News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 27 so far |
Thu 14 Aug 2025· 81 articles
-
Leak: OpenAI's browser will use ChatGPT Agent to control the browser
OpenAI is building an agentic future with its upcoming Chromium-based browser and a new leak confirms GPT Agent integration. [...]
BleepingComputerOriginal report -
Splunk Publishes Defender’s Guide to Spot ESXi Ransomware Early
Splunk has released a comprehensive defender’s guide aimed at helping cybersecurity teams detect and prevent ransomware attacks targeting ESXi infrastructure before they can cause widespread damage. The guide comes as organizations continue to face mounting…
gbhackers.comOriginal report -
EncryptHub Turns Brave Support Into a Dropper; MMC Flaw Completes the Run
Trustwave SpiderLabs researchers have uncovered a sophisticated EncryptHub campaign that ingeniously abuses the Brave Support platform to deliver malicious payloads, leveraging the recently disclosed CVE-2025-26633 vulnerability in Microsoft Management…
gbhackers.comOriginal report -
Windows Out-of-Box-Experience Flaw Enables Full Administrative Command Prompt Access
A newly documented vulnerability in Windows’ Out-of-Box-Experience (OOBE) allows users to bypass security restrictions and gain full administrative access to command prompt functionality, even when Microsoft’s intended protective measures are in place.…
gbhackers.comOriginal report -
‘AI Induced Destruction’ – How AI Misuse is Creating New Attack Vectors
Cybersecurity firms are reporting a disturbing new trend in 2025: artificial intelligence assistants designed to boost productivity are inadvertently becoming destructive forces, causing massive system failures and data breaches. These incidents represent a…
gbhackers.comOriginal report -
A Mega Malware Analysis Tutorial Featuring Donut-Generated Shellcode
A beginner-friendly tutorial on analyzing .NET malware teaches you how to use common tools, recognize techniques and understand infection chains.
unit42.paloaltonetworks.comOriginal report -
SAG-AFTRA Members Settle Lawsuit Against Union Health Plan Over Data Breach
In December 2024, SAG-AFTRA notified members of a phishing incident in September 2024 that may have resulted in unauthorized access to their name and Social Security number, and may also have contained information associated with claims and health insurance…
DataBreachesOriginal report -
Attackers Need Just One Vulnerability to Own Your Rooted Android
Android privilege escalation has been transformed by rooting frameworks such as KernelSU, APatch, and SKRoot, which use advanced kernel patching techniques to enable unauthorized code execution at the kernel level. These tools hook into critical system…
gbhackers.comOriginal report -
Simple Steps for Attack Surface Reduction
Story teaser text: Cybersecurity leaders face mounting pressure to stop attacks before they start, and the best defense may come down to the settings you choose on day one. In this piece, Yuriy Tsibere explores how default policies like deny-by-default, MFA…
The Hacker NewsOriginal report -
CISA warns of N-able N-central flaws exploited in zero-day attacks
CISA warned on Wednesday that attackers are actively exploiting two security vulnerabilities in N‑able's N-central remote monitoring and management (RMM) platform. [...]
BleepingComputerOriginal report -
Passkey Login Bypassed via WebAuthn Process Manipulation
Researchers at enterprise browser security firm SquareX showed how an attacker can impersonate a user and bypass passkey security.
SecurityWeekOriginal report -
Apple TV 4K Rumored to Get a Huge Upgrade with A17 Pro Chip
SecurityOnlineOriginal report -
Charge Smarter: Surface Pro 11 and Laptop 7 Get a Crucial Battery Feature
SecurityOnlineOriginal report -
Goodbye, Long Waits: Apple to Offer On-Site iPad Repairs at Retail Stores
SecurityOnlineOriginal report -
Zoom patches critical Windows flaw allowing privilege escalation
Zoom fixed a critical Windows client flaw (CVE-2025-49457, CVSS 9.6) involving an untrusted search path that could enable privilege escalation. Cloud-based video conferencing and online collaboration platform Zoom addressed a critical security flaw, tracked…
Security AffairsOriginal report -
A Game-Changer: Epic Games Brings Easy Anti-Cheat to Windows 11 Arm
SecurityOnlineOriginal report -
NGINX Makes HTTPS Easier Than Ever with New ACME Module
SecurityOnlineOriginal report -
U.S. CISA adds N-able N-Central flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds N-able N-Central flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added N-able N-Central flaws to its Known Exploited…
Security AffairsOriginal report -
Microsoft fixes Windows 11 24H2 updates failing with 0x80240069 error
Microsoft has resolved a known issue preventing the August 2025 Windows 11 24H2 cumulative update from being delivered via Windows Server Update Services (WSUS). [...]
