News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Tue 26 Aug 2025· 94 articles
-
Salesloft breached to steal OAuth tokens for Salesforce data-theft attacks
Hackers breached the sales automation platform Salesloft to steal OAuth and refresh tokens from its Drift chat agent integration with Salesforce, enabling them to pivot to customer environments and exfiltrate data, according to Salesloft. The compromised…
DataBreaches -
DOGE accused of copying entire Social Security database to insecure cloud system
According to Ars Technica, a Social Security Administration official has alleged in a whistleblower disclosure that DOGE officials created “a live copy of the country’s Social Security information in a cloud environment that circumvents oversight.” The…
DataBreaches -
Data Is the New Diamond: Heists in the Digital Age
Unit 42 argues that financially motivated criminals in the digital age use social engineering and intensive reconnaissance to achieve their goals, linking modern data theft extortion to the February 2023 Antwerp Diamond Centre heist in Belgium where more…
unit42.paloaltonetworks.com -
OH: West Chester Township investigates second cyberattack this month
West Chester Township is dealing with a second cyber-attack this month, with the incident occurring on Tuesday morning when cyber attackers the township calls a “malicious group” struck and targeted the email server. At approximately 6:45 a.m., the public…
DataBreaches -
Church of England alleged to have breached abuse survivors’ data
According to The Telegraph, the Church of England is investigating claims it breached the personal data of almost 200 abuse survivors. An official is reported to have failed to conceal the contact details of applicants to a compensation scheme in an email.…
DataBreaches -
Google to verify all Android devs to block malware on Google Play
Google is introducing a new defence for Android called ‘Developer Verification’ to block malware installations from sideloaded apps sourced from outside the official Google Play store. For apps on Google Play, publishers were already required to provide a…
BleepingComputer -
New ZipLine Campaign Targets Critical Manufacturing Firms with In-Memory MixShell Malware
Check Point Research has uncovered a highly persistent phishing operation dubbed ZipLine, which targets primarily U.S.-based manufacturing firms in supply chain-critical sectors and delivers in-memory MixShell malware after a prolonged social engineering…
gbhackers.com -
Citrix fixes critical NetScaler RCE flaw exploited in zero-day attacks
Citrix has fixed three NetScaler flaws, including a critical remote code execution vulnerability tracked as CVE-2025-7775 that was observed being exploited in zero‑day attacks on unpatched devices, according to Citrix. The memory overflow flaw can lead to…
BleepingComputer -
Silk Typhoon hackers hijack network captive portals in diplomat attacks
According to Google Threat Intelligence Group, Silk Typhoon-linked actors targeted diplomats by hijacking network captive portals using an advanced AitM technique to redirect traffic to a malware-serving landing page. The campaign begins when the Chrome…
BleepingComputerMUSTANG PANDA -
APT36 Targets Indian BOSS Linux Using Weaponized .desktop Shortcut Files
APT36 Targets Indian BOSS Linux Using Weaponized .desktop Shortcut Files is the headline for this GBHackers piece by Aman Mishra, dated 26 August 2025. The article then pivots to detail ONEFLIP, a novel inference-time backdoor attack that compromises…
gbhackers.com -
Farmers Insurance discloses a data breach impacting 1.1M customers
Farmers Insurance disclosed a data breach affecting 1,071,172 customers, linked to the recent wave of Salesforce attacks, according to Bleeping Computer. The breach occurred on 29 May 2025 and involved a third-party vendor, with Farmers quickly detecting the…
Security Affairs -
Threat Actors Leverage AI Agents to Conduct Social Engineering Attacks
Cybersecurity researchers describe agentic AI as autonomous, goal-driven systems that can learn and plan across multiple steps, a step beyond reactive, helpfully responsive AI that merely generates content. The article notes that threat actors are using…
gbhackers.com -
1M Farmers Insurance Customer Data Compromised
Farmers Insurance, Farmers Insurance Exchange and its affiliated companies filed breach notification documents after suffering a security incident via a third‑party vendor, with more than 1 million customers affected. The breach occurred on 29 May and was…
Dark Reading -
Citrix Under Active Attack Again With Another Zero-Day
Citrix is again under active attack with three new NetScaler flaws, one of which is a zero-day designated CVE-2025-7775, a memory overflow that remote attackers can exploit to hijack a system or cause a DoS via remote access or IPv6 web traffic handling. The…
