News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 66 so far |
Mon 21 Jul 2025· 89 articles
-
Dell confirms breach of test lab platform by World Leaks extortion group
A newly rebranded extortion gang known as "World Leaks" breached one of Dell's product demonstration platforms earlier this month and is now trying to extort the company into paying a ransom. [...]
BleepingComputerOriginal report -
Global hack on Microsoft product hits U.S., state agencies, researchers say
Ellen Nakashima, Yvonne Wingett Sanchez, and Joseph Menn report: Hackers exploited a major security flaw in widely used Microsoft server software to launch a global attack on government agencies and businesses in the past few days, breaching U.S. federal and…
DataBreachesOriginal report -
CoinDCX Hack Leads to $44.2 Million Loss
Major Indian cryptocurrency exchange CoinDCX has confirmed a significant security breach that resulted in approximately $44 million in losses, though company executives maintain that customer funds remain completely secure and unaffected by the incident.…
gbhackers.comOriginal report -
Inquiry launched after identities of SAS soldiers leaked in fresh data breach
Amy Clare-Martin reports: Army leaders have launched an inquiry after the identities of soldiers in the SAS were revealed in a fresh data breach. Details about the elite unit, part of the UK special forces, are usually kept so secret that its members are…
DataBreachesOriginal report -
Surveillance Firm Bypasses SS7 Protections to Retrieve User Location
A surveillance company was caught using an SS7 bypass technique to trick wireless carriers into divulging users’ locations.
SecurityWeekOriginal report -
750,000 Impacted by Data Breach at The Alcohol & Drug Testing Service
The Alcohol & Drug Testing Service (TADTS) says personal information was stolen in a July 2024 ransomware attack.
SecurityWeekOriginal report -
Microsoft AppLocker Flaw Lets Malicious Apps Bypass Security Restrictions
Security researchers at Varonis Threat Labs have identified a subtle but significant vulnerability in Microsoft’s AppLocker security feature that could allow malicious applications to bypass established security restrictions. While not classified as a…
gbhackers.comOriginal report -
Microsoft Patches ‘ToolShell’ Zero-Days Exploited to Hack SharePoint Servers
Microsoft has started releasing updates to fix the exploited SharePoint zero-days tracked as CVE-2025-53770 and CVE-2025-53771.
SecurityWeekOriginal report -
Livewire Flaw Puts Millions of Laravel Apps at Risk of RCE Attacks
A critical vulnerability discovered in Livewire, a popular full-stack framework for Laravel applications, exposes millions of web properties to unauthenticated remote command execution attacks. Tracked as CVE-2025-54068, the flaw resides in Livewire versions…
gbhackers.comOriginal report -
Apple’s Foldable iPhone Coming 2026: “Not the First, But the Best” Strategy Aims for China Reboot
SecurityOnlineOriginal report -
Rumble in the jungle: APT41’s new target in Africa
Introduction Some time ago, Kaspersky MDR analysts detected a targeted attack against government IT services in the African region. The attackers used hardcoded names of internal services, IP addresses, and proxy servers embedded within their malware. One of…
securelist.comOriginal report -
A week in security (July 14 – July 20)
Last week on Malwarebytes Labs: Meta execs pay the pain away with $8 billion privacy settlement Adoption agency leaks over a million records Meta AI chatbot bug could have allowed anyone to see private conversations WeTransfer walks back clause that...
MalwarebytesOriginal report -
Exploited CrushFTP Zero-Day Provides Admin Access to Servers
Hackers are exploiting a zero-day vulnerability in CrushFTP to gain administrative privileges on vulnerable servers via HTTPS.
