News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Today, Wed 28 Oct | 25 so far | 5 |
Developing
Thu 1 May 202580 articles
- Cybersecurity experts investigating “suspicious activity” in Iowa County network
Evan Bolin reports: Iowa County, Wisconsin is working with cybersecurity experts after suspicious activity was detected in the county computer network. County spokesperson Debbie Siegenthaler says the county detected the activity on April 28. At that point,…
DataBreaches - Za: Cell C confirms data breach, warns users to remain vigilant
Nicola Mawson reports: Cell C, South Africa’s fourth largest mobile network operator, said on Wednesday morning that RansomHouse had unlawfully disclosed data after a security breach for which RansomHouse is claiming responsibility. The operator, with 7.7…
DataBreaches - Data breach at collections vendor could affect some Bristol, Tennessee accounts
Another client of Nationwide Recovery Services has announced they were affected by the vendor’s breach. Robert Sorrell reports: BRISTOL, Tenn. — A data breach at a third-party vendor used by the city of Bristol, Tennessee, may have exposed sensitive personal…
DataBreaches - The 3 biggest cybersecurity threats to small businesses
In an online world filled with extraordinarily sophisticated cyberattacks—including organized assaults on software supply chains, state-directed exploitations of undiscovered vulnerabilities, and the novel and malicious use of artificial intelligence…
Malwarebytes - Netgear EX6200 Flaw Enables Remote Access and Data Theft
Security researchers have disclosed three critical vulnerabilities in the Netgear EX6200 Wi-Fi range extender that could allow remote attackers to gain unauthorized access and steal sensitive data. The flaws affect firmware version 1.0.3.94 and have been…
gbhackers.com - Chinese APT’s Adversary-in-the-Middle Tool Dissected
ESET has analyzed Spellbinder, the IPv6 SLAAC spoofing tool Chinese APT TheWizards uses to deploy its WizardNet backdoor.
SecurityWeek - Tesla Model 3 VCSEC Vulnerability Lets Hackers Run Arbitrary Code
A critical security flaw in Tesla’s Model 3 vehicles, disclosed at the 2025 Pwn2Own hacking competition, allows attackers to execute malicious code remotely via the vehicle’s Tire Pressure Monitoring System (TPMS). The vulnerability, now patched, highlights…
gbhackers.com - Claude AI Exploited to Operate 100+ Fake Political Personas in Global Influence Campaign
Artificial intelligence (AI) company Anthropic has revealed that unknown threat actors leveraged its Claude chatbot for an "influence-as-a-service" operation to engage with authentic accounts across Facebook and X. The sophisticated activity, branded as…
The Hacker News - Quantum Computing and Cybersecurity – What CISOs Need to Know Now
As quantum computing transitions from theoretical research to practical application, Chief Information Security Officers (CISOs) face an unprecedented challenge to cryptographic security. The emergence of cryptanalytically relevant quantum computers (CRQCs)…
gbhackers.com - Zero-day attacks on browsers and smartphones drop, says Google
Cybercriminals are having less success targeting end-user technology with zero-day attacks, said Google’s security team this week. While most attacks do still target personal technology like smartphones and browsers, the focus is moving increasingly to…
Malwarebytes - Actions Over Words: Career Lessons for the Security Professional
In a world full of noise and promises, it’s those who consistently deliver behind the scenes who build the most respected and rewarding careers.
SecurityWeek - Amazon Launches Nova Premier AI Model with 1 Million Token Context
At the re:Invent 2024 conference last year, Amazon unveiled its proprietary Nova series of generative artificial intelligence models.
SecurityOnline - SonicWall Flags Two More Vulnerabilities as Exploited
SonicWall has updated the advisories for two vulnerabilities to warn that they are being exploited in the wild.
SecurityWeek - New Research Reveals: 95% of AppSec Fixes Don’t Reduce Risk
For over a decade, application security teams have faced a brutal irony: the more advanced the detection tools became, the less useful their results proved to be. As alerts from static analysis tools, scanners, and CVE databases surged, the promise of better…
The Hacker News - DarkWatchman, Sheriff Malware Hit Russia and Ukraine with Stealth and Nation-Grade Tactics
Russian companies have been targeted as part of a large-scale phishing campaign that's designed to deliver a known malware called DarkWatchman. Targets of the attacks include entities in the media, tourism, finance and insurance, manufacturing, retail,…
The Hacker News - Ascension Discloses Data Breach Potentially Linked to Cleo Hack
Ascension is notifying over 100,000 people that their personal information was stolen in a data breach potentially linked to the Cleo hack.
SecurityWeek - Two SonicWall SMA100 flaws actively exploited in the wild
SonicWall confirmed that threat actors actively exploited two vulnerabilities impacting its SMA100 Secure Mobile Access (SMA) appliances. SonicWall revealed that attackers actively exploited two security vulnerabilities, tracked as CVE-2023-44221 and…
Security Affairs - Google Invests in Electrician Training to Power AI’s Energy Demands
Google has announced funding support for the electrical training ALLIANCE (etA) — a joint initiative of the National
SecurityOnline - SentinelOne Targeted by North Korean IT Workers, Ransomware Groups, Chinese Hackers
SentinelOne has shared some information on the types of threat actors that have targeted the security firm recently.
