News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 59 so far |
Fri 25 Jul 2025· 77 articles
-
Europol Dismantles Romanian Gang Behind €580K ATM Fraud, Skimming, and Bold Police Taunts
SecurityOnlineOriginal report -
UK Student Sentenced to Prison for Selling Phishing Kits
Ollie Holman was sentenced to prison for selling over 1,000 phishing kits that caused estimated losses of over $134 million.
SecurityWeekOriginal report -
Critical VGAuth Flaw in VMware Tools Grants Full System Access
Security researchers have uncovered critical vulnerabilities in VMware Tools’ Guest Authentication Service (VGAuth) that allow attackers to escalate privileges from any user account to full SYSTEM access on Windows virtual machines. The flaws, tracked as…
gbhackers.comOriginal report -
Bloomberg’s Comdb2 Vulnerable to DoS Through Malicious Packets
Cisco Talos’ Vulnerability Discovery & Research team has disclosed five critical security vulnerabilities in Bloomberg’s Comdb2 open-source database that could allow attackers to cause denial-of-service conditions through specially crafted network packets.…
gbhackers.comOriginal report -
Chinese Spies Target Networking and Virtualization Flaws to Breach Isolated Environments
Chinese cyberespionage group Fire Ant is targeting virtualization and networking infrastructure to access isolated environments.
SecurityWeekOriginal report -
Malware Campaign Uses YouTube and Discord to Harvest Credentials from Computers
The Acronis Threat Research Unit (TRU) has uncovered a sophisticated malware campaign deploying infostealers like Leet Stealer, its modified variant RMC Stealer, and Sniffer Stealer, leveraging social engineering tactics centered on gaming hype. These…
gbhackers.comOriginal report -
No Patch for Flaw Exposing Hundreds of LG Cameras to Remote Hacking
LG Innotek LNV5110R security cameras are affected by a vulnerability that can be exploited for unauthenticated remote code execution.
SecurityWeekOriginal report -
New CastleLoader Attack Uses Cloudflare-Themed Clickfix Method to Compromise Windows Systems
A newly identified loader malware dubbed CastleLoader has emerged as a significant threat since early 2025, rapidly evolving into a distribution platform for various information stealers and remote access trojans (RATs). Leveraging sophisticated phishing…
gbhackers.comOriginal report -
New VoIP Botnet Targets Routers Using Default Passwords
Cybersecurity researchers have uncovered a sophisticated botnet operation exploiting VoIP-enabled routers through default password attacks, with initial activity concentrated in rural New Mexico before expanding globally to compromise approximately 500…
gbhackers.comOriginal report -
US Targets North Korea’s Illicit Funds: $15M Rewards Offered as American Woman Jailed in IT Worker Scam
Christina Chapman was sentenced to prison for helping North Korean IT workers infiltrate US companies and running a laptop farm for them.
SecurityWeekOriginal report -
Massive Data Leak: Misconfigured Elasticsearch Server Exposes Hundreds of Millions of Swedish Records
SecurityOnlineOriginal report -
Multiple Hacker Groups Exploit SharePoint 0-Day Vulnerability in the Wild
Microsoft has confirmed that a pair of zero-day vulnerabilities in on-premises SharePoint Server, collectively dubbed ToolShell, are under active exploitation by diverse threat actors ranging from opportunistic cybercriminals to sophisticated nation-state…
gbhackers.comOriginal report -
xonPlus Launches Real-Time Breach Alerting Platform For Enterprise Credential Exposure
Chennai, India, July 25th, 2025, CyberNewsWire xonPlus, a real-time digital risk alerting system, officially launches today to help security teams detect credential exposures before attackers exploit them. The platform detects data breaches and alerts teams…
gbhackers.comOriginal report -
Mitel patches critical MiVoice MX-ONE Auth bypass flaw
Mitel addressed a critical MiVoice MX-ONE flaw that could allow an unauthenticated attacker to conduct an authentication bypass attack. A critical authentication bypass flaw (CVSS score of 9.4) in Mitel MiVoice MX-ONE allows attackers to exploit weak access…
Security AffairsOriginal report -
xonPlus Launches Real-Time Breach Alerting Platform for Enterprise Credential Exposure
Chennai, India, 25th July 2025, CyberNewsWire
SecurityOnlineOriginal report -
Apple Unleashes iOS 26, macOS Tahoe 26 Public Betas: Experience “Liquid Glass” & Major OS Overhauls
