News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Today, Wed 28 Oct | 78 so far | 13 |
Developing
Fri 30 May 202578 articles
- ConnectWise Discloses Suspected State-Sponsored Hack
The IT software provider says ScreenConnect users were impacted by the attack, which exploited a high-severity ASP.NET vulnerability.
SecurityWeek - US Treasury sanctioned the firm Funnull Technology as major cyber scam facilitator
The U.S. sanctioned Funnull Technology and Liu Lizhi for aiding romance scams that caused major crypto losses through fraud infrastructure. The U.S. Department of Treasury’s Office of Foreign Assets Control (OFAC) sanctioned Philippines-based company Funnull…
Security Affairs - From the "Department of No" to a "Culture of Yes": A Healthcare CISO's Journey to Enabling Modern Care
Breaking Out of the Security Mosh Pit When Jason Elrod, CISO of MultiCare Health System, describes legacy healthcare IT environments, he doesn't mince words: "Healthcare loves to walk backwards into the future. And this is how we got here, because there are…
The Hacker News - Weaponized PyPI Package Executes Supply Chain Attack to Steal Solana Private Keys
A chilling discovery by Socket’s Threat Research Team has exposed a meticulously crafted supply chain attack on the Python Package Index (PyPI), orchestrated by a threat actor using the alias “cappership.” The attack leverages a malicious package named…
gbhackers.com - Novel Malware Evades Detection by Skipping PE Header in Windows
Researchers have identified a sophisticated new strain of malware that bypasses traditional detection mechanisms by entirely omitting the Portable Executable (PE) header in Windows environments. This innovative evasion tactic represents a significant shift…
gbhackers.com - CISA Releases Guidance on SIEM and SOAR Implementation
The guidance outlines the benefits and challenges or SIEM and SOAR platforms, and shares implementation recommendations.
SecurityWeek - Safari Flaw Exploited by BitM Attack to Steal User Login Data
A new wave of phishing attacks, known as Fullscreen Browser-in-the-Middle (BitM) attacks, is exploiting browser features to steal user credentials with unprecedented stealth. Unlike traditional phishing, which relies on fake websites and visible clues, BitM…
gbhackers.com - Next.js Dev Server Vulnerability Leads to Developer Data Exposure
A recently disclosed vulnerability, CVE-2025-48068, has raised concerns among developers using the popular Next.js framework. This flaw, affecting versions 13.0.0 through 15.2.1 when the App Router is enabled, allows attackers to exploit the development…
gbhackers.com - Critical Cisco IOS XE Flaw Permits Arbitrary File Upload — PoC Released
A critical security vulnerability, tracked as CVE-2025-20188, has been discovered in Cisco IOS XE Wireless LAN Controllers (WLCs), threatening enterprise wireless infrastructures worldwide. This flaw, scoring a maximum 10.0 on the CVSS scale, allows…
gbhackers.com - North Korean IT Workers Exploit Legitimate Software and Network Tactics to Evade EDR
A North Korean IT worker, operating under a false identity, was uncovered infiltrating a Western organization with a sophisticated remote-control system. This incident, exposed during a U.S. federal raid on a suspected laptop farm, showcases a chilling trend…
gbhackers.com - New Rust-Based InfoStealer Uses Fake CAPTCHA to Deliver EDDIESTEALER
A newly discovered Rust-based infostealer, dubbed EDDIESTEALER, has been uncovered by Elastic Security Labs, spreading through a sophisticated social engineering tactic involving fake CAPTCHA verification pages. Mimicking legitimate CAPTCHA systems like…
gbhackers.com - Firefox Fixes Nvidia Glitches in New 139.0.1 Update!
Mozilla Firefox browser has recently released version 139.0, introducing several new features, including full-page translation on extension pages
SecurityOnline - Microsoft Authenticator’s Password Manager is Phasing Out: What You Need to Do!
As previously reported, Microsoft Authenticator will gradually deprecate its password manager functionality. Account credentials already saved will be
SecurityOnline - ConnectWise suffered a cyberattack carried out by a sophisticated nation state actor
ConnectWise detected suspicious activity linked to a nation-state actor, impacting a small number of its ScreenConnect customers. ConnectWise revealed it had detected suspicious activity linked to an advanced nation-state actor. The company confirmed that…
Security Affairs - U.S. Sanctions Funnull for $200M Romance Baiting Scams Tied to Crypto Fraud
The U.S. Department of Treasury's Office of Foreign Assets Control (OFAC) has levied sanctions against a Philippines-based company named Funnull Technology Inc. and its administrator Liu Lizhi for providing infrastructure to conduct romance baiting scams…
The Hacker News - Get Early Access: Ubuntu Now Releasing Monthly Development Snapshots!
Canonical, the developer behind the popular Linux operating system Ubuntu, has recently announced a new initiative: in addition
SecurityOnline - Caution: Windows 11 Update Corrupts Critical ACPI.sys Driver!