Dark Reading -
Malicious Scanning Waves Slam Remote Desktop Services
Researchers reported a torrent of malicious scans hitting Microsoftundefineds Remote Desktop Protocol (RDP) services, with GreyNoise flagging a surge from nearly 2,000 IP addresses on 21 August 2025 and a second wave on 24 August 2025 involving more than…
Dark Reading -
Data I/O Becomes Latest Ransomware Attack Victim
Data I/O, a Redmond, Washington-based tech manufacturer, disclosed a ransomware incident that led to outages across its operations, including shipping, manufacturing and production. The attack occurred on Aug. 16, and the company activated its incident…
Dark Reading -
Citrix fixed three NetScaler flaws, one of them actively exploited in the wild
Citrix fixed three vulnerabilities in NetScaler ADC and NetScaler Gateway, including one (CVE-2025-7775) that has been actively exploited in the wild, according to Citrix. The flaws are CVE-2025-7775 (CVSS 9.2), CVE-2025-7776 (CVSS 8.8) and CVE-2025-8424…
Security Affairs -
Salesloft breached to steal OAuth tokens for Salesforce data-theft attacks
Hackers breached Salesloft to steal OAuth and refresh tokens from its Drift chat agent integration with Salesforce, enabling a Salesforce data-theft campaign aimed at exfiltrating customer information. The ShinyHunters extortion group claims responsibility…
BleepingComputerShinyHunters -
China-Based Threat Actor Mustang Panda’s TTPs Leaked
A significant milestone for cybersecurity experts is the disclosure of specific tactics, methods, and procedures (TTPs) used by Mustang Panda, an advanced persistent threat (APT) group based in China, which has illuminated their intricate activities. First…
gbhackers.comOriginal report -
Securden Unified PAM Flaw Allows Attackers to Bypass Authentication
Securden Unified PAM is a comprehensive privileged access management platform that is used to store, manage, and monitor credentials across human, machine, and AI identities in a variety of environments. Security researchers discovered four critical…
gbhackers.comOriginal report -
Hook Android Trojan Now Delivers Ransomware-Style Attacks
New features to take over smartphones and monitor user activity demonstrate the continued evolution of the malware, which is now being spread on GitHub.
Dark ReadingOriginal report -
Nevada closes state offices as cyberattack disrupts IT systems
Nevada remains two days into a cyberattack that began early Sunday, disrupting government websites, phone systems, and online platforms, and forcing all state offices to close on Monday. [...]
BleepingComputerOriginal report -
Citrix Patches Three NetScaler Flaws, Confirms Active Exploitation of CVE-2025-7775
Citrix has released fixes to address three security flaws in NetScaler ADC and NetScaler Gateway, including one that it said has been actively exploited in the wild. The vulnerabilities in question are listed below - CVE-2025-7775 (CVSS score: 9.2) - Memory…
The Hacker NewsOriginal report -
New Sni5Gect Attack Crashes Phones and Downgrades 5G to 4G without Rogue Base Station
A team of academics has devised a novel attack that can be used to downgrade a 5G connection to a lower generation without relying on a rogue base station (gNB). The attack, per the ASSET (Automated Systems SEcuriTy) Research Group at the Singapore…
The Hacker NewsOriginal report -
New Hook Android Banking Malware Emerges with Advanced Features and 107 Remote Commands
Zimperium’s zLabs research team has identified a sophisticated new variant of the Hook Android banking trojan, marking a significant escalation in mobile threat sophistication. This iteration incorporates ransomware-style overlays that display extortion…
gbhackers.comOriginal report -
Securing and governing the rise of autonomous agents
In this blog, you will hear directly from Corporate Vice President and Deputy Chief Information Security Officer (CISO) for Identity, Igor Sakhnov, about how to secure and govern autonomous agents. This blog is part of a new ongoing series where our Deputy…
MicrosoftOriginal report -
Google Introduces Enhanced Developer Verification for Play Store App Distribution
Google has announced that all Android apps installed on approved devices will soon need to be able to be traced back to a verified developer identity in an effort to combat the growing wave of financial fraud operations and mobile viruses. The policy,…
gbhackers.comOriginal report -
URGENT: NetScaler Zero-Day CVE-2025-7775 Under Active Attack
SecurityOnlineOriginal report -
Beyond the Prompt: Building Trustworthy Agent Systems
Building secure AI agent systems requires a disciplined engineering approach focused on deliberate architecture and human oversight.
