News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Today, Wed 28 Oct | 49 so far | 8 |
Developing
Mon 5 May 202578 articles
- Multiple Flaws in Tenda RX2 Pro Let Attackers Gain Admin Access
Security researchers have uncovered a series of critical vulnerabilities in the Tenda RX2 Pro Dual-Band Gigabit Wi-Fi 6 Router (Firmware V16.03.30.14), which could allow remote attackers to gain administrative access and, in many cases, full root shell on…
gbhackers.com - Man Admits Hacking Disney and Leaking Data Disguised as Hacktivist
A 25-year-old has admitted hacking Disney systems and leaking data under the guise of a hacktivist collective named NullBulge.
SecurityWeek - ⚡ Weekly Recap: Nation-State Hacks, Spyware Alerts, Deepfake Malware, Supply Chain Backdoors
What if attackers aren't breaking in—they're already inside, watching, and adapting? This week showed a sharp rise in stealth tactics built for long-term access and silent control. AI is being used to shape opinions. Malware is hiding inside software we…
The Hacker News - Experts shared up-to-date C2 domains and other artifacts related to recent MintsLoader attacks
MintsLoader is a malware loader delivering the GhostWeaver RAT via a multi-stage chain using obfuscated JavaScript and PowerShell. Recorded Future researchers observed MintsLoader delivering payloads like GhostWeaver via obfuscated scripts, evading detection…
Security Affairs - Ransomware Group Claims Attacks on UK Retailers
The DragonForce ransomware group has claimed responsibility for the recent cyberattacks on UK retailers Co-op, Harrods, and M&S.
SecurityWeek - Perfection is a Myth. Leverage Isn't: How Small Teams Can Secure Their Google Workspace
Let’s be honest: if you're one of the first (or the first) security hires at a small or midsize business, chances are you're also the unofficial CISO, SOC, IT Help Desk, and whatever additional roles need filling. You’re not running a security department.…
The Hacker News - Microsoft: Windows 11 24H2 now ready to rollout to everyone
Microsoft announced over the weekend that the Windows 11 24H2 update is ready to roll out to all compatible PCs, excluding those with safeguard holds. [...]
BleepingComputer - DarkGPT, Chrome 0-Day Exploit, and Financial Data Sales Detected on Dark Web
DarkGPT, Chrome 0-Day Exploit, and Financial Data Sales Detected on Dark Web Dark Web forums remain active with concerning developments, as SOCRadar’s Dark Web Team identifies new threats this week targeting financial institutions, browser security, and AI…
SOCRadar - PoC Published for Exploited SonicWall Vulnerabilities
PoC code targeting two exploited SonicWall flaws was published just CISA added them to the KEV catalog.
SecurityWeek - Hackers Exploit Email Fields to Launch XSS and SSRF Attacks
Cybersecurity researchers are raising alarms as hackers increasingly weaponize email input fields to execute cross-site scripting (XSS) and server-side request forgery (SSRF) attacks. These vulnerabilities, often overlooked in web applications, allow…
gbhackers.com - Luna Moth Hackers Use Fake Helpdesk Domains to Target Victims
A recent investigation by cybersecurity firm EclecticIQ, in collaboration with threat hunters, has exposed a surge in malicious activity tied to the Luna Moth hacking group. The actors are now leveraging fake helpdesk-themed domains to impersonate legitimate…
gbhackers.com - Cybersecurity M&A Roundup: 31 Deals Announced in April 2025
Thirty-one cybersecurity merger and acquisition (M&A) deals were announced in April 2025.
SecurityWeek - A week in security (April 27 – May 3)
Last week on Malwarebytes Labs: On world password day, Microsoft says fewer passwords, more passkeys Apple AirPlay SDK devices at risk of takeover—make sure you update The 3 biggest cybersecurity threats to small businesses Zero-day attacks on browse...
Malwarebytes - SonicBoom Attack Chain Lets Hackers Bypass Login and Gain Admin Control
Cybersecurity researchers have uncovered a dangerous new exploitation technique, dubbed the “SonicBoom Attack Chain,” which allows hackers to bypass authentication and seize administrative control over SonicWall Secure Mobile Access (SMA) appliances. This…
gbhackers.com - TikTok Fined $600 Million for China Data Transfers That Broke EU Privacy Rules
EU privacy watchdog fined TikTok $600 million after a four-year investigation found that data transfers to China put users at risk of spying, in breach of strict EU data privacy rules.
