News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 23 so far |
Fri 15 Aug 2025· 63 articles
-
Top 10 Best NDR Solutions (Network Detection and Response) in 2025
The network remains the central nervous system of every organization. While endpoints and cloud environments are crucial, all digital activity ultimately traverses the network. Implementing the best NDR solutions is essential for monitoring and securing this…
gbhackers.comOriginal report -
RealDefense Opens $10M Fund to Help OEMs Monetize Installs With SmartScan Cybersecurity SDK
No content available.
Dark ReadingOriginal report -
New Crypto24 Ransomware Attacks Bypass EDR
While several cybercrime groups have embraced "EDR killers," researchers say the deep knowledge and technical skills demonstrated by Crypto24 signify a dangerous escalation.
Dark ReadingOriginal report -
Mobile Phishers Target Brokerage Accounts in ‘Ramp and Dump’ Cashout Scheme
Cybercriminal groups peddling sophisticated phishing kits that convert stolen card data into mobile wallets have recently shifted their focus to targeting customers of brokerage services, new research shows. Undeterred by security controls at these trading…
Krebs on SecurityOriginal report -
Colt Telecommunications Struggles in Wake of Cyber Incident
The UK telco said it temporarily took some systems offline as a "protective" measure in its investigation.
Dark ReadingOriginal report -
10 Best Free Data Recovery Software 2025
Free data recovery software or tools are among the most essential tools, playing a crucial role in our lives. Although you can find dozens of them nowadays, their importance remains significant. Losing our data from a device due to failure of the device, an…
gbhackers.comOriginal report -
New NFC-Driven Android Trojan PhantomCard targets Brazilian bank customers
PhantomCard, an NFC-driven Android Trojan in Brazil, relays card data to fraudsters, spread via fake Google Play “card protection” apps. ThreatFabric warns of PhantomCard, a new Android NFC-driven trojan targeting Brazilian banking customers and possibly…
Security AffairsOriginal report -
Italian hotels breached for tens of thousands of scanned IDs
The Computer Emergency Response Team (CERT) for Italy’s “Agenzia per l’Italia Digitale” (AGID) issued a warning that cybercriminals are selling stolen identity documents from hotels operating in Italy. This summer, a criminal hacker group named “mydocs”…
MalwarebytesOriginal report -
National Public Data returns after massive Social Security Number leak
Remember that data broker nobody had ever heard of, but managed to leak a database which contained the data of some 2.9 billion people? It’s back, and this time with a search function. National Public Data suffered an alleged breach in 2024 against a data…
MalwarebytesOriginal report -
Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools
A Chinese-speaking advanced persistent threat (APT) actor has been observed targeting web infrastructure entities in Taiwan using customized versions of open-sourced tools with an aim to establish long-term access within high-value victim environments. The…
The Hacker NewsOriginal report -
Colt Telecom attack claimed by WarLock ransomware, data up for sale
UK-based telecommunications company Colt Technology Services is dealing with a cyberattack that has caused a multi-day outage of some of the company's operations, including hosting and porting services, Colt Online and Voice API platforms. [...]
BleepingComputerOriginal report -
Cisco IOS, IOS XE, and Secure Firewall Flaws Allow Remote DoS Attacks
Cisco Systems has issued a high-priority security advisory addressing multiple critical vulnerabilities in the Internet Key Exchange Version 2 (IKEv2) feature across its networking and security product portfolio. Published on August 14, 2025, the advisory…
gbhackers.comOriginal report -
Cisco warns of max severity flaw in Firewall Management Center
Cisco is warning about a critical remote code execution (RCE) vulnerability in the RADIUS subsystem of its Secure Firewall Management Center (FMC) software. [...]
BleepingComputerOriginal report -
Using Security Expertise to Bridge the Communication Gap
Security-focused leadership delivers better products and business outcomes.
