News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 75 | 20 |
| Today, Tue 27 Oct | 93 so far | 18 |
Developing
Mon 21 Apr 202571 articles
- New sophisticate malware SuperCard X targets Androids via NFC relay attacks
‘SuperCard X’ – a new MaaS – targets Androids via NFC relay attacks, enabling fraudulent POS and ATM transactions with stolen card data. Cleafy researchers discovered a new malware-as-a-service (MaaS) called SuperCard X targeting Android devices with NFC…
Security Affairs - RDP and MS Office Vulnerabilities Abused by Kimusky in Targeted Intrusions
The AhnLab SEcurity intelligence Center (ASEC) has released a detailed analysis of a sophisticated cyber campaign dubbed “Larva-24005,” linked to the notorious North Korean hacking group Kimsuky. This operation has been targeting critical sectors in South…
gbhackers.com - New Obfuscation Trick Lets Attackers Evade Antivirus and EDR Tools
Researchers have unveiled a sophisticated new technique that allows attackers to bypass traditional Antivirus (AV) and Endpoint Detection and Response (EDR) solutions. By exploiting how these defensive tools analyze command-line arguments—a core method of…
gbhackers.com - Chinese Hackers Leverage Reverse SSH Tool in New Wave of Attacks on Organizations
The Chinese hacker group known as Billbug, or Lotus Blossom, targeted high-profile organizations across Southeast Asia. The attackers, who were previously documented by Symantec and later Cisco Talos, employed a variety of new custom tools, alongside novel…
gbhackers.com - Linux 6.15-rc3 Released With Key Kernel Bug Fixes
Linus Torvalds announced the release of Linux 6.15-rc3, delivering a fresh batch of bug fixes and minor adjustments to the ever-evolving Linux kernel. As is customary, the release candidate comes right on schedule, arriving just after the weekend—this time,…
gbhackers.com - Russia-linked APT29 targets European diplomatic entities with GRAPELOADER malware
Russia-linked group APT29 targeted diplomatic entities across Europe with a new malware loader codenamed GRAPELOADER. Check Point Research team reported that Russia-linked cyberespionage group APT29 (aka SVR group, Cozy Bear, Nobelium, BlueBravo, ...
Security Affairs - Hackers Abuse Zoom’s Remote Control to Access Users’ Computers
A newly uncovered hacking campaign is targeting business leaders and cryptocurrency firms by abusing Zoom’s remote control feature, allowing attackers to take over victims’ computers with a single click. The sophisticated operation, attributed to a threat…
gbhackers.com - Phishing attacks leveraging HTML code inside SVG files
With each passing year, phishing attacks feature more and more elaborate techniques designed to trick users and evade security measures. Attackers employ deceptive URL redirection tactics, such as appending malicious website addresses to seemingly safe…
securelist.com - Speedify VPN Vulnerability on macOS Exposes Users to System Takeover
A major security flaw in the Speedify VPN application for macOS, tracked as CVE-2025-25364, has exposed millions of users to the risk of complete system compromise. Researchers at SecureLayer7 discovered the vulnerability in Speedify’s privileged helper…
gbhackers.com - A week in security (April 12 – April 18)
Last week on Malwarebytes Labs: Text scams grow to steal hundreds of millions of dollars Apple patches security vulnerabilities in iOS and iPadOS. Update now! Hi, robot: Half of all internet traffic now automated “I sent you an email from your email...
