News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Today, Wed 28 Oct | 5 so far | 1 |
Developing
Wed 23 Apr 202586 articles
- Picnic Corporation Rebrands to VanishID, Raises $10 Million
Picnic Corporation has rebranded to VanishID and announced the launch of a CEO privacy and security offering.
SecurityWeek - APT34 Hackers Use Port 8080 for Fake 404 Responses and Shared SSH Keys
Researchers have uncovered early indicators of malicious infrastructure linked to APT34, also known as OilRig, a suspected Iranian threat group notorious for targeting sectors like education, government, energy, telecom, and NGOs. Between November 2024 and…
gbhackers.com - Three Reasons Why the Browser is Best for Stopping Phishing Attacks
Phishing attacks remain a huge challenge for organizations in 2025. In fact, with attackers increasingly leveraging identity-based techniques over software exploits, phishing arguably poses a bigger threat than ever before. Attackers are increasingly…
The Hacker News - Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsApp
Multiple suspected Russia-linked threat actors are "aggressively" targeting individuals and organizations with ties to Ukraine and human rights with an aim to gain unauthorized access to Microsoft 365 accounts since early March 2025. The highly targeted…
The Hacker News - Kelly Benefits Data Breach Impacts 260,000 People
Benefits and payroll solutions provider Kelly Benefits has disclosed a data breach impacting more than 260,000 individuals.
SecurityWeek - Hackers Exploit Weaponized Word Docs to Steal Windows Login Credentials
A sophisticated phishing campaign has been uncovered by Fortinet’s FortiGuard Labs, targeting Windows users with malicious Word documents designed to steal sensitive data. Disguised as legitimate sales orders, these emails trick recipients into opening…
gbhackers.com - Cyberattack Hits British Retailer Marks & Spencer
British retailer Marks & Spencer has been experiencing certain service disruptions after falling victim to a cyberattack.
SecurityWeek - Data Breach at Onsite Mammography Impacts 350,000
Massachusetts medical firm Onsite Mammography discloses data breach impacting the personal information of 350,000 patients.
SecurityWeek - Cookie-Bite Attack Enables MFA Bypass and Persistent Cloud Server Access
Researchers have exposed a sophisticated cyberattack technique dubbed the “Cookie-Bite Attack,” which allows adversaries to bypass Multi-Factor Authentication (MFA) and maintain persistent access to cloud servers such as Microsoft 365, Azure Portal, and…
gbhackers.com - The popular xrpl.js Ripple cryptocurrency library was compromised in a supply chain attack
The xrpl.js Ripple cryptocurrency library was compromised in a supply chain attack aimed at stealing users’ private keys. Threat actors compromised the Ripple cryptocurrency npm JavaScript library xrpl.js to harvest users’ private keys. xrpl.js is the re...
Security Affairs - Synology Network File System Vulnerability Allows Unauthorized File Access
A critical security vulnerability in Synology’s Network File System (NFS) service, tracked as CVE-2025-1021, has been resolved after allowing unauthorized remote attackers to access sensitive files on vulnerable DiskStation Manager (DSM) devices. The flaw,…
gbhackers.com - British retailer giant Marks & Spencer (M&S) is managing a cyber incident
Marks & Spencer (M&S) confirmed it’s managing a cyber incident after multiple customer complaints surfaced on social media. Marks and Spencer Group plc (M&S) announced it has been managing a cyber incident in recent days with the help of external cyber…
Security Affairs - Terra Security Raises $8M for Agentic AI Penetration Testing Platform
Cybersecurity startup Terra Security has raised $8 million in seed funding from SYN Ventures, FXP Ventures, and Underscore VC.
SecurityWeek - Google Reverses Third-Party Cookie Phaseout, Privacy Sandbox Relegated to Support Role
Currently, the industry widely relies on cookie technology to store user data, and advertising networks use cookies to
SecurityOnline - Super-Smart AI Could Launch Attacks Sooner Than We Think
In a development for cybersecurity, large language models (LLMs) are being weaponized by malicious actors to orchestrate sophisticated attacks at an unprecedented pace. Despite built-in safeguards akin to a digital Hippocratic Oath that prevent these models…
gbhackers.com - Hackers Deploy New Malware Disguised as Networking Software Updates
A sophisticated backdoor has been uncovered targeting major organizations across Russia, including government bodies, financial institutions, and industrial sectors. This malware, distributed under the guise of legitimate updates for ViPNet a widely used…
gbhackers.com - Microsoft fixes Remote Desktop freezes caused by Windows updates
Microsoft has resolved a known issue causing Remote Desktop sessions to freeze on Windows Server 2025 and Windows 11 24H2 devices. [...]
BleepingComputer - CrowdStrike Launches Falcon® Privileged Access with Advanced Identity Protection
CrowdStrike today announced the general availability of Falcon® Privileged Access, a breakthrough module in its Falcon® Identity Protection suite, aimed at redefining identity security for modern organizations. This launch positions CrowdStrike’s AI-native…
gbhackers.com - Chinese Cybercriminals Released Z-NFC Tool for Payment Fraud
Cybercriminals leverage NFC fraud against ATMs and POS terminals, stealing money from consumers at scale. Resecurity (USA) investigated multiple incidents identified in Q1 2025, exceeding several million dollars in damages for one of the top Fortune 100…
Security Affairs - Microsoft fixes Windows Server 2025 blue screen, install issues
Microsoft has fixed several known issues that caused Blue Screen of Death (BSOD) and installation issues on Windows Server 2025 systems with a high core count. [...]
