News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Thu 28 Aug 2025· 93 articles
-
Chasing the Silver Fox: Cat & Mouse in Kernel Shadows
Chasing the Silver Fox: Cat & Mouse in Kernel Shadows, published on 28 August 2025, details an in-the-wild campaign attributed to the Silver Fox APT that abuses a previously unknown vulnerable driver, amsdk[.]sys, built on the Zemana Anti-Malware SDK.…
Check PointVoid Arachne -
CrowdStrike to Acquire Onum to Fuel Falcon Next-Gen SIEM With Real-Time Telemetry
CrowdStrike says it plans to acquire Onum, a Spanish startup that provides real-time telemetry pipeline technology, to enhance its Falcon Next-Gen SIEM with streaming data. Onum is built on a stateless, in-memory architecture, which CrowdStrike says will…
SecurityWeek -
U.S. Treasury Sanctions North Korean IT Worker Network Funding Weapons Programs
According to OFAC, the U.S. Treasury’s Office of Foreign Assets Control, sanctions have been imposed on a network described as a DPRK IT worker ecosystem linked to a DPRK trading firm, a Chinese shell company and key facilitators who allegedly enable the…
gbhackers.com -
Webinar: Why Top Teams Are Prioritizing Code-to-Cloud Mapping in Our 2025 AppSec
According to The Hacker News, a webinar titled Code-to-Cloud Visibility: The New Foundation for Modern AppSec will show how linking code risks to cloud behaviour can help security teams. The session, described as a quick 60-minute chat, focuses on…
The Hacker News -
South Korea fines SK Telecom US$97M over data breach
According to Personal Information Protection Commission (PIPC), SK Telecom was fined 134.8 billion won (about US$97 million) for weak security and for failing to report breaches quickly. The case stems from a breach disclosed in April when hackers stole…
DataBreaches -
“No place in our networks”: FCC hangs up on thousands of voice operators in robocall war
On 28 August 2025, Malwarebytes reports that the FCC removed over 1,200 voice service providers from its Robocall Mitigation Database, effectively cutting their traffic from the US phone network. The database, created in 2020, records operators’ measures to…
Malwarebytes -
Taiwanese associated with Chinese group behind cyberattacks arrested
Two alleged Taiwanese clients of a Chinese ransomware group have been arrested and released on bail, according to the Ministry of Justice Investigation Bureau. Between February and March, the group CrazyHunter used ransomware to attack hospitals, publicly…
DataBreaches -
Claude AI chatbot abused to launch “cybercrime spree”
Claude AI chatbot abused to launch “cybercrime spree” reports that Anthropic— the company behind Claude—says it uncovered a large-scale extortion operation in which cybercriminals abused Claude to automate and orchestrate attacks. According to Anthropic,…
Malwarebytes -
Webinar Today: Ransomware Defense That Meets Evolving Compliance Mandates
SecurityWeek is hosting a live webinar titled Webinar Today: Ransomware Defense That Meets Evolving Compliance Mandates, exploring how organisations can strengthen ransomware resilience while navigating tightening regulatory requirements. The event is…
SecurityWeek -
Cisco Nexus 3000 & 9000 Vulnerability Enables DoS Attacks
Cisco has issued a high-severity advisory about a vulnerability in its Nexus 3000 and 9000 Series switches that could allow attackers to trigger denial of service via crafted IS-IS packets. The flaw, tracked as CVE-2025-20241, carries a CVSS v3.1 base score…
gbhackers.com -
Hidden Vulnerabilities of Project Management Tools & How FluentPro Backup Secures Them
The article argues that while project management tools such as Trello, Asana, and Monday[.]com are widely used, their built‑in backups are not sufficient to prevent data loss from human error or cyber threats. According to Statista, the average cost of a…
The Hacker News -
New Research Explores Emulating Scattered Spider Tactics in Real-World Scenarios
