News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Today, Wed 28 Oct | 65 so far | 9 |
Developing
Thu 8 May 202583 articles
- Possible Zero-Day Patched in SonicWall SMA Appliances
SonicWall patches three SMA 100 vulnerabilities, including a potential zero-day, that could be chained to execute arbitrary code remotely.
SecurityWeek - Microsoft Bookings Vulnerability Allows Unauthorized Changes to Meeting Details
Security researchers have uncovered a significant vulnerability in Microsoft Bookings, the scheduling tool integrated with Microsoft 365. The flaw, discovered through technical analysis of the service’s appointment creation and update APIs, allows…
gbhackers.com - Nmap 7.96 Released with Enhanced Scanning Capabilities and Updated Libraries
The popular network mapping and security auditing tool Nmap has released version 7.96, featuring a host of significant improvements. This latest version introduces parallel forward DNS resolution for dramatically faster hostname scanning, upgraded core…
gbhackers.com - Cisco IOS XE Vulnerability Allows Attackers to Gain Elevated Privileges
Cisco has issued an urgent security advisory (ID: cisco-sa-iosxe-privesc-su7scvdp) following the discovery of multiple privilege escalation vulnerabilities in its widely used IOS XE Software. The flaws could allow attackers with existing high-level device…
gbhackers.com - Google Finds Data Theft Malware Used by Russian APT in Select Cases
Russia-linked APT Star Blizzard is using the ClickFix technique in recent attacks distributing the LostKeys malware.
SecurityWeek - SonicWall urges admins to patch VPN flaw exploited in attacks
SonicWall has urged its customers to patch three security vulnerabilities affecting its Secure Mobile Access (SMA) appliances, one of them tagged as exploited in attacks [...]
BleepingComputer - Nova Scotia Power hit by cyberattack, critical infrastructure targeted, no outages reported
The Economic Times reports: Utilities under fire: Nova Scotia Power cyberattack raises alarm Nova Scotia Power and its parent company, Emera, are scrambling to contain the fallout of a cyberattack on critical infrastructure that disrupted IT systems but…
DataBreaches - Security Tools Alone Don't Protect You — Control Effectiveness Does
61% of security leaders reported suffering a breach due to failed or misconfigured controls over the past 12 months. This is despite having an average of 43 cybersecurity tools in place. This massive rate of security failure is clearly not a security…
The Hacker News - WhatsApp hack: Meta wins payout over NSO Group spyware
Meta has won almost $170m in damages from Israel-based NSO Group, maker of the Pegasus spyware. The ruling comes after a six-year legal case against the company after Meta accused it of misusing its servers to spy on users. According to the original…
Malwarebytes - Georgia hospital defeats data-tracking lawsuit
Giles Bruce reports: A Georgia hospital has defeated a class-action lawsuit over the use of data-tracking tools on its websites, Law.com reported. A state court granted Moultrie, Ga.-based Colquitt Regional Medical Center’s motion to dismiss the complaint,…
DataBreaches - Improperly Patched Samsung MagicINFO Vulnerability Exploited by Botnet
The patches for an exploited Samsung MagicINFO vulnerability are ineffective and a Mirai botnet has started targeting it.
SecurityWeek - 60K BTC Wallets Tied to LockBit Ransomware Gang Leaked
CoinPedia reports: “Don’t do crime. CRIME IS BAD. xoxo from Prague.” That’s the message left behind after hackers gave LockBit – a ransomware gang known for extorting millions. Yes, they just got a brutal taste of their own medicine. In a surprising breach,…
DataBreaches - UK: Legal Aid Agency hit by cyber security incident
Henry Vaughan reports: The Ministry of Justice (MoJ) said it is working with the National Crime Agency and National Cyber Security Centre to investigate the data breach. In a letter sent to law firms last week, which has been seen by Sky News, the Legal Aid…
DataBreaches - MirrorFace Targets Japan and Taiwan with ROAMINGMOUSE and Upgraded ANEL Malware
The nation-state threat actor known as MirrorFace has been observed deploying malware dubbed ROAMINGMOUSE as part of a cyber espionage campaign directed against government agencies and public institutions in Japan and Taiwan. The activity, detected by Trend…
The Hacker News - Cisco Patches 35 Vulnerabilities Across Several Products
Cisco releases patches for 26 vulnerabilities in IOS and IOS XE software, including 17 critical- and high-severity bugs.
SecurityWeek - Dozens of SysAid Instances Vulnerable to Remote Hacking
SysAid patches IT service management software vulnerabilities that can be chained for unauthenticated remote command execution.
SecurityWeek - Cisco IOS, XE, and XR Vulnerability Allows Remote Device Reboots
Cisco has issued an urgent security advisory (cisco-sa-twamp-kV4FHugn) warning of a critical vulnerability in its widely used IOS, IOS XE, and IOS XR software. The flaw, tracked as CVE-2025-20154, allows unauthenticated attackers to trigger denial-of-service…
gbhackers.com - OpenCTI: Free Cyber Threat Intelligence Platform for Security Experts
OpenCTI (Open Cyber Threat Intelligence) stands out as a free, open source platform specifically designed to address this need-delivering robust capabilities for cyber threat intelligence (CTI) management and analysis. Created by Filigran, OpenCTI allows…
gbhackers.com - U.S. CISA adds GoVision device flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds GoVision device flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Qualitia Active! Mail, Broadcom Brocade Fabric OS,…
Security Affairs - Masimo Manufacturing Facilities Hit by Cyberattack
Health technology and consumer electronics firm Masimo detected unauthorized activity on its network in late April.