SecurityWeekOriginal report -
CISA warns of actively exploited Git code execution flaw
The U.S. Cybersecurity & Infrastructure Security Agency (CISA) is warning of hackers exploiting an arbitrary code execution flaw in the Git distributed version control system. [...]
BleepingComputerOriginal report -
OneFlip Attack Backdoors AI Systems by Flipping a Single Bit in Neural Networks
CYFIRMA researchers have uncovered a campaign they have codenamed “OneFlip”, an operation that demonstrates how a single-bit modification inside a seemingly benign file can be enough to re-pivot a neural-network-driven security workflow and open a backdoor…
gbhackers.comOriginal report -
CVE-2025-9074: Docker Desktop Vulnerability Allows Host Compromise
CVE-2025-9074: Docker Desktop Vulnerability Allows Host Compromise Containers are designed to provide isolation, but a newly disclosed flaw shows just how fragile that boundary can be when misconfigurations slip through. A critical vulnerability in Docker…
SOCRadarOriginal report -
DSLRoot, Proxies, and the Threat of ‘Legal Botnets’
The cybersecurity community on Reddit responded in disbelief this month when a self-described Air National Guard member with top secret security clearance began questioning the arrangement they’d made with company called DSLRoot, which was paying $250 a…
Krebs on SecurityOriginal report -
Beyond GDPR security training: Turning regulation into opportunity
Discover how GDPR compliance can spark real growth and give you a competitive advantage with practical strategies and a strong security culture. [...]
BleepingComputerOriginal report -
The Hidden Risk of Consumer Devices in the Hybrid Workforce
Until businesses begin to account for uncontrolled variables in their threat models, attackers will continue to exploit the weakest link in the chain.
Dark ReadingOriginal report -
Widespread Data Theft Targets Salesforce Instances via Salesloft Drift
Written by: Austin Larsen, Matt Lin, Tyler McLellan, Omar ElAhdan Introduction Google Threat Intelligence Group (GTIG) is issuing an advisory to alert organizations about a widespread data theft campaign, carried out by the actor tracked as UNC6395.…
Google CloudOriginal report -
Weaponized PuTTY Delivered via Malicious Bing Ads Targets Kerberos and Active Directory Services
Cybersecurity incidents increasingly exploit human vulnerabilities, including those of privileged users, as demonstrated in recent compromises involving trojanized versions of the PuTTY SSH client distributed through malvertising on Microsoft’s Bing search…
gbhackers.comOriginal report -
Nissan confirms design studio data breach claimed by Qilin ransomware
Nissan Japan has confirmed to BleepingComputer that it suffered a data breach following unauthorized access to a server of one of its subsidiaries, Creative Box Inc. (CBI). [...]
BleepingComputerOriginal report -
MixShell Malware Delivered via Contact Forms Targets U.S. Supply Chain Manufacturers
Cybersecurity researchers are calling attention to a sophisticated social engineering campaign that's targeting supply chain-critical manufacturing companies with an in-memory malware dubbed MixShell. The activity has been codenamed ZipLine by Check Point…
The Hacker NewsOriginal report -
Healthcare Services Group Data Breach Impacts 624,000
The personal information of many individuals was stolen from Healthcare Services Group’s computer systems in 2024.
SecurityWeekOriginal report
