News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Today, Wed 28 Oct | 11 so far | 1 |
Developing
Tue 29 Apr 202589 articles
- Google Threat Intelligence Group (GTIG) tracked 75 actively exploited zero-day flaws in 2024
Google tracked 75 zero-day flaws exploited in 2024, down from 98 in 2023, according to its Threat Intelligence Group’s latest analysis. In 2024, Google tracked 75 exploited zero-day vulnerabilities, down from 98 in 2023 but up from 63 in 2022. The…
Security Affairs - Pro-Russian hackers strike Dutch municipalities with coordinated DDoS attack
NL Times reports: A large-scale cyberattack hit multiple Dutch municipalities and provinces on Monday morning, rendering the websites of more than twenty local governments inaccessible for several hours. The attack, claimed by the pro-Russian hacker group…
DataBreaches - LayerX Raises $11 Million for Browser Security Solution
Browser security firm LayerX has raised $11 million in a Series A funding round extension led by Jump Capital.
SecurityWeek - Cybersecurity Firms Raise Over $1.7 Billion Ahead of RSA Conference 2025
More than 30 companies announced a total of $1.7 billion in funding in weeks leading up to the industry’s largest gathering.
SecurityWeek - ResolverRAT Targets Healthcare and Pharmaceutical Sectors Through Sophisticated Phishing Attacks
A previously undocumented remote access trojan (RAT) named ResolverRAT has surfaced, specifically targeting healthcare and pharmaceutical organizations worldwide. First observed as recently as March 10, 2025, this malware distinguishes itself from related…
gbhackers.com - Google Tracked 75 Zero-Days in 2024
The number of exploited zero-days seen by Google in 2024 dropped to 75, from 98 observed in the previous year.
SecurityWeek - Marks & Spencer breach linked to Scattered Spider ransomware attack
Lawrence Abrams reports that multiple sources inform them that the outages at UK retail giant Marks & Spencer are the result of a ransomware attack by the group known as “Scattered Spider.” Last Tuesday, M&S confirmed it suffered a cyberattack that caused…
DataBreaches - Europol Launches Taskforce to Combat Violence-as-a-Service Networks
Europol has announced the launch of a powerful new Operational Taskforce (OTF), codenamed GRIMM, to confront the alarming rise of “violence-as-a-service” (VaaS) and the growing recruitment of young people by organised crime groups across Europe. Spearheaded…
gbhackers.com - EFF Leads Prominent Security Experts in Urging Trump Administration to Leave Chris Krebs Alone
DataBreaches has signed the letter, too, and encourages others to sign it. The administration’s attempts to censor honest reporting just because it disagrees with their political agenda and revenge campaign must stop. April 28 – SAN FRANCISCO – The Trump…
DataBreaches - Product Walkthrough: Securing Microsoft Copilot with Reco
Find out how Reco keeps Microsoft 365 Copilot safe by spotting risky prompts, protecting data, managing user access, and identifying threats - all while keeping productivity high. Microsoft 365 Copilot promises to boost productivity by turning natural…
The Hacker News - RSA Conference 2025 – Announcements Summary (Day 1)
Hundreds of companies are showcasing their products and services this week at the 2025 edition of the RSA Conference in San Francisco.
SecurityWeek - Google: Zero-Day Exploits Shift from Browsers to Enterprise Security Tools in 2024
In its latest threat landscape analysis, the Google Threat Intelligence Group (GTIG) reported a continued surge in the
SecurityOnline - What privacy? Perplexity wants your data, builds browser to track you and serve ads
AI search service Perplexity AI doesn’t just want you using its app—it wants to take over your web browsing experience too. The company is planning to launch its own browser, called Comet, next month. But what does this mean for your privacy? Launched in…
Malwarebytes - 4Chan Resumes Operation After Hack, Cites Funding Issues
The internet forum 4chan, which recently suffered a major data breach following a hacker attack, has begun to
SecurityOnline - Exploited Vulnerability Exposes Over 400 SAP NetWeaver Servers to Attacks
More than 400 SAP NetWeaver servers are impacted by CVE-2025-31324, an exploited remote code execution vulnerability.
SecurityWeek - VeriSource data breach impacted 4M individuals
VeriSource breach exposed data of 4M people in Feb 2024; stolen info includes personal details from an employee benefits services provider. VeriSource is alerting 4 million people after a February 2024 breach that exposed personal information. The data was…
Security Affairs - Google Reports 75 Zero-Days Exploited in 2024 — 44% Targeted Enterprise Security Products
Google has revealed that it observed 75 zero-day vulnerabilities exploited in the wild in 2024, down from 98 in 2023. Of the 75 zero-days, 44% of them targeted enterprise products. As many as 20 flaws were identified in security software and appliances.…
The Hacker News - Outlaw cybergang attacking targets worldwide
Introduction In a recent incident response case in Brazil, we dealt with a relatively simple, yet very effective threat focused on Linux environments. Outlaw (also known as “Dota”) is a Perl-based crypto mining botnet that typically takes advantage of weak…
securelist.com - MFA Under Attack: AiTM Phishing Kits Abusing Legitimate Services
Tycoon 2FA uses AiTM phishing and legitimate services to bypass MFA. Darktrace AI stopped it, read the blog to learn how Self-Learning AI detects sophisticated threats.
darktrace.com - Vulnerability Exploitation Is Shifting in 2024-25
The number of vulnerabilities exploited by attacks may not be growing these days, but they are increasingly affecting enterprise technologies.
