News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Mon 4 Aug 2025· 83 articles
-
Berkeley University, Eni France, and Foremost Named in Dark Web Sales; SDC Service Advertised
Berkeley University, Eni France, and Foremost Named in Dark Web Sales; SDC Service Advertised New activity observed by the SOCRadar Dark Web team reveals an expanding ecosystem of cybercrime services and data leaks targeting high-profile entities. A newly…
SOCRadarOriginal report -
Cybersecurity M&A Roundup: 44 Deals Announced in July 2025
Forty-four cybersecurity merger and acquisition (M&A) deals were announced in July 2025.
SecurityWeekOriginal report -
Microsoft PlayReady DRM Used by Netflix, Amazon, and Disney+ Allegedly Leaked Online
Digital Rights Management (DRM) systems are essential for safeguarding premium streaming content against unauthorized access and piracy, with Microsoft’s PlayReady emerging as a cornerstone technology adopted by major platforms such as Netflix, Amazon Prime…
gbhackers.comOriginal report -
Ransomware gangs join attacks targeting Microsoft SharePoint servers
Ransomware gangs have recently joined ongoing attacks targeting a Microsoft SharePoint vulnerability chain, part of a broader exploitation campaign that has already led to the breach of at least 148 organizations worldwide. [...]
BleepingComputerOriginal report -
Man-in-the-Middle Attack Prevention Guide
Some of the most devastating cyberattacks don’t rely on brute force, but instead succeed through stealth. These quiet intrusions often go unnoticed until long after the attacker has disappeared. Among the most insidious are man-in-the-middle (MITM) attacks,…
The Hacker NewsOriginal report -
ShadowSyndicate Infrastructure Used by Multiple Ransomware Groups Including Cl0p, LockBit and RansomHub
Cybersecurity researchers have uncovered significant overlaps between the attack infrastructure of ShadowSyndicate, also known as Infra Storm by Group-IB, and several prominent ransomware-as-a-service (RaaS) operations. Active since July 2022,…
gbhackers.comOriginal report -
Northwest Radiologists Data Breach Impacts 350,000 Washingtonians
Northwest Radiologists says the personal information of 350,000 Washington State residents was stolen in a January 2025 data breach.
SecurityWeekOriginal report -
North Korea Hiding Malware Within JPEG Files to Attack Windows Systems Bypassing Detections
Security researchers at Genians Security Center have uncovered a sophisticated new variant of the RoKRAT malware, attributed to the North Korean-linked APT37 threat group, which employs steganography to conceal malicious payloads within seemingly innocuous…
gbhackers.comOriginal report -
Mozilla warns of phishing attacks targeting add-on developers
Mozilla has warned browser extension developers of an active phishing campaign targeting accounts on its official AMO (addons.mozilla.org) repository. [...]
BleepingComputerOriginal report -
Interlock Ransomware Uses ClickFix Exploit to Execute Malicious Commands on Windows
The Interlock ransomware group was connected to several sophisticated cyber incidents that targeted firms in North America and Europe, according to a recent report published in July 2025 by eSentire’s Threat Response Unit (TRU). The group, active since…
gbhackers.comOriginal report -
The Wild West of Shadow IT
Everyone’s an IT decision-maker now. The employees in your organization can install a plugin with just one click, and they don’t need to clear it with your team first. It’s great for productivity, but it’s a serious problem for your security posture. When…
The Hacker NewsOriginal report -
Several Vulnerabilities Patched in AI Code Editor Cursor
Attackers could silently modify sensitive MCP files to trigger the execution of arbitrary code without requiring user approval.
SecurityWeekOriginal report -
Lovense flaws expose emails and allow account takeover
Lovense fixed bugs exposing emails and allowing account takeovers. Company CEO may take legal action after the flaws were publicly disclosed. Lovense, a manufacturer of internet-connected sex toys, fixed two vulnerabilities that exposed users’ emails and…
Security AffairsOriginal report -
Gene Sequencing Giant Illumina Settles for $9.8M Over Product Vulnerabilities
Illumina will pay $9.8 million to settle accusations that products provided to the US government were affected by cybersecurity flaws.