BleepingComputerOriginal report -
Proxyware Campaign Piggybacks on Popular YouTube Video Download Services
The AhnLab Security Intelligence Center (ASEC) has uncovered fresh instances of proxyware distribution by threat actors leveraging deceptive advertising on freeware sites. Building on prior reports, such as the “DigitalPulse Proxyware Being Distributed…
gbhackers.comOriginal report -
Manpower data breach impacted 144,180 individuals
Global staffing and workforce solutions firm Manpower reports a January RansomHub ransomware attack that compromised data of 140,000 individuals. Manpower in Lansing, Michigan, reported that the ransomware attack that disrupted its systems on January 20,…
Security AffairsOriginal report -
Google Requires Crypto App Licenses in 15 Regions as FBI Warns of $9.9M Scam Losses
Google said it's implementing a new policy requiring developers of cryptocurrency exchanges and wallets to obtain government licenses before publishing apps in 15 jurisdictions in order to "ensure a safe and compliant ecosystem for users." The policy applies…
The Hacker NewsOriginal report -
Xerox FreeFlow Core Vulnerability Allows Remote Code Execution — PoC Now Public
Security researchers have disclosed critical vulnerabilities in Xerox FreeFlow Core that enable unauthenticated remote attackers to execute arbitrary code on vulnerable systems. The proof-of-concept exploits are now publicly available, raising immediate…
gbhackers.comOriginal report -
Critical WordPress Plugin Vulnerability Puts 70,000+ Sites at Risk of Remote Code Execution
A severe security vulnerability has been discovered in a popular WordPress plugin used by over 70,000 websites worldwide, potentially exposing them to complete takeover by malicious actors. The vulnerability, tracked as CVE-2025-7384, affects the “Database…
gbhackers.comOriginal report -
CISA Alerts on N-able N-Central Deserialization and Injection Flaw Under Active Exploitation
The Cybersecurity and Infrastructure Security Agency (CISA) has issued urgent alerts regarding two critical vulnerabilities in N-able N-Central that are currently being actively exploited, prompting immediate action from organizations using this remote…
gbhackers.comOriginal report -
CISA Adds Two N-able N-central Flaws to Known Exploited Vulnerabilities Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added two security flaws impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. N-able N-central is a Remote…
The Hacker NewsOriginal report -
Google Gemini's Deep Research is finally coming to API
Google Gemini's one of the most powerful features is Deep Research, but up until now, it has been strictly limited to the Gemini interface. This could change soon. [...]
BleepingComputerOriginal report -
“Curly COMrades” Group Unmasked: Russian Threat Actors Deploy New Backdoor in Geopolitical Espionage Campaign
SecurityOnlineOriginal report -
Critical WordPress Plugin Flaw (CVE-2025-7384, CVSS 9.8) Exposes 70,000+ Sites to RCE and Data Loss
SecurityOnlineOriginal report -
Phishing-Resistant No More? New Attack Bypasses FIDO Passkeys with Downgrade Trick
SecurityOnlineOriginal report -
PS1Bot Malware Campaign Unleashes Modular PowerShell Framework with Stealthy New Tricks
SecurityOnlineOriginal report -
CVE-2025-40746: Critical Vulnerability Found in Siemens SIMATIC RTLS Locating Manager
SecurityOnlineOriginal report -
Unmasking VexTrio: A 15-Year Cybercrime Empire of Scams, Spam, and Fake Apps
SecurityOnlineOriginal report -
U.S. CISA adds Microsoft Internet Explorer, Microsoft Office Excel, and WinRAR flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Internet Explorer, Microsoft Office Excel, and WinRAR flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added…
Security AffairsOriginal report -
Microsoft Pushes New Companion Apps to Windows 11 Taskbar for 365 Subscribers
SecurityOnlineOriginal report -
Google Tightens Free AI Pro Plan: Students Must Verify Identity or Lose Access
SecurityOnlineOriginal report -
Kimsuky Hacked: Hackers Leak 8.9GB of Stolen Data and Tools from North Korean Group
SecurityOnlineOriginal report -
Monero Under Fire: Qubic Mining Pool Executes Successful 51% Attack, Rocking Crypto World
SecurityOnlineOriginal report -
Claude Sonnet 4 Gets a Massive 1-Million-Token Context Window for Enterprise Developers
SecurityOnlineOriginal report -
Windows 11 Update Triggers “Pluton” Error, Microsoft Says to Disregard It
SecurityOnlineOriginal report