Dark ReadingOriginal report -
Microsoft reminds of Windows 10 support ending in two months
Microsoft has reminded customers that Windows 10 will be retired in two months after all editions of Windows 10, version 22H2 reach their end of servicing on October 14. [...]
BleepingComputerOriginal report -
MadeYouReset: New HTTP/2 DoS Vulnerability Explained
MadeYouReset: New HTTP/2 DoS Vulnerability Explained A newly disclosed technique called “MadeYouReset” lets attackers coax HTTP/2 servers into resetting their own streams, slipping past many Rapid Reset defenses. Here’s how it works, who’s affected, and what…
SOCRadarOriginal report -
F5 Fixes HTTP/2 Flaw Affecting Multiple Products in Massive DoS Attacks
F5 Networks has disclosed a new HTTP/2 vulnerability affecting multiple BIG-IP products that could allow attackers to launch denial-of-service attacks against enterprise networks. The vulnerability, designated CVE-2025-54500 and published on August 13, 2025,…
gbhackers.comOriginal report -
Water Systems Under Attack: Norway, Poland Blame Russia Actors
Water and wastewater systems have become a favored target of nation-state actors, drawing increasing scrutiny following attacks on systems in multiple countries.
Dark ReadingOriginal report -
Dark Web Profile: Void Blizzard
Dark Web Profile: Void Blizzard Void Blizzard is a newly identified Russian state-sponsored cyber threat group. Also known as Laundry Bear, the group first drew attention after an attack on the Dutch police in September 2024. Dutch intelligence services AIVD…
SOCRadarOriginal report -
In Other News: Critical Zoom Flaw, City’s Water Threatened by Hack, $330 Billion OT Cyber Risk
Other noteworthy stories that might have slipped under the radar: Canada’s House of Commons hacked, Russia behind court system attack, Pennsylvania AG targeted in cyberattack.
SecurityWeekOriginal report -
ImageMagick Vulnerabilities Cause Memory Corruption and Integer Overflows
The popular open-source image manipulation software ImageMagick has addressed four critical security vulnerabilities discovered by Google’s artificial intelligence-powered security research tool, Big Sleep. These flaws, affecting millions of applications…
gbhackers.comOriginal report -
Keenan & Associates settles 2023 data breach litigation for $14M
Keenan & Associates is a benefits consulting and insurance brokerage provider in California, providing services to several sectors, including healthcare entities and educational facilities. Between August 21, 2023 and August 27, 2023, an unauthorized user…
DataBreachesOriginal report -
Phishing Campaign Exploits Japanese Character “ん” to Imitate Forward Slash
Security researchers have uncovered a sophisticated new phishing campaign that exploits the Japanese hiragana character “ん” to create deceptively authentic-looking URLs that can fool even vigilant internet users. The attack, first identified by security…
gbhackers.comOriginal report -
Plex warns users to patch security vulnerability immediately
Plex has notified some of its users on Thursday to urgently update their media servers due to a recently patched security vulnerability. [...]
BleepingComputerOriginal report -
U.S. Sanctions Garantex and Grinex Over $100M in Ransomware-Linked Illicit Crypto Transactions
The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) on Thursday renewed sanctions against Russian cryptocurrency exchange platform Garantex for facilitating ransomware actors and other cybercriminals by processing more than $100…
The Hacker NewsOriginal report -
Zero Trust + AI: Privacy in the Age of Agentic AI
We used to think of privacy as a perimeter problem: about walls and locks, permissions, and policies. But in a world where artificial agents are becoming autonomous actors — interacting with data, systems, and humans without constant oversight — privacy is…
The Hacker NewsOriginal report -
Tight Cybersecurity Budgets Accelerate the Shift to AI-Driven Defense
With cybersecurity budgets strained, organizations are turning to AI-powered automation to plug staffing gaps, maintain defenses, and survive escalating threats.
SecurityWeekOriginal report -
Google Says Android pKVM Earns Highest Level of Security Assurance
Android pKVM has achieved SESIP Level 5 certification, which means it’s resistant to highly skilled, motivated, and funded attackers.