SecurityWeek - Polish authorities arrested 4 people behind DDoS-for-hire platforms
Polish police arrested 4 people behind DDoS-for-hire platforms used in global attacks, offering takedowns for as little as €10 via six stresser services. Polish authorities arrested 4 people linked to 6 DDoS-for-hire platforms, Cfxapi, Cfxsecurity,…
Security Affairs - Microsoft Azure Supports Google’s A2A Protocol for Seamless AI Agent Communication
Microsoft has announced that its cloud-based development platforms, Azure AI Foundry and Copilot Studio, will now support Google’s
SecurityOnline - LinkedIn Enhances Job Search with New AI-Powered Features
Since last year, Microsoft has begun leveraging artificial intelligence to help users more swiftly discover suitable job opportunities.
SecurityOnline - Russian Hackers Using ClickFix Fake CAPTCHA to Deploy New LOSTKEYS Malware
The Russia-linked threat actor known as COLDRIVER has been observed distributing a new malware called LOSTKEYS as part of an espionage-focused campaign using ClickFix-like social engineering lures. "LOSTKEYS is capable of stealing files from a hard-coded…
The Hacker News - LockBit Ransomware Group Breached: Internal Chats and Data Leaked Online
The notorious LockBit ransomware group, once considered one of the world’s most prolific cyber extortion rings, has itself become the victim of a major cyberattack. On May 7, attackers breached and defaced the group’s dark web sites, leaking a trove of…
gbhackers.com - Cisco IOS XE Wireless Controllers Vulnerability Lets Attackers Seize Full Control
A critical security flaw has been discovered in Cisco IOS XE Wireless LAN Controllers (WLCs), potentially allowing unauthenticated remote attackers to gain full control of affected devices. The vulnerability, tracked as CVE-2025-20188, lets attackers upload…
gbhackers.com - 'Lemon Sandstorm' Underscores Risks to Middle East Infrastructure
The Iranian state-backed group targeted the operational technology of a critical national infrastructure (CNI) network and persisted in its network for years, but ultimately failed.
Dark Reading - Cisco Patches CVE-2025-20188 (10.0 CVSS) in IOS XE That Enables Root Exploits via JWT
Cisco has released software fixes to address a maximum-severity security flaw in its IOS XE Wireless Controller that could enable an unauthenticated, remote attacker to upload arbitrary files to a susceptible system. The vulnerability, tracked as…
The Hacker News - Critical CVE-2025-20188 (CVSS 10) Flaw in Cisco IOS XE WLCs Allows Remote Root Access
Cisco has released a security advisory addressing a critical vulnerability in its IOS XE Software for Wireless LAN
SecurityOnline - Multi Vulnerabilities Found in SonicWall SMA 100 Series Prompt Urgent Security Update
SonicWall has released a security advisory detailing multiple vulnerabilities affecting its Secure Mobile Access (SMA) 100 series products.
SecurityOnline - Public notice for individuals affected by an information security breach in the Social Services, Health Care and Rescue Services Division of Helsinki
An internal information security breach has been identified in the Social Services, Health Care and Rescue Services Division of the City of Helsinki. The breach concerns client data from certain Family Law Services, which between 2012 and 2019 was stored on…
DataBreaches - CVE-2025-23123 (CVSS 10): Critical UniFi Protect Cameras Flaw Demands Immediate Updates
Ubiquiti has released a critical security advisory addressing two vulnerabilities in its UniFi Protect ecosystem, including a CVSS
SecurityOnline - Google Uncovers LOSTKEYS Malware Used by Russian COLDRIVER for Cyber Espionage
In a concerning escalation of cyber-espionage activity, Google’s Threat Intelligence Group (GTIG) has revealed the emergence of a
SecurityOnline - Iranian Cyber Espionage Uses Fake Modeling Agency for Targeted Attacks
Recently, researchers at Palo Alto Networks’ Unit 42 have uncovered a covert Iranian cyber-espionage campaign that employed a
SecurityOnline - Inferno Drainer Steals Millions in Evolving Crypto Attacks
A new report by Check Point Research reveals the resurgence and evolution of Inferno Drainer, a player in
SecurityOnline - Agenda Ransomware Evolves with NETXLOADER and SmokeLoader in Global Campaigns
Agenda ransomware, also known as Qilin, has returned. In a recent exposé by Trend Micro, researchers have uncovered
SecurityOnline - APT36 Suspected in India Gov Spoofing Phishing with ClickFix Tactics
Hunt.io, a threat hunting platform, has revealed a sophisticated phishing campaign using ClickFix-style tactics and spoofed Indian government
SecurityOnline - CVE-2025-27533: Apache ActiveMQ Memory Allocation Bug Could Lead to Denial of Service
Apache ActiveMQ, the widely used open-source message broker known for its robust support of multiple protocols and cross-platform
SecurityOnline - Aikido Uncovers Malicious Code in Popular npm Package rand-user-agent
Aikido Security has uncovered a Remote Access Trojan (RAT) embedded in rand-user-agent, a JavaScript package downloaded ~45,000 times
SecurityOnline - Lampion Malware Returns with ClickFix Tactics to Target Portuguese Sectors
Lampion, the banking malware first observed in 2019, has reemerged with new tricks. In a detailed analysis, Unit
SecurityOnline