News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 23 so far |
Tue 29 Jul 2025· 94 articles
-
Apple Introduces Containerization Feature for Seamless Kali Linux Integration on macOS
Apple has unveiled a groundbreaking containerization feature that enables seamless integration of Kali Linux on macOS systems, marking a significant advancement in cross-platform development capabilities. Announced during WWDC 2025, this innovative…
gbhackers.comOriginal report -
Dropzone AI Raises $37 Million for Autonomous SOC Analyst
Dropzone AI has announced a Series B funding round led by Theory Ventures to boost its AI SOC solution.
SecurityWeekOriginal report -
Cybercriminals Use Fake Apps to Steal Data and Blackmail Users Across Asia’s Mobile Networks
Cybersecurity researchers have discovered a new, large-scale mobile malware campaign that's targeting Android and iOS platforms with fake dating, social networking, cloud storage, and car service apps to steal sensitive personal data. The cross-platform…
The Hacker NewsOriginal report -
PyPI Alerts Developers to New Phishing Attack Using Fake PyPI Site
Python developers are being warned about a sophisticated phishing campaign targeting users of the Python Package Index (PyPI) through fraudulent emails and a deceptive clone of the official repository website. While PyPI’s infrastructure remains secure,…
gbhackers.comOriginal report -
From Ex Machina to Exfiltration: When AI Gets Too Curious
From prompt injection to emergent behavior, today’s curious AI models are quietly breaching trust boundaries.
SecurityWeekOriginal report -
Why React Didn't Kill XSS: The New JavaScript Injection Playbook
React conquered XSS? Think again. That's the reality facing JavaScript developers in 2025, where attackers have quietly evolved their injection techniques to exploit everything from prototype pollution to AI-generated code, bypassing the very frameworks…
The Hacker NewsOriginal report -
Pro-Ukraine hacktivists claim cyberattack on Russian Airline Aeroflot that caused the cancellation of +100 flights
A cyberattack claimed by Ukrainian group Silent Crow and Belarusian Cyber-Partisans crippled Aeroflot ’s systems, canceling over 100 flights. On July 28, 2025, a cyberattack claimed by Ukrainian group Silent Crow and Belarusian Cyber-Partisans crippled the…
Security AffairsOriginal report -
Organizations Warned of Exploited PaperCut Flaw
Threat actors are exploiting a two-year-old vulnerability in PaperCut that allows them to execute arbitrary code remotely.
SecurityWeekOriginal report -
Lionishackers Exfiltrate Sensitive Corporate Databases for Sale on the Dark Web
Outpost24’s threat intelligence researchers have uncovered the operations of Lionishackers, a financially motivated cyber threat actor specializing in the exfiltration and illicit sale of corporate databases. This group employs an opportunistic approach to…
gbhackers.comOriginal report -
Linux 6.16 Released with Performance and Networking Enhancements
Linux creator Linus Torvalds announced the release of Linux kernel version 6.16 on July 27, 2025, marking the end of what he described as a “nice and calm” development cycle. The latest stable release brings numerous performance improvements, networking…
gbhackers.comOriginal report -
New macOS Vulnerability Allows Attackers to Steal Private Files by Bypassing TCC
Microsoft Threat Intelligence has uncovered a critical macOS vulnerability that enables attackers to bypass Apple’s Transparency, Consent, and Control (TCC) framework, potentially exposing sensitive user data including files protected by privacy controls and…
gbhackers.comOriginal report -
ByteDance’s Trae IDE Under Fire: AI Coding Tool Caught Telemetry Spying Even After Opt-Out
SecurityOnlineOriginal report -
Hackers Exploit IIS Servers with New Web Shell Script for Full Remote Control
Security researchers have examined a complex online shell script called UpdateChecker.aspx that was installed on compromised Internet Information Services (IIS) servers in response to a notable increase in cyberthreats directed at Microsoft Windows…
gbhackers.comOriginal report -
Fable Security Raises $31 Million for Human Risk Management Platform
Fable Security has emerged from stealth mode with a solution designed to detect risky behaviors and educate employees.
SecurityWeekOriginal report -
Threat Actors Use Phishing to Target Belgian Grand Prix Fans and Teams
Cybersecurity experts have pointed to an increase in sophisticated threat actor activity following the July 27 2025 Belgian Grand Prix at Spa-Francorchamps, which takes advantage of the event’s worldwide attraction. Formula 1’s reliance on advanced telemetry…
gbhackers.comOriginal report -
Seychelles Commercial Bank Reported Cybersecurity Incident
Seychelles Commercial Bank on Friday said it had recently identified and contained a cybersecurity incident. A hacker claims to have stolen and sold the personal data of clients of Seychelles Commercial Bank. The bank, which provides personal and corporate…
Security AffairsOriginal report -
Aanchal Gupta Joins Adobe as Chief Security Officer
Aanchal Gupta has been named CSO at Adobe after holding cybersecurity leadership roles at Microsoft for more than five years.
