News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 75 | 20 |
| Today, Tue 27 Oct | 87 so far | 17 |
Developing
Fri 18 Apr 202577 articles
- U.S. CISA adds Apple products and Microsoft Windows NTLM flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple products and Microsoft Windows NTLM flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Apple products and…
Security Affairs - Cy4Data Labs Raises $10 Million to Secure Data in Use
Data protection firm Cy4Data Labs has raised $10 million in a Series A funding round led by Pelion Venture Partners.
SecurityWeek - Live Events Giant Legends International Hacked
Legends International says the personal information of employees and customers was compromised as a result of a cyberattack.
SecurityWeek - Defending Against Web API Exploitation With Modern Detection Strategies
In today’s interconnected digital landscape, APIs serve as the critical building blocks of modern web applications, enabling seamless data exchange and functionality. However, as their usage has exploded in recent years, attackers have increasingly adapted…
gbhackers.com - Ahold Delhaize Confirms Data Stolen in Ransomware Attack
Ahold Delhaize has confirmed that data was stolen from its systems in November 2024 after a ransomware group claimed the attack.
SecurityWeek - [Webinar] AI Is Already Inside Your SaaS Stack — Learn How to Prevent the Next Silent Breach
Your employees didn’t mean to expose sensitive data. They just wanted to move faster. So they used ChatGPT to summarize a deal. Uploaded a spreadsheet to an AI-enhanced tool. Integrated a chatbot into Salesforce. No big deal—until it is. If this sounds…
The Hacker News - Bubble.io 0-Day Flaw Lets Attackers Run Arbitrary Queries on Elasticsearch
A vulnerability in Bubble.io, a leading no-code development platform, has exposed thousands of applications to data breaches. The flaw allows attackers to bypass security controls and execute arbitrary queries on Elasticsearch databases, potentially…
gbhackers.com - Global Zoom Outage Linked to Server Block by GoDaddy Registry
Millions of users worldwide experienced a sudden disruption of Zoom services on April 16, as the popular video conferencing platform suffered a global outage traced back to a server block imposed by GoDaddy Registry. The incident, which rendered the core…
gbhackers.com - Over 6 Million Chrome Extensions Found Executing Remote Commands
Security researchers have uncovered a network of over 35 Google Chrome extensions—collectively installed on more than 6 million browsers—secretly executing remote commands and potentially spying on users for years. The alarming discovery began during a…
gbhackers.com - CISA Warns of Active Exploitation of Windows NTLM Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) alerted organizations to active exploitation of a newly disclosed Microsoft Windows vulnerability tracked as CVE-2025-24054. The flaw affects Windows’ NTLM authentication protocol, creating an…
gbhackers.com - CISA Issues Alert on Actively Exploited Apple 0-Day Vulnerabilities
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority warning regarding two critical zero-day vulnerabilities impacting a wide range of Apple devices. The flaws, which impact the latest versions of iOS, iPadOS, macOS, and…
gbhackers.com - Over 17,000 Fortinet Devices Hacked Using Symbolic Link Exploit
According to cybersecurity nonprofit Shadowserver, a major cyberattack has compromised more than 17,000 Fortinet devices globally, exploiting a sophisticated symbolic link persistence technique. The incident marks a rapid escalation from early reports, which…
gbhackers.com - PoC Released for Critical Erlang/OTP SSH RCE Vulnerability
Security teams across industries are urgently patching systems following the public release of a proof-of-concept (PoC) exploit for a newly disclosed critical remote code execution (RCE) vulnerability in Erlang/OTP’s SSH implementation. The flaw, tracked as…
gbhackers.com - Fresh Windows NTLM Vulnerability Exploited in Attacks
A Windows NTLM vulnerability patched in March has been exploited in attacks targeting government and private institutions.
