News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Today, Wed 28 Oct | 11 so far | 1 |
Developing
Mon 28 Apr 202573 articles
- Microsoft Fixes Outlook Lag Issue: Update Timeline
Earlier this month, Microsoft confirmed, following user feedback, that the classic Outlook mail client was experiencing severe system
SecurityOnline - African Telecom Giant MTN Group Discloses Data Breach
MTN Group says the personal information of certain customers was compromised in a cybersecurity incident.
SecurityWeek - PoC rootkit Curing evades traditional Linux detection systems
Researchers created a PoC rootkit called Curing that uses Linux’s io_uring feature to evade traditional system call monitoring. Armo researchers have demonstrated a proof-of-concept (PoC) rootkit named Curing that relies on Linux asynchronous I/O mechanism…
Security Affairs - Earth Kurma Targets Southeast Asia With Rootkits and Cloud-Based Data Theft Tools
Government and telecommunications sectors in Southeast Asia have become the target of a "sophisticated" campaign undertaken by a new advanced persistent threat (APT) group called Earth Kurma since June 2024. The attacks, per Trend Micro, have leveraged…
The Hacker News - Oregon Agency Won’t Say If Hackers Stole Data in Cyberattack
Oregon’s environmental agency won’t say if a group of hackers stole data in a cyberattack that was first announced earlier this month.
SecurityWeek - Critical FastCGI Library Flaw Exposes Embedded Devices to Code Execution
A severe vulnerability (CVE-2025-23016) in the FastCGI library-a core component of lightweight web server communication been disclosed, threatening countless embedded and IoT devices with remote code execution. FastCGI, widely used to connect web servers…
gbhackers.com - Attackers chained Craft CMS zero-days attacks in the wild
Orange Cyberdefense’s CSIRT reported that threat actors exploited two vulnerabilities in Craft CMS to breach servers and steal data. Orange Cyberdefense’s CSIRT warns that threat actors chained two Craft CMS vulnerabilities in recent attacks. Orange experts…
Security Affairs - Viasat Modems Zero-Day Vulnerabilities Let Attackers Execute Remote Code
A severe zero-day vulnerability has been uncovered in multiple Viasat satellite modem models, including the RM4100, RM4200, EM4100, RM5110, RM5111, RG1000, RG1100, EG1000, and EG1020. Identified by ONEKEY Research Lab through automated binary static…
gbhackers.com - WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors
Cybersecurity researchers are warning about a large-scale phishing campaign targeting WooCommerce users with a fake security alert urging them to download a "critical patch" but deploy a backdoor instead. WordPress security company Patchstack described the…
The Hacker News - Obfuscation Techniques: A Key Weapon in the Ongoing War Between Hackers and Defenders
Obfuscation stands as a powerful weapon for attackers seeking to shield their malicious code from defenders. This technique, which deliberately makes code hard to understand while preserving its functionality, is a cornerstone of the ongoing struggle between…
gbhackers.com - React Router Vulnerabilities Allow Attackers to Spoof Content and Alter Values
The widely used React Router library, a critical navigation tool for React applications, has resolved two high-severity vulnerabilities (CVE-2025-43864 and CVE-2025-43865) that allowed attackers to spoof content, alter data values, and launch cache-poisoning…
gbhackers.com - Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised
Threat actors have been observed exploiting two newly disclosed critical security flaws in Craft CMS in zero-day attacks to breach servers and gain unauthorized access. The attacks, first observed by Orange Cyberdefense SensePost on February 14, 2025,…
The Hacker News - CISA Alerts Users to Security Flaws in Planet Technology Network Products
The United States Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical security alert regarding multiple severe vulnerabilities discovered in several Planet Technology networking products. The flaws, detailed in alert ICSA-25-114-06,…
gbhackers.com - A week in security (April 21 – April 27)
Last week on Malwarebytes Labs: AI is getting “creepy good” at geo-guessing Zoom attack tricks victims into allowing remote access to install malware and steal money Android malware turns phones into malicious tap-to-pay machines 4.7 million customer...