SecurityWeekOriginal report -
SharePoint zero-day CVE-2025-53770 actively exploited in the wild
Microsoft warns of ongoing active exploitation of a SharePoint zero-day vulnerability, tracked as CVE-2025-53770. Microsoft warns of a SharePoint zero-day vulnerability, tracked as CVE-2025-53770 (CVSS score of 9.8), which is under active exploitation.…
Security AffairsOriginal report -
CISA Issues Alert on Microsoft SharePoint 0-Day RCE Exploited in Attacks
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent security alert regarding a critical zero-day vulnerability in Microsoft SharePoint Server that is being actively exploited in cyberattacks. The vulnerability, tracked as…
gbhackers.comOriginal report -
7-Zip Vulnerability Lets Malicious RAR5 Files Crash Systems
A critical denial-of-service vulnerability has been discovered in 7-Zip that allows attackers to crash systems using specially crafted RAR5 archive files. The vulnerability, tracked as CVE-2025-53816, affects the popular compression software’s RAR5 decoder…
gbhackers.comOriginal report -
Microsoft Extends Exchange Server 2016/2019 Support with Paid ESU Program (6-Month Lifeline)
SecurityOnlineOriginal report -
Intel Discontinues Clear Linux: End of an Era for High-Performance OS Amid Cost Cuts
SecurityOnlineOriginal report -
WhatsApp on Windows 11 Ditches Native UWP for WebView2: Performance Takes a Hit
SecurityOnlineOriginal report -
Windows 11 Gets “Shared Audio”: Play Sound Through Multiple Devices Simultaneously
SecurityOnlineOriginal report -
Debian 13 “Trixie” Nears Release with Official RISC-V Architecture Support
SecurityOnlineOriginal report -
New iPad Pro Rumored to Feature Dual Front Cameras & M5 Chip for Enhanced User Experience
SecurityOnlineOriginal report -
Windows 11 Adds OOBE Cloud Restore: Easier PC Setup, But Win32 Apps Still a Manual Chore
SecurityOnlineOriginal report -
Elon Musk Unveils “Baby Grok”: xAI’s New Child-Friendly AI App on the Horizon
SecurityOnlineOriginal report -
PoisonSeed Hackers Bypass FIDO Keys Using QR Phishing and Cross-Device Sign-In Abuse
Cybersecurity researchers have disclosed a novel attack technique that allows threat actors to bypass Fast IDentity Online (FIDO) key protections by deceiving users into approving authentication requests from spoofed company login portals. The activity,…
The Hacker NewsOriginal report -
PoisonSeed Attack Tricks Users into Scanning Malicious MFA QR Codes
A sophisticated new cyber attack technique has emerged that exploits the cross-device sign-in features of FIDO keys, effectively bypassing one of the most secure forms of multifactor authentication (MFA) available today. Security researchers have identified…
gbhackers.comOriginal report -
SharePoint 0-Day RCE Flaw Actively Exploited for Full Server Takeover
A devastating new SharePoint vulnerability is being actively exploited in large-scale attacks worldwide, enabling attackers to gain complete control of on-premise servers without authentication. Security researchers at Eye Security discovered the ongoing…
gbhackers.comOriginal report -
CrushFTP 0-Day Vulnerability Actively Exploited to Breach Servers
A critical zero-day vulnerability in CrushFTP servers is being actively exploited by threat actors to compromise systems worldwide. The vulnerability, designated CVE-2025-54309, was first observed in active exploitation on July 18th at 9:00 AM CST, though…
gbhackers.comOriginal report -
Microsoft releases emergency patches for SharePoint RCE flaws exploited in attacks
Microsoft has released emergency SharePoint security updates for two zero-day vulnerabilities tracked as CVE-2025-53770 and CVE-2025-53771 that have compromised services worldwide in "ToolShell" attacks. [...]
BleepingComputerOriginal report -
Microsoft Releases Urgent Patch for SharePoint RCE Flaw Exploited in Ongoing Cyber Attacks
Microsoft on Sunday released security patches for an actively exploited security flaw in SharePoint and also released details of another vulnerability that it said has been addressed with "more robust protections." The tech giant acknowledged it's "aware of…
The Hacker NewsOriginal report -
Hard-Coded Credentials Found in HPE Instant On Devices Allow Admin Access
Hewlett-Packard Enterprise (HPE) has released security updates to address a critical security flaw affecting Instant On Access Points that could allow an attacker to bypass authentication and gain administrative access to susceptible systems. The…
The Hacker NewsOriginal report -
3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSocket Tactics
A new attack campaign has compromised more than 3,500 websites worldwide with JavaScript cryptocurrency miners, marking the return of browser-based cryptojacking attacks once popularized by the likes of CoinHive. Although the service has since shuttered…
The Hacker NewsOriginal report -
CredMaster – Anonymous AWS‑Backed Password Spraying Toolkit
CredMaster enables anonymous password spraying via AWS proxies, rotating IPs, evading throttle, ideal for red teamers and pen testers.
darknet.org.ukOriginal report -
Three High-Severity Privilege Escalation Flaws Patched in Sophos Intercept X for Windows
SecurityOnlineOriginal report -
Critical Livewire RCE (CVE-2025-54068) Threatens Millions of Laravel Apps – Patch Immediately!
SecurityOnlineOriginal report -
Scanception: Global QR Code Phishing Campaign Bypasses Enterprise Security, Steals Credentials at Scale
SecurityOnlineOriginal report -
Katz Stealer: The $100/Month MaaS Threat Plundering Digital Identities Undetected
SecurityOnlineOriginal report -
Windows Zero-Day Actively Exploited by Ransomware Gangs – PoC Available!
SecurityOnlineOriginal report -
Matanbuchus 3.0 Levels Up: New Stealthy Malware Loader Exploits Microsoft Teams
SecurityOnlineOriginal report -
Two Vulnerabilities in 7-Zip Could Trigger Denial of Service
SecurityOnlineOriginal report