SecurityWeek - Researcher Uses Copilot with WinDbg to Simplify Windows Crash Dump Analysis
A researcher has unveiled a novel integration between AI-powered Copilot and Microsoft’s WinDbg, dramatically simplifying Windows crash dump analysis. For decades, debugging Windows crash dumps has been a labor-intensive task. Engineers have been stuck…
gbhackers.com - Sansec uncovered a supply chain attack via 21 backdoored Magento extensions
Supply chain attack via 21 backdoored Magento extensions hit 500–1,000 e-stores, including a $40B multinational. Sansec researchers reported that multiple vendors were hacked in a coordinated supply chain attack, the experts discovered that a backdoor was…
Security Affairs - Apache Parquet Java Vulnerability Enables Remote Code Execution
A high-severity vulnerability (CVE-2025-46762) has been discovered in Apache Parquet Java, exposing systems using the parquet-avro module to remote code execution (RCE) attacks. The flaw, disclosed by Apache Parquet contributor Gang Wu on May 2, 2025,…
gbhackers.com - California Man to Plead Guilty in Hack of Disney Employee, Theft of 1.1TB of Confidential Slack Data
In a case that merges social engineering, malware, and corporate espionage, the U.S. Department of Justice (DOJ) has
SecurityOnline - MediaTek May 2025 Security Bulletin: Chipset Vulnerabilities Disclosed
The MediaTek Product Security Bulletin for May 2025 highlights multiple security vulnerabilities affecting a wide range of MediaTek-powered
SecurityOnline - Yemeni National Indicted for Black Kingdom Ransomware Attacks
The U.S. Department of Justice (DOJ) has unsealed a three-count federal grand jury indictment against Rami Khaled Ahmed,
SecurityOnline - Golden Chickens Deploy TerraStealerV2 to Steal Browser Credentials and Crypto Wallet Data
The threat actors known as Golden Chickens have been attributed to two new malware families dubbed TerraStealerV2 and TerraLogger, suggesting continued development efforts to fine-tune and diversify their arsenal. "TerraStealerV2 is designed to collect…
The Hacker News - NCSC Warns of Ransomware Attacks Targeting UK Organisations
National Cyber Security Centre (NCSC) has issued technical guidance following a series of cyber attacks targeting UK retailers. These incidents have prompted concerns about the evolving threat landscape, particularly regarding ransomware and data extortion…
gbhackers.com - Google to Offer Gemini AI to Kids Under 13 with Parental Controls
According to a report by The New York Times, Google is planning to extend access to its Gemini
SecurityOnline - NCSC Warns of Pervasive Ransomware Threat: Act Now
The UK’s National Cyber Security Centre (NCSC) has issued a warning: ransomware and cyber extortion are no longer
SecurityOnline - Upload_Bypass – Bypass Upload Restrictions During Penetration Testing
Automate file upload restriction evasion with Upload_Bypass. Bypass filters using smart payload mutations, MIME spoofing, and extension tricks for bug bounties, CTFs, and red teaming.
darknet.org.uk - CVE-2025-46762: Apache Parquet Java Flaw Allows Potential RCE via Avro Schema
A critical security flaw has been identified in Apache Parquet Java, a popular open-source columnar storage format widely
SecurityOnline - Venom Spider Evolves: Arctic Wolf Exposes More_eggs Campaign Targeting HR
In a newly released analysis, Arctic Wolf Labs has documented a sophisticated phishing campaign orchestrated by the financially
SecurityOnline - Critical SQL Injection Vulnerability Found in ADOdb PHP Library – CVE-2025-46337 (CVSS 10.0)
A critical security flaw has been disclosed in ADOdb, the widely-used PHP database abstraction library with over 2.8
SecurityOnline - Bridewell Uncovers ‘Operation Deceptive Prospect’ Targeting UK Organizations via Feedback Portals
Cyber threat actor RomCom—also tracked as Storm-0978, Tropical Scorpius, UNC2596, Void Rabisu, and UAC-0180—has launched a new cyber
SecurityOnline - StealC V2: ThreatLabz Unveils the Evolution of a Stealthy Info-Stealer and Malware Loader
In a comprehensive technical report, ThreatLabz has dissected the inner workings of StealC V2, a major upgrade to
SecurityOnline - SonicWall Exploit Chain Exposes Admin Hijack Risk via CVE-2023-44221 and CVE-2024-38475
A newly exploit chain targeting SonicWall’s Secure Mobile Access (SMA) appliances has been released. Published by watchTowr Labs,
SecurityOnline - APT36 Targets India with Pahalgam Attack-Themed Phishing
Seqrite Labs APT team has revealed that Pakistan-linked threat actor APT36 (Transparent Tribe) has launched a coordinated phishing
SecurityOnline - Golden Chickens Unveils TerraStealerV2 and TerraLogger Malware
The Insikt Group at Recorded Future has detailed two newly discovered malware families linked to the infamous Golden
SecurityOnline - US authorities have indicted Black Kingdom ransomware admin
A 36-year-old Yemeni man behind Black Kingdom ransomware is indicted in the U.S. for 1,500 attacks on Microsoft Exchange servers. U.S. authorities have indicted Rami Khaled Ahmed (aka “Black Kingdom,” of Sana’a, Yemen), a 36-year-old Yemeni national,…
Security Affairs - CVE-2025-31191: Microsoft Exposes macOS Vulnerability Allowing App Sandbox Escape
Microsoft Threat Intelligence has disclosed a significant vulnerability in macOS that could allow attackers to bypass the App
SecurityOnline - SocGholish Reloaded: Darktrace Uncovers Ransomware-Primed Loader Campaign
In a recent report, Darktrace’s Threat Research team has detailed a sophisticated malware campaign involving the SocGholish loader—a
SecurityOnline - Iranian APT Group Breaches Middle Eastern Critical Infrastructure in Stealth Campaign
Recently, the FortiGuard Incident Response (FGIR) team has released an in-depth analysis detailing a prolonged, state-sponsored intrusion into
SecurityOnline