News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Thu 28 Aug 2025· 93 articles
-
A hacker used AI to automate an ‘unprecedented’ cybercrime spree, Anthropic says
A hacker used AI to what Anthropic believes is an unprecedented degree to research, hack and extort at least 17 companies. According to Anthropic, the operation was conducted by an unnamed hacker over a span of three months and appeared to originate from…
DataBreaches -
Google warns Salesloft breach impacted some Workspace accounts
According to Google Threat Intelligence (Mandiant) UNC6395, Google's warning that the Salesloft Drift breach is larger than first thought notes that attackers used stolen OAuth tokens to access Salesforce instances and also compromised the Drift Email…
BleepingComputer -
CISA, FBI, NSA Warn of Chinese 'Global Espionage System'
According to CISA, FBI, NSA, three federal agencies issued a global advisory this week warning of China's “global espionage system” and detailing how state-backed actors like Salt Typhoon have been penetrating networks worldwide. The advisory tracks activity…
Dark Reading -
We Get Privacy For Work — Episode 8: The Surge in Data Breach Lawsuits: Trends and Tactics
According to JacksonLewis, data breach class action lawsuits have surged as plaintiffs seek to exploit what courts perceive as leniency over standing. The episode of We Get Privacy For Work discusses what employers can do to bolster their legal defenses in…
DataBreaches -
Hackers Steal 4M+ TransUnion Customers' Data
According to Dark Reading, hackers stole data affecting more than 4 million TransUnion customers in a cyber incident that occurred on 28 July and was discovered two days later. The breach involved a third‑party application used to assist TransUnion’s US…
Dark Reading -
US targets North Korean IT worker army with new sanctions
The U.S. Treasury’s Office of Foreign Assets Control sanctioned two individuals and two companies connected with North Korean IT worker schemes that exploit skilled staff in U.S. firms and use “laptop farms” to hide their true location, with the ultimate aim…
BleepingComputer -
Akira, Clop Top List of 5 Most Active Ransomware-as-a-Service Groups
Flashpoint’s midyear 2025 ransomware report places Akira and Cl0p at the top of the five most prolific RaaS groups, alongside Qilin, Safepay and RansomHub. Akira is noted for a recent campaign that targeted a SonicWall vulnerability, while Cl0p has been…
Dark ReadingStorm-1567 -
1,000+ Devs Lose Their Secrets to an AI-Powered Stealer
More than 1,000 developers were infected with malware this week, with around 20,000 sensitive files leaked to the public Web, in a rapid AI-assisted supply chain compromise centred on the Nx build system. The attack on npm occurred overnight on 26 August,…
Dark Reading -
Google shares workarounds for auth failures on ChromeOS devices
Google is working to resolve authentication issues affecting some ChromeOS devices, which hinder sign-in to Clever and ClassLink accounts. According to an updated incident report on the Google Workspace Status Dashboard, the problems affect devices running…
BleepingComputer -
Dark Reading Confidential: A Guided Tour of Today's Dark Web
According to Dark Reading Confidential: A Guided Tour of Today's Dark Web, Episode 9 of the podcast features Keith Jarvis of Sophos' Counter Threat Unit discussing how the Dark Web and Tor networks are central to both cybercrime and cybersecurity research.…
Dark Reading -
How SafeLine WAF Turns Hackers’ Scanners into Trash
SafeLine WAF is described as a self-hosted reverse-proxy firewall that filters HTTP/HTTPS traffic and blocks malicious requests before they reach backend applications. The article highlights three core battlefields—Dynamic Protection, Anti-Scanners, and…
gbhackers.com -
Affiliates Flock to ‘Soulless’ Scam Gambling Machine
Affiliates have flocked to a Russian-language programme called Gambler Panel, which markets a “soulless project that is made for profit” and has helped proliferate scam gambling sites, according to KrebsOnSecurity. The programme claims more than 20,000…
Krebs on Security -
Researchers Find VS Code Flaw Allowing Attackers to Republish Deleted Extensions Under Same Names
Cybersecurity researchers have uncovered a loophole in the Visual Studio Code Marketplace that allows threat actors to reuse names of extensions that have been deleted, potentially enabling new, malicious extensions to masquerade as familiar ones. The…
The Hacker News -
Malware devs abuse Anthropic’s Claude AI to build ransomware
Anthropic’s Claude Code has been reportedly abused by threat actors to help develop ransomware and support data extortion campaigns, with UK-based operators tracked as GTG-5004 using Claude to create a ransomware-as-a-service operation. The package…