SecurityWeekOriginal report -
Vulnerabilities in Government-Linked Partner Software Allow Remote Code Attacks
Multiple serious security vulnerabilities have been discovered in Partner Software and Partner Web applications widely used by government agencies and contractors, potentially exposing sensitive systems to remote code execution attacks and data breaches. The…
gbhackers.comOriginal report -
MediaTek Chipset Flaws: Out-of-Bounds Write Vulnerabilities Expose Smartphones & IoT Devices
SecurityOnlineOriginal report -
macOS Sequoia Unleashes Native Linux Containers: Kali Linux Now Runs Natively on Apple Silicon
SecurityOnlineOriginal report -
Update Now or Lose AI: Microsoft 365 ‘Intelligent Services’ to Stop Working on Old Versions
SecurityOnlineOriginal report -
Nation-state group CL-STA-0969 targeted Southeast Asian telecoms in 2024
State-backed group CL-STA-0969 hit Southeast Asian telecoms in 2024, targeting critical infrastructure, says Palo Alto Networks’ Unit 42. Palo Alto Networks reported that a nation-state actor, tracked as CL-STA-0969, targeted telecom firms in Southeast Asia,…
Security AffairsOriginal report -
A week in security (July 28 – August 3)
Last week on Malwarebytes Labs: Apple ID scam leads to $27,000 in-person theft of Ohio man OpenAI kills “short-lived experiment” where ChatGPT chats could be found on Google Trump Administration and Big Tech want you to share your health data Prison...
MalwarebytesOriginal report -
Critical Squid Flaw Allows Remote Code Execution by Attackers
A severe security vulnerability in the widely-used Squid HTTP proxy has been disclosed, potentially exposing millions of systems to remote code execution attacks. The flaw, designated as CVE-2025-54574 and SQUID-2025:1, represents a critical buffer overflow…
gbhackers.comOriginal report -
PlayPraetor Android Trojan Infects 11,000+ Devices via Fake Google Play Pages and Meta Ads
Cybersecurity researchers have discovered a nascent Android remote access trojan (RAT) called PlayPraetor that has infected more than 11,000 devices, primarily across Portugal, Spain, France, Morocco, Peru, and Hong Kong. "The botnet's rapid growth, which…
The Hacker NewsOriginal report -
Critical HashiCorp Vulnerability Allows Attackers to Run Code on Host Machine
HashiCorp has disclosed a critical security vulnerability affecting its Vault products that could allow privileged operators to execute arbitrary code on the underlying host machine. The flaw, designated CVE-2025-6000 and tracked as HCSEC-2025-14, impacts…
gbhackers.comOriginal report -
AI-Powered Cursor IDE Exposes Users to Silent Remote Code Execution
Cybersecurity researchers at Aim Labs have discovered a critical vulnerability in the popular AI-powered Cursor IDE that enables attackers to achieve silent remote code execution on developer machines. The vulnerability, dubbed “CurXecute,” has been assigned…
gbhackers.comOriginal report -
NestJS Vulnerability Allows Code Execution on Developer Machines
A critical remote code execution vulnerability has been discovered in the popular NestJS framework that could allow attackers to execute arbitrary code on developer machines. The vulnerability, tracked as CVE-2025-54782, affects the…
gbhackers.comOriginal report -
PyPitfall: Python’s Hidden Vulnerabilities Propagate Through 145K+ Packages
SecurityOnlineOriginal report -
APT37 Escalates Cyber-Espionage on South Korea: New RoKRAT Backdoor Uses Stealthy LNK Files & Steganography
SecurityOnlineOriginal report -
Apple Forms New “Answers” Team to Build a ChatGPT Rival, Reshaping AI Search
SecurityOnlineOriginal report -
YouTube Tests Instagram-Style Collaboration: New Feature Lets Creators Co-Tag Videos and Share Audiences
SecurityOnlineOriginal report -
Samsung Unveils Exynos 2600: The World’s First 2nm GAA Chip to Power the Galaxy S26
SecurityOnlineOriginal report -
PyRIT – AI-Powered Reconnaissance for Cloud Red Teaming
Use PyRIT for automated reconnaissance against Azure environments with GPT-4 integration. A unique red team recon tool built by Microsoft.
darknet.org.ukOriginal report -
ShadowSyndicate’s Global Ransomware Empire Blurs Lines Between Cybercrime and Geopolitical Espionage
SecurityOnlineOriginal report -
Critical Flaws Found in Partner Software: Default Admin Passwords & XSS Allow RCE on Government Systems
SecurityOnlineOriginal report -
Critical RCE Flaw (CVE-2025-54782) in NestJS DevTools Allows Remote Code Execution
SecurityOnlineOriginal report -
The Telecom Threat: Liminal Panda’s Covert Campaign Targets Southwest Asian Critical Infrastructure
SecurityOnlineOriginal report -
Storm-2603: Chinese APT Deploys Warlock & LockBit with AK47C2 Framework
SecurityOnlineOriginal report -
Critical Squid Vulnerability (CVE-2025-54574) Allows Remote Code Execution & Data Leakage
SecurityOnlineOriginal report -
Google Reverses goo.gl Shutdown, Grants “Second Life” to Active Links
SecurityOnlineOriginal report -
T-Mobile Acquires UScellular for $4.3B, Dumps DEI Programs for FCC Approval
SecurityOnlineOriginal report