Experts describe methods for mimicking the tactics of the advanced persistent threat group Scattered Spider in a recent in-depth analysis by threat emulation specialists Lares, aiming to help enterprises test and strengthen their defenses. Lares designs…
gbhackers.comScattered Spider -
Hackers Target Popular Nx Build System in First AI-Weaponized Supply Chain Attack
Hackers targeted the popular Nx build system in what SecurityWeek calls the first AI-weaponized supply chain attack, dubbed s1ngularity, which rode on a platform with more than 4 million weekly downloads. They stole an Nx NPM token to publish multiple…
SecurityWeek -
First AI-Powered Ransomware “PromptLock” Uses OpenAI gpt-oss-20b for Encryption
PromptLock is described as the first AI-powered ransomware that uses a local large language model to generate its payload, discovered by the ESET Research team. It does not ship with pre-compiled attack logic; instead, it contains hard-coded prompts that…
gbhackers.com -
NSA, NCSC, and allies detailed TTPs associated with Chinese APT actors targeting critical infrastructure Orgs
According to the National Security Agency (NSA) and other U.S. and foreign organizations, a joint Cybersecurity Advisory outlines TTPs used by Chinese APT actors, linked to Salt Typhoon, as they target critical infrastructure organisations worldwide,…
Security AffairsGhostEmperor -
Malicious Nx Packages in ‘s1ngularity’ Attack Leaked 2,349 GitHub, Cloud, and AI Credentials
The Liverpool-based vulnerability cluster described in The Hacker News centres on a supply chain attack against the nx build system, where malicious versions of the nx package and accompanying plugins were published to npm, enabling data collection and…
The Hacker News -
BadSuccessor After Patch: Using dMSAs for Credential Theft and Lateral Movement in AD
According to Akamai, researchers evaluated Microsoft’s patch for the BadSuccessor vulnerability (CVE-2025-53779) to determine its scope and limitations. The update blocks the original direct escalation path, but the core mechanics of BadSuccessor remain…
gbhackers.com -
Microsoft Unveils Storm-0501’s Cloud-Based Ransomware Deployment Tactics
Microsoft Threat Intelligence has detailed the evolving tactics of the financially motivated threat actor Storm-0501, which has transitioned from traditional on-premises ransomware deployments to sophisticated cloud-based operations, according to Microsoft…
gbhackers.comStorm-0501 -
URGENT: Sangoma FreePBX Warns of Exploit, Urges Immediate Administrator Lockdown
Administrators are being urged to lockdown FreePBX systems after the Sangoma FreePBX Security Team disclosed a potential exploit affecting systems with the Administrator Control Panel exposed to the public internet, with a permanent fix still in progress.…
SecurityOnline -
Cisco Warns of High-Severity DoS Flaw (CVE-2025-20241) in Nexus Switches
According to Cisco Systems, a high-severity denial-of-service vulnerability (CVE-2025-20241) affects Cisco Nexus 3000 and 9000 Series Switches running NX-OS software, with a CVSS of 7.4. The flaw arises from insufficient input validation when parsing IS-IS…
SecurityOnline -
U.S. Treasury Sanctions DPRK IT-Worker Scheme, Exposing $600K Crypto Transfers and $1M+ Profits
The U.S. Treasury’s Office of Foreign Assets Control (OFAC) announced a fresh round of sanctions against two individuals and two entities connected to North Korea’s remote IT worker scheme, which allegedly generates illicit revenue for DPRK weapons and…
The Hacker News -
UNC6395 targets Salesloft in Drift OAuth token theft campaign
According to Google Threat Intelligence Group and Mandiant, UNC6395 carried out a data theft campaign aimed at the Salesloft platform to steal OAuth and refresh tokens associated with the Drift AI chat agent, with exfiltration from Salesforce instances…
Security AffairsUNC6395 -
New Research and PoC Reveal Security Risks in LLM-Based Coding
A new study detailing the security risks of LLM-based coding warns that relying solely on large language models to generate application code can introduce critical vulnerabilities. According to a detailed blog post published on 22 August 2025, LLMs trained…
