News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Tue 5 Aug 2025· 88 articles
-
39-year-old Nigerian extradited to US from France over alleged hacking
Vanguard reports: A Nigerian man has been extradited to the United States from France to face charges of computer hacking, fraud and identity theft, the Justice Department said Tuesday. Chukwuemeka Victor Amachukwu, 39, and Nigeria-based co-conspirators…
DataBreachesOriginal report -
Critical Command Injection Flaws in Trend Micro Apex One Actively Exploited
Trend Micro has issued an urgent advisory for two critical command injection flaws in Apex One (on-prem) for Windows, with CVE-2025-54948 and CVE-2025-54987 both carrying a CVSS score of 9.4 and, according to Trend Micro, at least one is being actively…
SecurityOnline -
Project AK47: Uncovering a Link to the SharePoint Vulnerability Attacks
Unit 42’s Project AK47 intersects with Microsoft’s disclosure of ToolShell activity in SharePoint vulnerabilities, identifying a cluster they label CL-CRI-1040 that has been active since at least March 2025 and is financially motivated. The researchers link…
unit42.paloaltonetworks.comStorm-2603 -
Pandora confirms data breach amid ongoing Salesforce data theft attacks
Danish jewelry giant Pandora has disclosed a data breach after its customer information was stolen in the ongoing Salesforce data theft attacks. [...]
BleepingComputerOriginal report -
Pandora Confirms Third-Party Data Breach, Warns of Phishing Attempts
The jewelry retailer is warning customers that their data can and might be used maliciously.
Dark ReadingOriginal report -
PBS confirms data breach after employee info leaked on Discord servers
PBS has suffered a data breach exposing the corporate contact information of its employees and those of its affiliates, BleepingComputer has learned. [...]
BleepingComputerOriginal report -
Hamilton taxpayers on the hook for full $18.3M cyberattack repair bill after insurance claim denied
Laura Sebben reports: The City of Hamilton will be on the hook for the more than $18 million it has cost to recover from a ransomware attack after their insurance claim was denied. In an update presented to a city committee on Wednesday, staff said that its…
DataBreachesOriginal report -
Security Risk Advisors Launches SCALR AI for Fast-Track Agentive AI Enablement
Security Risk Advisors (SRA), a leading cybersecurity consulting firm, today announced the launch of SCALR AI, a customizable platform designed to enable non-technical people to build and integrate agentive AI capabilities directly into their operations.…
gbhackers.comOriginal report -
Comp AI Raises $2.6M to Streamline and Disrupt the SOC 2 Market
San Francisco, California, August 1st, 2025, CyberNewsWire Comp AI Raises $2.6M in Pre-Seed Funding to Revolutionize Enterprise Compliance with AI-Powered Automation Comp AI, an emerging player in the compliance automation space, today announced it has…
gbhackers.comOriginal report -
More than 1 million patients affected by DaVita ransomware attack; those are preliminary numbers
There is an update to the ransomware attack involving DaVita Dialysis first reported in April. According to DaVita’s disclosures this month, unauthorized access to its servers began on March 24, 2025 and continued until April 12, 2025, when they were able to…
DataBreachesOriginal report -
Adobe issues emergency fixes for AEM Forms zero-days after PoCs released
Adobe released emergency updates for two zero-day flaws in Adobe Experience Manager (AEM) Forms on JEE after a PoC exploit chain was disclosed that can be used for unauthenticated, remote code execution on vulnerable instances. [...]
BleepingComputerOriginal report -
RCE Flaw in AI-Assisted Coding Tool Poses Software Supply Chain Risk
A critical vulnerability in the trust model of Cursor, a fast-growing tool for LLM-assisted development, allows for silent and persistent remote code execution.
Dark ReadingOriginal report -
U.S. Treasury Warns Crypto ATMs Are Aiding Criminal Activity
The U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) has issued Notice FIN-2025-NTC1, dated August 4, 2025, warning financial institutions about the growing risks associated with convertible virtual currency (CVC) kiosks, also…
gbhackers.comOriginal report -
Zero Day Quest returns: Microsoft ups the stakes with $5M bug bounty
Microsoft offers up to $5M for Zero Day Quest 2026 bug hacking contest; top researchers join live hacking event after fall 2025 submissions. Microsoft is bringing back its live hacking contest, Zero Day Quest, in spring 2026, and this time, it’s offering up…
Security AffairsOriginal report -
Cisco User Data Stolen in Vishing Attack
The networking giant said this week that an employee suffered a voice phishing attack that resulted in the compromise of select user data, including email addresses and phone numbers.
