found to be misused
SecurityOnline - CVE-2025-32428: Jupyter Remote Desktop Proxy Exposes TigerVNC to Network Access
Researchers have uncovered a critical security flaw in Jupyter Remote Desktop Proxy, a widely used Jupyter extension that
SecurityOnline - PentestGPT – AI-Powered Penetration Testing Assistant
PentestGPT is a new AI-driven tool that acts as a virtual penetration testing assistant. Released in 2024 by a security researcher (GreyDGL), it leverages OpenAI’s GPT-4 model to interactively guide penetration testers through hacking tasks. In simple…
darknet.org.uk - Tor Browser and the Dark Web: A Beginner’s Guide to Anonymity and Security
Introduction: Unveiling Tor and the Dark Web The Tor Browser stands as a specialized tool in the realm
SecurityOnline - CVE-2025-27840: How a Tiny ESP32 Chip Could Crack Open Bitcoin Wallets Worldwide
In a jaw-dropping revelation, researchers at Crypto Deep Tech have exposed a severe cryptographic vulnerability in the ubiquitous
SecurityOnline - Nationwide Smishing Scam Targets Toll Road Users, Stealing Payment Data
A widespread and persistent SMS phishing (smishing) campaign, uncovered by the Cisco Talos team, has been targeting toll
SecurityOnline - npm Malware Targets Atomic and Exodus Wallets to Steal Crypto Funds
The ReversingLabs (RL) research team has uncovered a sophisticated npm-based malware campaign in which a fake npm package,
SecurityOnline - TROX Stealer: Urgency-Themed MaaS Malware Targets Consumer Data
According to a new deep-dive analysis by the Sublime Threat Research Team, a new infostealer dubbed TROX is
SecurityOnline - Smishing Triad: eCrime Group Targets 121+ Countries with Advanced Smishing
A new report from Silent Push has uncovered the extensive operations of Smishing Triad, a Chinese eCrime group
SecurityOnline - Malicious NPM Packages Target PayPal Users to Steal Sensitive Data
A recent report from FortiGuard Labs has uncovered a series of malicious NPM packages designed to steal sensitive
SecurityOnline - Urgent: Yii 2 Vulnerability CVE-2024-58136 Under Active Exploit
A critical security vulnerability, tracked as CVE-2024-58136 (CVSS 9.1), has been uncovered in the popular PHP web application
SecurityOnline - GOFFEE APT: New PowerModul Implant and Tactics Target Russian Organizations
The APT group GOFFEE has resurfaced with a revamped arsenal, launching targeted cyberattacks across Russia’s strategic sectors. According
SecurityOnline - Houthi Influence Campaign: Deceptive Tactics on Facebook Target Israel and Gulf States
In a recent cybersecurity analysis, ClearSky’s team uncovered a persistent influence campaign originating from Yemen/Houthi, targeting Israel and
SecurityOnline