News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 22 so far |
Wed 30 Jul 2025· 106 articles
-
APT Hackers Target Maritime and Shipping Industry for Ransomware Attacks
The maritime sector, which facilitates approximately 90% of international trade, is facing an unprecedented surge in sophisticated cyberattacks from advanced persistent threat (APT) groups, ransomware operators, and hacktivists, driven by escalating…
gbhackers.comOriginal report -
Telecom Giant Orange Hit by Cyberattack
Orange was targeted by hackers in an attack that resulted in the disruption of services offered to corporate and individual customers.
SecurityWeekOriginal report -
Lazarus Group Enhances Malware with New OtterCookie Payload Delivery Technique
The Contagious Interview campaign conducted by the Lazarus Group continues to expand its capabilities. We have observed an exponential evolution in the delivery mechanisms for the campaign’s main payloads: BeaverTail, InvisibleFerret, and OtterCookie. In…
gbhackers.comOriginal report -
Dropbox Passwords Service Ending: Export Your Vault Before Oct 28, 2025
Dropbox has announced the discontinuation of its Passwords service, giving users until October 28, 2025, to export their stored credentials before the feature is permanently shut down. The cloud storage company is phasing out the password management tool as…
gbhackers.comOriginal report -
Cyata Emerges From Stealth With $8.5 Million in Funding
The Israeli startup helps organizations identify, monitor, and control AI agents across their environments.
SecurityWeekOriginal report -
WordPress Theme Security Vulnerability Enables to Execute Arbitrary Code Remotely
A critical security vulnerability has been discovered in the popular “Alone” WordPress theme that allows unauthenticated attackers to execute arbitrary code remotely and potentially take complete control of affected websites. The vulnerability, tracked as…
gbhackers.comOriginal report -
EU-wide Breach Notification Template on the Horizon
Hanna Hewitt, Wim Nauwelaerts, and Alice Portnoy of Alston & Bird write: Following their recent meeting in Finland, the EU Data Protection Authorities acting through the European Data Protection Board (EDPB) announced their intention to release new tools and…
DataBreachesOriginal report -
Sex toy maker Lovense caught leaking users’ email addresses and exposing accounts to takeovers
Zack Whittaker reports: A security researcher says sex toy maker Lovense has failed to fully fix two security flaws that expose the private email addresses of its users and allow the takeover of any user’s account. The researcher, who goes by the handle…
DataBreachesOriginal report -
Hackers wipe out Rs 384 crore from Bengaluru cryptocurrency firm Neblio Technologies; firm says inside job
Express News Service reports: Bengaluru-based Neblio Technologies Private Limited, the parent company of cryptocurrency exchange platform CoinDCX, said it has lost Rs 384 crore due to hacking, in one of the biggest cyber crimes reported in the country. In a…
DataBreachesOriginal report -
Intelligence cyberattack on Crimea. Documents confirming abduction of children from Ukraine found
Porokhnia Yana reports: Intelligence has obtained further evidence of Russian abduction of Ukrainian children from the temporarily occupied territories of Ukraine. This was reported by the Main Intelligence Directorate. Cyber experts obtained this…
DataBreachesOriginal report -
Seminole County Schools recovers money taken by hackers
Nick Papantonis reports: Seminole County Schools has recovered $1.3 million that was taken in a phishing scam several years ago, a district spokeswoman said. The hackers impersonated a vendor and emailed the finance department, requesting the district to…
DataBreachesOriginal report -
Chinese Firms Linked to Silk Typhoon Filed 15+ Patents for Cyber Espionage Tools
Chinese companies linked to the state-sponsored hacking group known as Silk Typhoon (aka Hafnium) have been identified as behind over a dozen technology patents, shedding light on the shadowy cyber contracting ecosystem and its offensive capabilities. The…
The Hacker NewsOriginal report -
BeyondTrust Privilege Management Flaw Lets Hackers Escalate System Access
BeyondTrust has disclosed a critical privilege escalation vulnerability in its Privilege Management for Windows solution that could allow local authenticated attackers to gain administrator-level access to compromised systems. The security flaw, tracked as…
gbhackers.comOriginal report -
Cost of Data Breach in US Rises to $10.22 Million, Says Latest IBM Report
The global average cost of a breach fell to $4.44 million (the first decline in five years), but the average US cost rose to a record $10.22 million.