Malwarebytes - New iOS Vulnerability Could Brick iPhones with Just One Line of Code
A security researcher has uncovered a critical vulnerability in iOS, Apple’s flagship mobile operating system. The flaw, CVE-2025-24091, which leverages the long-standing but little-known “Darwin notification” system, allows any app-including those confined…
gbhackers.com - YouTube Tests AI Overviews for Video Summaries with Gemini
The “AI Overviews” feature, previously implemented in Google Search, will soon be extended to the YouTube platform, enabling
SecurityOnline - Microsoft to Remove Built-in Maps App from Windows 11 in July 2025
Microsoft is currently undertaking an aggressive campaign to eliminate certain low-usage features and applications from Windows 11. The
SecurityOnline - Linux Considers Dropping Support for Ancient i486 and i586 CPUs
The Intel 486, the fourth generation of Intel’s x86 processor line, was initially released in 1989, marking the
SecurityOnline - Windows 11 25H2 Update: Minor Changes Expected in October 2025
Microsoft now schedules major version updates for Windows 11 every October, with the upcoming release set for October
SecurityOnline - Cybercriminals Selling Sophisticated HiddenMiner Malware on Dark Web Forums
Cybercriminals have begun openly marketing a powerful new variant of the HiddenMiner malware on underground dark web forums, raising alarms within the cybersecurity community. The malware, a heavily modified Monero (XMR) cryptocurrency miner, attracts buyers…
gbhackers.com - Three IXON VPN Client Vulnerabilities Let Attackers Escalate Privileges
Security researchers at Shelltrail have discovered three significant vulnerabilities in the IXON VPN client that could allow attackers to escalate privileges on both Windows and Linux systems. The vulnerabilities, temporarily designated as CVE-2025-ZZZ-01,…
gbhackers.com - Cybersecurity Firm CEO Arrested for Planting Malware in Hospital Systems
Jeffrey Bowie, the CEO of a local cybersecurity firm, has been arrested for allegedly planting malware on computers at SSM St. Anthony Hospital. Bowie, who until recently touted himself as a leader in protecting businesses from cyber threats, now faces…
gbhackers.com - DataSurgeon – Fast, Flexible Data Extraction and Transformation Tool for Linux
DataSurgeon is an open-source Linux-based data extraction and transformation tool designed for forensic investigations and recovery scenarios.
darknet.org.uk - Craft CMS Zero-Day CVE-2025-32432 Exploited with Metasploit Module Now Public
Security researcher Chocapikk has published a Metasploit module for a critical zero-day vulnerability impacting Craft CMS, tracked as
SecurityOnline - CISA Warns of Critical Vulnerabilities in Planet Technology Products
CISA has issued a new security advisory highlighting critical vulnerabilities impacting several Planet Technology products, including UNI-NMS-Lite, NMS-500,
SecurityOnline - Critical Flaw Exposes Linux Security Blind Spot: io_uring Bypasses Detection
ARMO researchers have uncovered a critical weakness in Linux runtime security tools, revealing how the io_uring interface enables
SecurityOnline - React Router Vulnerabilities CVE-2025-43864 and CVE-2025-43865 Expose Web Applications to Attack
The React Router team has issued the advisory addressing two vulnerabilities affecting applications running in Framework mode: CVE-2025-43864
SecurityOnline - SocGholish and RansomHub: Sophisticated Attack Campaign Targeting Corporate Networks
The eSentire’s Threat Response Unit (TRU) discovered a sophisticated cyberattack campaign linking SocGholish (also known as FakeUpdates) malware
SecurityOnline - DeviceCodePhishing: How a New Attack Bypasses FIDO and MFA Protections
Security researcher Dennis Kniep has introduced a novel phishing technique known as DeviceCodePhishing, which takes traditional device code
SecurityOnline - CVE-2025-23016: Critical FastCGI Heap Overflow Threatens Embedded Devices, PoC Releases
Security researcher Baptiste Mayaud from Synacktiv has detailed a critical vulnerability in the FastCGI library, tracked as CVE-2025-23016
SecurityOnline - North Korean APT ‘Contagious Interview’ Launches Fake Crypto Companies to Spread Malware Trio
Threat analysts at Silent Push have uncovered a new campaign orchestrated by the North Korean state-sponsored APT group,
SecurityOnline - Multiple Vulnerabilities in NETSCOUT nGeniusONE Threaten Infrastructure Visibility Platforms
NETSCOUT has issued a advisory addressing a series of security vulnerabilities in its flagship infrastructure monitoring platform, nGeniusONE.
SecurityOnline - SessionShark: New Phishing Kit Bypasses Office 365 MFA
Security researchers at SlashNext have uncovered a disturbing new tool emerging in cybercrime networks: SessionShark O365 2FA/MFA. Despite
SecurityOnline