News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 32 so far |
Mon 28 Jul 2025· 76 articles
-
Allianz Life Data Breach Impacts Most of 1.4 Million US Customers
Allianz subsidiary said the information of customers, financial professionals and employees was compromised as a result of a hack.
SecurityWeekOriginal report -
Email Security Is Stuck in the Antivirus Era: Why It Needs a Modern Approach
Picture this: you’ve hardened every laptop in your fleet with real‑time telemetry, rapid isolation, and automated rollback. But the corporate mailbox—the front door for most attackers—is still guarded by what is effectively a 1990s-era filter. This isn't a…
The Hacker NewsOriginal report -
Inside Laundry Bear: Unveiling Infrastructure, Tactics, and Procedures
Dutch intelligence agencies AIVD and MIVD, alongside Microsoft Threat Intelligence, have identified Laundry Bear also tracked as Void Blizzard as a sophisticated Russian state-sponsored advanced persistent threat (APT) group active since at least April 2024.…
gbhackers.comOriginal report -
Mozilla Ceases China Operations: Firefox to Exit Local Business, Focus on Global Direct Support
SecurityOnlineOriginal report -
400,000 WordPress Websites Exposed by Post SMTP Plugin Vulnerability
A critical security vulnerability has been discovered in the popular Post SMTP plugin for WordPress, potentially exposing over 400,000 websites to account takeover attacks. The vulnerability, tracked as CVE-2025-24000, affects versions 3.2.0 and below of the…
gbhackers.comOriginal report -
BlackSuit Ransomware Group Transitioning to ‘Chaos’ Amid Leak Site Seizure
The emerging Chaos ransomware appears to be a rebranding of BlackSuit, which had its leak site seized by law enforcement.
SecurityWeekOriginal report -
Threat Actors Claim Breach of Airpay Payment Gateway
Cybercriminals have reportedly claimed a successful breach of Airpay, an Indian payment gateway service, raising serious concerns about the security of financial data and customer information. The allegations surfaced on underground forums where threat…
gbhackers.comOriginal report -
Scattered Spider targets VMware ESXi in using social engineering
Scattered Spider targets VMware ESXi in North America using social engineering, mainly fake IT help desk calls instead of software exploits. The cybercrime group Scattered Spider (aka 0ktapus, Muddled Libra, Octo Tempest, and UNC3944) is targeting VMware…
Security AffairsOriginal report -
Women’s Dating App “Tea” Data Leak Exposes 13,000 User Selfies
Tea, a women-only dating safety app that allows users to review and share information about men they’ve dated anonymously, has suffered a significant data breach that exposed approximately 72,000 user images, including 13,000 sensitive selfies and photo…
gbhackers.comOriginal report -
Hackers Breach Intelligence Portal Used by the CIA and Other Agencies
Unidentified hackers have successfully compromised a critical intelligence website operated by the National Reconnaissance Office, marking a significant security breach affecting the CIA and multiple government agencies. The attack targeted the Acquisition…
gbhackers.comOriginal report -
Flaw Allowing Website Takeover Found in WordPress Plugin With 400k Installations
The Post SMTP email delivery WordPress plugin is affected by a critical vulnerability and half of websites using it remain unpatched.
SecurityWeekOriginal report -
China-linked group Fire Ant exploits VMware and F5 flaws since early 2025
China-linked group Fire Ant exploits VMware and F5 flaws to stealthily breach secure systems, reports cybersecurity firm Sygnia. China-linked cyberespionage group Fire Ant is exploiting VMware and F5 vulnerabilities to stealthily access secure, segmented…
Security AffairsOriginal report -
SHUYAL Emerges: Stealing Login Credentials from 19 Major Browsers
A sophisticated new information stealer named SHUYAL was recently discovered by Hybrid Analysis. It has demonstrated extensive capabilities in credential extraction from 19 different web browsers, including popular ones like Google Chrome, Microsoft Edge,…
gbhackers.comOriginal report -
Leak Zone Dark Web Forum Breach Exposes 22 Million User IPs and Locations
A significant data breach has exposed sensitive information about users of Leakzone, a prominent dark web forum known for trading hacking tools and compromised accounts. Security firm UpGuard discovered an unprotected Elasticsearch database containing…
gbhackers.comOriginal report -
A week in security (July 21 – July 27)
A list of topics we covered in the week of July 21 to July 27 of 2025 Last week on Malwarebytes Labs: Steam games abused to deliver malware once again Watch out: Instagram users targeted in novel phishing campaign Age verification: Child protection o...
