News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 15 |
| Today, Thu 29 Oct | 7 so far | 3 |
Developing
Wed 21 May 2025102 articles
- SK Telecom revealed that malware breach began in 2022
South Korean mobile network operator SK Telecom revealed that the security breach disclosed in April began in 2022. SK Telecom is South Korea’s largest wireless telecom company, a major player in the country’s mobile and tech landscape. It holds about 48% of…
Security Affairs - Palo Alto Networks Warns of XSS Flaw with PoC Exploit Code
Palo Alto Networks has issued a security advisory for a reflected cross-site scripting (XSS) vulnerability, tracked as CVE-2025-0133,
SecurityOnline - Pwn2Own Berlin Recap: VMware ESXi, Windows 11 Hacked with Zero-Days
The renowned hacking competition, Pwn2Own 2025 Berlin, recently concluded with cybersecurity researchers securing a total of $1,078,750 in
SecurityOnline - Microsoft Streamlines Nonprofit Offerings, Limits Free M365 & Office 365 E1 Licenses
According to an official announcement from Microsoft, the company has decided to discontinue the provision of free Microsoft
SecurityOnline - Google Beam: The Future of Hyper-Realistic 3D Video Conferencing is Here
Originally announced in 2021 as Project Starline—Google’s initiative to enable truly lifelike, face-to-face interaction with distant loved ones—the
SecurityOnline - Google Unveils Flow, Veo 3, Imagen 4: New Era of AI Media Creation
At Google I/O 2025, the company unveiled Flow, a groundbreaking AI-powered video creation tool, alongside Veo 3—which can
SecurityOnline - Google Unveils $249.99/Month AI Ultra Subscription
Google recently unveiled its premium subscription plan—Google AI Ultra—priced at an impressive $249.99 per month, granting users access
SecurityOnline - Google Unveils FireSat: AI Satellite to Detect Wildfires in 20 Minutes
At the Google I/O 2025 keynote, CEO Sundar Pichai concluded his address by spotlighting the FireSat project, unveiled
SecurityOnline - Asia Produces More APT Actors, As Focus Expands Globally
China and North Korea-aligned groups account for more than half of global attacks, and an increasing number of countries look to cyber to balance power in the region.
Dark Reading - Critical Remote Code Execution Flaw Hits Lexmark Printers
Lexmark has released a security advisory for a critical vulnerability—CVE-2025-1127—affecting a wide range of its printer models. The
SecurityOnline - Critical CVSS 9.8 RCE Flaw in vLLM Exposes AI Hosts to Remote Attacks
A critical vulnerability—CVE-2025-47277—has been disclosed in vLLM, a high-performance inference and serving engine for large language models (LLMs).
SecurityOnline - Critical containerd Vulnerability: Malicious Images Can Hijack Host Filesystem
The containerd project has issued an urgent security advisory for a critical vulnerability in its container runtime, which
SecurityOnline - CISA Alerts: Vertiv Products Vulnerable to RCE, Auth Bypass (CVSS 9.8)
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent advisory addressing two high-severity vulnerabilities impacting
SecurityOnline - Hazy Hawk: Stealthy Threat Actor Hijacks High-Profile Subdomains
Infoblox researchers have uncovered a sophisticated and stealthy threat actor dubbed Hazy Hawk, a group exploiting DNS misconfigurations
SecurityOnline - PoC Available: TP-Link Archer AX50 Flaw Allows Remote Root Access
A critical vulnerability in TP-Link’s widely deployed Archer AX50 router has been uncovered, potentially allowing remote attackers to
SecurityOnline - High-Severity Privilege Escalation Threat Hits Atlassian Jira Data Center
A newly disclosed vulnerability—CVE-2025-22157—has put organizations using Atlassian’s Jira Core Data Center and Jira Service Management Data Center
SecurityOnline - High Risk: PowerDNS DNSdist Flaw Allows Unauthenticated DoS Attacks
PowerDNS has released a critical update to its high-performance DNS proxy and load balancer, DNSdist, addressing a significant
SecurityOnline - AI Scam Alert: Fake Kling AI Sites Deploy Infostealer, Hide Executables
Check Point Research has uncovered a sophisticated malware campaign exploiting the rising popularity of Kling AI—a legitimate AI-powered
SecurityOnline - Is Your Unix Automation Secure? Critical Broadcom Flaw Poses High Risk
Broadcom has issued a security advisory for a privilege escalation vulnerability affecting its Automic Automation Agent for Unix.
SecurityOnline - Microsoft Resolves Windows 10/11 Secure Boot Conflict with Linux UEFI
As early as July 2024, Microsoft noted in its preview cumulative update logs that dual-boot configurations involving Windows
SecurityOnline - Critical OpenPGP.js Flaw Allows Message Signature Spoofing
The OpenPGP.js project, a widely-used JavaScript library for secure messaging and encryption, has patched a critical vulnerability (CVE-2025-47934)
SecurityOnline - North Korea-Linked Saja Network Infiltrates Tech Firms with Fake Developers
Nisos has uncovered a sophisticated North Korea-linked employment scam network—dubbed the Saja Network—designed to infiltrate tech companies under
SecurityOnline