CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 10–13 on weekend days.

  • On CISA KEV CVEs
  • Other coverage
Show as table
Articles published per day
DayArticles published
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Sun 25 Oct13
Today, Mon 26 Oct20 so far

Articles per day

The last 14 days and today so far (UTC)

Dashed line: average of the 14 complete days. Totals above each bar.

  • On CISA KEV CVEs
  • Other coverage
Show as table
Articles published per day
DayArticlesOn CISA KEV CVEs
Mon 12 Oct566
Tue 13 Oct8511
Wed 14 Oct8625
Thu 15 Oct7815
Fri 16 Oct6112
Sat 17 Oct101
Sun 18 Oct100
Mon 19 Oct6012
Tue 20 Oct8616
Wed 21 Oct960
Thu 22 Oct843
Fri 23 Oct688
Sat 24 Oct133
Sun 25 Oct130
Today, Mon 26 Oct20 so far1
Exploited only
76 articles

Latest days

Tue 12 Aug 2025· 76 articles

  1. CodeSecCon Is Today: Where Software Security’s Next Chapter Unfolds (Virtual Event)

    Taking place August 12-13, CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.

    SecurityWeekOriginal report
  2. Manpower discloses data breach affecting nearly 145,000 people

    Manpower, one of the world's largest staffing companies, is notifying nearly 145,000 individuals that their information was stolen by attackers who breached the company's systems in December 2024. [...]

    BleepingComputerOriginal report
  3. ShinyHunters Tactics Now Mirror Scattered Spider

    There's growing evidence that two of arguably the most dangerous cybercrime groups out there are tag-teaming big targets.

    Dark ReadingOriginal report
  4. SAP Patches Critical S/4HANA Vulnerability

    SAP has released 15 new security notes on the August 2025 Patch Tuesday, including for critical vulnerabilities.

    SecurityWeekOriginal report
  5. Scattered Spider’s New Telegram Channel Names Targeted Organizations

    A new Telegram channel that combined the names of well-known threat actor organizations Shiny Hunters, Scattered Spider, and Lapsus$ emerged on Friday afternoon in a daring uptick in cyberthreat activity. This platform, potentially short-lived due to…

    gbhackers.comOriginal report
  6. Saint Paul cyberattack linked to Interlock ransomware gang

    The mayor of Saint Paul, Minnesota's capital city, has confirmed that the Interlock ransomware gang is responsible for a cyberattack that disrupted many of the city's systems and services in July. [...]

    BleepingComputerOriginal report
  7. The Ultimate Battle: Enterprise Browsers vs. Secure Browser Extensions

    Most security tools can’t see what happens inside the browser, but that’s where the majority of work, and risk, now lives. Security leaders deciding how to close that gap often face a choice: deploy a dedicated Enterprise Browser or add an enterprise-grade…

    The Hacker NewsOriginal report
  8. North Korean Kimsuky Hackers Suffer Data Breach as Insiders Leak Information Online

    Sometimes we like insider leaks, right? Divya reports: A member of North Korea’s notorious Kimsuky espionage group has experienced a significant data breach after insiders leaked hundreds of gigabytes of internal files and tools to the public. The breach,…

    DataBreachesOriginal report
  9. Royal Enfield Reportedly Targeted in Ransomware Attack, Hackers Claim Data Encryption

    Royal Enfield, the storied motorcycle manufacturer celebrated for its classic designs and global fan base, is reportedly grappling with a significant cybersecurity breach. A hacker collective posted a “Complete Breach Notice” on an underground forum,…

    gbhackers.comOriginal report
  10. SAP Security Patch Day Fixes 15 Flaws, Including 3 Injection Vulnerabilities

    SAP released critical security updates on August 12, 2025, addressing 15 vulnerabilities across its enterprise software portfolio, with three severe code injection flaws receiving the highest CVSS scores of 9.9. The monthly Security Patch Day also included…

    gbhackers.comOriginal report
  11. Researchers cracked the encryption used by DarkBit ransomware

    Researchers at cybersecurity firm Profero cracked DarkBit ransomware encryption, allowing victims to recover files for free. Good news for the victims of the DarkBit ransomware, researchers at cybersecurity firm Profero cracked the encryption process,…

    Security AffairsOriginal report
  12. OT Networks Targeted in Widespread Exploitation of Erlang/OTP Vulnerability

    The recently patched Erlang/OTP flaw CVE-2025-32433 has been exploited since early May, shortly after its existence came to light.