SecurityWeekOriginal report -
GitHub Outage Hits Users Globally, Core Services Unavailable
GitHub experienced a significant global outage on July 28-29, 2025, disrupting core services used by millions of developers worldwide. The incident, which lasted approximately eight hours, affected API requests, Issues, and Pull Requests functionality before…
gbhackers.comOriginal report -
CISA Issues Alert on PaperCut RCE Vulnerability Under Active Exploitation
The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical PaperCut vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, warning organizations of active exploitation attempts targeting the widely-used print management…
gbhackers.comOriginal report -
PoC Exploit Published for Actively Exploited Cisco Identity Services Engine Flaw
Security researchers have published a detailed proof-of-concept exploit for a critical vulnerability in Cisco Identity Services Engine (ISE) that allows attackers to achieve remote code execution without authentication. The flaw, tracked as CVE-2025-20281,…
gbhackers.comOriginal report -
CISA Issues Alert on Cisco Identity Services Engine Flaw Exploited in Active Attacks
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical security alert regarding severe vulnerabilities in Cisco’s Identity Services Engine (ISE) that are being actively exploited by threat actors. The agency added two critical…
gbhackers.comOriginal report -
Aeroflot Hit by Year‑Long Cyber Operation That Allegedly Wiped 7,000 Servers
Russia’s flagship carrier Aeroflot is reeling from a devastating cyberattack that pro-Ukraine hacking groups claim wiped approximately 7,000 servers and stole over 20 terabytes of sensitive data during a year-long clandestine operation. The airline was…
gbhackers.comOriginal report -
UNC3886 Exploits Multiple 0-Day Bugs in VMware vCenter, ESXi, and Fortinet FortiOS
The advanced persistent threat group UNC3886 has escalated its sophisticated cyber espionage campaign by exploiting multiple zero-day vulnerabilities across critical infrastructure platforms, including VMware vCenter, ESXi hypervisors, and Fortinet FortiOS…
gbhackers.comOriginal report -
CISA Adds PaperCut NG/MF CSRF Vulnerability to KEV Catalog Amid Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security vulnerability impacting PaperCutNG/MF print management software to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active…
The Hacker NewsOriginal report -
Microsoft Edge Unleashes “Copilot Mode”: AI Assistant Gains Full Browse Context Access
SecurityOnlineOriginal report -
Google Chrome Integrates AI-Powered Review Summaries to Boost Online Shopping Confidence
SecurityOnlineOriginal report -
PayPal Launches “Pay with Crypto”: US Merchants Can Now Accept 100+ Cryptocurrencies with Low Fees
SecurityOnlineOriginal report -
Microsoft Uncovers “Sploitlight”: macOS Flaw (CVE-2025-31199) Bypasses TCC, Leaking Apple Intelligence Data
SecurityOnlineOriginal report -
Sensitive Key Storage Flaws in ASUS’ MyASUS App Threaten Token Security
SecurityOnlineOriginal report -
Python Tarfile Vulnerability (CVE-2025-8194) Allows DoS via Malicious Archives
SecurityOnlineOriginal report -
Claude AI Hits Weekly Rate Limits: Anthropic Caps Usage for Subscribers, Sparking Developer Backlash
SecurityOnlineOriginal report -
Tea Dating App Suffers Second Breach: 1 Million+ Private Messages, Abortion Talks, and IDs Exposed
SecurityOnlineOriginal report -
Linux Kernel 6.16 Released: Boosting Hardware Support, Filesystems, & Networking
SecurityOnlineOriginal report -
Lovense sex toy app flaw leaks private user email addresses
The connected sex toy platform Lovense is vulnerable to a zero-day flaw that allows an attacker to get access to a member's email address simply by knowing their username, putting them at risk of doxxing and harassment. [...]
BleepingComputerOriginal report -
GitHub Hit by Widespread Outage: Core Services Disrupted Globally
SecurityOnlineOriginal report -
Creating Realistic Deepfakes Is Getting Easier Than Ever. Fighting Back May Take Even More AI
Creating realistic deepfakes is easier than ever, causing security problems for governments, businesses and individuals and making trust the most valuable currency of the digital age.
SecurityWeekOriginal report -
Cyberattack On Russian Airline Aeroflot Causes the Cancellation of More Than 100 Flights
Ukrainian and Belarusian hacker groups, which oppose the rule of Belarusian President Alexander Lukashenko, claimed responsibility for the cyberattack.
SecurityWeekOriginal report -
RedHook Android Banking Trojan Targets Vietnamese Users with Advanced Phishing & Full Device Takeover
SecurityOnlineOriginal report -
Critical Node-SAML Flaw (CVE-2025-54419, CVSS 10.0) Allows Authentication Bypass in SAML 2.0 Web Apps
SecurityOnlineOriginal report