SecurityWeek - US Tariffs and AI Export Controls Worry Samsung Despite Record Revenue
During its recent earnings conference, Samsung noted that ongoing uncertainty surrounding U.S. tariff policies, coupled with increasingly stringent
SecurityOnline - Zuckerberg: AI to Handle Majority of Meta’s Code in 1-1.5 Years
In a conversation with Microsoft CEO Satya Nadella, Mark Zuckerberg expressed his ambition to delegate more than half
SecurityOnline - Commvault Confirms Hackers Exploited CVE-2025-3928 as Zero-Day in Azure Breach
Enterprise data backup platform Commvault has revealed that an unknown nation-state threat actor breached its Microsoft Azure environment by exploiting CVE-2025-3928 but emphasized there is no evidence of unauthorized data access. "This activity has affected…
The Hacker News - Hive0117 group targets Russian firms with new variant of DarkWatchman malware
Hive0117 targets Russian firms in multiple sectors with phishing attacks using a modified version of the DarkWatchman malware. A cybercrime group named Hive0117 is behind a fresh phishing campaign that targeted Russian organizations with a new version of the…
Security Affairs - Apache ActiveMQ Vulnerability Lets Remote Hackers Execute Arbitrary Code
A high vulnerability in Apache ActiveMQ’s .NET Message Service (NMS) library has been uncovered, enabling remote attackers to execute arbitrary code on unpatched systems. Tracked as CVE-2025-29953, this flaw carries a high CVSS score of 8.1 and impacts all…
gbhackers.com - SonicWall Confirms Active Exploitation of Flaws Affecting Multiple Appliance Models
SonicWall has revealed that two now-patched security flaws impacting its SMA100 Secure Mobile Access (SMA) appliances have been exploited in the wild. The vulnerabilities in question are listed below - CVE-2023-44221 (CVSS score: 7.2) - Improper…
The Hacker News - Commvault Confirms Zero-Day Attack Breached Its Azure Cloud Environment
Commvault, a global leader in data protection and information management, has confirmed that a sophisticated cyberattack involving a zero-day vulnerability breached its Azure cloud environment earlier this week. The breach, attributed to a suspected…
gbhackers.com - FBI Uncovers 42,000 Phishing Domains Tied to LabHost PhaaS Operation
The Federal Bureau of Investigation (FBI) has revealed the existence of 42,000 phishing domains associated with the notorious LabHost phishing-as-a-service (PhaaS) platform. This operation, which spanned from November 2021 through April 2024, was recently…
gbhackers.com - Tor Browser 14.5.1 Released with Enhanced Security and New Features
The Tor Project has announced the official release of Tor Browser 14.5.1, introducing a host of security improvements and new features designed to bolster privacy and ease of use for millions around the globe. The new version is now available on the Tor…
gbhackers.com - SonicWall Confirms Active Exploitation of SMA 100 Vulnerabilities – Urges Immediate Patching
On April 29, 2025, SonicWall issued an urgent update to two previously disclosed vulnerabilities affecting its SMA 100
SecurityOnline - Billbug Expands Cyber-Espionage Campaign in Southeast Asia
The China-linked cyber-operations group, better known as Lotus Panda, uses its own custom malware to focus on government agencies and private companies in Hong Kong, the Philippines, Taiwan, and Vietnam.
Dark Reading - CVE-2024-10442 (CVSS 10): Zero-Click RCE in Synology DiskStation, PoC Publishes
A critical remote code execution (RCE) vulnerability has been disclosed in Synology’s DiskStation DS1823xs+, a popular NAS appliance
SecurityOnline - CVE-2025-29906: Finit’s Bundled Getty Flaw Allows Authentication Bypass on Linux Systems
A serious security vulnerability has been discovered in Finit, a lightweight and fast init system for Linux, originally
SecurityOnline - APT28 Cyber Espionage Campaign Targets French Institutions Since 2021
The French National Cybersecurity Agency (ANSSI) has released a detailed report exposing a sustained and strategic cyber-espionage campaign
SecurityOnline - CVE-2025-32444 (CVSS 10): Critical RCE Flaw in vLLM’s Mooncake Integration Exposes AI Infrastructure
A critical security vulnerability has been disclosed in vLLM, a popular open-source library used for high-performance inference and
SecurityOnline - Hackers abuse IPv6 networking feature to hijack software updates
A China-aligned APT threat actor named "TheWizards" abuses an IPv6 networking feature to launch adversary-in-the-middle (AitM) attacks that hijack software updates to install Windows malware. [...]
BleepingComputer - CAPTCHA to Command: Trustwave Uncovers Stealthy NodeJS Backdoor Campaign
Trustwave SpiderLabs has uncovered an evolving cyber threat that leverages deceptive CAPTCHA verifications to infect users with stealthy
SecurityOnline - Gremlin Stealer Malware Targets Browsers, Crypto Wallets, and VPNs in Telegram-Based Campaign
Researchers at Palo Alto Networks’ Unit 42 have unveiled a new, actively developed malware strain dubbed Gremlin Stealer,
SecurityOnline - Outlaw Botnet Exploits Weak SSH to Hijack Linux Systems for Crypto Mining
While high-profile ransomware and state-backed APT groups often dominate headlines, it’s crucial not to overlook quieter yet persistent
SecurityOnline - Sophisticated Attacks Employ Cobalt Strike, DLL Sideloading, and Evolving Tactics
In a sophisticated campaign that spanned multiple regions and techniques, Sophos researchers uncovered a cluster of targeted attacks
SecurityOnline - Earth Kasha Refines Spear-Phishing Tactics in Espionage Campaign Targeting Taiwan and Japan
In a renewed cyber-espionage campaign observed in March 2025, the notorious APT group Earth Kasha, believed to operate
SecurityOnline