News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Today, Wed 28 Oct | 73 so far | 11 |
Developing
Sat 31 May 202515 articles
- Two Linux flaws can lead to the disclosure of sensitive data
Qualys warns of two information disclosure flaws in apport and systemd-coredump, the core dump handlers in Ubuntu, Red Hat Enterprise Linux, and Fedora distros. Researchers discovered a vulnerability in Apport (Ubuntu’s core dump handler) and ano...
Security Affairs - Exploit details for max severity Cisco IOS XE flaw now public
Technical details about a maximum-severity Cisco IOS XE WLC arbitrary file upload flaw tracked as CVE-2025-20188 have been made publicly available, bringing us closer to a working exploit. [...]
BleepingComputer - AyySSHush: New Stealthy Botnet Backdoors ASUS Routers, Persists Through Firmware Updates
A new wave of router-based cyberattacks has emerged in the form of a stealthy and persistent botnet campaign
SecurityOnline - Microsoft’s Russian Subsidiary “Microsoft Rus” Files for Bankruptcy
The American technology giant Microsoft’s Russian subsidiary, “Microsoft Rus,” is reportedly preparing to file for bankruptcy, having formally
SecurityOnline - Mysterious leaker GangExposed outs Conti kingpins in massive ransomware data dump
Jessica Lyons reports: A mystery whistleblower calling himself GangExposed has exposed key figures behind the Conti and Trickbot ransomware crews, publishing a trove of internal files and naming names. The leaks include thousands of chat logs, personal…
DataBreaches - Resource: HoganLovells Asia-Pacific Data, Privacy and Cybersecurity Guide 2025
From Hogan Lovells: The rapid development of data protection laws across the Asia-Pacific region indicates significant movement toward certain standards, albeit with notable local policy variations across multiple areas. Our Asia-Pacific Data, Privacy, and…
DataBreaches - Class action settlement following ransomware attack will cost Fred Hutchinson Cancer Center about $52 million
Elise Takahama reports a settlement in a lawsuit stemming from a ransomware attack on Fred Hutchinson Cancer Center in Seattle by the Hunters International gang: Fred Hutchinson Cancer Center has agreed to pay about $11.5 million to patients after a 2023…
DataBreaches - New Linux Flaws Allow Password Hash Theft via Core Dumps in Ubuntu, RHEL, Fedora
Two information disclosure flaws have been identified in apport and systemd-coredump, the core dump handlers in Ubuntu, Red Hat Enterprise Linux, and Fedora, according to the Qualys Threat Research Unit (TRU). Tracked as CVE-2025-5054 and CVE-2025-4598, both…
The Hacker News - U.S. DoJ Seizes 4 Domains Supporting Cybercrime Crypting Services in Global Operation
A multinational law enforcement operation has resulted in the takedown of an online cybercrime syndicate that offered services to threat actors to ensure that their malicious software stayed undetected from security software. To that effect, the U.S.…
The Hacker News - CVE-2025-40909: Perl Threads Vulnerability Exposes File Operation Race Condition
A newly disclosed vulnerability in Perl’s threading mechanism, tracked as CVE-2025-40909, exposes systems to race conditions involving the
SecurityOnline - CVE-2025-48912: Apache Superset Flaw Allows Row-Level Security Bypass via SQL Injection
A serious security vulnerability has been discovered in Apache Superset, a widely used open-source data exploration and visualization
SecurityOnline - Google Chrome to Distrust Chunghwa Telecom & NetLock TLS Certificates
In a decisive move to uphold the integrity and trustworthiness of encrypted web communications, Google has announced that
SecurityOnline - Critical 10.0 CVSS Flaws Found in Netwrix Directory Manager v11 – Patch Immediately!
Netwrix, a provider of identity governance and access management solutions, has issued a critical security advisory warning customers
SecurityOnline - New Phishing-as-a-Service Kits Bypass MFA & Target Microsoft 365 Users Globally!
Since September 2023, Trustwave’s Threat Intelligence Team has been tracking a sophisticated phishing ecosystem operated by Storm-1575, the
SecurityOnline - Bitter APT Targets Pakistan Telecom Amidst Border Tensions with New Cyberattack!
As tensions flared between India and Pakistan during Operation Sindoor on May 7, 2025, a covert cyber offensive
SecurityOnline