News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 17 so far |
Fri 1 Aug 2025· 79 articles
-
UK: Physiotherapist who accessed patient’s personal data to visit her home is struck off
The PA News Agency reports: A medical professional who used a patient’s personal data to visit her home with a gift while working as a vaccinator has been struck off the register. Josep Bofill Blanch, who was a registered physiotherapist employed by NHS…
DataBreachesOriginal report -
Threat Actors Impersonate Microsoft OAuth Apps to Steal Login Credentials
Threat actors are leveraging sophisticated phishing campaigns by creating fake Microsoft OAuth applications to impersonate legitimate enterprises, enabling credential theft while bypassing multifactor authentication (MFA). Proofpoint researchers have tracked…
gbhackers.comOriginal report -
Genoa Community Hospital discloses breach discovered in March
Genoa Community Hospital, aka Genoa Medical Facilities (“Genoa“) in Nebraska has issued a press release concerning a breach involving patient data. According to the release, in March 2025, Genoa learned of unusual activity involving one employee email…
DataBreachesOriginal report -
In Singapore, 147,000 customer records exposed in Cycle & Carriage data breach
Malay Mail reports: About 147,000 customer records were compromised in a recent data breach at car distributor Cycle & Carriage in Singapore, the company confirmed today. Responding to media queries, a Cycle & Carriage spokesperson said the firm detected…
DataBreachesOriginal report -
LLMs Boost Offensive R&D by Identifying and Exploiting Trapped COM Objects
Outflank is pioneering the integration of large language models (LLMs) to expedite research and development workflows while maintaining rigorous quality standards. This approach allows teams to focus on refining and testing techniques for their Outflank…
gbhackers.comOriginal report -
ToolShell under siege: Check Point analyzes Chinese APT Storm-2603
Storm-2603 group exploits SharePoint flaws and uses a custom C2 framework, AK47 C2, with HTTP- and DNS-based variants named AK47HTTP and AK47DNS. Check Point Research is tracking a ToolShell campaign exploiting four Microsoft SharePoint flaws, linking it to…
Security AffairsOriginal report -
You Are What You Eat: Why Your AI Security Tools Are Only as Strong as the Data You Feed Them
Just as triathletes know that peak performance requires more than expensive gear, cybersecurity teams are discovering that AI success depends less on the tools they deploy and more on the data that powers them The junk food problem in cybersecurity Imagine a…
The Hacker NewsOriginal report -
APT36 Hackers Target Indian Railways, Oil, and Government Systems Using Malicious PDF Files
The Pakistan-linked threat group APT36, also known as Transparent Tribe, has broadened its cyber operations beyond traditional military targets to encompass Indian railways, oil and gas infrastructure, and the Ministry of External Affairs. Security…
gbhackers.comOriginal report -
Cyber Risk Management Firm Safe Raises $70 Million
Safe has raised $70 million in Series C funding to advance cyber risk management through specialized AI agents.
SecurityWeekOriginal report -
Threat Actors Exploit Proofpoint and Intermedia Link Wrapping to Conceal Phishing Payloads
Cybercriminals are increasingly exploiting link wrapping features from vendors like Proofpoint and Intermedia to mask malicious payloads, leveraging the inherent trust users place in these security tools. Link wrapping, intended as a protective measure,…
gbhackers.comOriginal report -
Microsoft to Block External Workbook Links to Unsafe File Types by Default
Microsoft announced a significant security enhancement for Excel users, revealing plans to block external workbook links to unsafe file types by default starting in October 2025. This major change aims to strengthen workbook security by preventing potential…
gbhackers.comOriginal report -
WhatsApp 0-Click RCE Exploit Worth $1 Million at Pwn2Own Ireland 2025
Cybersecurity researchers have a massive incentive to target WhatsApp this fall, as the Zero Day Initiative (ZDI) announced a record-breaking $1 million bounty for a zero-click remote code execution exploit against the popular messaging platform at Pwn2Own…
gbhackers.comOriginal report -
Echo Raises $15M in Seed Funding for Vulnerability-Free Container Images
Echo received funding for creating thousands of container images that are not affected by any CVE, for enterprise-grade software infrastructure.
SecurityWeekOriginal report -
Storm-2603 Deploys DNS-Controlled Backdoor in Warlock and LockBit Ransomware Attacks
The threat actor linked to the exploitation of the recently disclosed security flaws in Microsoft SharePoint Server is using a bespoke command-and-control (C2) framework called AK47 C2 (also spelled ak47c2) in its operations. The framework includes at least…
The Hacker NewsOriginal report -
Bill Aims to Create National Strategy for Quantum Cybersecurity Migration
Two US senators introduced a bipartisan bill to help prepare federal government agencies for quantum computing threats.