SecurityOnlineOriginal report -
Amazon Expands Kindle Colorsoft Lineup with More Affordable 16GB Model & First Kids’ Edition
SecurityOnlineOriginal report -
Apple Leverages Supreme Court Ruling to Fight App Store External Payment Links Mandate
SecurityOnlineOriginal report -
ToolShell: a story of five vulnerabilities in Microsoft SharePoint
On July 19–20, 2025, various security companies and national CERTs published alerts about active exploitation of on-premise SharePoint servers. According to the reports, observed attacks did not require authentication, allowed attackers to gain full control…
securelist.comOriginal report -
Alphabet Soars in Q2: AI Fuels 14% Revenue Jump to $96.4B, Google Cloud Profits Skyrocket
SecurityOnlineOriginal report -
Trump Unleashes “AI Action Plan”: Deregulation Push, “Ideological Bias” Crackdown & Federal Lands for Data Centers
SecurityOnlineOriginal report -
Qi2 25W Unleashed: WPC Boosts Wireless Charging to 25W, iPhone 17 & Android Adoption Confirmed
SecurityOnlineOriginal report -
Bulletproof Host Aeza Group Moves Infrastructure to New Autonomous System
Threat analysts at Silent Push announced the discovery of a major infrastructure shift by the bulletproof hosting provider Aeza Group, which was designated and sanctioned by the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) on…
gbhackers.comOriginal report -
Hackers Inject Destructive Commands into Amazon’s AI Coding Agent
A significant security breach has exposed critical vulnerabilities in Amazon’s artificial intelligence infrastructure, with hackers successfully injecting malicious computer-wiping commands into the tech giant’s popular AI coding assistant. The incident…
gbhackers.comOriginal report -
BlackSuit Ransomware Infrastructure Seized by Authorities
International law enforcement agencies delivered a significant blow to cybercriminals this week with the successful takedown of critical infrastructure belonging to the BlackSuit ransomware gang. The coordinated operation, dubbed “Operation Checkmate,” has…
gbhackers.comOriginal report -
BlackSuit ransomware site seized as part of Operation Checkmate
The BlackSuit ransomware operation has been disrupted by coordinated international law enforcement. A splash screen appeared on their leak site this week: THIS DOMAIN HAS BEEN SEIZED This site has been seized by U.S. Homeland Security Investigations as part…
DataBreachesOriginal report -
Quid Miner Launches Mobile Cloud Mining App for Seamless, Secure BTC and DOGE Cryptocurrency Daily Income of $17,777
[London, UK ] July 2025 – As digital assets continue to gain mainstream adoption, investors are turning to innovative tools that simplify how they participate in the crypto economy. Quid Miner, a UK-based platform, is leading this shift with a sleek,…
gbhackers.comOriginal report -
evilreplay – Real-Time Browser Session Hijack Without Cookie Theft
evilreplay enables real‑time browser session hijack via XSS without cookie theft, empowering red teamers with interactive post‑exploitation control
darknet.org.ukOriginal report -
Toptal GitHub Organization Compromised: Malicious npm Packages Steal Tokens & Wipe Systems
SecurityOnlineOriginal report -
Operation GhostChat & PhantomPrayers: China-Linked APTs Target Tibetan Community with Stealthy Spyware
SecurityOnlineOriginal report -
Critical Axios Flaw (CVE-2025-54371) in Form-Data Dependency Exposes Millions to HTTP Manipulation
SecurityOnlineOriginal report -
Dropping Elephant Targets Türkiye’s Missile Industry with Stealthy Conference Lures & VLC DLL Sideloading
SecurityOnlineOriginal report -
The day after XSS.is forum was seized, it struggles to come back online — but is it really them?
Ever since law enforcement announced the arrest of an administrator of the XSS.is forum, forum members watched threads disappear from the site, and then a seizure notice splash screen appeared. No administrator or moderator had made any statement about the…
DataBreachesOriginal report -
400,000 WordPress Sites at Risk: CVE-2025-24000 in Post SMTP Plugin Allows Full Site Takeover
SecurityOnlineOriginal report -
4 Open-Source Packages Infect 56,000+ Downloads with Stealthy Spyware
SecurityOnlineOriginal report -
Soco404: New Stealthy Cryptojacking Campaign Exploits Cloud Misconfigurations and PostgreSQL to Mine Crypto
SecurityOnlineOriginal report -
High-Severity SQL Injection (CVE-2025-52914) in Mitel MiCollab Allows Data Access, Command Execution
SecurityOnlineOriginal report