News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 15 |
| Today, Thu 29 Oct | 5 so far | 1 |
Developing
Mon 19 May 202577 articles
- 480,000 Catholic Health Patients Impacted by Serviceaide Data Leak
Serviceaide exposed a database containing personal and medical information belonging to Catholic Health patients.
SecurityWeek - Why CTEM is the Winning Bet for CISOs in 2025
Continuous Threat Exposure Management (CTEM) has moved from concept to cornerstone, solidifying its role as a strategic enabler for CISOs. No longer a theoretical framework, CTEM now anchors today’s cybersecurity programs by continuously aligning security…
The Hacker News - Firefox Patches 2 Zero-Days Exploited at Pwn2Own Berlin with $100K in Rewards
Mozilla has released security updates to address two critical security flaws in its Firefox browser that could be potentially exploited to access sensitive data or achieve code execution. The vulnerabilities, both of which were exploited as a zero-day at…
The Hacker News - Spiking Neural Networks: Brain-Inspired Chips That Could Keep Your Data Safe
Neuromorphic computing is moving from theory to reality, with brain-inspired processors offering real-time intelligence, low power consumption, and built-in privacy—ushering in a new era for edge devices and cybersecurity.
SecurityWeek - 200,000 Harbin Clinic Patients Impacted by NRS Data Breach
Harbin Clinic says the information of over 200,000 patients was stolen in a July 2024 data breach at Nationwide Recovery Services.
SecurityWeek - ⚡ Weekly Recap: Zero-Day Exploits, Insider Threats, APT Targeting, Botnets and More
Cybersecurity leaders aren’t just dealing with attacks—they’re also protecting trust, keeping systems running, and maintaining their organization’s reputation. This week’s developments highlight a bigger issue: as we rely more on digital tools, hidden…
The Hacker News - Hackers Exploit RVTools to Deploy Bumblebee Malware on Windows Systems
A reliable VMware environment reporting tool, RVTools, was momentarily infiltrated earlier this week on May 13, 2025, to disseminate the sneaky Bumblebee loader virus, serving as a sobering reminder of the vulnerabilities present in software supply chains.…
gbhackers.com - Warning: Windows Update Triggering BitLocker Recovery
Last week, Microsoft released the May 2025 cumulative update for Windows 10 and 11. Following the update, a
SecurityOnline - Confluence Servers Under Attack: Hackers Leverage Vulnerability for RDP Access and Remote Code Execution
Threat actors exploited a known vulnerability, CVE-2023-22527, a template injection flaw in Atlassian Confluence servers exposed to the internet. This exploit facilitated remote code execution (RCE), enabling attackers to gain initial access and establish a…
gbhackers.com - Prison Sentence for Man Involved in SEC X Account Hack
Eric Council Jr. was sentenced to prison for hacking SEC’s official X account and publishing fraudulent posts increasing Bitcoin value.
SecurityWeek - New ModiLoader Malware Campaign Targets Windows PCs, Harvesting User Credentials
AhnLab Security Intelligence Center (ASEC) has recently uncovered a malicious campaign distributing ModiLoader (also known as DBatLoader) malware through phishing emails. These emails, crafted in Turkish and impersonating a Turkish bank, urge recipients to…
gbhackers.com - Health Care Data Breach Costs BreachForums Admin $700,000 Fine
Conor Brian Fitzpatrick, the 22-year-old former administrator of cybercrime forum Breachforums, will forfeit approximately $700,000 to settle a civil lawsuit stemming from a healthcare data breach. The settlement marks a rare instance where a cybercriminal’s…
gbhackers.com - Critical Firefox 0-Day Flaws Allow Remote Code Execution
Mozilla has urgently patched two critical 0-day vulnerabilities in its popular web browser Firefox, both of which could allow remote attackers to execute malicious code on user systems. The flaws, tracked as CVE-2025-4918 and CVE-2025-4919, were disclosed on…
gbhackers.com - CISA to Stop Publishing Cybersecurity Alerts and Advisories on Webpages
Cybersecurity and Infrastructure Security Agency (CISA) has announced significant changes to how it communicates cybersecurity updates and guidance to stakeholders. In a recent announcement, CISA revealed plans to shift away from listing advisories on its…
gbhackers.com - Pwn2Own Day 3: Zero-Day Exploits Windows 11, VMware ESXi, and Firefox
The Pwn2Own Berlin 2025 last day ended with impressive technological accomplishments, bringing the total prize money over one million dollars. Security researchers demonstrated sophisticated exploitation techniques against high-profile targets including…
gbhackers.com - Hackers Earn Over $1 Million at Pwn2Own Berlin 2025
Pwn2Own participants demonstrated exploits against VMs, AI, browsers, servers, containers, and operating systems.
