News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Tue 5 Aug 2025· 88 articles
-
Cencora & The Lash Group reach $40M settlement in data breach class action
William C. Gendron reports: If you received notice that your personal information was involved in the Cencora data security incident, or believe your information was affected, you may be eligible to claim up to $5,000 or a cash payment from a class action…
DataBreachesOriginal report -
Black Hat USA 2025 – Summary of Vendor Announcements (Part 1)
Many companies are showcasing their products and services this week at the 2025 edition of the Black Hat conference in Las Vegas.
SecurityWeekOriginal report -
Vibe Coding: When Everyone’s a Developer, Who Secures the Code?
As AI makes software development accessible to all, security teams face a new challenge: protecting applications built by non-developers at unprecedented speed and scale.
SecurityWeekOriginal report -
SonicWall urges admins to disable SSLVPN amid rising attacks
SonicWall has warned customers to disable SSLVPN services due to ransomware gangs potentially exploiting an unknown security vulnerability in SonicWall Gen 7 firewalls to breach networks over the past few weeks. [...]
BleepingComputerOriginal report -
Threat Actors Exploit Open-Source Vulnerabilities to Spread Malicious Code
FortiGuard Labs has reported a sustained trend in the exploitation of open-source software (OSS) repositories for malware dissemination within supply chain ecosystems. As development workflows increasingly depend on third-party packages, adversaries are…
gbhackers.comOriginal report -
Misconfigurations Are Not Vulnerabilities: The Costly Confusion Behind Security Risks
In SaaS security conversations, “misconfiguration” and “vulnerability” are often used interchangeably. But they’re not the same thing. And misunderstanding that distinction can quietly create real exposure. This confusion isn’t just semantics. It reflects a…
The Hacker NewsOriginal report -
Approov Raises $6.7 Million for Mobile App Security
Approov has raised $6.7 million in Series A funding to advance its mobile application and API security solutions.
SecurityWeekOriginal report -
Unexpected snail mail packages are being sent with scammy QR codes, warns FBI
Receiving an unexpected package in the post is not always a pleasant surprise. The FBI has warned the public about unsolicited packages containing a QR code which leads to a website aimed at stealing personal data or downloading malware to the victim’s…
MalwarebytesOriginal report -
2025 Cyber Threat Landscape | Mid-Year Review
A mid-year review of the 2025 threat landscape reveals how automation, phishing kits, and ransomware-as-a-service are accelerating SaaS account compromise and CVE exploitation, making cyber defense more complex than ever.
darktrace.comOriginal report -
Exposed Without a Breach: The Cost of Data Blindness
These are in plain sight without a Breach. No ransomware. No compromise. Just misconfigured systems, overpermissioned users, silent access. When we think of a breach, we imagine firewalls failing, malware spreading, or hackers stealing credentials. But 2025…
Security AffairsOriginal report -
MediaTek Chip Vulnerabilities Allow Attackers to Gain Elevated Access
MediaTek has disclosed three critical security vulnerabilities affecting dozens of its chipsets, potentially allowing attackers to gain elevated system privileges on affected devices. The vulnerabilities, detailed in the company’s August 2025 Product…
gbhackers.comOriginal report -
Android gets patches for Qualcomm flaws exploited in attacks
Google has released security patches for six vulnerabilities in Android's August 2025 security update, including two Qualcomm flaws exploited in targeted attacks. [...]
BleepingComputerOriginal report -
Critical Flaw in ADOdb SQLite3 Driver Allows Arbitrary SQL Execution
A critical security vulnerability has been discovered in the popular ADOdb PHP database abstraction library that could allow attackers to execute arbitrary SQL statements, posing significant risks to applications using SQLite3 databases. The flaw, designated…
gbhackers.comOriginal report -
Raspberry Robin Malware Targets Windows Systems via New CLFS Driver Exploit
The Raspberry Robin malware, also known as Roshtyak, has undergone substantial updates that enhance its evasion and persistence on Windows systems. Active since 2021 and primarily disseminated through infected USB devices, this sophisticated downloader has…
gbhackers.comOriginal report -
How Top CISOs Save Their SOCs from Alert Chaos to Never Miss Real Incidents
Why do SOC teams still drown in alerts even after spending big on security tools? False positives pile up, stealthy threats slip through, and critical incidents get buried in the noise. Top CISOs have realized the solution isn’t adding more and more tools to…
The Hacker NewsOriginal report -
Android’s August 2025 Update Patches Exploited Qualcomm Vulnerability
Android’s light August 2025 security update resolves an Adreno GPU vulnerability confirmed as exploited in June.
SecurityWeekOriginal report -
Microsoft increases Zero Day Quest prize pool to $5 million
Microsoft will offer up to $5 million in bounty awards at this year's Zero Day Quest hacking contest, which the company describes as the "largest hacking event in history." [...]