SecurityWeekOriginal report -
VirtualBox 7.2 Adds Windows 11/Arm VM Support and Key Bug Fixes
Oracle has released VirtualBox 7.2.0, a major update that significantly expands ARM virtualization capabilities and introduces comprehensive Windows 11/ARM support. Released on August 14, 2025, this update represents a substantial leap forward in…
gbhackers.comOriginal report -
HexStrike AI Links ChatGPT, Claude, and Copilot to 150+ Security Tools
HexStrike AI, the leading autonomous cybersecurity framework, today announced seamless integration with ChatGPT, Claude, and GitHub Copilot, enabling these AI agents to orchestrate over 150 professional security tools for comprehensive penetration testing…
gbhackers.comOriginal report -
Palo Alto GlobalProtect Vulnerability Allows Privilege Escalation via Certificate Bypass
A newly disclosed vulnerability in Palo Alto Networks’ GlobalProtect application could allow attackers to escalate privileges and install malicious software on affected systems through improper certificate validation. The security flaw, tracked as…
gbhackers.comOriginal report -
US sanctions Grinex crypto-exchange, successor to Garantex
The U.S. Department of the Treasury has announced sanctions against Grinex, the successor to Russian cryptocurrency exchange Garantex, which was previously sanctioned for helping ransomware gangs launder their money. [...]
BleepingComputerOriginal report -
Source Code of ERMAC V3.0 Malware Exposed by ‘changemeplease’ Password
A significant security breach has exposed the complete source code of ERMAC V3.0, a sophisticated banking trojan that targets over 700 financial applications worldwide. The leak, discovered by cybersecurity firm Hunt.io in March 2024, was made possible by a…
gbhackers.comOriginal report -
Critical Flaws Patched in Rockwell FactoryTalk, Micro800, ControlLogix Products
Rockwell Automation has published several advisories describing critical and high-severity vulnerabilities affecting its products.
SecurityWeekOriginal report -
Cisco fixed maximum-severity security flaw in Secure Firewall Management Center
Cisco patches critical Secure Firewall Management Center flaw allowing remote code execution on vulnerable systems. Cisco released security updates to address a maximum-severity security vulnerability, tracked as CVE-2025-20265 (CVSS score of 10.0), in…
Security AffairsOriginal report -
‘Blue Locker’ Ransomware Targeting Oil & Gas Sector in Pakistan
Blue Locker ransomware hits Pakistan’s oil & gas sector, severely impacting Pakistan Petroleum; NCERT warns ministries of severe ongoing risk. This week Pakistan’s National Cyber Emergency Response Team (NCERT – National CERT – Pakistan) has issued an…
Security AffairsOriginal report -
10 Best Managed Detection And Response (MDR) Companies in 2025
Organizations of all sizes face an unrelenting barrage of sophisticated cyber threats, from highly evolved ransomware strains and stealthy advanced persistent threats (APTs) to cunning social engineering campaigns—challenges that increasingly drive the…
gbhackers.comOriginal report -
Cisco Patches Critical Vulnerability in Firewall Management Platform
Cisco has released over 20 advisories as part of its August 2025 bundled publication for ASA, FMC and FTD products.
SecurityWeekOriginal report -
Cisco Secure Firewall Snort 3 Vulnerability Enable DoS Attacks
A critical vulnerability discovered in Cisco’s Secure Firewall Threat Defense Software has been identified as CVE-2025-20217, posing significant risks to network security infrastructure worldwide. The vulnerability, affecting the Snort 3 Detection Engine,…
gbhackers.comOriginal report -
Cisco Warns of CVSS 10.0 FMC RADIUS Flaw Allowing Remote Code Execution
Cisco has released security updates to address a maximum-severity security flaw in Secure Firewall Management Center (FMC) Software that could allow an attacker to execute arbitrary code on affected systems. The vulnerability, assigned the CVE identifier…
The Hacker NewsOriginal report