BleepingComputer - Zyxel Releases Patches for Privilege Management Vulnerabilities in Firewalls
Zyxel, a leading provider of secure networking solutions, has released critical security patches to address two privilege management vulnerabilities in the USG FLEX H series firewalls. The flaws, tracked as CVE-2025-1731 and CVE-2025-1732, could allow…
gbhackers.com - Korean Telco Giant SK Telecom Hacked
SK Telecom, South Korea’s largest telecom company, disclosed a data leak involving a malware infection.
SecurityWeek - Ripple's xrpl.js npm Package Backdoored to Steal Private Keys in Major Supply Chain Attack
The Ripple cryptocurrency npm JavaScript library named xrpl.js has been compromised by unknown threat actors as part of a software supply chain attack designed to harvest and exfiltrate users' private keys. The malicious activity has been found to affect…
The Hacker News - Marks & Spencer Confirms Cyberattack Disrupting Payments and Online Orders
Leading British retailer Marks & Spencer Group plc (M&S) has confirmed it has been grappling with a cyberattack over the past several days, causing temporary disruptions to payment processing and online orders. According to an official company statement, the…
gbhackers.com - CISA Issues Five ICS Advisories Highlighting Critical Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released five urgent advisories on April 22, 2025, targeting critical vulnerabilities in widely-used Industrial Control Systems (ICS) from Siemens, ABB, and Schneider Electric. With the…
gbhackers.com - Google Cloud Composer Flaw Allows Attackers to Gain Elevated Privileges
Research disclosed a now-patched high-severity vulnerability in Google Cloud Platform’s (GCP) Cloud Composer service, dubbed ConfusedComposer. It could have allowed attackers to hijack cloud workflows and gain control over critical resources. The flaw…
gbhackers.com - Google Drops Cookie Prompt in Chrome, Adds IP Protection to Incognito
Google on Tuesday revealed that it will no longer offer a standalone prompt for third-party cookies in its Chrome browser as part of its Privacy Sandbox initiative. "We've made the decision to maintain our current approach to offering users third-party…
The Hacker News - Moodle Core vulnerabilities Allow Attackers to Evade Security Measures
A recent security audit has uncovered critical vulnerabilities within Moodle, the widely used open-source learning management system (LMS). These vulnerabilities allow attackers to evade core security mechanisms and potentially exploit systems via…
gbhackers.com - Verizon: Edge Bugs Soar, Ransoms Lag, SMBs Bedeviled
The cybersecurity landscape confounded expectations in 2024, as anticipated threats and risk didn't materialize and less widely touted attack scenarios shot up.
Dark Reading - Zambia's Updated Cyber Laws Prompt Surveillance Warnings
Critics — which include the US embassy in Zambia — contend the just-signed Cyber Security Act and the Cyber Crime Act allow suppression of dissent and too much concentration of power.
Dark Reading - SSL.com Discloses Mis-issuance of Digital Certificates Due to DCV Flaw
SSL.com has disclosed an incident involving the mis-issuance of digital certificates due to an error in its Domain
SecurityOnline - Windows 11 Now Runs on iPad in EU via UTM Virtual Machine
Running Windows 11 on an iPad via a virtual machine has long been a formidable challenge, primarily due
SecurityOnline - Google Pays Samsung to Preinstall Gemini, Raising Antitrust Concerns
During court proceedings related to the U.S. Department of Justice’s antitrust lawsuit against Google, Peter Fitzgerald, Vice President
SecurityOnline - Telegram Refuses France’s Demand for Backdoor Access to User Data
Pavel Durov, founder and CEO of the instant messaging platform Telegram, has revealed that the French government has
SecurityOnline - OpenAI Expresses Interest in Acquiring Chrome Amidst Google Antitrust Scrutiny
According to a report by Reuters, the head of product for OpenAI’s ChatGPT revealed that if Google were
SecurityOnline - Critical RCE Vulnerability in Erlang/OTP SSH Server Impacts Multiple Cisco Products
A critical remote code execution (RCE) vulnerability tracked as CVE-2025-32433 has disclosed. This flaw resides in the Erlang/OTP
SecurityOnline - Cybersecurity in 2025- Real-World Threats and Lessons Learned
From AI-powered deepfake scams to supply chain ransomware, explore real-world cyber incidents from 2024–2025 and what they teach us about preparing for the threats of tomorrow.
darknet.org.uk - IBM HMC Vulnerable to Privilege Escalation Attacks
Two security vulnerabilities have been disclosed in the IBM Hardware Management Console (HMC) for Power Systems, both of
SecurityOnline - Stored XSS Flaw in TP-Link WR841N Routers Could Expose Admin Credentials (CVE-2025-25427)
A security vulnerability has been identified in TP-Link WR841N routers, posing a risk to users. The vulnerability is
SecurityOnline - Two Critical RCE Flaws Expose Yi IOT Smart Cameras to Full Device Takeover
Security researcher Yassine Damiri has uncovered two critical vulnerabilities in the Yi IOT XY-3820 smart camera, posing significant
SecurityOnline