News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 16 so far |
Fri 8 Aug 2025· 85 articles
-
Air France and KLM alert customers to data breach on external platform
André Orban reports: KLM and Air France have reported a data breach involving unauthorised access to customer data on an external customer service platform. The incident did not affect the airlines’ internal systems, and no sensitive information (such as…
DataBreachesOriginal report -
PyPI Issues Advisory to Prevent ZIP Parser Confusion Attacks on Python Package Installers
The Python Package Index (PyPI) has announced new restrictions aimed at mitigating ZIP parser confusion attacks that could exploit discrepancies in how Python package installers and inspectors handle ZIP archives. This move comes in response to…
gbhackers.comOriginal report -
Leaked Credentials Up 160%: What Attackers Are Doing With Them
When an organization’s credentials are leaked, the immediate consequences are rarely visible—but the long-term impact is far-reaching. Far from the cloak-and-dagger tactics seen in fiction, many real-world cyber breaches begin with something deceptively…
The Hacker NewsOriginal report -
Black Hat USA 2025 – Summary of Vendor Announcements (Part 4)
Many companies are showcasing their products and services this week at the 2025 edition of the Black Hat conference in Las Vegas.
SecurityWeekOriginal report -
Samourai CEO Keonne Rodriguez and Samourai CTO William Lonergan Hill Pled Guilty to Operating a Money Transmitting Business, Samourai Wallet, That Transmitted Over $200 Million in Criminal Proceeds
On July 30, Keonne Rodriguez and William Lonergan Hill, the co-founders of Samourai Wallet (“Samourai”), a cryptocurrency mixer that facilitated more than $200 million in illegal transactions, pleaded guilty before U.S. District Judge Denise L. Cote in New…
DataBreachesOriginal report -
RubyGems, PyPI Hit by Malicious Packages Stealing Credentials, Crypto, Forcing Security Changes
A fresh set of 60 malicious packages has been uncovered targeting the RubyGems ecosystem by posing as seemingly innocuous automation tools for social media, blogging, or messaging services to steal credentials from unsuspecting users. The activity is…
The Hacker NewsOriginal report -
Microsoft 365 apps to soon block file access via FPRPC by default
Microsoft has announced that the Microsoft 365 apps for Windows will start blocking access to files via the insecure FPRPC legacy authentication protocol by default starting late August. [...]
BleepingComputerOriginal report -
6.4 million Bouygues Telecom just had their data exposed in a huge data breach – and it’s the second to hit French telecoms operators in a month
Emma Woollacott reports: Bouygues Telecom, France’s third-largest phone carrier, has confirmed a data breach which exposed personal data belonging to millions of customers across the country. The company, which provides mobile, broadband, and digital TV…
DataBreachesOriginal report -
AU: Privacy watchdog sues Optus over mass data breach in 2022
David Swan reports: Optus is facing a potential mammoth fine after Australia’s privacy watchdog launched civil Federal Court proceedings over a September 2022 cyberattack in which the personal information of nearly 10 million Australians was stolen. During…
DataBreachesOriginal report -
Columbia University Data Breach Impacts 860,000
Columbia University has been targeted in a cyberattack where hackers stole the personal information of students, applicants, and employees.
SecurityWeekOriginal report -
Microsoft will kill the Lens PDF scanner app for iOS, Android
Microsoft announced that it will phase out the Microsoft Lens PDF scanner app for Android and iOS devices starting September 15, 2025. [...]
BleepingComputerOriginal report -
CISA Issues 10 ICS Advisories Detailing Vulnerabilities and Exploits
The Cybersecurity and Infrastructure Security Agency (CISA) has released ten industrial control systems (ICS) advisories on August 7, 2025, highlighting critical vulnerabilities across various industrial automation and control platforms. These advisories…
gbhackers.comOriginal report -
Scammers mass-mailing the Efimer Trojan to steal crypto
Introduction In June, we encountered a mass mailing campaign impersonating lawyers from a major company. These emails falsely claimed the recipient’s domain name infringed on the sender’s rights. The messages contained the Efimer malicious script, designed…
securelist.comOriginal report -
Columbia University data breach impacts nearly 870,000 individuals
An unknown threat actor has stolen the sensitive personal, financial, and health information of nearly 870,000 Columbia University current and former students and employees after breaching the university's network in May. [...]
BleepingComputerOriginal report -
US Confirms Takedown of BlackSuit Ransomware Behind 450+ Hacks
Federal law enforcement agencies have successfully dismantled the critical infrastructure of BlackSuit ransomware, a sophisticated cybercriminal operation that has compromised over 450 victims across the United States since 2022 and collected more than $370…
gbhackers.comOriginal report -
Amazon ECS Internal Protocol Exploited to Steal AWS Credentials from Other Tasks
Security researchers have disclosed a critical vulnerability in Amazon Elastic Container Service (ECS) that allows malicious containers to steal AWS credentials from other tasks running on the same EC2 instance. The attack, dubbed “ECScape,” exploits an…
gbhackers.comOriginal report -
Malicious Go Packages Used by Threat Actors to Deploy Obfuscated Remote Payloads
Socket’s Threat Research Team has identified eleven malicious Go packages distributed via GitHub, with ten remaining active on the Go Module Mirror, posing ongoing risks to developers and CI/CD pipelines. Eight of these packages employ typosquatting…
gbhackers.comOriginal report -
French Telecom Firm Bouygues Says Data Breach Affects 6.4M Customers
Bouygues has been targeted in a cyberattack that resulted in the personal information of millions of customers getting compromised.
