News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 75 | 20 |
| Today, Tue 27 Oct | 87 so far | 17 |
Developing
Thu 17 Apr 202594 articles
- Apple Patches Two Actively Exploited iOS Flaws Used in Sophisticated Targeted Attacks
Apple on Wednesday released security updates for iOS, iPadOS, macOS Sequoia, tvOS, and visionOS to address two security flaws that it said have come under active exploitation in the wild. The vulnerabilities in question are listed below - CVE-2025-31200…
The Hacker News - Anonymous Releases 10TB of Leaked Data Targeting Russia
Recently, the hacktivist collective Anonymous has claimed responsibility for a sweeping cyberattack against Russia, releasing a staggering 10
SecurityOnline - GPS Spoofing Attacks Spike in Middle East, Southeast Asia
An Indian disaster-relief flight delivering aid is the latest air-traffic incident, as attacks increase in the Middle East and Myanmar and along the India-Pakistan border.
Dark Reading - Erlang/OTP CVE-2025-32433 (CVSS 10): Critical SSH Flaw Allows Unauthenticated RCE
A critical vulnerability has been discovered in the SSH server component of Erlang/OTP, a technology widely used in
SecurityOnline - Node.js Misused in Malvertising Campaigns to Deliver Stealthy Malware
Microsoft Defender Experts (DEX) has observed a rise in malicious campaigns that use Node.js to deliver malware and
SecurityOnline - Onfido Users Targeted in Google Ad Malvertising Campaign
A new phishing campaign has emerged that hijacks trust not through inboxes, but through Google ads. Security researchers
SecurityOnline - Novel Attack Uses Teams Phishing and Zero-Day TypeLib Hijacking
In a concerning escalation of social engineering and persistence techniques, cybersecurity firm ReliaQuest has uncovered a new backdoor
SecurityOnline - Cyberattacks Surge Against Energy Sector Amid Geopolitical Tensions
As geopolitical tensions escalate worldwide, the energy sector has become a primary battlefield in cyberspace. A new report
SecurityOnline - Cisco Patches CVE-2025-20236: Unauthenticated RCE Flaw in Webex App via Malicious Meeting Links
Cisco has issued an important security advisory addressing a high-severity vulnerability in its Webex App that could allow
SecurityOnline - APT29 Targets European Diplomats with Wine-Themed Phishing
A new wave of targeted phishing attacks aimed at European governments and diplomats is underway, with the threat
SecurityOnline - CISA Alert: Actively Exploited SonicWall SMA100 Vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert, adding CVE-2021-20035 to its Known Exploited
SecurityOnline - Unprotected APIs Expose Data of 33,000 Employees
A recent discovery by CloudSEK’s BeVigil platform has highlighted the significant risks posed by unprotected Application Programming Interfaces
SecurityOnline - LummaStealer: The Evolution of a Sophisticated MaaS
Once a rising name in the stealer malware scene, LummaStealer has now evolved into one of the most
SecurityOnline - CrazyHunter Ransomware Targets Taiwan’s Critical Infrastructure
Trend Micro has uncovered a targeted ransomware campaign conducted by a newly identified threat group dubbed CrazyHunter. The
SecurityOnline