BleepingComputer -
Microsoft Word will save your files to the cloud by default
Microsoft Word for Windows is set to automatically save new documents to the cloud by default, with Microsoft saying autosave will be enabled as testing rolls out. The feature is currently being trialled by Microsoft 365 Insiders in the Beta Channel, who…
BleepingComputer -
Cisco UCS Manager Software Flaw Allows Attackers to Inject Malicious Commands
Cisco has released urgent security updates to fix two medium-severity command injection vulnerabilities in its UCS Manager Software, which could allow an authenticated administrator to execute arbitrary commands and compromise system integrity. The advisory,…
gbhackers.com -
Cisco IMC Virtual Keyboard Vulnerability Allows Attackers to Redirect Users to Malicious Websites
Cisco has released urgent security updates to remediate a high-severity vulnerability in its Integrated Management Controller (IMC) virtual keyboard video monitor (vKVM) module that could allow unauthenticated, remote attackers to hijack sessions and…
gbhackers.com -
State of Nevada Faces IT Outage Amid Cyberattack, Offices Suspended
The State of Nevada faced a substantial IT outage after a cyberattack that, as authorities noted, disrupted government infrastructure across multiple agencies. As of 25 August 2025, numerous state offices had halted public-facing operations and suspended…
gbhackers.com -
Passwordstate dev urges users to patch auth bypass vulnerability
Passwordstate’s developer, Click Studios, has urged customers to patch a high-severity authentication bypass vulnerability in Passwordstate as soon as possible. According to Click Studios, the flaw can be exploited via a carefully crafted URL on the core…
BleepingComputer -
Police seize VerifTools fake ID marketplace servers, domains
According to BleepingComputer, the FBI and the Dutch Police have shut down the VerifTools marketplace for fraudulent identity documents after seizing servers in Amsterdam. VerifTools produced and intermediated the purchase of fake documents used to bypass…
BleepingComputer -
TransUnion notifying more than 4.4 U.S. million consumers of data breach
TransUnion has notified the Maine Attorney General’s Office that 4,461,511 U.S. persons were affected by an incident on 28 July 2025 involving an unnamed third-party application, with the breach discovered on 30 July 2025. The notification letter provided to…
DataBreaches -
Threat Actors Exploit Velociraptor Incident Response Tool for Remote Access
Sophos’ Counter Threat Unit (CTU) researchers uncovered a sophisticated intrusion in which threat actors repurposed the legitimate open-source Velociraptor incident response tool to gain unauthorized remote access within targeted networks. Velociraptor was…
gbhackers.com -
Electronics Manufacturer Data I/O Suffers Ransomware Breach
Data I/O Corporation, a well-known electronics firm that specialises in device programming and security provisioning solutions, revealed a ransomware attack that penetrated its internal IT infrastructure. The incident was detected on 16 August 2025,…
gbhackers.com -
CISA's New SBOM Guidelines Get Mixed Reviews
Updated SBOM rules from CISA are described as a solid step toward greater transparency for software and its components, but experts say they overlook several critical concerns in today’s software supply chain. The guidance requires SBOMs to include component…
Dark Reading -
MATLAB dev says ransomware gang stole data of 10,000 people
MathWorks disclosed that a ransomware gang stole the data of 10,476 individuals after breaching its network in April, with the company confirming the figure in filings to Maine’s Attorney General and in data breach letters to the Massachusetts Attorney…
BleepingComputer -
Anthropic Blocks Hackers Attempting to Exploit Claude AI for Cyber Attacks
Anthropic says it has blocked hackers attempting to misuse Claude AI for cyber attacks, detailing how real-time classifiers and hierarchical summarisation techniques are used to detect and mitigate abuses. According to the Threat Intelligence report, the…
gbhackers.com -
Microsoft wants to automatically save your Word docs to the cloud
Microsoft has revealed a new default that saves every new Word document to the cloud by automatic save from the moment you start a file, with Word now creating documents directly in the cloud and turning on AutoSave from the start. This feature is currently…
Malwarebytes -
Breaking the Passkey Promise: SquareX Discloses Major Passkey Vulnerability at DEF CON 33
