News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Today, Wed 28 Oct | 20 so far | 4 |
Developing
Thu 1 May 202580 articles
- SANS Top 5: Cyber Has Busted Out of the SOC
This year's top cyber challenges include cloud authorization sprawl, ICS cyberattacks and ransomware, a lack of cloud logging, and regulatory constraints keeping defenders from fully utilizing AI's capabilities.
Dark Reading - SocGholish: From loader and C2 activity to RansomHub deployment
In early 2025, Darktrace uncovered SocGholish-to-RansomHub intrusion chains, including loader and C2 activity, alongside credential harvesting via WebDAV and SCF abuse. Learn more about SocGholish and its kill chain here!
darktrace.com - Hacker 'NullBulge' pleads guilty to stealing Disney's Slack data
A California man who used the alias "NullBulge" has pleaded guilty to illegally accessing Disney's internal Slack channels and stealing over 1.1 terabytes of internal company data. [...]
BleepingComputer - Pro-Russia hacktivist group NoName057(16) is targeting Dutch organizations
Pro-Russia hacktivist group NoName057(16) is targeting Dutch organizations with large-scale DDoS attacks, the country’s National Cyber Security Center (NCSC) warns. This week, several Dutch and European organizations faced large-scale DDoS attacks launched…
Security Affairs - Pro-Russia hacktivists bombard Dutch public orgs with DDoS attacks
Russia-aligned hacktivists persistently target key public and private organizations in the Netherlands with distributed denial of service (DDoS) attacks, causing access problems and service disruptions. [...]
BleepingComputer - Experts Debate Real ID Security Ahead of May 7 Deadline
Real IDs have been in the works since 2005. Are their security standards still rigorous enough in 2025?
Dark Reading - Ukrainian extradited to US for Nefilim ransomware attacks
A Ukrainian national has been extradited from Spain to the United States to face charges over allegedly conducting Nefilim ransomware attacks against companies. [...]
BleepingComputer - Harrods the next UK retailer targeted in a cyberattack
London's iconic department store, Harrods, has confirmed it was targeted in a cyberattack, becoming the third major UK retailer to report cyberattacks in a week following incidents at M&S and the Co-op. [...]
BleepingComputer - Managing Shadow IT Risks – CISO’s Practical Toolkit
Managing Shadow IT risks has become a critical challenge for Chief Information Security Officers (CISOs), as the use of unauthorized technology within organizations continues to grow. With 40% of employees admitting to using unsanctioned tools and one-third…
gbhackers.com - Application Security in 2025 – CISO’s Priority Guide
Application security in 2025 has become a defining concern for every Chief Information Security Officer (CISO) as organizations accelerate their digital transformation journeys. The explosion of cloud-native applications, microservices, and APIs has created…
gbhackers.com - FBI shared a list of phishing domains associated with the LabHost PhaaS platform
The FBI shared 42K phishing domains tied to LabHost, a PhaaS platform shut down in April 2024, to boost awareness and help identify compromises. The FBI shared a list of 42,000 domains registered from November 2021 to Apr 2024, linked to LabHost to raise…
Security Affairs - Preparing for Quantum Cybersecurity Risks – CISO Insights
Quantum cybersecurity risks represent a paradigm shift in cybersecurity, demanding immediate attention from Chief Information Security Officers worldwide. While practical quantum computers capable of breaking current encryption standards may still be years…
gbhackers.com - Securing Digital Transformation – CISO’s Resource Hub
In today’s hyper-connected world, securing digital transformation is a technological upgrade and a fundamental reimagining of business models, processes, and customer engagement. Organizations are rapidly shifting to cloud platforms, embracing automation,…
gbhackers.com - Building a Scalable Cybersecurity Framework – CISO Blueprint
Building a scalable cybersecurity framework is essential in today’s rapidly evolving digital landscape, enabling organizations to adapt to changing threats while supporting business growth. A scalable cybersecurity framework isn’t merely about adding more…
gbhackers.com - Protecting Intellectual Property – CISO’s Resource Guide
In today’s digital-first business environment, protecting intellectual property is crucial, as IP remains one of an organization’s most valuable assets. From proprietary algorithms and software code to confidential business strategies and customer data,…
gbhackers.com - Behavioral Analytics for Threat Detection – CISO Trends
In today’s evolving cybersecurity landscape, CISOs face unprecedented challenges from sophisticated threats, making behavioral analytics for threat detection a critical defense strategy. Traditional security measures like firewalls and antivirus solutions…
gbhackers.com - Raytheon Companies and Nightwing Group to Pay $8.4M to Resolve False Claims Act Allegations Relating to Non-Compliance with Cybersecurity Requirements in Federal Contracts
Raytheon Company (Raytheon), RTX Corporation, and Nightwing Group LLC, and Nightwing Intelligence Solutions LLC (collectively, Nightwing), have agreed to pay $8.4 million to resolve allegations that Raytheon violated the False Claims Act by failing to comply…
DataBreaches - Analyzing CVE-2025-31191: A macOS security-scoped bookmarks-based sandbox escape
In April 2024, Microsoft uncovered a vulnerability in macOS that could allow specially crafted codes to escape the App Sandbox and run unrestricted on the system. An attacker could create an exploit to escape the App Sandbox without user interaction required…
Microsoft - Navigating Healthcare Cybersecurity – CISO’s Practical Guide
Navigating healthcare cybersecurity is crucial in today’s hyper-connected environment, where it underpins both operational resilience and patient trust. The rapid digitization of medical records, proliferation of connected devices, and the growing…
gbhackers.com - Getting Outlook.com Ready for Bulk Email Compliance
Microsoft has set May 5 as the deadline for bulk email compliance. In this Tech Tip, we show how organizations can still make the deadline.
