News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Today, Wed 28 Oct | 29 so far | 6 |
Developing
Fri 2 May 202557 articles
- Redis Reintroduces Open-Source AGPL Alongside SSPL Licensing
In March 2024, the widely adopted database caching solution Redis announced its transition to the Server Side Public
SecurityOnline - Microsoft Pushes Passwordless: New Accounts Default to Passkeys & MFA
Microsoft is currently encouraging users to transition from traditional passwords to more secure authentication methods, such as passkeys
SecurityOnline - Microsoft makes all new accounts passwordless by default
Microsoft has announced that all new Microsoft accounts will be "passwordless by default" to secure them against password attacks such as phishing, brute force, and credential stuffing. [...]
BleepingComputer - CISA Issues New ICS Advisories Addressing Critical Vulnerabilities and Exploits
The Cybersecurity and Infrastructure Security Agency (CISA) has issued two new advisories revealing critical vulnerabilities found in widely used Industrial Control Systems (ICS). Released on May 1, 2025, the advisories spotlight severe security risks…
gbhackers.com - NVIDIA TensorRT-LLM Vulnerability Let Hackers Run Malicious Code
NVIDIA has issued an urgent security advisory after discovering a significant vulnerability (CVE-2025-23254) in its popular TensorRT-LLM framework, urging all users to update to the latest version (0.18.2) to safeguard their systems against potential…
gbhackers.com - Microsoft Sets Passkeys Default for New Accounts; 15 Billion Users Gain Passwordless Support
A year after Microsoft announced passkeys support for consumer accounts, the tech giant has announced a big change that pushes individuals signing up for new accounts to use the phishing-resistant authentication method by default. "Brand new Microsoft…
The Hacker News - CISA Issues Alert on Actively Exploited Apache HTTP Server Escape Vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding a newly discovered and actively exploited vulnerability in the widely used Apache HTTP Server. The flaw, catalogued as CVE-2024-38475, affects the server’s…
gbhackers.com - Disney Hacker Admits Guilt After Stealing 1.1TB of Internal Data
A 25-year-old man from Santa Clarita, California, has agreed to plead guilty to hacking into the personal computer of a Walt Disney Company employee and stealing a massive amount of sensitive internal data last year. Ryan Mitchell Kramer faces charges…
gbhackers.com - Shell3r – Powerful Shellcode Obfuscator for Offensive Security
Shell3r is a modular shellcode obfuscator that bypasses basic and mid-level static detection techniques.
darknet.org.uk - xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs
An employee at Elon Musk’s artificial intelligence company xAI leaked a private key on GitHub that for the past two months could have allowed anyone to query private xAI large language models (LLMs) which appear to have been custom made for working with…
Krebs on Security - Critical UAF Vulnerability Discovered in Ladybird Browser Engine (CVE-2025-47154)
The Ladybird browser engine, a relatively new entrant originating from the SerenityOS project, has been found to contain
SecurityOnline - CVE-2025-46619: LFI Vulnerability Affects Multiple Versions of Couchbase Server for Windows
Couchbase Server, a widely-used NoSQL document database engineered for high-performance, interactive applications, disclosed a serious security flaw. The
SecurityOnline - SonicWall Issues Patch for SSRF Vulnerability in SMA1000 Appliances
SonicWall’s Product Security Incident Response Team (PSIRT) has issued an important update for its SMA1000 series appliances following
SecurityOnline - Malicious Python Packages Exploited Gmail as Covert Command-and-Control Channels
In a detailed technical report, Socket’s Threat Research Team uncovered seven malicious Python packages published to the Python
SecurityOnline - Intrinsec Links Eye Pyramid C2 to Ransomware Networks in New Infrastructure Mapping Report
In a comprehensive new report, cybersecurity firm Intrinsec has detailed how infrastructure used by RansomHub and the Eye
SecurityOnline - Bitdefender Exposes Sophisticated Subscription-Based Mystery Box Scams
Bitdefender researchers have uncovered a sprawling web of subscription-based scams that blend professional-looking websites, social media manipulation, and
SecurityOnline - NVIDIA Fixes High-Severity Vulnerability in TensorRT-LLM
NVIDIA has released a security update for its TensorRT-LLM Framework, addressing a high-severity vulnerability that could expose users
SecurityOnline