SecurityWeek - GCVE: Decentralizing Vulnerability Identification for Greater Agility
A new initiative, the Global CVE (GCVE) Allocation System, is introducing a decentralized approach to the crucial task
SecurityOnline - Urgent Security Alert: CISA Warns of Actively Exploited Apple and Microsoft Vulnerabilities
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning, adding three new vulnerabilities to its Known
SecurityOnline - Entertainment venue management firm Legends International disclosed a data breach
Legends International disclosed a data breach from November 2024 that affected employees and visitors to its managed venues. Legends International is a global leader in sports and entertainment venue management, specializing in delivering comprehensive…
Security Affairs - Critical Bubble.io Vulnerability Exposes Apps to Data Theft via Elasticsearch, No Patch
Bubble.io, the increasingly popular no-code development platform, has been found to harbor a significant security vulnerability that puts
SecurityOnline - Experts Uncover New XorDDoS Controller, Infrastructure as Malware Expands to Docker, Linux, IoT
Cybersecurity researchers are warning of continued risks posed by a distributed denial-of-service (DDoS) malware known as XorDDoS, with 71.3 percent of the attacks between November 2023 and February 2025 targeting the United States. "From 2020 to 2023, the…
The Hacker News - Ubuntu 25.04 “Plucky Puffin” Released with Linux 6.14 and GNOME 48
Operating system developer Canonical has officially released Ubuntu 25.04 Plucky Puffin, a new stable version featuring Linux Kernel
SecurityOnline - Global Zoom Outage Caused by Domain Registry Error at GoDaddy
On Wednesday afternoon Eastern Time, Zoom, the widely used remote video conferencing platform, experienced a massive and global
SecurityOnline - Wikimedia Offers Free AI Dataset to Combat Relentless Web Scraping
The Wikimedia Foundation, which operates sites affiliated with Wikipedia, recently disclosed that its infrastructure has been overwhelmed by
SecurityOnline - Google Targets Android Battery Drain with Wake Lock Monitoring for Developers
Android devices may occasionally experience inexplicably rapid battery drain. In most cases, this issue does not stem from
SecurityOnline - OpenAI Introduces Flex API for More Affordable AI Model Access
OpenAI’s API pricing is generally considered relatively high—for instance, the latest o3 and o4-mini APIs are significantly more
SecurityOnline - OKX Launches Compliant Crypto Services in the US After Regulatory Clearance
Recently, cryptocurrency exchange OKX officially announced its entry into the U.S. market. Previously, the company acknowledged operating a
SecurityOnline - CVE-2025-24054 Under Active Attack—Steals NTLM Credentials on File Download
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a medium-severity security flaw impacting Microsoft Windows to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild. The…
The Hacker News - Critical CVE-2025-32433 PoC Released: Erlang/OTP SSH Vulnerability Enables RCE
An anonymous security researcher has published proof-of-concept code for CVE-2025-32433, a critical vulnerability in the Erlang/OTP SSH application.
SecurityOnline - Nebula – Autonomous AI Pentesting Tool
Another cutting-edge tool from 2024 is Nebula, an open-source AI-powered penetration testing assistant. If PentestGPT is like an AI advisor, Nebula attempts to automate parts of the pentest process itself
darknet.org.uk - CVE-2024-53141: Linux Kernel Flaw Enables Privilege Escalation, PoC Releases
Security researcher published the technical details and a proof-of-concept exploit for a vulnerability in Linux kernel—CVE-2024-53141, having a
SecurityOnline - Hitachi Vantara Patches Critical Resource Injection Flaw in Pentaho
Hitachi Vantara has issued a critical security advisory addressing a serious vulnerability in its widely used Pentaho Data
SecurityOnline - IronHusky APT Resurfaces with Evolved MysterySnail RAT
In a newly released report, Kaspersky’s Global Research and Analysis Team (GReAT) has revealed the resurgence of IronHusky,
SecurityOnline - Siemens Fixes 66 SQL Injection Flaws in TeleControl Server Basic
Siemens has released a critical security advisory addressing 66 high-severity SQL injection vulnerabilities impacting its TeleControl Server Basic
SecurityOnline - Sophisticated Phishing Campaign Uses Multi-Layered Tactics to Deliver Malware
A recent report from Unit 42, the threat intelligence division of Palo Alto Networks, reveals a sophisticated and
SecurityOnline - Gamaredon’s PteroLNK Malware: Stealthy Espionage Tactics Uncovered
A recent deep-dive analysis by HarfangLab uncovers new insights into the persistent and ever-evolving operations of Gamaredon, a
SecurityOnline - Gorilla Android Malware: Evolving Threat with Espionage Capabilities
A newly discovered Android malware dubbed Gorilla is quietly emerging as a serious threat, according to a technical
SecurityOnline - Interlock Ransomware Uses Evolving Tactics to Evade Detection
A new report by Sekoia Threat Detection & Research (TDR) details the activities of Interlock, a ransomware intrusion
SecurityOnline - Server-Side Phishing Campaign Evades Detection, Targets Employee Portals
A new report by threat intelligence platform Hunt.io has revealed a stealthy and persistent phishing campaign that leverages
SecurityOnline