News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 22 so far |
Wed 13 Aug 2025· 79 articles
-
Windows Remote Desktop Services Flaw Allows Network-Based Denial-of-Service Attacks
Microsoft disclosed a critical vulnerability in Windows Remote Desktop Services on August 12, 2025, that enables attackers to launch denial-of-service attacks remotely without requiring authentication or user interaction. The flaw, tracked as CVE-2025-53722,…
gbhackers.comOriginal report -
‘Curly COMrades’ APT Hackers Target Critical Organizations Across Multiple Countries
Bitdefender Labs has identified a sophisticated advanced persistent threat (APT) group dubbed “Curly COMrades,” active since mid-2024, targeting critical infrastructure in geopolitically sensitive regions. This Russian-aligned actor has focused on judicial…
gbhackers.comOriginal report -
GitHub Copilot RCE Vulnerability via Prompt Injection Enables Full System Compromise
A critical security vulnerability in GitHub Copilot has been disclosed, allowing attackers to achieve remote code execution and complete system compromise through sophisticated prompt injection techniques. The vulnerability, tracked as CVE-2025-53773, was…
gbhackers.comOriginal report -
Webinar: What the Next Wave of AI Cyberattacks Will Look Like — And How to Survive
The AI revolution isn’t coming. It’s already here. From copilots that write our emails to autonomous agents that can take action without us lifting a finger, AI is transforming how we work. But here’s the uncomfortable truth: Attackers are evolving just as…
The Hacker NewsOriginal report -
Fortinet, Ivanti Release August 2025 Security Patches
Fortinet and Ivanti have published new security advisories for their August 2025 Patch Tuesday updates.
SecurityWeekOriginal report -
Microsoft August 2025 Patch Tuesday Fixes Kerberos Zero-Day Among 111 Total New Flaws
Microsoft on Tuesday rolled out fixes for a massive set of 111 security flaws across its software portfolio, including one flaw that has been disclosed as publicly known at the time of the release. Of the 111 vulnerabilities, 16 are rated Critical, 92 are…
The Hacker NewsOriginal report -
Charon Ransomware targets Middle East with APT attack methods
New Charon ransomware targets Middle East public sector and aviation, using APT-style tactics, EDR evasion, and victim-specific ransom notes. Cybersecurity researchers have discovered a new campaign that employs a previously undocumented ransomware family…
Security AffairsOriginal report -
Musk Vows Legal Action Against Apple, Accuses App Store of Favoring OpenAI
SecurityOnlineOriginal report -
New Charon Ransomware Uses DLL Sideloading and Anti-EDR Tactics in Targeted Attacks
Trend Micro researchers have uncovered a novel ransomware family dubbed Charon, deployed in a sophisticated campaign targeting the public sector and aviation industry in the Middle East. This operation employs advanced persistent threat (APT)-style…
gbhackers.comOriginal report -
AirPods’ Secret Feature: iOS 26 Beta Reveals Real-Time Translation with a Pinch
SecurityOnlineOriginal report -
Leave Your Printers at Home: Starbucks Korea Cracks Down on Cafe Offices
SecurityOnlineOriginal report -
Microsoft and Amazon Pull the Plug: Windows Subsystem for Android and Appstore to be Discontinued
SecurityOnlineOriginal report -
New trends in phishing and scams: how AI and social media are changing the game
Introduction Phishing and scams are dynamic types of online fraud that primarily target individuals, with cybercriminals constantly adapting their tactics to deceive people. Scammers invent new methods and improve old ones, adjusting them to fit current…
securelist.comOriginal report -
Malicious npm Package Lures Job Seekers and Exfiltrates Sensitive Data
A self-proclaimed Ukrainian Web3 team targeted a community member during an interview’s first round by instructing them to clone and run a GitHub repository named EvaCodes-Community/UltraX. Suspecting foul play, the individual contacted the SlowMist security…
gbhackers.comOriginal report -
Hackers leak 2.8M sensitive records from Allianz Life in Salesforce data breach
Hackers leaked 2.8M sensitive records from Allianz Life, exposing data on business partners and customers in ongoing Salesforce data theft attacks. Hackers leaked 2.8 million sensitive records of US insurance giant Allianz Life, exposing data on business…
Security AffairsOriginal report -
ICS Patch Tuesday: Major Vendors Address Code Execution Vulnerabilities
August 2025 ICS Patch Tuesday advisories have been published by Siemens, Schneider, Aveva, Honeywell, ABB and Phoenix Contact.
