News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 13 so far |
Fri 8 Aug 2025· 85 articles
-
French firm Bouygues Telecom suffered a data breach impacting 6.4M customers
Bouygues Telecom suffered a cyberattack that compromised the personal information of 6.4 million customers. French telecommunications company Bouygues Telecom suffered a cyberattack that resulted in the compromise of personal information of 6.4 million…
Security AffairsOriginal report -
KrebsOnSecurity in New ‘Most Wanted’ HBO Max Series
A new documentary series about cybercrime airing next month on HBO Max features interviews with Yours Truly. The four-part series follows the exploits of Julius Kivimäki, a prolific Finnish hacker recently convicted of leaking tens of thousands of patient…
Krebs on SecurityOriginal report -
OpenAI to fix GPT-5 issues, double rate limits for paid users after outrage
OpenAI's CEO, Sam Altman, overpromised on GPT-5, and real-life results are underwhelming, but it looks like a new update is rolling out that might address some of the concerns. [...]
BleepingComputerOriginal report -
SC: Spartanburg County hit by cyberattack, some online services disrupted
Stephanie Moore reports: Spartanburg County officials reported Friday that the county experienced a cybersecurity incident earlier this week. Scottie Kay Blackwell, the county communications manager, said the cyberattack immediately triggered a response from…
DataBreachesOriginal report -
60 RubyGems Packages Steal Data From Annoying Spammers
A Dark Web antihero has been stealing and then reselling credentials from unsavory online characters. Their motives are questionable, but the schadenfreude is irresistible.
Dark ReadingOriginal report -
WinRAR zero-day exploited to plant malware on archive extraction
A recently fixed WinRAR vulnerability tracked as CVE-2025-8088 was exploited as a zero-day in phishing attacks to install the RomCom malware. [...]
BleepingComputerOriginal report -
Typosquatted PyPI Packages Used by Threat Actors to Steal Cryptocurrency from Bittensor Wallets
GitLab’s Vulnerability Research team has uncovered a highly sophisticated cryptocurrency theft campaign exploiting typosquatted Python packages on the Python Package Index (PyPI) to target the Bittensor decentralized AI network. The operation, detected…
gbhackers.comOriginal report -
Investigating the Ivanti Endpoint Manager Mobile Vulnerabilities
his blog explores evolving post-exploitation tactics and emphasizes the need for continuous visibility and machine-speed response across enterprise network environments.
darktrace.comOriginal report -
Efimer Malicious Script Spreads via WordPress Sites, Torrents, and Email in Massive Attack Wave
Kaspersky researchers have uncovered a widespread campaign involving the Efimer malicious script, a sophisticated Trojan-dropper primarily aimed at stealing cryptocurrency. First detected in June 2025, the malware impersonates legal correspondence from major…
gbhackers.comOriginal report -
Over 5,000 Fake Online Pharmacies Caught Selling Counterfeit Medicines
Researchers at Gen have uncovered a vast network of over 5,000 fraudulent online pharmacy domains operated by a single cybercriminal entity dubbed MediPhantom. This elaborate PharmaFraud operation exploits advanced techniques including domain hijacking,…
gbhackers.comOriginal report -
Red Teams Jailbreak GPT-5 With Ease, Warn It’s ‘Nearly Unusable’ for Enterprise
Researchers demonstrate how multi-turn “storytelling” attacks bypass prompt-level filters, exposing systemic weaknesses in GPT-5’s defenses.
SecurityWeekOriginal report -
DarkCloud Stealer Uses Novel Infection Chain and ConfuserEx Obfuscation Techniques
Unit 42 researchers have identified a significant evolution in the distribution tactics of DarkCloud Stealer, an infostealer malware first observed shifting its delivery mechanisms in early April 2025. This update introduces a novel infection chain that…
gbhackers.comOriginal report -
FTC: older adults lost record $700 million to scammers in 2024
Americans aged 60 and older lost a staggering $700 million to online scams in 2024, marking a sharp rise in fraud targeting seniors, according to the Federal Trade Commission. [...]
BleepingComputerOriginal report -
Columbia University data breach impacted 868,969 people
Columbia University was hit by a cyberattack, exposing personal data of over 860,000 students, applicants, and employees. Columbia University suffered a cyberattack that exposed the personal data of students, applicants, and employees. According to the data…
Security AffairsOriginal report -
DarkCloud Stealer Targets Windows Systems to Harvest Login Credentials and Financial Data
A new variant of the DarkCloud information-stealer malware has been observed targeting Microsoft Windows systems, primarily affecting Windows users by collecting sensitive data such as login credentials, financial information, and personal contacts.…
gbhackers.comOriginal report -
BigID Launches Shadow AI Discovery to Uncover Rogue Models and Risky AI Data
No content available.
Dark ReadingOriginal report -
PwC Announces Addition of Morgan Adamski to Leadership of Cyber, Data & Technology Risk Platform
No content available.
Dark ReadingOriginal report -
Axis Camera Server Vulnerabilities Expose Thousands of Organizations to Attack
Claroty’s Team82 research unit has unveiled four vulnerabilities affecting Axis Communications’ widely deployed video surveillance ecosystem, potentially endangering thousands of organizations worldwide. These flaws, centered on the proprietary Axis.Remoting…
gbhackers.comOriginal report -
Cybersecurity Incident at Allianz Life Exposes Personal Information of Hundreds of Thousands
No content available.