Dark Reading - CISA Warns of Exploited Broadcom, Commvault Vulnerabilities
CISA urges immediate patching for recently disclosed Broadcom, Commvault, and Qualitia vulnerabilities exploited in the wild.
SecurityWeek - JokerOTP Platform Linked to 28,000+ Phishing Attacks Dismantled
Law enforcement agencies from the UK and the Netherlands have dismantled the notorious JokerOTP cybercrime platform, which is allegedly linked to more than 28,000 phishing attacks across 13 countries. A 24-year-old man was apprehended this morning by…
gbhackers.com - Windows Server 2025 Gets Hotpatching Support Beginning July 1, 2025
Microsoft announced that hotpatching support for Windows Server 2025 will become generally available as a subscription service starting July 1, 2025. This move expands a key feature-previously exclusive to Azure-based servers-for broader use in on-premises…
gbhackers.com - Nigerian National Sentenced in $6M Transnational Inheritance Scam Targeting Elderly
The U.S. Department of Justice announced that Okezie Bonaventure Ogbata, 36, a Nigerian national, has been sentenced to
SecurityOnline - U.S. CISA adds Qualitia Active! Mail, Broadcom Brocade Fabric OS, and Commvault Web Server flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Qualitia Active! Mail, Broadcom Brocade Fabric OS, and Commvault Web Server flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency…
Security Affairs - Nevada Woman Pleads Guilty in $15 Million Fraud Scheme Targeting Elderly Victims
The U.S. Department of Justice (DOJ) recently announced that an 80-year-old Nevada woman, Barbara Trickle, has pleaded guilty
SecurityOnline - Critical Linux Kernel Flaw (CVE-2025-21756) Allows Privilege Escalation
A newly disclosed vulnerability in the Linux kernel, tracked as CVE-2025-21756 and dubbed “Attack of the Vsock,” has sent ripples through the cybersecurity community. The flaw enables attackers to escalate privileges to root, potentially gaining full control…
gbhackers.com - Massive Attack: 4,800+ IPs Used to Target Git Configuration Files
A recent surge in cyber reconnaissance has put thousands of organizations at risk after GreyNoise, a global threat intelligence platform, detected an alarming spike in attempts to access sensitive Git configuration files. Between April 20 and 21, GreyNoise…
gbhackers.com - Malware Attack Targets World Uyghur Congress Leaders via Trojanized UyghurEdit++ Tool
In a new campaign detected in March 2025, senior members of the World Uyghur Congress (WUC) living in exile have been targeted by a Windows-based malware that's capable of conducting surveillance. The spear-phishing campaign involved the use of a trojanized…
The Hacker News - CISA Adds Broadcom Brocade Fabric OS Flaw to Known Exploited Vulnerabilities List
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent security advisory after adding a critical Broadcom Brocade Fabric OS vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog. The flaw, tracked as CVE-2025-1976,…
gbhackers.com - CISA Issues Warning on Commvault Web Server Flaw Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert concerning a newly disclosed security flaw in the Commvault Web Server. This vulnerability, now tracked as CVE-2025-3928, could allow remote, authenticated attackers…
gbhackers.com - CISA Adds Actively Exploited Broadcom and Commvault Flaws to KEV Database
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added two high-severity security flaws impacting Broadcom Brocade Fabric OS and Commvault Web Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active…
The Hacker News - Windows Server 2025 Hotpatching Rolls Out July 1st, Requires Subscription
In 2024, Microsoft began developing hotpatching technology, a feature that allows Windows Server 2025 systems to apply cumulative
SecurityOnline - Kali Linux Users Urged to Manually Install New Repository Signing Key After Key Loss
The renowned penetration testing distro Kali Linux recently issued a warning, advising users to manually install the repository
SecurityOnline - Android Show: Google to Unveil OS Future Before I/O 2025
Ahead of the Google I/O 2025 conference, scheduled to commence on May 20th (Pacific Time), Google will host
SecurityOnline - ChatGPT’s Flattery Problem: OpenAI Responds
If you have recently used ChatGPT, you may have noticed that the application seems excessively flattering and overly
SecurityOnline - IBM’s $150 Billion US Investment to Boost Quantum Innovation and National Security
IBM will invest more than $30 billion in research and development to advance and continue its American manufacturing of mainframe and quantum computers.
SecurityWeek - 0-Click NTLM Authentication Bypass Hits Microsoft Telnet Server, PoC Releases, No Patch
A severe vulnerability affecting Microsoft Telnet Server has been uncovered, allowing remote attackers to completely bypass authentication and
SecurityOnline - Apache Tomcat Security Update Fixes DoS and Rewrite Rule Bypass Flaws
The Apache Software Foundation has released important security updates to address two vulnerabilities affecting multiple versions of Apache
SecurityOnline - CVE-2025-21756: How a Tiny Linux Kernel Bug Led to a Full Root Exploit, PoC Releases
In a recently analysis, security researcher Michael Hoefler has exposed the full depth of CVE-2025-21756, a Use-After-Free (UAF)
SecurityOnline