News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Wed 27 Aug 2025· 82 articles
-
New Malware Exploits TASPEN Legacy Systems to Target Indonesian Elderly
Threat actors are leveraging the trusted brand of Indonesia’s state pension fund, PT Dana Tabungan dan Asuransi Pegawai Negeri (Persero), or TASPEN, to deploy a malicious Android application disguised as an official portal. The banking trojan and spyware…
gbhackers.com -
The 5 Golden Rules of Safe AI Adoption
The Hacker News outlines five golden rules for safe AI adoption aimed at CISOs and security leaders who want to balance innovation with protection. Rule #1 stresses AI visibility and discovery, insisting you cannot protect what you cannot see and that…
The Hacker News -
Spotify Launches Direct Messaging Feature Amid Security Concerns
Spotify this week unveiled a new Direct Messaging feature, enabling users to share songs, podcasts and audiobooks within the app. The rollout is to Free and Premium users aged 16 and older in select markets on mobile devices, consolidating sharing into a…
gbhackers.com -
Nagios Flaw Enables Remote Attackers to Run Arbitrary JavaScript via XSS
Nagios has addressed a significant cross-site scripting (XSS) vulnerability in its enterprise monitoring platform Nagios XI that could allow remote attackers to execute arbitrary JavaScript code in users’ browsers, discovered in the Graph Explorer feature…
gbhackers.com -
Underground Ransomware Gang Unleashes Innovative Tactics Targeting Global Organizations
The Underground ransomware gang has been coordinating recurring attacks on enterprises worldwide, with its operations spanning sectors such as construction, manufacturing, IT and interior design and affecting organisations in the United States, United Arab…
gbhackers.com -
Exploits and vulnerabilities in Q2 2025
Exploits and vulnerabilities in Q2 2025 show a dynamic landscape, with vulnerability registrations continuing to impact a broad range of subsystems from UEFI and drivers to browsers and web applications. According to Securelist, the first half of 2025 saw…
securelist.com -
NVIDIA Warns of a High-Severity Flaw in NeMo AI Curator (CVE-2025-23307)
NVIDIA has released an important security update for its NeMo Curator tool after disclosing a high-severity vulnerability, tracked as CVE-2025-23307. According to the security bulletin, a malicious file created by an attacker could allow code injection,…
SecurityOnline -
ShadowCaptcha Exploit: Massive WordPress Site Compromise Used to Execute Malicious Commands on Victims
The article discusses the ShadowCaptcha exploit, a large-scale cybercrime campaign revealed by Israelundefineds National Digital Agency. This campaign uses deceptive CAPTCHA interfaces to manipulate users into executing malicious commands, primarily through…
gbhackers.com -
Salesloft OAuth Breach via Drift AI Chat Agent Exposes Salesforce Customer Data
The Hacker News reports a widespread data theft campaign that breached Salesloft to steal OAuth and refresh tokens tied to the Drift AI chat agent, with the intrusions attributed to a threat actor tracked as UNC6395 by Google Threat Intelligence Group and…
The Hacker News -
Blind Eagle’s Five Clusters Target Colombia Using RATs, Phishing Lures, and Dynamic DNS Infra
Cybersecurity researchers have linked five distinct activity clusters to the threat actor known as Blind Eagle between May 2024 and July 2025, with attacks focused primarily on Colombia’s government sector alongside other regional targets, according to…
The Hacker NewsAPT-C-36 -
IPFire Firewall Admin Panel Vulnerability Enables Persistent JavaScript Injection
A critical vulnerability in IPFire’s 2.29 web-based firewall interface (firewall[.]cgi) allows authenticated administrators to inject persistent JavaScript code, potentially enabling session hijacking, unauthorized actions, or internal network pivoting.…
gbhackers.com -
A New AI Header: The IETF Is Building a Standard to Label AI-Generated Content
According to the IETF, a new draft proposal aims to add declarations within web response headers to indicate whether material has been created by artificial intelligence. The header, compatible with HTTP structured field syntax, provides metadata for user…
SecurityOnline -
CISA Issues New ICS Advisories on Critical Vulnerabilities and Exploits
CISA released three ICS advisories on 26 August 2025 detailing nine critical vulnerabilities across INVT VT-Designer and HMITool, Schneider Electric Modicon M340 controllers and Danfoss AK-SM 8xxA Series drives. The INVT VT-Designer and HMITool flaws include…
gbhackers.com -
ESET warns of PromptLock, the first AI-driven ransomware