According to an update from Microsoft on the Windows 11 Health Dashboard, the installation of this month’s cumulative
SecurityOnline - ConnectWise Hit by Advanced Cyberattack: Internal Data at Risk
ConnectWise, a leading provider of IT management and remote access software, has confirmed a cyberattack attributed to a sophisticated nation-state actor. The breach, discovered in May 2025, impacted a limited number of customers using the company’s…
gbhackers.com - Discover More: Google Lens Arrives on YouTube Shorts!
Google has recently announced the integration of its Google Lens feature into YouTube Shorts, allowing users to explore
SecurityOnline - Opera Unveils Neon: A Revolutionary AI-Powered Browser Experience!
In recent years, Opera has released numerous browsers, even integrating AI agent capabilities. Now, the company unveils a
SecurityOnline - Fix Your iPad: Apple Expands Self-Service Repair for More Models!
Since 2022, Apple has implemented a self-service repair program, which—following its expansion into the European market and its
SecurityOnline - Apache Tomcat CGI Servlet Flaw Enables Security Constraint Bypass
A newly disclosed vulnerability, CVE-2025-46701, has been identified in Apache Tomcat’s CGI servlet, allowing attackers to bypass security constraints under specific conditions. The flaw, announced on May 29, 2025, is rooted in the improper handling of case…
gbhackers.com - SentinelOne Recovers: Platform Back Online After Extended Outage
On May 29, 2025, SentinelOne, a leading cybersecurity provider, experienced a significant platform outage that disrupted access to its commercial customer consoles worldwide. The incident began earlier in the day and was promptly acknowledged by SentinelOne,…
gbhackers.com - ConnectWise Hit by Cyberattack; Nation-State Actor Suspected in Targeted Breach
ConnectWise, the developer of remote access and support software ScreenConnect, has disclosed that it was the victim of a cyber attack that it said was likely perpetrated by a nation-state threat actor. "ConnectWise recently learned of suspicious activity…
The Hacker News - Meta Disrupts Influence Ops Targeting Romania, Azerbaijan, and Taiwan with Fake Personas
Meta on Thursday revealed that it disrupted three covert influence operations originating from Iran, China, and Romania during the first quarter of 2025. "We detected and removed these campaigns before they were able to build authentic audiences on our…
The Hacker News - Horizon3 Details Critical File Upload Vulnerability in Cisco IOS XE WLC (CVE-2025-20188, CVSS 10)
A critical vulnerability—CVE-2025-20188—has been disclosed in Cisco IOS XE Wireless LAN Controller (WLC) software, allowing unauthenticated attackers to
SecurityOnline - ConnectWise ScreenConnect Targeted by Nation-State Actor
ConnectWise, a prominent provider of IT management solutions, has issued a brief but concerning security advisory disclosing a
SecurityOnline - U.S. Sanctions Cloud Provider ‘Funnull’ as Top Source of ‘Pig Butchering’ Scams
Image: Shutterstock, ArtHead. The U.S. government today imposed economic sanctions on Funnull Technology Inc., a Philippines-based company that provides computer infrastructure for hundreds of thousands of websites involved in virtual currency investment…
Krebs on Security - Apache Tomcat Flaw Allows Security Bypass on Case-Insensitive Systems
The Apache Software Foundation has disclosed a low-severity security vulnerability affecting multiple versions of the Apache Tomcat server.
SecurityOnline - Spring Cloud Gateway Vulnerability Exposes Applications to Header Injection Risks
A newly disclosed vulnerability in Spring Cloud Gateway Server could expose applications to header spoofing and potential trust
SecurityOnline - Critical (CVSS 9.8): IBM Tivoli Monitoring Flaw Risks Remote Code Execution
IBM has issued a critical security update for its Tivoli Monitoring suite, addressing a high-severity vulnerability that could
SecurityOnline - Warning: Fake AI Tools Spread CyberLock Ransomware and Numero Destructive Malware
As artificial intelligence continues to revolutionize industries, cybercriminals are exploiting the growing demand for AI-driven tools by embedding
SecurityOnline - ZITADEL Flaw: Host Header Injection Risks Account Takeover (Password Reset)
ZITADEL, a modern identity and access management platform, has patched a critical vulnerability in its password reset mechanism
SecurityOnline - Spear-Phishing Alert: NetBird RAT Spreads via Deceptive Job Lures
Trellix’s Advanced Research Center has uncovered a highly targeted and stealthy spear-phishing campaign aimed at finance executives across
SecurityOnline - Critical Vulnerability (CVSS 9.3): Icinga 2 Flaw Risks Certificate Impersonation
A critical vulnerability in Icinga 2, the popular open-source monitoring system, has been disclosed, exposing systems to the
SecurityOnline - APT41 Uses Google Calendar as Covert C2 in Stealthy Cyberespionage Campaign
In an example of cloud service abuse, Google Threat Intelligence Group (GTIG) has uncovered a new APT41 campaign
SecurityOnline - PureHVNC RAT Spreads Through Fake Job Offers and Multi-Stage Obfuscation
A new wave of attacks uncovered by Netskope Threat Labs reveals a sophisticated global malware campaign delivering the
SecurityOnline - Security Alert: Multi Flaws in Kea DHCP Server Disclosed
The Internet Systems Consortium (ISC) has issued an urgent advisory affecting its modern Kea DHCP server, disclosing three
SecurityOnline