BleepingComputerOriginal report -
New Android Malware Poses as SBI Card and Axis Bank Apps to Steal Financial Data
McAfee’s Mobile Research Team has identified a sophisticated Android malware campaign primarily aimed at Hindi-speaking users in India, masquerading as legitimate financial applications from institutions like SBI Card, Axis Bank, and IndusInd Bank. This…
gbhackers.comOriginal report -
SonicWall investigates possible zero-day amid Akira ransomware surge
SonicWall probes possible new zero-day after spike in Akira ransomware attacks on Gen 7 firewalls with SSLVPN enabled. SonicWall is investigating a potential new zero-day after a surge in Akira ransomware attacks targeting Gen 7 firewalls with SSLVPN…
Security AffairsOriginal report -
Chollima APT Group Targets Job Seekers and Organizations with JavaScript-Based Malware
The North Korean-linked Chollima advanced persistent threat (APT) group, also known as Famous Chollima, has been orchestrating a persistent cyber espionage campaign since at least December 2022, primarily targeting job seekers in the software development and…
gbhackers.comOriginal report -
Microsoft Offers $5 Million at Zero Day Quest Hacking Contest
Research demonstrating high-impact cloud and AI security flaws will be rewarded at Microsoft’s Zero Day Quest competition in spring 2026.
SecurityWeekOriginal report -
SonicWall Hunts for Zero-Day Amid Surge in Firewall Exploitation
Threat actors might be exploiting a zero-day vulnerability in SonicWall firewalls in a fresh wave of ransomware attacks.
SecurityWeekOriginal report -
Chaining NVIDIA’s Triton Server flaws exposes AI systems to remote takeover
New flaws in NVIDIA’s Triton Server let remote attackers take over systems via RCE, posing major risks to AI infrastructure. Newly revealed security flaws in NVIDIA’s Triton Inference Server for Windows and Linux could let remote, unauthenticated attackers…
Security AffairsOriginal report -
Streamlit Vulnerability Exposes Users to Cloud Account Takeover Attacks
A critical security flaw in Streamlit, the popular open-source framework for building data applications, has been discovered that could allow cybercriminals to execute cloud account takeover attacks and manipulate financial data systems. The vulnerability,…
gbhackers.comOriginal report -
15,000 Fake TikTok Shop Domains Deliver Malware, Steal Crypto via AI-Driven Scam Campaign
Cybersecurity researchers have lifted the veil on a widespread malicious campaign that's targeting TikTok Shop users globally with an aim to steal credentials and distribute trojanized apps. "Threat actors are exploiting the official in-app e-commerce…
The Hacker NewsOriginal report -
Meta Unveils 3mm Holographic VR Headset Prototype, Revolutionizing XR with Stanford Partnership
SecurityOnlineOriginal report -
iOS Update: Proton Authenticator Bug Leaked TOTP Secrets in Plaintext Logs
SecurityOnlineOriginal report -
Cloudflare Accuses Perplexity AI of Evading Blocks and Impersonating Chrome to Scrape Websites
SecurityOnlineOriginal report -
WAF Protections Bypassed via JS Injection and Parameter Pollution for XSS Attacks
A groundbreaking security research has revealed that parameter pollution techniques combined with JavaScript injection can bypass 70% of modern Web Application Firewalls (WAFs), raising serious concerns about the effectiveness of current web security…
gbhackers.comOriginal report -
LegalPwn Attack Tricks AI Tools Like ChatGPT and Gemini into Running Malicious Code
Security researchers have discovered a new type of cyberattack that exploits how AI tools process legal text, successfully tricking popular language models into executing dangerous code. Cybersecurity firm Pangea has unveiled a sophisticated attack method…
gbhackers.comOriginal report -
SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Reported
SonicWall said it's actively investigating reports to determine if there is a new zero-day vulnerability following reports of a spike in Akira ransomware actors in late July 2025. "Over the past 72 hours, there has been a notable increase in both internally…
The Hacker NewsOriginal report -
Claude AI Flaws Let Attackers Execute Unauthorized Commands Using the Model Itself
Security researchers have discovered critical vulnerabilities in Anthropic’s Claude Code that allow attackers to bypass security restrictions and execute unauthorized commands, with the AI assistant itself helping to facilitate these attacks. The…
gbhackers.comOriginal report -
OpenAI Introduces “Take a Break” Reminders to ChatGPT, Refines Responses for High-Stakes Decisions
SecurityOnlineOriginal report -
Critical ADOdb Flaw (CVE-2025-54119, CVSS 10.0) in SQLite3 Driver Allows SQL Injection
SecurityOnlineOriginal report -
Amazon Overhauls Wondery Podcast Network, Shifts Focus to Audible and Creator-Led Content
SecurityOnlineOriginal report -
Broadcom’s Jericho4 Unleashed: The 3nm Switch-Router Connecting a Million XPUs for Distributed AI
SecurityOnlineOriginal report -
Meta Eyes Pika Labs: A Potential $500M Acquisition to Accelerate AI Video Generation
SecurityOnlineOriginal report -
Elon Musk Files “MacroHard” Trademark, Reigniting Rivalry with Microsoft
SecurityOnlineOriginal report -
Android Security Update: Critical RCE Flaw (CVE-2025-48530) in System Component Patched
SecurityOnlineOriginal report -
New Android Malware Impersonates Indian Banks to Steal Data & Secretly Mine Monero
SecurityOnlineOriginal report