Dark Reading - New York’s Latest Cyber Rules Pressure Small Companies, Vendors
Cassandre Coyer reports: As another cybersecurity compliance deadline hits in New York, the impact may be most deeply felt by smaller companies—as well as vendors and other businesses outside the financial sector that technically aren’t within scope of the…
DataBreaches - Preparing for Cyber Warfare – CISO’s Defense Resource Guide
In the digital age, preparing for cyber warfare is essential as organizations face unprecedented threats beyond traditional hacking and data breaches. Cyber warfare-where attacks are orchestrated by nation-states or highly organized groups-can cripple…
gbhackers.com - Malicious PyPI packages abuse Gmail, websockets to hijack systems
Seven malicious PyPi packages were found using Gmail's SMTP servers and WebSockets for data exfiltration and remote command execution. [...]
BleepingComputer - Pushing passkeys forward: Microsoft’s latest updates for simpler, safer sign-ins
Happy World Passkey Day! As the world shifts from passwords to passkeys, we’re excited to join the FIDO Alliance in leaving “World Password Day” behind to celebrate the very first “World Passkey Day.” To commemorate this renaming, Microsoft and dozens of…
Microsoft - Canadian electric utility Nova Scotia Power and parent company Emera suffered a cyberattack
Canadian electric utility Nova Scotia Power and parent company Emera are facing a cyberattack that disrupted their IT systems and networks. Nova Scotia Power Inc. is a vertically integrated electric utility serving the province of Nova Scotia, Canada.…
Security Affairs - Fake Security Plugin on WordPress Enables Remote Admin Access for Attackers
Cybersecurity researchers have shed light on a new campaign targeting WordPress sites that disguises the malware as a security plugin. The plugin, which goes by the name "WP-antymalwary-bot.php," comes with a variety of features to maintain access, hide…
The Hacker News - A Cybersecurity Paradox: Even Resilient Organizations Are Blind to AI Threats
A LevelBlue report looks at what goes into the security postures of a cyber-resilient organization, and found that AI is still a blind spot.
Dark Reading - Canadian Electric Utility Hit by Cyberattack
Nova Scotia Power and Emera are responding to a cybersecurity incident that impacted IT systems and networks.
SecurityWeek - When Threat Actors Behave Like Managed Service Providers
How one unreasonable client got lucky during a cyber incident, despite their unreasonable response to the threat.
Dark Reading - Microsoft Readies Administrator Protection Option for Windows 11
Microsoft's David Weston describes the new feature as the most significant architectural Windows security change in a generation.
Dark Reading - Year of the Twin Dragons: Developers Must Slay the Complexity and Security Issues of AI Coding Tools
The advantages AI tools deliver in speed and efficiency are impossible for developers to resist. But the complexity and risk created by AI-generated code can’t be ignored.
SecurityWeek - Putin's Cyberattacks on Ukraine Rise 70%, With Little Effect
Russia's cyberattacks on Ukraine have increased dramatically, targeting the country's government and defense infrastructure.
Dark Reading - Cisco Boosts XDR Platform, Splunk With Agentic AI
Cisco joins the agentic AI wave with the introduction of advanced LLMs to autonomously verify and investigate attacks.
Dark Reading - Apple AirPlay SDK devices at risk of takeover—make sure you update
Researchers found a set of vulnerabilities in Apple’s AirPlay SDK that put billions of users at risk of their devices being taking over. AirPlay is Apple’s proprietary wireless technology that allows you to stream audio, video, photos, and even mirror your…
Malwarebytes - Your Vendors, Your Risk: Rethinking Third-Party Security in the Age of Supply Chain Attacks
Protecting against supply chain cyber-attacks means safeguarding not just your network, but your customers’ trust. Learn why securing vendor relationships is essential in today’s threat landscape.
darktrace.com - More Details Come to Light on Commvault Vulnerability Exploitation
Commvault has shared indicators of compromise associated with the exploitation of a vulnerability by state-sponsored hackers.
SecurityWeek - Why top SOC teams are shifting to Network Detection and Response
Security Operations Center (SOC) teams are facing a fundamentally new challenge — traditional cybersecurity tools are failing to detect advanced adversaries who have become experts at evading endpoint-based defenses and signature-based detection systems. The…
The Hacker News - 45 CHS hospitals were affected by the Oracle Health outage
This is reportedly all resolved by now, but on April 25, Becker’s Hospital Review reported that dozens of hospitals affiliated with Franklin, Tenn.-based Community Health Systems were experiencing IT outages after data storage linked to their Oracle Health…
DataBreaches - Barnstable County Sheriff’s Office Employee On Leave, Suspected In Data Breach
Michael J. Rausch reports: An employee with the Barnstable County Sheriff’s Office (BCSO) has been placed on leave for allegedly leaking personal information via a breach of data on over 100 former and one current employee. The sheriff’s office said that the…
DataBreaches - Texas Health and Human Services Commission Notifies Additional Individuals Regarding Insider Wrongdoing Breach
There’s an update to an insider data breach previously announced in January 2025. Yesterday’s announcement brings the new total affected to almost 95,000 people. April 30, 2025. AUSTIN – The Texas Health and Human Services Commission is notifying an…
DataBreaches