SecurityWeekOriginal report -
Chrome Security Update Fixes High-Severity Flaws Allowing Arbitrary Code Execution
Google has released a critical security update for its Chrome browser, addressing six security vulnerabilities, including three high-severity flaws that could potentially allow arbitrary code execution on affected systems. The stable channel update, version…
gbhackers.comOriginal report -
Charon Ransomware Hits Middle East Sectors Using APT-Level Evasion Tactics
Cybersecurity researchers have discovered a new campaign that employs a previously undocumented ransomware family called Charon to target the Middle East's public sector and aviation industry. The threat actor behind the activity, according to Trend Micro,…
The Hacker NewsOriginal report -
FortiWeb Authentication Bypass Vulnerability Allows Logins as Any Existing User
A critical security vulnerability in Fortinet’s FortiWeb web application firewall has been discovered that allows unauthenticated attackers to bypass authentication and impersonate any existing user on affected devices. The flaw, tracked as CVE-2025-52970…
gbhackers.comOriginal report -
Critical FortiSIEM Vulnerability Allows Attackers to Execute Malicious Commands, PoC Found in the Wild
Security researchers have discovered a critical vulnerability in Fortinet’s FortiSIEM platform that enables remote attackers to execute unauthorized commands without authentication. The flaw, tracked as CVE-2025-25256, has achieved a maximum CVSS score of…
gbhackers.comOriginal report -
New Zero-Click NTLM Credential Leak Exploit Bypasses Microsoft Patch for CVE-2025-24054
Security researchers at Cymulate Research Labs have discovered a critical zero-click NTLM credential leakage vulnerability that successfully bypasses Microsoft’s security patch for CVE-2025-24054, demonstrating that the original fix was incomplete and…
gbhackers.comOriginal report -
Microsoft Teams RCE Flaw Allows Hackers to Read, Modify, and Delete Messages
Microsoft has disclosed a critical remote code execution vulnerability in Microsoft Teams that could allow attackers to execute malicious code and potentially access, modify, or delete user messages. The vulnerability, tracked as CVE-2025-53783, was…
gbhackers.comOriginal report -
Adobe Patches Over 60 Vulnerabilities Across 13 Products
Adobe’s security updates fix vulnerabilities in Commerce, Substance, InDesign, FrameMaker, Dimension and other products.
SecurityWeekOriginal report -
Microsoft Patches Over 100 Vulnerabilities
Microsoft’s August 2025 Patch Tuesday updates address critical vulnerabilities in Windows, Office, and Hyper-V.
SecurityWeekOriginal report -
Critical XZ Backdoor Still Lurks in Docker Images, Posing Supply Chain Risk
SecurityOnlineOriginal report -
Google’s Chrome Browser Faces an Uncertain Future: Perplexity AI Makes a Bid
SecurityOnlineOriginal report -
Google’s “Preferred Sources” Feature Is Here: Take Control of Your Search Results
SecurityOnlineOriginal report -
Epic vs. Apple & Google: Australia Court Finds App Stores Lacked Fair Competition
SecurityOnlineOriginal report -
Apple Sues Apple Cinemas: The Legal Battle Over a Name Heats Up
SecurityOnlineOriginal report -
Microsoft’s August Patch Tuesday: Zero-Day Kerberos Flaw Threatens Domain Admins
SecurityOnlineOriginal report -
Zoom Patches Critical Flaw (CVE-2025-49457): Windows Users Face Privilege Escalation Risk
SecurityOnlineOriginal report -
Charon Ransomware Emerges: APT-Style Precision Meets Destructive Encryption
SecurityOnlineOriginal report -
China Questions Security of AI Chips From Nvidia, AMD
The US banned the sale of AI chips to China and then backed off. Now, Chinese sources are calling on NVIDIA to prove its AI chips have no backdoors.
Dark ReadingOriginal report -
Click-to-Compromise: PowerShell-Only RAT Campaign Targets Israeli Organizations
SecurityOnlineOriginal report -
PoisonSeed’s MFA-Resistant Phishing Kit Exposed: A Deep Dive into Precision-Validated Credential Theft
SecurityOnlineOriginal report -
GitHub Malware Campaign: SmartLoader Poses as Game Cheats to Steal Data
SecurityOnlineOriginal report -
Chrome Stable Update 139 Blocks High-Severity Exploits in V8, libaom, and ANGLE
SecurityOnlineOriginal report -
FortiSIEM CVE-2025-25256 (CVSS 9.8): Remote Unauthenticated Command Injection with Exploit in the Wild
SecurityOnlineOriginal report -
SAP fixed 26 flaws in August 2025 Update, including 4 Critical
SAP’s August 2025 Patch Tuesday released 15 new security notes, including critical fixes, plus four updates to previously released patches. SAP’s August 2025 Patch Tuesday delivers 15 new security notes, including critical fixes, plus four updates to older…
Security AffairsOriginal report