According to FIDO, over 15 billion accounts have been passkey-enabled, with 69% of users globally enabling passkeys in at least one account, as the technology promotes passwordless authentication. SquareX researchers Shourya Pratap Singh, Daniel Seetoh, and…
gbhackers.com -
Weaponized ScreenConnect RMM Tool Deceives Users into Installing Xworm RAT
The SpiderLabs Threat Hunt Team recently uncovered a cyber campaign in which threat actors weaponised the genuine ScreenConnect remote management tool to spread the Xworm Remote Access Trojan (RAT) via a multi-phase infection chain. The assault begins with…
gbhackers.com -
Farmers Insurance Breach Exposes Data of 1.1 Million Customers via Salesforce Compromise
Farmers Insurance has disclosed a data breach stemming from unauthorised access to a third-party vendor’s database, potentially exposing the personal information of about 1.1 million customers. The intrusion began on 29 May 2025, with the breach detected on…
gbhackers.com -
Shadow IT Is Expanding Your Attack Surface. Here’s Proof
Shadow IT, defined as systems your security team doesn’t know about, is expanding your attack surface, and researchers note that unmanaged assets frequently slip through policies. According to Intruder, a security team’s testing over a few days uncovered…
BleepingComputer -
TransUnion suffers data breach impacting over 4.4 million people
TransUnion says it suffered a data breach exposing the personal information of over 4.4 million people in the United States, with the data stolen from its Salesforce account. According to a filing submitted to the Office of the Maine AG, the breach occurred…
BleepingComputer -
GhostEmperor2 articles this day · SecurityWeek first
Salt Typhoon Exploits Cisco, Ivanti, Palo Alto Flaws to Breach 600 Organizations Worldwide · China’s Salt Typhoon Hacked Critical Infrastructure Globally for Years
2 outlets-
Salt Typhoon Exploits Cisco, Ivanti, Palo Alto Flaws to Breach 600 Organizations Worldwide
According to The Hacker News’ coverage of a joint advisory issued on 28 August 2025, the Salt Typhoon APT group, linked to China, has continued attacks on networks worldwide by exploiting flaws in Cisco, Ivanti, and Palo Alto Networks devices. The advisory…
The Hacker News -
China’s Salt Typhoon Hacked Critical Infrastructure Globally for Years
China-linked APT Salt Typhoon, also known as GhostEmperor, Operator Panda, RedMike and UNC5807, has been compromising backbone and edge routers globally for persistent access across telecoms, government, transportation, lodging and military networks since at…
SecurityWeek
-
-
200 Swedish municipalities impacted by a major cyberattack on IT provider
Miljödata, an IT supplier serving around 80% of Swedish municipalities, experienced a cyberattack that disrupted services in over 200 municipalities, including Skellefteå, Mönsterås and Kalmar. The Swedish Privacy Agency has confirmed receiving around 70…
Security Affairs -
Lazarus Group Targets Windows 11 with ClickFix Tactics and Fake Job Offers
Lazarus Group is reported to be targeting Windows 11 with the ClickFix technique, using a social-engineering campaign that disseminates fake job offers via phony social media accounts to lure victims into phishing traps. The campaign purportedly payloads the…
gbhackers.comLazarus Group -
ShadowSilk Targets Penetration-Testing Tools and Public Exploits to Breach Organizations
Cybersecurity researchers have traced ShadowSilk, an advanced persistent threat (APT) cluster, to activity since at least 2023, with operations continuing into July 2025 and targeting primarily government entities across Central Asia and the Asia-Pacific…
gbhackers.comYoroTrooper -
Breaking the Passkey Promise: SquareX Discloses Major Passkey Vulnerability at DEF CON 33
According to CyberNewsWire, SquareX researchers Shourya Pratap Singh, Daniel Seetoh and Jonathan Lin disclosed a major passkey vulnerability on DEF CON 33 main stage that could put banking, shopping, and enterprise SaaS accounts at risk. The piece explains…
SecurityOnline -
FreePBX Servers Hit by 0-Day Exploit, Disable Internet Access Advised
FreePBX administrators worldwide have been urged to immediately disable public internet access to their systems after a critical 0-day vulnerability was discovered in the commercial Endpoint Manager module. The Sangoma FreePBX Security Team confirmed that…
gbhackers.com -
TransUnion discloses a data breach impacting over 4.4 million customers
TransUnion disclosed a data breach that impacted more than 4,461,511 customers, according to Security Affairs, and the incident involved a third-party application serving the company’s U.S. consumer support operations. The data breach notification reads that…
Security Affairs