SecurityWeekOriginal report -
Flaw in Vibe Coding Platform Base44 Exposed Private Enterprise Applications
Base44 owner Wix quickly patched a critical authentication bypass vulnerability discovered by researchers at Wiz.
SecurityWeekOriginal report -
Minnesota Activates National Guard in Response to Cyberattack
Minnesota Governor Tim Walz called in the National Guard to assist the City of Saint Paul in responding to a cyberattack.
SecurityWeekOriginal report -
Product Walkthrough: A Look Inside Pillar's AI Security Platform
In this article, we will provide a brief overview of Pillar Security's platform to better understand how they are tackling AI security challenges. Pillar Security is building a platform to cover the entire software development and deployment lifecycle with…
The Hacker NewsOriginal report -
Apple Patches Safari Vulnerability Also Exploited as Zero-Day in Google Chrome
Apple on Tuesday released security updates for its entire software portfolio, including a fix for a vulnerability that Google said was exploited as a zero-day in the Chrome web browser earlier this month. The vulnerability, tracked as CVE-2025-6558 (CVSS…
The Hacker NewsOriginal report -
New Gunra Ransomware Linux Variant Launches 100 Encryption Threads with Partial Encryption Feature
The new Gunra group has expanded its attack surface beyond Windows PCs by releasing a Linux version of their virus, which was initially discovered in April 2025. This is a major uptick in the ransomware ecosystem. This development underscores the group’s…
gbhackers.comOriginal report -
New JSCEAL Attack Aims to Steal Credentials and Wallets from Crypto App Users
Check Point Research (CPR) has identified a sophisticated malware campaign dubbed JSCEAL, which targets users of cryptocurrency trading applications through malicious advertisements and compiled JavaScript payloads. Active since at least March 2024, the…
gbhackers.comOriginal report -
2025 Unit 42 Global Incident Response Report: Social Engineering Edition
Social engineering thrives on trust and is now boosted by AI. Unit 42 incident response data explains why it's surging. We detail eight critical countermeasures.
unit42.paloaltonetworks.comOriginal report -
CISA and FBI Release Tactics, Techniques, and Procedures of the Scattered Spider Hacker Group
The joint Cybersecurity Advisory AA23-320A, collaboratively issued by agencies such as the FBI, CISA, RCMP, ASD’s ACSC, AFP, CCCS, and NCSC-UK, serves as a critical update on the Scattered Spider cybercriminal group. Originally published in November 2023 and…
gbhackers.comOriginal report -
AccuKnox partners with CyberKnight to deliver Zero Trust Security for a Leading Global Bank in the UAE.
Menlo Park, United States, 30th July 2025, CyberNewsWire
SecurityOnlineOriginal report -
FBI seizes 20 BTC from Chaos Ransomware affiliate targeting Texas firms
FBI Dallas seized 20 BTC from Chaos ransomware affiliate “Hors,” tied to cyberattacks on Texas firms, on April 15, 2025. The FBI division in Dallas seized about 20 Bitcoins on April 15, 2025, from a wallet belonging to a Chaos ransomware affiliate named as…
Security AffairsOriginal report -
Google Launches DBSC Open Beta in Chrome and Enhances Patch Transparency via Project Zero
Google has announced that it's making a security feature called Device Bound Session Credentials (DBSC) in open beta to ensure that users are safeguarded against session cookie theft attacks. DBSC, first introduced as a prototype in April 2024, is designed…
The Hacker NewsOriginal report -
ChatGPT Agent Defeats Cloudflare’s ‘I Am Not a Robot’ Security Check
In a significant development that highlights both the advancing capabilities of AI and potential vulnerabilities in web security systems, a ChatGPT-powered agent has successfully bypassed Cloudflare’s widely-used “I am not a robot” verification system. The…
gbhackers.comOriginal report -
Tonic Security Launches With $7 Million in Seed Funding
Tonic Security has emerged from stealth mode to tackle the complexity of exposure and vulnerability management.