SecurityWeekOriginal report -
Royal and BlackSuit ransomware gangs hit over 450 US companies
The U.S. Department of Homeland Security (DHS) says the cybercrime gang behind the Royal and BlackSuit ransomware operations had breached hundreds of U.S. companies before their infrastructure was dismantled last month. [...]
BleepingComputerOriginal report -
Over 60 Malicious RubyGems Packages Used to Steal Social Media and Marketing Credentials
Socket’s Threat Research Team has exposed a persistent campaign involving over 60 malicious RubyGems packages that masquerade as automation tools for platforms like Instagram, Twitter/X, TikTok, WordPress, Telegram, Kakao, and Naver. Active since at least…
gbhackers.comOriginal report -
GreedyBear Steals $1M in Crypto Using 150+ Malicious Firefox Wallet Extensions
A newly discovered campaign dubbed GreedyBear has leveraged over 150 malicious extensions to the Firefox marketplace that are designed to impersonate popular cryptocurrency wallets and steal more than $1 million in digital assets. The published browser…
The Hacker NewsOriginal report -
SonicWall dismisses zero-day fears after Ransomware probe
SonicWall found no evidence of a new vulnerability after probing reports of a zero-day used in ransomware attacks. SonicWall investigated claims of a zero-day being used in ransomware attacks but found no evidence of any new vulnerability in its products.…
Security AffairsOriginal report -
Flipper Zero Dark Web Firmware Cracks Rolling Code Security in Modern Cars
Security researchers have discovered alarming new firmware for the popular Flipper Zero device that can completely bypass the rolling code security systems protecting millions of modern vehicles. The breakthrough attack, demonstrated by YouTube channel…
gbhackers.comOriginal report -
CISA Issues Urgent Advisory to Address Microsoft Exchange Flaw
The Cybersecurity and Infrastructure Security Agency (CISA) has issued Emergency Directive 25-02 on August 7, 2025, requiring federal agencies to immediately address a critical vulnerability in Microsoft Exchange hybrid configurations that could allow…
gbhackers.comOriginal report -
Retbleed Vulnerability Exploited to Access Any Process’s Memory on Newer CPUs
Security researchers have successfully demonstrated a sophisticated exploit of the Retbleed vulnerability, a critical CPU security flaw that allows attackers to read arbitrary memory from any process running on affected systems. The exploit, which builds…
gbhackers.comOriginal report -
ChatGPT-5 Launches – Discover What’s New in the Next-Gen AI Agent
OpenAI has officially launched ChatGPT-5, marking a significant leap forward in artificial intelligence technology with a revolutionary unified system that combines multiple specialized models to deliver unprecedented performance and versatility. The launch…
gbhackers.comOriginal report -
Android Studio Narwhal Arrives: AI Agent Mode, XR Tools, and K2 Kotlin Now in Stable Release
SecurityOnlineOriginal report -
RubyGems Under Attack: 60 Malicious Packages Found Stealing Credentials from Grey-Hat Marketers
SecurityOnlineOriginal report -
GitLab Exposes a Clever Crypto Scam: Malicious PyPI Packages Hijack Bittensor Staking
SecurityOnlineOriginal report -
DarkCloud Stealer: New Evasive Tactics Use Obfuscated Scripts & VB6 Payloads to Evade Detection
SecurityOnlineOriginal report -
Critical JWE Ruby Flaw (CVE-2025-54887) Bypasses AES-GCM Authentication, Exposing Encrypted Data
SecurityOnlineOriginal report -
OpenAI Unveils GPT-5: Smarter, Faster, and a Game-Changer for Business
SecurityOnlineOriginal report -
Your AI Teammate Has Arrived: Xbox’s New Gaming Copilot Is Here
SecurityOnlineOriginal report -
Chiplet Revolution: New UCIe 3.0 Standard Boosts Speeds for AI and HPC
SecurityOnlineOriginal report -
Android 16’s New Security Feature Could Slow Down Your Fast Charging
SecurityOnlineOriginal report -
The Browser Company’s New AI Browser, Dia, Comes with a $20 Monthly Subscription
SecurityOnlineOriginal report -
Grok May Soon Show You Ads: Elon Musk’s Plan to Monetize AI
SecurityOnlineOriginal report -
Silver Fox APT Blurs the Line Between Espionage & Cybercrime
Silver Fox is the Hannah Montana of Chinese threat actors, effortlessly swapping between petty criminal and nation-state-type attacks.
Dark ReadingOriginal report -
The Malicious Go Modules: 11 Malicious Go Packages Found on GitHub Deploying Stealthy Malware
SecurityOnlineOriginal report -
The Billion-Dollar Smishing Empire: How Chinese Syndicates Are Hacking Apple & Google Wallets
SecurityOnlineOriginal report