Dark ReadingOriginal report -
Cisco discloses data breach impacting Cisco.com user accounts
Sergiu Gatlan reports: Cisco has disclosed that cybercriminals stole the basic profile information of users registered on Cisco.com following a voice phishing (vishing) attack that targeted a company representative. After becoming aware of the incident on…
DataBreachesOriginal report -
Over 10,000 Malicious TikTok Shop Domains Target Users with Malware and Credential Theft
Cybersecurity firm CTM360 has uncovered an ongoing malicious operation dubbed “ClickTok,” specifically targeting TikTok Shop users worldwide through a dual-pronged strategy of phishing and malware deployment. This campaign leverages deceptive replicas of…
gbhackers.comOriginal report -
Kimsuky APT Uses LNK Files to Deploy Reflective Malware and Evade Windows Defender
The North Korean state-sponsored group Kimsuky, also known as APT43, Thallium, and Velvet Chollima, has been accused of launching a recent cyber-espionage campaign in which the attackers used malicious Windows shortcut (LNK) files as the first point of entry…
gbhackers.comOriginal report -
Scattered Spider is NOT quiet. They’re just under another name now?
Citing a July 30 report in The Hacker News, SC Media reports: Following recent arrests of alleged Scattered Spider members in the UK, Google Cloud’s Mandiant Consulting has reported a noticeable pause in the group’s activities, offering a “critical window of…
DataBreachesOriginal report -
ClickFix Malware Campaign Exploits CAPTCHAs to Spread Cross-Platform Infections
A combination of propagation methods, narrative sophistication, and evasion techniques enabled the social engineering tactic known as ClickFix to take off the way it did over the past year, according to new findings from Guardio Labs. "Like a real-world…
The Hacker NewsOriginal report -
Microsoft Launches Zero-Day Quest Hacking Contest with Rewards Up to $5 Million
Microsoft has unveiled the return of its groundbreaking Zero Day Quest initiative, escalating the stakes in cybersecurity research with a staggering total bounty pool of up to $5 million. Building on the success of last year’s inaugural event, which offered…
gbhackers.comOriginal report -
Microsoft’s Project Ire Autonomously Reverse Engineers Software to Find Malware
Microsoft has unveiled Project Ire, a prototype autonomous AI agent that can analyze any software file to determine if it’s malicious.
SecurityWeekOriginal report -
Elevate your protection with expanded Microsoft Defender Experts coverage
Defender Experts now offers 24/7, expert-driven protection for cloud workloads, beginning with hybrid and multicloud servers in Microsoft Defender for Cloud. Additionally, third-party network signals can be used in Microsoft Defender Experts for XDR to…
techcommunity.microsoft.comOriginal report -
Surge in Cyber Attacks Targeting AI Infrastructure as Critical Vulnerabilities Emerge
Security researchers discovered 28 distinct zero-day vulnerabilities, seven of which were expressly directed at artificial intelligence infrastructure, in a startling discovery made during the 2025 Pwn2Own Berlin event, which was organized by Trend Micro’s…
gbhackers.comOriginal report -
Cisco disclosed a CRM data breach via vishing attack
Cisco disclosed CRM data breach via vishing attack; basic user info was exposed, but no sensitive data or systems were compromised Cisco has confirmed a data breach involving a third-party CRM system, exposing basic profile details (e.g. names, emails, and…
Security AffairsOriginal report -
Critical Android vulnerabilities patched—update as soon as you can
Google has patched six vulnerabilities in Android, including two critical vulnerabilities in its August 2025 Android Security Bulletin. It also covers a critical vulnerability which could have allowed an attacker to execute code on a victim’s device without…
MalwarebytesOriginal report -
Alleged ‘tap-in’ scammer advertised services on social media
Would you give a complete stranger your credit card in return for the promise of easy money? No, neither would we. But apparently well over a hundred people did. Hillsborough County Sheriff’s Office arrested 24 year-old Janetcilize Martinez in Tampa, FL, for…
MalwarebytesOriginal report -
The Heat Wasn't Just Outside: Cyber Attacks Spiked in Summer 2025
Can your defenses withstand the biggest attacks of Summer 2025? From Interlock's FileFix to Qilin, Scattered Spider, and ToolShell exploits—simulate them all against your organization's defenses with Picus Security Validation Platform to find gaps before…
BleepingComputerOriginal report -
Why the Old Ways Are Still the Best for Most Cybercriminals
While the cybercrime underground has professionalized and become more organized in recent years, threat actors are, to a great extent, still using the same attack methods today as they were in 2020.
