News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 22 so far |
Articles per day
The last 14 days and today so far (UTC)Dashed line: average of the 14 complete days. Totals above each bar.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 12 Oct | 56 | 6 |
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 0 |
| Thu 22 Oct | 84 | 3 |
| Fri 23 Oct | 68 | 8 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 0 |
| Today, Mon 26 Oct | 22 so far | 1 |
Mon 18 Aug 2025· 71 articles
-
Web Hosting Firms in Taiwan Attacked by Chinese APT for Access to High-Value Targets
Chinese APT UAT-7237 has been targeting Taiwanese web infrastructure for long-term access to high-value entities.
SecurityWeekOriginal report -
Apple’s Supercharged Siri: The Long-Awaited AI Overhaul Is Coming
SecurityOnlineOriginal report -
The AI-Powered Trojan Horse Returns: How LLMs Revive Classic Cyber Threats
In an era where users rely on vigilance against shady websites and file hashing via platforms like VirusTotal, a new wave of trojan horses is challenging traditional defenses. These threats masquerade as legitimate desktop applications, such as recipe…
gbhackers.comOriginal report -
Evolution of the PipeMagic backdoor: from the RansomExx incident to CVE-2025-29824
In April 2025, Microsoft patched 121 vulnerabilities in its products. According to the company, only one of them was being used in real-world attacks at the time the patch was released: CVE-2025-29824. The exploit for this vulnerability was executed by the…
securelist.comOriginal report -
Workday Data Breach Exposes HR Records via Third-Party CRM Hack
Enterprise software giant Workday has disclosed a security incident involving unauthorized access to employee information through a compromised third-party customer relationship management (CRM) platform. The breach, discovered as part of a broader social…
gbhackers.comOriginal report -
Human resources firm Workday disclosed a data breach
Human resources firm Workday disclosed a data breach after attackers accessed a third-party CRM platform via social engineering. Workday is a cloud-based software company that specializes in enterprise applications for human capital management (HCM),…
Security AffairsOriginal report -
Scammers Target Back-to-School Deals, Diverting Shoppers to Fraud Sites
As the back-to-school season intensifies, cybercriminals are exploiting the heightened online shopping activity by deploying sophisticated scams aimed at siphoning funds and personal data from unsuspecting consumers. According to retail analytics, U.S.…
gbhackers.comOriginal report -
DoJ seizes $2.8M linked to Zeppelin Ransomware
DoJ seized $2.8M in crypto from Ianis Antropenko, indicted in Texas and tied to the defunct Zeppelin ransomware. The U.S. Department of Justice (DoJ) seized more than $2.8 million in cryptocurrency from Ianis Aleksandrovich Antropenko. Antropenko was…
Security AffairsOriginal report -
HR giant Workday discloses data breach amid Salesforce attacks
Human resources giant Workday has disclosed a data breach after attackers gained access to a third-party customer relationship management (CRM) platform in a recent social engineering attack. [...]
BleepingComputerOriginal report -
Hundreds of TeslaMate Servers Expose Real-Time Vehicle Data
A security researcher has discovered that hundreds of self-hosted TeslaMate servers are exposing sensitive Tesla vehicle data to the public internet without any authentication, revealing real-time location tracking, charging patterns, and driving habits of…
gbhackers.comOriginal report -
Xerox fixed path traversal and XXE bugs in FreeFlow Core
Xerox patched two serious flaws in FreeFlow Core, path traversal and XXE injection, that allowed unauthenticated remote code execution. Xerox addressed two serious flaws, respectively tracked as CVE-2025-8355 and CVE-2025-8356, in FreeFlow Core. The…
Security AffairsOriginal report -
A week in security (August 11 – August 17)
Last week on Malwarebytes Labs: Italian hotels breached for tens of thousands of scanned IDs National Public Data returns after massive Social Security Number leak Romance scammers in Ghana charged with more than $100 million in theft Netflix scammer...
MalwarebytesOriginal report -
Critical PostgreSQL Flaws Allow Code Injection During Restoration
The PostgreSQL Global Development Group released emergency security updates on August 14, 2025, addressing three critical vulnerabilities that enable code injection attacks during database restoration processes. The flaws affect all supported versions from…
gbhackers.comOriginal report -
Rockwell ControlLogix Ethernet Vulnerability Exposes Systems to Remote Code Execution
A critical vulnerability in Rockwell Automation’s ControlLogix Ethernet modules has been discovered that could allow remote attackers to execute malicious code on industrial control systems. The vulnerability, identified as CVE-2025-7353, affects multiple…
gbhackers.comOriginal report -
Windows 11 Finally Fixes Dark Mode Inconsistencies
SecurityOnlineOriginal report -
Beyond GPT-5: Inside Sam Altman’s Multibillion-Dollar Plan to Build an AI Empire
SecurityOnlineOriginal report -
LostMyPassword – Dual Use Password Recovery and Credential Dumping Tool
LostMyPassword v1.00 recovers forgotten account passwords, but in red team ops it doubles as a fast post-exploitation credential dumping utility.
darknet.org.ukOriginal report -
New Firmware Flaw in AMI Aptio UEFI Threatens Persistent System Compromise
SecurityOnlineOriginal report -
Inside UAT-7237, a Chinese APT Group Targeting Taiwan
SecurityOnlineOriginal report -
CVE-2025-48387: Critical tar-fs Vulnerability Exposes Millions to Arbitrary File Writes
SecurityOnlineOriginal report -
CrossC2 and ReadNimeLoader: Inside the Multi-Stage Intrusions Targeting Linux and Windows Environments
SecurityOnlineOriginal report -
PostgreSQL Issues Urgent Security Fixes for High-Severity RCE Flaws in Core Utilities
SecurityOnlineOriginal report -
Beyond Phishing: How AI and Deepfakes Are Powering a New Generation of Scams
SecurityOnlineOriginal report -
REVENANT: The Experimental Framework That Infects AI Models and Evades Traditional Defenses
SecurityOnlineOriginal report -
CVE-2025-7353 (CVSS 9.8): Rockwell Automation Issues Urgent Warning for ControlLogix Modules
SecurityOnlineOriginal report -
Pakistan Under Cyberattack: Unmasking the Blue Locker Ransomware Campaign
SecurityOnlineOriginal report -
Google Uses AI to Fight Ad Fraud, Reducing Invalid Traffic by 40%
SecurityOnlineOriginal report -
Dodi Repacks Malware: Why Your Adblocker Won’t Save You
SecurityOnlineOriginal report -
Android’s Call Screen Just Got a Major Upgrade: Meet Google’s New Calling Cards
SecurityOnlineOriginal report -
Microsoft Unlocks Gaming on Windows on Arm: Xbox App Now Supports Native Downloads
SecurityOnlineOriginal report -
Meet Gemma 3 270M: Google’s Most Lightweight AI Model Yet
SecurityOnlineOriginal report