SecurityWeekOriginal report -
Cobalt Strike Beacon delivered via GitHub and social media
Introduction In the latter half of 2024, the Russian IT industry, alongside a number of entities in other countries, experienced a notable cyberattack. The attackers employed a range of malicious techniques to trick security systems and remain undetected. To…
securelist.comOriginal report -
Apple Patches Safari Vulnerability Flagged as Exploited Against Chrome
Tracked as CVE-2025-6558, the flaw was found in Chrome’s ANGLE and GPU components and was flagged as exploited by Google TAG.
SecurityWeekOriginal report -
Severe Vulnerability in AI Vibe Lets Attackers Access Private User Applications
A critical security vulnerability in the popular AI-powered development platform Base44 allowed unauthorized attackers to bypass authentication controls and gain access to private enterprise applications, according to a new report from Wiz Research. The…
gbhackers.comOriginal report -
Hackers Target SAP NetWeaver to Deploy New Auto-Color Linux Malware
Cybersecurity researchers at Darktrace have uncovered a sophisticated attack targeting a US-based chemicals company, marking the first observed instance of threat actors exploiting SAP NetWeaver vulnerabilities to deploy Auto-Color backdoor malware. The…
gbhackers.comOriginal report -
African Orgs Fall to Mass Microsoft SharePoint Exploits
The National Treasury of South Africa is among the half-dozen known victims in South Africa — along with other nations — of the mass compromise of on-premises Microsoft SharePoint servers.
Dark ReadingOriginal report -
Hackers Exploit SAP Vulnerability to Breach Linux Systems and Deploy Auto-Color Malware
Threat actors have been observed exploiting a now-patched critical SAP NetWeaver flaw to deliver the Auto-Color backdoor in an attack targeting a U.S.-based chemicals company in April 2025. "Over the course of three days, a threat actor gained access to the…
The Hacker NewsOriginal report -
Critical SAP flaw exploited to launch Auto-Color Malware attack on U.S. company
Hackers exploited a SAP NetWeaver bug to deploy upgraded Auto-Color Linux malware in an attack on U.S. chemicals firm. Cybersecurity firm Darktrace reported that threat actors exploited a SAP NetWeaver flaw, tracked as CVE-2025-31324, to deploy Auto-Color…
Security AffairsOriginal report -
Google Unleashes Veo 3 & Veo 3 Fast: AI Video Generation with Native Audio Now Generally Available on Vertex AI
SecurityOnlineOriginal report -
Free Decryptor Released for AI-Powered FunkSec Ransomware
Researchers at Avast have unveiled a free decryptor tool for victims of the FunkSec ransomware, marking a significant step in combating this now-defunct malware strain. Developed in collaboration with law-enforcement agencies, the decryptor enables affected…
gbhackers.comOriginal report -
Axonius Acquires Medical Device Security Firm Cynerio in $100 Million Deal
Axonius has acquired Cynerio for $100 million in cash and stock to accelerate its expansion into the healthcare market.
SecurityWeekOriginal report -
Scattered Spider Hacker Arrests Halt Attacks, But Copycat Threats Sustain Security Pressure
Google Cloud's Mandiant Consulting has revealed that it has witnessed a drop in activity from the notorious Scattered Spider group, but emphasized the need for organizations to take advantage of the lull to shore up their defenses. "Since the recent arrests…
The Hacker NewsOriginal report -
Enterprise LLMs Vulnerable to Prompt-Based Attacks Leading to Data Breaches
Security researchers have discovered alarming vulnerabilities in enterprise Large Language Model (LLM) applications that could allow attackers to bypass authentication systems and access sensitive corporate data through sophisticated prompt injection…
gbhackers.comOriginal report -
New Microsoft Guidance Targets Defense Against Indirect Prompt Injection
Microsoft has unveiled new guidance addressing one of the most pressing security challenges facing enterprise AI deployments: indirect prompt injection attacks. This emerging threat vector has become the top entry in the OWASP Top 10 for LLM Applications &…
gbhackers.comOriginal report