Malwarebytes - Hackers Abuse Russian Bulletproof Host Proton66 for Global Attacks and Malware Delivery
Cybersecurity researchers have disclosed a surge in "mass scanning, credential brute-forcing, and exploitation attempts" originating from IP addresses associated with a Russian bulletproof hosting service provider named Proton66. The activity, detected since…
The Hacker News - Microsoft Urges TPM 2.0 for Windows 11 Upgrade as Win 10 Support Nears End
Microsoft is eager for more users to migrate from Windows 10 to Windows 11—but only if their hardware
SecurityOnline - Critical PyTorch Vulnerability Allows Hackers to Run Remote Code
A newly disclosed critical vulnerability (CVE-2025-32434) in PyTorch, the widely used open-source machine learning framework, allows attackers to execute arbitrary code on systems loading AI models—even when safety measures like weights_only=True are…
gbhackers.com - Android 16 Beta Boosts Linux Terminal Storage with Dynamic Allocation
Google has introduced a new Linux terminal in the Android 16 beta, though unlike traditional terminals, this one
SecurityOnline - Broadcom Backtracks: Reinstates Lower VMware Core Licensing After Backlash
In March, Broadcom announced a significant change to the licensing and renewal policy for its VMware virtualization software
SecurityOnline - Linux Kernel 6.13 Reaches End-of-Life After Short 3-Month Support
The non–Long-Term Support (non-LTS) versions of the Linux Kernel typically have very brief lifespans. For instance, Linux Kernel
SecurityOnline - ASUS Router Flaw Allows Hackers to Remotely Execute Malicious Code
ASUS has acknowledged multiple critical vulnerabilities affecting its routers that could allow hackers to remotely execute malicious code, thereby compromising network security and user privacy. These flaws highlight the continuous challenges in securing IoT…
gbhackers.com - Cybercriminals Exploit Google OAuth Loophole to Evade Gmail Security
A sophisticated phishing attack exploiting a loophole in Google’s OAuth infrastructure has surfaced, raising significant concerns about the security of Gmail users worldwide. Security researcher Nick Johnson (@nicksdjohnson) recently shared details of the…
gbhackers.com - Elkeid – A Modern, Scalable HIDS for Cloud-Native Infrastructure
Elkeid is a high-performance, open-source Host-Based Intrusion Detection System (HIDS) built by ByteDance to secure Linux workloads across cloud, container, and hybrid environments. If tools like OSSEC or Snort feel dated in your K8s stack or Falco is too…
darknet.org.uk - Cellebrite Android Zero-Day Exploit PoC Released: CVE-2024-53104
A security researcher published a proof-of-concept exploit code for an Android zero-day exploit chain developed by Cellebrite to
SecurityOnline - Critical PyTorch Vulnerability CVE-2025-32434 Allows Remote Code Execution
A critical vulnerability has been unearthed in PyTorch, one of the most beloved deep learning frameworks out there.
SecurityOnline - Billbug Group Targets Southeast Asia in Sophisticated Espionage Campaign
A recent report by Symantec’s Threat Hunter Team has uncovered an extensive espionage campaign orchestrated by the Billbug
SecurityOnline - Yokogawa Recorders Vulnerable to Attack Due to Insecure Default Settings
Yokogawa Electric Corporation has issued a security advisory warning of a critical vulnerability affecting several of its industrial
SecurityOnline - Did DOGE “breach” Americans’ data? (Lock and Code S06E08)
This week on the Lock and Code podcast… If you don’t know about the newly created US Department of Government Efficiency (DOGE), there’s a strong chance they already know about you. Created on January 20 by US President Donald Trump through Executive Order,…
Malwarebytes - CVE-2025-2492: Critical ASUS Router Vulnerability Requires Immediate Firmware Update
ASUS has released a firmware update addressing a critical-severity vulnerability—CVE-2025-2492—with a CVSSv4 score of 9.2. The flaw impacts
SecurityOnline - State-Sponsored Actors Adopt ClickFix Technique in Cyber Espionage
In a recent cybersecurity report by Proofpoint researchers, a notable trend has emerged: state-sponsored actors are increasingly incorporating
SecurityOnline - Larva-24005: Kimsuky’s Global Cyber Espionage Campaign Exploits RDP and Office Flaws
A new cybersecurity report from the AhnLab Security intelligence Center (ASEC) has shed light on a recently identified
SecurityOnline - CVE-2025-42599: Critical Buffer Overflow in Active! mail Exploited in the Wild
A severe security vulnerability has been identified in Active! mail, a product of QUALITIA CO., LTD., posing a
SecurityOnline - APT41/RedGolf Infrastructure Briefly Exposed: Fortinet Zero-Days Targeted Shiseido
In a rare window into the operations of an advanced persistent threat, a KeyPlug-linked infrastructure briefly went live,
SecurityOnline - Critical Meshtastic RCE Vulnerability (CVE-2025-24797) Requires Urgent Update
A critical security vulnerability has been disclosed in Meshtastic, the open-source LoRa mesh networking platform known for enabling
SecurityOnline - FOG Ransomware Spread by Cybercriminals Claiming Ties to DOGE
This blog details our investigation of malware samples that conceal within them a FOG ransomware payload.
trendmicro.com