Dark ReadingOriginal report -
Google’s August Patch Fixes Two Qualcomm Vulnerabilities Exploited in the Wild
Google has released security updates to address multiple security flaws in Android, including fixes for two Qualcomm bugs that were flagged as actively exploited in the wild. The vulnerabilities include CVE-2025-21479 (CVSS score: 8.6) and CVE-2025-27038…
The Hacker NewsOriginal report -
Cisco Discloses Data Breach Exposed User Profiles from Cisco.com
Cisco Systems has disclosed a data breach that compromised basic profile information of users registered on Cisco.com following a successful voice phishing attack targeting one of the company’s representatives. The incident resulted in unauthorized access to…
gbhackers.comOriginal report -
Cisco Says User Data Stolen in CRM Hack
Cisco has disclosed a data breach affecting Cisco.com user accounts, including names, email address, and phone numbers.
SecurityWeekOriginal report -
Cloudflare Accuses Perplexity AI of Bypassing Firewalls with User-Agent Spoofing
Cloudflare has publicly accused Perplexity AI of employing deceptive crawling practices that violate established web crawling protocols and deliberately circumvent website protection mechanisms. The cybersecurity company has documented evidence of Perplexity…
gbhackers.comOriginal report -
Hackers Target SharePoint Flaw to Access IIS Machine Keys
Zero-day exploits against Microsoft SharePoint are enabling attackers to extract IIS machine keys, establishing persistent backdoors that survive patches and reboots. In mid-July 2025, threat actors began abusing two critical SharePoint…
gbhackers.comOriginal report -
SonicWall Alerts on Surge of Attacks Against Gen 7 Firewalls Over Past 72 Hours
SonicWall has issued an urgent security advisory following a significant escalation in cyberattacks targeting Generation 7 firewalls with enabled SSLVPN functionality over the past three days. The cybersecurity company is actively investigating whether these…
gbhackers.comOriginal report -
Cursor AI Code Editor Vulnerability Enables RCE via Malicious MCP File Swaps Post Approval
Cybersecurity researchers have disclosed a high-severity security flaw in the artificial intelligence (AI)-powered code editor Cursor that could result in remote code execution. The vulnerability, tracked as CVE-2025-54136 (CVSS score: 7.2), has been…
The Hacker NewsOriginal report -
Exclusive: Brosix and Chatox promised to keep your chats secured. They didn’t.
Chatox and Brosix are communications platforms that advertise for personal use and team use. They are owned by Stefan Chekanov. The only statement Chatox makes about its data security is “Chatox employs encryption across all communications, making it an…
DataBreachesOriginal report -
APT36 Targets Indian Government: Credential Theft Campaign Uncovered
A sophisticated phishing campaign attributed with medium confidence to the Pakistan-linked APT36 group, also known as Transparent Tribe or Mythic Leopard, has been uncovered targeting Indian defense organizations and government entities. This operation…
gbhackers.comOriginal report -
Cisco discloses data breach impacting Cisco.com user accounts
Cisco has disclosed that cybercriminals stole the basic profile information of users registered on Cisco.com following a voice phishing (vishing) attack that targeted a company representative. [...]
BleepingComputerOriginal report -
North Korean Hackers Exploit NPM Packages to Steal Cryptocurrency and Sensitive Data
Veracode Threat Research has uncovered a sophisticated North Korean cryptocurrency theft operation that continues to evolve, building on campaigns previously reported in February and June 2024. This latest iteration involves twelve malicious NPM packages,…
gbhackers.comOriginal report