SecurityWeek - James Comey is under investigation by Secret Service for a seashell photo showing “8647”
James Comey is under investigation for a seashell photo showing “8647,” seen by some as a coded threat against Trump. Former FBI chief James Comey is under investigation by the Secret Service for sharing an image of seashells arranged to display the numbers…
Security Affairs - Pwn2Own Berlin 2025: total prize money reached $1,078,750
Pwn2Own Berlin 2025 wrapped up with $383,750 awarded on the final day, pushing the total prize money to $1,078,750 over three days. On the final day of Pwn2Own Berlin 2025, participants earned $383,750 for demonstrating zero-day in VMware Workstation, ESXi,…
Security Affairs - Fix Windows Update Problems: Common Error Codes and Solutions
During the installation of Windows 10/11 updates, failures frequently occur due to a variety of reasons — sometimes
SecurityOnline - Microsoft’s Command Palette: A New Way to Search and Launch in Windows
Much like Apple’s Spotlight feature available on Mac devices, Microsoft has quietly introduced a new capability called “Command
SecurityOnline - Nextcloud vs. Google: Fight Over Android File Access Permissions
The open-source cloud storage application Nextcloud has long relied on the highly critical “Full Files Access” permission to
SecurityOnline - A week in security (May 12 – May 18)
Last week on Malwarebytes Labs: Data broker protection rule quietly withdrawn by CFPB Meta sent cease and desist letter over AI training Google to pay $1.38 billion over privacy violations Android users bombarded with unskippable ads Last we...
Malwarebytes - GNU C(glibc) Vulnerability Let Attackers Execute Arbitrary Code on Millions of Linux Systems
Security researchers have disclosed a significant vulnerability in the GNU C Library (glibc), potentially affecting millions of Linux systems worldwide. The flaw, identified as CVE-2025-4802, involves statically linked setuid binaries that incorrectly search…
gbhackers.com - Exploiting dMSA for Advanced Active Directory Persistence
Security researchers have identified new methods for achieving persistence in Active Directory environments by exploiting Delegated Managed Service Accounts (dMSAs), a new security feature introduced in Windows Server 2025. Despite being designed to enhance…
gbhackers.com - Pwn2Own: Firefox Hacked with JavaScript Zero-Days – Details on the Exploits
Mozilla has moved swiftly to patch two critical zero-day vulnerabilities in Firefox, both of which were exploited during
SecurityOnline - Falco – Real-Time Threat Detection for Linux and Containers
Falco is an open-source Linux runtime security tool for containers and Kubernetes. Detect suspicious syscalls, container exploits, and cloud-native threats in real time.
darknet.org.uk - PoC Released: iOS Kernel Flaw Allows File System Modification Without Jailbreak
A patched kernel vulnerability, CVE-2025-24203, has attracted great attention in the security community as well as the jailbreak
SecurityOnline - Critical Risk (CVSS 9.1): Auth0-PHP SDK Flaw Threatens 16M+ Downloads
Okta has issued a critical security advisory warning developers and enterprises using the Auth0-PHP SDK about a serious
SecurityOnline - High DoS Risk: Tornado’s Default Parser Exposes Apps (CVE-2025-47287)
A newly disclosed vulnerability in the Tornado Python web framework, tracked as CVE-2025-47287, exposes applications to a denial-of-service
SecurityOnline - Skitnet Analysis: Nim, Rust, and DNS Abuse in Advanced Malware Campaign
Security researchers at Prodaft have published an in-depth analysis of Skitnet, also known as Bossnet—a highly sophisticated multi-stage
SecurityOnline - XSS Vulnerability Discovered in Label Studio: Update Now!
Researchers have disclosed a reflected cross-site scripting (XSS) vulnerability in Label Studio, an open-source data labeling tool widely
SecurityOnline - Kuwait Under Attack: 230+ Domains Used in Sophisticated Phishing Operation
In a newly published threat intelligence report, Hunt.io researchers have detailed an active and sophisticated phishing campaign targeting
SecurityOnline - glibc Vulnerability Puts Millions of Linux Systems at Risk of Code Execution
A newly reported vulnerability within the GNU C Library (glibc), a fundamental component of countless Linux applications, details
SecurityOnline - Race Condition in Windows Remote Desktop Gateway Enables RCE – PoC Demonstrates Exploitability
A newly disclosed vulnerability in Microsoft’s Remote Desktop Gateway (RD Gateway) reveals a dangerous race condition that could
SecurityOnline - Trojanized KeePass Used to Deploy Cobalt Strike and Steal Credentials
Recently, WithSecure’s Threat Intelligence team uncovered a sophisticated malware campaign where the open-source password manager KeePass was trojanised
SecurityOnline - RVTools Supply Chain Attack: Bumblebee Malware Delivered via Trusted VMware Utility
Aidan Leon, cybersecurity practitioner and threat analyst at ZeroDay Labs, has disclosed a sophisticated supply chain attack involving
SecurityOnline - High-Risk Flaw in Python Web Framework Reflex Could Lead to Account Takeover
A serious security flaw has been identified in the Reflex open-source framework, a tool used to build interactive
SecurityOnline