News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Today, Wed 28 Oct | 80 so far | 15 |
Developing
Mon 12 May 202568 articles
- Metasploit Update Adds Erlang/OTP SSH Exploit and OPNSense Scanner
The open-source penetration testing toolkit Metasploit has unveiled a major update, introducing four new modules, including a highly anticipated exploit targeting Erlang/OTP SSH servers and a scanner for OPNSense firewalls. The release also enhances…
gbhackers.com - German Authorities Take Down Crypto Swapping Service eXch
German authorities seized the servers of crypto-swapping service eXch for laundering approximately $1.9 billion in fraudulent assets.
SecurityWeek - Windows 11 BSOD Survival Guide: Microsoft’s “Help” May Not Save You
The Blue Screen of Death (BSOD) is a rather familiar occurrence for Windows NT users. System crashes leading
SecurityOnline - Blackout Mode: Microsoft Teams to Block Screenshots in Meetings
Microsoft is currently introducing a new feature for Microsoft Teams called “Prevent Screen Capture“. Once enabled, this feature
SecurityOnline - Google Researchers Use Mach IPC to Uncover Sandbox Escape Vulnerabilities
Google Project Zero researchers have uncovered new sandbox escape vulnerabilities in macOS using an innovative approach that leverages Mach Interprocess Communication (IPC) mechanisms-core components of Apple’s operating system. Their public research details…
gbhackers.com - US Announces Botnet Takedown, Charges Against Russian Administrators
Anyproxy and 5socks, websites offering proxy services through devices ensnared by a botnet, have been disrupted in a law enforcement operation.
SecurityWeek - Microsoft Extends Microsoft 365 Support on Windows 10 Until 2028
Previously, Microsoft had clearly stated that support for Microsoft 365 applications on Windows 10 would cease once Windows
SecurityOnline - Cybercriminals Hide Undetectable Ransomware Inside JPG Images
A chilling new ransomware attack method has emerged, with hackers exploiting innocuous JPEG image files to deliver fully undetectable (FUD) ransomware, according to a recent disclosure by cybersecurity researchers. This technique, which bypasses traditional…
gbhackers.com - Hackers Exploit Legacy Protocols in Microsoft Entra ID to Bypass MFA and Conditional Access
A sophisticated and highly coordinated cyberattack campaign came to light, as tracked by Guardz Research. This operation zeroed in on legacy authentication protocols within Microsoft Entra ID, exploiting outdated methods to sidestep modern security measures…
gbhackers.com - Hackers Abuse Copilot AI in SharePoint to Steal Passwords and Sensitive Data
Microsoft’s Copilot for SharePoint, designed to streamline enterprise collaboration through generative AI, has become an unexpected weapon for cybercriminals targeting organizational secrets. Recent findings from cybersecurity researchers reveal that…
gbhackers.com - Defendnot: A Tool That Disables Windows Defender by Registering as Antivirus
Cybersecurity developers have released a new tool called “defendnot,” a successor to the previously DMCA-takedown-affected “no-defender” project. This innovative utility leverages undocumented Windows Security Center APIs to disable Windows Defender by…
gbhackers.com - Mitel SIP Phone Flaws Allow Attackers to Inject Malicious Commands
A pair of vulnerabilities in Mitel’s 6800 Series, 6900 Series, and 6900w Series SIP Phones-including the 6970 Conference Unit-could enable attackers to execute arbitrary commands or upload malicious files to compromised devices, posing significant risks to…
gbhackers.com - Fake AI Tools Used to Spread Noodlophile Malware, Targeting 62,000+ via Facebook Lures
Threat actors have been observed leveraging fake artificial intelligence (AI)-powered tools as a lure to entice users into downloading an information stealer malware dubbed Noodlophile. "Instead of relying on traditional phishing or cracked software sites,…
The Hacker News - Microsoft Teams to Safeguard Meetings by Blocking Screen Snaps
Microsoft has announced the upcoming release of a groundbreaking “Prevent Screen Capture” feature for Teams, designed to block unauthorized screenshots and recordings during virtual meetings. The new capability, slated for worldwide deployment in July 2025,…
gbhackers.com - German police seized eXch crypto exchange
Germany’s BKA shut down eXch crypto exchange, seizing its infrastructure over money laundering and illegal trading platform charges. On April 30, 2025, Germany’s Federal Criminal Police (BKA) shut down the eXch crypto exchange (eXch.cx), seizing its…
Security Affairs - New Exploit Method Extracts Microsoft Entra Tokens Through Beacon
A novel exploit method leveraging Beacon Object Files (BOFs) has emerged, enabling attackers to extract Microsoft Entra (formerly Azure AD) tokens from compromised endpoints, even on non-domain-joined or BYOD devices. This technique sidesteps traditional…
gbhackers.com - PoC Code Published for Linux nftables Security Vulnerability
Security researchers have published proof-of-concept (PoC) exploit code for CVE-2024-26809, a high-severity double-free vulnerability in Linux’s nftables firewall subsystem. The flaw allows local attackers to escalate privileges and execute arbitrary code,…
gbhackers.com - PoC Released: CVE-2024-26809 Exploits nftables Double-Free to Achieve Root Shell
A vulnerability has been discovered in the Linux kernel’s nftables subsystem, specifically within the net/netfilter module, that could
SecurityOnline - Critical Security Flaws Found in ASUS DriverHub: Update Immediately
ASUS DriverHub, a tool designed to simplify driver updates by automatically detecting motherboard models and displaying available updates,
SecurityOnline - Defendnot: New Tool Directly Disables Windows Defender
Security researcher Arsenii es3n1n has released a security tool named Defendnot—an experimental utility that disables Windows Defender by
SecurityOnline - VS Code in the Browser at Risk: code-server Security Alert
A newly disclosed security advisory reveals a vulnerability in the widely popular code-server project, which enables users to
SecurityOnline - WaterPlum’s OtterCookie Malware Upgrades to v4 with Credential Theft and Sandbox Detection Features
Cyber threat actors tied to North Korea are expanding their global reach with an updated strain of malware
SecurityOnline - Malicious npm Packages Target BullX Crypto Traders via Telegram-Backdoored Payloads
Socket’s Threat Research Team has uncovered two malicious npm packages designed to steal cryptocurrency credentials and trading data—pumptoolforvolumeandcomment
SecurityOnline - FreeDrain: Silent Crypto Theft on Google? Massive Phishing Network Exposed
At PIVOTcon 2025, researchers from SentinelLABS and Validin unveiled a sprawling phishing campaign that has been quietly siphoning
SecurityOnline - Stack Overflow Alert! XML Flaw in libexpat Threatens Widespread Software
The CERT Coordination Center (CERT/CC) has issued a vulnerability note warning of a stack overflow flaw in the
SecurityOnline - Sneaky Email Attack Targets Spain, Italy, Portugal with RATty Trojan
The FortiMail IR team has uncovered a highly sophisticated email campaign delivering the RATty Remote Access Trojan, exploiting
SecurityOnline - Fake Crypto Platforms on Facebook Steal Your Data! Beware Celebrity Endorsements
In a newly report, Bitdefender Labs has revealed a persistent and evolving malvertising campaign operating through Facebook Ads,
SecurityOnline - Legitimate Remote Tools Weaponized in Sophisticated Spam Campaign
In a newly published threat report, Cisco Talos has revealed an ongoing spam campaign targeting Portuguese-speaking users in
SecurityOnline