SecurityWeekOriginal report -
CISA released Thorium platform to support malware and forensic analysis
CISA releases Thorium, an open-source tool for malware and forensic analysis, now available to analysts in government, public, and private sectors. CISA has released Thorium, a new open-source platform designed to support malware and forensic analysis. The…
Security AffairsOriginal report -
$1 Million Offered for WhatsApp Exploit at Pwn2Own Ireland 2025
Meta is sponsoring ZDI’s Pwn2Own hacking competition, where participants can earn big prizes for smartphone, WhatsApp and wearable device exploits.
SecurityWeekOriginal report -
Microsoft Upgrades .NET Bounty Program, Offers Rewards Up to $40,000
Microsoft has announced significant enhancements to its .NET Bounty Program, introducing expanded coverage, streamlined award structures, and substantially increased financial incentives for security researchers. The updated program now offers maximum…
gbhackers.comOriginal report -
Hackers Abuse EDR Free Trials to Bypass Endpoint Protection
Cybersecurity researchers have uncovered a concerning new attack vector where threat actors are exploiting free trials of endpoint detection and response (EDR) software to disable existing security protections on targeted systems. This technique, dubbed…
gbhackers.comOriginal report -
CISA Releases Thorium: Open-Source Malware and Forensics Tool Now Public
The Cybersecurity and Infrastructure Security Agency (CISA) has made a significant contribution to the cybersecurity community by publicly releasing Thorium, a powerful open-source platform designed to revolutionize malware analysis and digital forensics…
gbhackers.comOriginal report -
Over 17,000 SharePoint Servers Found Exposed Online — 840 Vulnerable to Active 0-Day Attacks
A significant cybersecurity crisis has emerged with the discovery of over 17,000 Microsoft SharePoint servers exposed to internet-based attacks, including 840 systems vulnerable to a critical zero-day vulnerability that Chinese threat actors are actively…
gbhackers.comOriginal report -
NVIDIA Extends Windows 10 Driver Support to October 2026, Offering Gamers a One-Year Reprieve
SecurityOnlineOriginal report -
Apple’s Q2 Results Soar: $94B Revenue Fueled by iPhone & Mac Sales, AI Investment Surges
SecurityOnlineOriginal report -
ChatGPT Exposed: OpenAI’s Sharing Feature Leaks Private Conversations to Google Search
SecurityOnlineOriginal report -
NVIDIA Ends Feature Support for GTX 7XX, 9XX, 10XX GPUs, Capping Driver Updates in October
SecurityOnlineOriginal report -
CoinDCX Engineer Arrested in $44M Crypto Heist: Moonlighting on Work Laptop Linked to Breach
SecurityOnlineOriginal report -
CISA Alert: Critical Flaw (CVE-2025-8286) in Güralp FMUS Seismic Devices Allows Unauthenticated Takeover, No Patch!
SecurityOnlineOriginal report -
The Trust Trap: Phishing Attacks Weaponize Security Tools by Abusing Proofpoint & Intermedia Link Wrapping
SecurityOnlineOriginal report -
Russian State Hackers Spy on Moscow Embassies via ISP-Level AiTM Attacks
SecurityOnlineOriginal report -
Cisco Talos Q2 Report: Phishing & Ransomware Dominate, with Qilin Using Deprecated PowerShell 1.0
SecurityOnlineOriginal report -
LockBit Ransomware Evolves: New Stealthy Tactics Use DLL Sideloading & Masquerading to Bypass Defenses
SecurityOnlineOriginal report -
Google’s “Virtual Satellite” is Here: New AI Model AlphaEarth Foundations Maps the Planet with Unprecedented Detail
SecurityOnlineOriginal report -
Palo Alto Networks Acquires CyberArk for $25B, Enters Identity Security Market
SecurityOnlineOriginal report -
Qualcomm Thrives Amid Apple Chip Shift, Diversifies Beyond Mobile with Strong Q2 Results
SecurityOnlineOriginal report -
Proton Launches Standalone Authenticator: Separating MFA from Passwords for Ultimate Security
SecurityOnlineOriginal report -
Arm Considers Shifting to Chip Development, Competing with Qualcomm & NVIDIA
SecurityOnlineOriginal report -
BrainDamage – Payload Generator and Encrypted Shell Stager for Red Teams
Generate and stage encrypted payloads with BrainDamage, a flexible toolkit for red teamers focused on stealth, staging, and remote command delivery.
darknet.org.ukOriginal report -
RMM Tools Weaponized: Stealthy Campaign Embeds Legitimate Remote Monitoring Software in PDFs to Target European Orgs
SecurityOnlineOriginal report -
FunkSec Ransomware Decryptor Released Free: Victims Can Now Recover Files After Group Goes Dormant
SecurityOnlineOriginal report