ESET warns of PromptLock, the first AI-driven ransomware, discovered by ESET Research and reported on 27 August 2025. According to ESET Research, PromptLock uses the gpt-oss:20b model from OpenAI locally via the Ollama API to generate and run malicious Lua…
Security Affairs -
New Cache Deception Attack Exploits Miscommunication Between Cache and Web Server
A newly documented cache deception attack exploits mismatches in path normalization and delimiter handling between caching layers and origin servers to expose sensitive endpoints and steal authentication tokens. Researchers have demonstrated how subtle…
gbhackers.com -
DOGE Allegedly Uploaded SSA’s Live Numident Database to Unsecured Cloud Server
According to Charles Borges, SSA Chief Data Officer, DOGE personnel reportedly replicated the entire Numident database—the master file of Social Security numbers and personally identifiable information—into a cloud environment with no independent security…
gbhackers.com -
MUSTANG PANDA2 articles this day · SecurityOnline first
China linked Silk Typhoon targeted diplomats by hijacking web traffic · Google Threat Intelligence Exposes UNC6384’s Stealthy Espionage Campaign
2 outlets-
China linked Silk Typhoon targeted diplomats by hijacking web traffic
According to Google’s Threat Intelligence Group (GTIG), the China-linked Silk Typhoon APT targeted diplomats by hijacking web traffic and redirecting them to a malware-delivery site via captive portal redirects. In March 2025, GTIG identified a sophisticated…
Security Affairs -
Google Threat Intelligence Exposes UNC6384’s Stealthy Espionage Campaign
According to Google Threat Intelligence Group (GTIG), a complex, multi-stage cyber-espionage campaign attributed to the PRC-linked threat actor UNC6384 targeted diplomats in Southeast Asia and other global entities. The operation began with hijacking captive…
SecurityOnline
-
-
Critical Chrome Use-After-Free Flaw Enables Arbitrary Code Execution
Google has released an urgent security update for the Chrome Stable channel to address a critical use-after-free vulnerability in the ANGLE graphics library that could allow attackers to execute arbitrary code on vulnerable systems, according to Google. The…
gbhackers.com -
Hackers Abuse Compromised OAuth Tokens to Access and Steal Salesforce Corporate Data
According to Google Threat Intelligence Group, an advisory described a data theft operation targeting corporate Salesforce instances via the Drift integration, with beginnings as early as 8 August 2025. The activity involved UNC6395 using valid access and…
gbhackers.com -
African Law Enforcement Agencies Nab Cybercrime Syndicates
African nations, working with Interpol and private-sector partners, have stepped up disruption of cybercrime operations across the continent, culminating in Operation Serengeti 2.0. In the latest operation, 18 African nations teamed with Interpol to…
Dark Reading -
Citrix NetScaler ADC and Gateway Hit by Ongoing Attacks Exploiting 0-Day RCE
Cloud Software Group has issued an emergency security bulletin warning of active exploitation targeting three critical vulnerabilities in NetScaler ADC and NetScaler Gateway products, tracked as CVE-2025-7775, CVE-2025-7776, and CVE-2025-8424. According to…
gbhackers.com -
-
Nx Build System Compromise Targets Developers with AI-Enhanced Supply Chain Attack
The StepSecurity research team has warned of a large-scale supply chain attack targeting the Nx build system, which is downloaded more than 4 million times weekly. On 26 August 2025, attackers published compromised Nx versions containing a malicious payload…
SecurityOnline -
Apple’s Big AI Gamble: Internal Rift Over Perplexity and Mistral AI Acquisitions
Apple is weighing a broader AI push alongside talks of a Perplexity AI acquisition and a potential Mistral AI purchase, a trajectory outlined in a fresh analysis that highlights an internal division over large deals. The Information reports that Apple’s…
SecurityOnline -
Windows 10 Gets a Preview Update with Enterprise-Grade Backup & ESU Fixes
Microsoft has released a new preview update, KB5063842, for Windows 10 version 22H2 to address several known issues, with the fixes expected to roll out in September 2025 Patch Tuesday. The update is published in a testing state and isn’t recommended for…
SecurityOnline -
Retail Giant Walmart Selects Broadcom as Strategic Private Cloud Partner
Retail Giant Walmart has selected Broadcom as its strategic private cloud partner, announced at VMware Explore 2025, with VMware Cloud Foundation set to form the core infrastructure underpinning Walmart’s private cloud and edge computing environments.…