MalwarebytesOriginal report -
New “ToolShell” Exploit Targets SharePoint Servers for Full Takeover
FortiGuard Labs has identified a critical new exploit chain dubbed “ToolShell” that is actively being used by multiple threat actors to target on-premises Microsoft SharePoint servers. This sophisticated attack combines two previously patched vulnerabilities…
gbhackers.comOriginal report -
LG Innotek Camera Flaws Could Give Hackers Full Admin Access
A critical security vulnerability has been discovered in LG Innotek’s LNV5110R CCTV camera model that could allow remote attackers to gain complete administrative control over affected devices. The vulnerability, designated as CVE-2025-7742, represents a…
gbhackers.comOriginal report -
Scattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure
The notorious cybercrime group known as Scattered Spider is targeting VMware ESXi hypervisors in attacks targeting retail, airline, and transportation sectors in North America. "The group's core tactics have remained consistent and do not rely on software…
The Hacker NewsOriginal report -
Critical Salesforce Flaws Allow Remote Code Execution – Patch Immediately!
Salesforce has disclosed a series of critical security vulnerabilities in its Tableau Server platform that could allow attackers to execute remote code and gain unauthorized access to production databases. The vulnerabilities, announced on June 26, 2025,…
gbhackers.comOriginal report -
Critical Flaws in Niagara Framework Threaten Smart Buildings and Industrial Systems Worldwide
Cybersecurity researchers have discovered over a dozen security vulnerabilities impacting Tridium's Niagara Framework that could allow an attacker on the same network to compromise the system under certain circumstances. "These vulnerabilities are fully…
The Hacker NewsOriginal report -
Samsung Galaxy AI Goes Beyond Google: S26 Series Eyes OpenAI and Perplexity
SecurityOnlineOriginal report -
Critical Command Injection (CVE-2025-54416) in tj-actions/branch-names GitHub Action Exposes 5,000+ Repos
SecurityOnlineOriginal report -
The Homograph Illusion: Phishing Attacks Exploit Lookalike Characters to Bypass Defenses – AI Amplifies the Threat
SecurityOnlineOriginal report -
Fire Ant: Stealthy Cyber-Espionage Campaign Targets VMware ESXi & vCenter, Evades Detection
SecurityOnlineOriginal report -
RCE, SSRF & Data Exposure: Salesforce Patches 8 Serious Flaws in Tableau Server
SecurityOnlineOriginal report -
Cyber Stealer: New Infostealer-Botnet Hybrid Offers Full Digital Plunder as a Service
SecurityOnlineOriginal report -
SHUYAL: New Stealthy Infostealer Plunders Browser Credentials, System Data, & Screenshots to Telegram
SecurityOnlineOriginal report -
Chaos Ransomware: New RaaS Group (Likely Former BlackSuit) Unleashes Vishing & Double Extortion
SecurityOnlineOriginal report -
CERT Warns of Privilege Escalation Vulnerability in Lakeside SysTrack (CVE-2025-6241)
SecurityOnlineOriginal report -
Critical Node-SAML Flaw (CVE-2025-54369) Exposes SAML 2.0 to Authentication Bypass
SecurityOnlineOriginal report -
Singapore’s Critical Infrastructure Under Attack by China-Linked UNC3886 APT
SecurityOnlineOriginal report -
Russian-Aligned Hive0156 Escalates Remcos RAT Attacks on Ukrainian Government & Military
SecurityOnlineOriginal report -
Windows 11 News Feed Gets AI Overhaul: Microsoft Replaces MSN with “Copilot Discover”
SecurityOnlineOriginal report -
Apple Overhauls App Store Age Ratings with New Granular Tiers for Enhanced Parental Controls
SecurityOnlineOriginal report -
Intel CEO Hints at Exiting Advanced Chip Manufacturing Amid Cost Cuts
SecurityOnlineOriginal report -
Google Unveils “Opal”: A New AI Tool for Building Mini Web Apps with Natural Language
SecurityOnlineOriginal report