Dark ReadingOriginal report -
CodeSecCon 2025: Where Software Security’s Next Chapter Unfolds
Taking place August 12-13, CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
SecurityWeekOriginal report -
AI Tools Fuel Brazilian Phishing Scam While Efimer Trojan Steals Crypto from 5,000 Victims
Cybersecurity researchers are drawing attention to a new campaign that's using legitimate generative artificial intelligence (AI)-powered website building tools like DeepSite AI and BlackBox AI to create replica phishing pages mimicking Brazilian government…
The Hacker NewsOriginal report -
860K Compromised in Columbia University Data Breach
While no data has yet to be misused, the university doesn't rule out the possibility of that occurring in the future, prompting it to warn affected individuals to remain vigilant in the wake of the breach.
Dark ReadingOriginal report -
U.S. Judiciary confirms breach of court electronic records service
The U.S. Federal Judiciary confirms that it suffered a cyberattack on its electronic case management systems hosting confidential court documents and is strengthening cybersecurity measures. [...]
BleepingComputerOriginal report -
Pakistan Petroleum thwarts ransomware attempt, says no critical data compromised
Business Recorder reports: Pakistan Petroleum Limited (PPL), an oil and gas exploration firm, has reported a ransomware attack on parts of its IT infrastructure, detected on August 6, 2025, but said the incident was swiftly contained with no compromise of…
DataBreachesOriginal report -
Dark Web Profile: Interlock Ransomware
Dark Web Profile: Interlock Ransomware Interlock is a ransomware group active since late 2024, most recently gaining attention for its use of advanced social engineering tactics. Its latest technique, called ClickFix, tricks users into pasting malicious…
SOCRadarOriginal report -
Help Desk at Risk: Scattered Spider Shines Light on Overlook Threat Vector
As attackers target help desks and identity systems, traditional security perimeters are proving insufficient against agile, socially-engineered threats.
SecurityWeekOriginal report -
Redefining the Role: What Makes a CISO Great
Security is everyone's responsibility, but as a CISO, it starts with you.
Dark ReadingOriginal report -
What Makes the Deep Web a Valuable Threat Intelligence Source
What Makes the Deep Web a Valuable Threat Intelligence Source Organizations are turning to unconventional data sources to gain an edge in cybersecurity. One such source, often underestimated or misunderstood, is the deep web. This hidden layer of the…
SOCRadarOriginal report -
CVE-2025-53786: CISA Issues Emergency Directive for Critical Microsoft Exchange Hybrid Vulnerability
CVE-2025-53786: CISA Issues Emergency Directive for Critical Microsoft Exchange Hybrid Vulnerability On August 7, 2025, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an Emergency Directive in response to a newly disclosed Microsoft…
SOCRadarOriginal report -
Attackers Target the Foundations of Crypto: Smart Contracts
A whole criminal ecosystem revolves around scamming users out of their crypto assets, but malicious — or vulnerable — smart contracts could be used against businesses as well.
Dark ReadingOriginal report -
ShinyHunters sent Google an extortion demand; Shiny comments on current activities
Yesterday morning, DataBreaches woke up to a message on Telegram: Even the NSA can’t stop or identify us anymore. The FBI and everyone else is irrelevant and incompetent as far as we’re concerned :). When DataBreaches asked ShinyHunters if anything in…
DataBreachesOriginal report -
Columbia University Data Breach Exposes Personal and Financial Data of 870,000
Columbia University disclosed a significant cybersecurity incident that compromised personal and financial information of nearly 870,000 individuals, making it one of the largest data breaches affecting an educational institution this year. The breach, which…
gbhackers.comOriginal report -
In Other News: Nvidia Says No to Backdoors, Satellite Hacking, Energy Sector Assessment
Noteworthy stories that might have slipped under the radar: federal court filing system hack, Chanel data breach, emergency CISA directive.
SecurityWeekOriginal report -
VexTrio TDS Deploys Malicious VPN Apps on Google Play and App Store
VexTrio, a sophisticated threat actor known for operating a massive traffic distribution system (TDS), has expanded its malicious activities by deploying fake VPN applications on major app stores, including Google Play and the Apple App Store. Originating…
gbhackers.comOriginal report -
Minimizing Permissions | A Guide to Tightening Access in the Cloud
his blog will dive into the challenges of balancing access and security in the cloud and provide practical strategies for cloud forensics.
darktrace.comOriginal report -
Record-Breaking GreedyBear Attack Uses 650 Hacking Tools to Steal $1M from Victims
The threat actor group dubbed GreedyBear has orchestrated an industrial-scale operation blending malicious browser extensions, executable malware, and phishing infrastructure to siphon over $1 million in cryptocurrency from victims. This coordinated assault,…
gbhackers.comOriginal report -
What Is Deep Web Threat Intelligence?
What Is Deep Web Threat Intelligence? Threat intelligence is only as strong as the sources that feed it. While most organizations are familiar with surface web data and even dark web monitoring, there’s a lesser-known but highly valuable space in between:…
SOCRadarOriginal report -
Multiple Security Vulnerabilities Found in WWBN AVideo, MedDream, and Eclipse ThreadX
Cisco Talos’ Vulnerability Discovery & Research team has disclosed a total of 12 critical security vulnerabilities across three popular software platforms, highlighting significant security risks that could potentially impact millions of users worldwide. The…
gbhackers.comOriginal report -
Windows UAC Bypass Exploits Character Map Tool for Privilege Escalation
Cybersecurity researchers have uncovered a new technique that allows attackers to bypass Windows User Account Control (UAC) protections by exploiting an unexpected vulnerability in the system’s Private Character Editor tool, potentially granting unauthorized…
gbhackers.comOriginal report