SecurityOnline -
Broadcom & Canonical Join Forces to Supercharge AI and Cloud with Ubuntu
At VMware Explore 2025 in Las Vegas, Broadcom announced an expanded partnership with Canonical, the steward of Ubuntu, to further integrate Ubuntu into VMware Cloud Foundation (VCF). The collaboration is designed to help enterprises accelerate the deployment…
SecurityOnline -
Gemini’s New AI Image Generation Model Prioritizes Consistency, Control, and Trust
Google has announced a new update to its Gemini image-generation model, focusing on AI editing, cross-frame consistency, and creative flexibility, with a visible digital watermark denoting AI origin on every image. One of the marquee improvements is…
SecurityOnline -
End of Anonymous Sideloading: Google to Require Developer Verification on Android
Google has announced a new security measure for the Android ecosystem, requiring users who sideload apps to ensure the app comes from a verified developer. According to Google, risk assessments show that malware from sideloaded sources is over 50 times more…
SecurityOnline -
Beyond Compliance: Broadcom’s New Private Cloud Tools Secure AI Workloads
Broadcom is expanding private cloud security with privatized AI services inside VMware Cloud Foundation 9.0 and the integration of Advanced Cyber Compliance services, boosting security resilience and regulatory compliance for modern private clouds, including…
SecurityOnline -
A New AI Frontier: Claude’s Chrome Extension Opens the Door to New Dangers
On 27 August 2025, Anthropic released a Chrome-based extension for Claude Max users that reads active web pages and executes tasks based on user instructions, currently available only as a limited research preview. Once installed, the extension automatically…
SecurityOnline -
Awe Dropping: Apple Announces September 9 Event, Teasing a Groundbreaking Design
Apple has officially confirmed it will host its autumn launch event on 9 September at 10:00 a.m. (Pacific Time) at its Cupertino headquarters, with the theme “Awe dropping.” The report suggests the lineup may include the iPhone 17, iPhone 17 Pro, iPhone 17…
SecurityOnline -
Google Chrome Patches Critical ANGLE Vulnerability (CVE-2025-9478) Discovered by AI Agent Big Sleep
Google has released a critical security update for the Stable channel of Chrome to fix a use-after-free vulnerability in ANGLE, the graphics engine behind WebGL and other rendering tasks, tracked as CVE-2025-9478. The flaw, discovered on August 11, 2025, was…
SecurityOnline -
Cybersecurity Workforce Trends in 2025 – Skills Gap, Diversity and SOC Readiness
Cybersecurity teams in 2025 are contending with a trifecta of pressure: widening SOC skill gaps, a chronic shortage of diverse talent, and rising expectations to support an expanding attack surface. In 2025, organisations that treat workforce development as…
darknet.org.uk -
Hook v3: The Banking Trojan That’s Evolving into a Hybrid Ransomware-Spyware Threat
The zLabs researchers at Zimperium have unveiled Hook v3, the latest evolution of the Android banking trojan, which now functions as a multi‑functional hybrid that includes spyware and ransomware‑style capabilities. The update introduces ransomware overlays,…
SecurityOnline -
CVE-2025-41702 (CVSS 9.8): Critical Flaw in Welotec egOS Puts Industrial Systems at Risk
CVE-2025-41702 (CVSS 9.8) is a critical flaw in Welotec egOS that could let unauthenticated attackers seize full control of affected devices, the article notes. According to advisory, the JWT secret key is embedded in the egOS WebGUI backend and is readable…
SecurityOnline -
SpyNote’s New Lure: The Stealthy Campaign Using Fake App Stores
According to DomainTools, researchers have uncovered a persistent SpyNote Android Remote Access Trojan (RAT) campaign in which threat actors use deceptive Google Play Store clones to lure victims into downloading malicious APKs. SpyNote is described as a…
SecurityOnline -
Cephalus: The New Ransomware That Abuses Legitimate Tools to Bypass Security
Threat hunters at Huntress observed two separate incidents involving a new ransomware variant dubbed Cephalus, which entered networks through compromised RDP accounts without MFA. Once inside, the attackers used the MEGA cloud storage platform for data…
SecurityOnline -
The Underground Ransomware Gang Is Back with a Vicious New Global Campaign
The Underground ransomware gang is intensifying its operations, launching continuous attacks against companies worldwide, including high‑profile victims in South Korea, as highlighted in a new analysis dated 27 August 2025. According to AhnLab, the group’s…
SecurityOnline