    SecurityWeekOriginal report
  13. Researchers Detail Script-Masking Tactics That Bypass Defenses

    Security researchers and cybersecurity professionals are highlighting the growing sophistication of payload obfuscation techniques that allow malicious actors to bypass traditional defense mechanisms. As organizations increasingly rely on web application…

    gbhackers.comOriginal report
  14. Dutch NCSC Confirms Active Exploitation of Citrix NetScaler CVE-2025-6543 in Critical Sectors

    The Dutch National Cyber Security Centre (NCSC-NL) has warned of cyber attacks exploiting a recently disclosed critical security flaw impacting Citrix NetScaler ADC products to breach organizations in the country. The NCSC-NL said it discovered the…

    The Hacker NewsOriginal report
  15. Record $250K Bug Bounty Awarded for Discovering Critical Chrome RCE Flaw

    Google has awarded a record-breaking $250,000 bug bounty to security researcher Micky for discovering a critical remote code execution vulnerability in Google Chrome that could allow attackers to escape the browser’s sandbox protection. The flaw, tracked…

    gbhackers.comOriginal report
  16. North Korean Kimsuky Hackers Suffer Data Breach as Insiders Leak Information Online

    A member of North Korea’s notorious Kimsuky espionage group has experienced a significant data breach after insiders leaked hundreds of gigabytes of internal files and tools to the public. The breach, which emerged in early June 2025, exposed the group’s…

    gbhackers.comOriginal report
  17. NCSC: Citrix NetScaler Flaw (CVE-2025-6543) is Being Actively Exploited to Breach Organizations

    The National Cyber Security Centre (NCSC) in the Netherlands has issued an urgent update on a series of sophisticated cyberattacks exploiting a zero-day vulnerability in Citrix NetScaler systems, identified as CVE-2025-6543. This flaw, affecting Citrix…

    gbhackers.comOriginal report
  18. Critical Vulnerability in Carmaker Portal Allows Hackers to Unlock Cars Remotely

    Security researcher Eaton Zveare unveiled a critical flaw in a major automaker’s dealer portal that could allow attackers to unlock and start consumer vehicles from anywhere. The vulnerability, discovered in an obscure centralized dealer software platform…

    gbhackers.comOriginal report
  19. DarkBit Hackers Target VMware ESXi Servers to Deploy Ransomware and Encrypt VMDK Files

    A sophisticated ransomware attack by a previously unknown cybercriminal group called “DarkBit” has targeted a major organization’s VMware ESXi infrastructure, encrypting critical virtual machine files and raising concerns about potential state-sponsored…

    gbhackers.comOriginal report
  20. Reddit Blocks Internet Archive Amid AI Data Scraping Concerns

    Reddit has announced it will restrict the Internet Archive’s Wayback Machine from accessing most of its content, citing concerns about AI companies exploiting the digital preservation service to scrape data in violation of platform policies. The move…

    gbhackers.comOriginal report
  21. Apache bRPC Vulnerability Lets Attackers Crash Services Remotely via Network

    A critical security vulnerability has been discovered in Apache bRPC that allows attackers to remotely crash services through network-based denial of service attacks. The vulnerability, designated as CVE-2025-54472, affects all versions of Apache bRPC prior…

    gbhackers.comOriginal report
  22. Hackers post stolen St. Paul data online as efforts to reset city employee passwords surge forward

    Mayor Melvin Carter said a hacker group on Monday posted 43 gigabytes of stolen data taken from server of St. Paul Parks and Rec Department. The InterLock ransomware group claims responsibility for the attack and leak. Rob Olson reports: For the second day,…

    DataBreachesOriginal report

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device