gbhackers.com -
New TamperedChef Attack Uses Weaponized PDF Editor to Steal Sensitive Data and Login Credentials
Cybersecurity researchers at Truesec have uncovered a sophisticated malware campaign distributing a weaponized PDF editor under the guise of “AppSuite PDF Editor,” with the operation beginning on 26 June 2025. The malicious installer prompts a EULA,…
gbhackers.com -
CISA Releases Guide to Hunt and Mitigate Chinese State-Sponsored Threats
According to CISA, the Cybersecurity and Infrastructure Security Agency unveiled a comprehensive Cybersecurity Advisory designed to empower network defenders to detect, hunt, and mitigate the activities of advanced persistent threat actors linked to the…
gbhackers.com -
CISA Issues Alert on Citrix NetScaler 0-Day RCE Exploited in the Wild
According to CISA, the Cybersecurity and Infrastructure Security Agency, a critical zero-day remote code execution vulnerability in Citrix NetScaler devices is being actively exploited in the wild. Designated CVE-2025-7775, the flaw arises from a memory…
gbhackers.com -
Microsoft Teams Flaw Prevents Users From Accessing Embedded Office Files
A widespread service disruption is currently affecting Microsoft Teams users worldwide, preventing access to embedded Office documents within the platform, according to GBHackers. The outage is disrupting core collaborative workflows as users cannot open…
gbhackers.com -
Over 28,000 Citrix Servers at Risk from Active 0-Day RCE Exploit
A critical zero-day remote code execution vulnerability, CVE-2025-7775, is currently threatening the security of over 28,000 Citrix instances worldwide, with threat actors actively exploiting it. According to Shadowserver Foundation’s latest research, as of…
gbhackers.com -
OpenAI Is Now Scanning Conversations and Reporting Harmful Content to Police
OpenAI has announced that it is now scanning user conversations for specific categories of harmful content, with some cases being reported to police when deemed necessary, according to OpenAI. When the system detects dialogue suggesting potential harm to…
SecurityOnline -
-
PromptLock: A New AI-Powered Ransomware Strain Creates Unique, Elusive Scripts
The cybersecurity company ESET has released a report detailing its latest discovery: an artificial intelligence–driven ransomware strain codenamed PromptLock. The ransomware leverages OpenAI’s open-source GPT-OSS-20B model to dynamically generate scripts in…
SecurityOnline -
Tencent Cloud’s Misconfiguration Exposed Internal Source Code and Credentials
Cybersecurity researchers from CYBERNEWS recently published a report detailing a serious misconfiguration at Tencent Cloud that exposed internal source code environments and credentials to the public internet. The exposed assets could have given attackers…
SecurityOnline -
Apple Revokes a Torrent Client’s Notarization, Sparking a New EU Dispute
Apple has revoked the app’s notarization for a torrent client, a move that comes amid a EU dispute over the Digital Markets Act. The article notes that iTorrent, one of the clients available via the AltStore PAL alternative marketplace, has ceased to…
SecurityOnline -
An Espionage System: NSA, CISA, & Partners Expose Chinese APT Groups
According to Joint Cybersecurity Advisory, the NSA, CISA, FBI and partners from more than a dozen allied nations released a multinational alert exposing how Chinese state-sponsored APT groups are compromising telecommunications, government and other critical…
SecurityOnline -
OFAC Sanctions North Korean IT Worker Network Funding Weapons Programs
The U.S. Treasury’s Office of Foreign Assets Control (OFAC) has sanctioned multiple individuals and entities linked to North Korea’s fraudulent IT worker schemes, which the regime has used to generate illicit revenue for its weapons programmes. According to…
SecurityOnline -
A Single Packet Can Crash a DHCP Server: High-Severity Flaw CVE-2025-40779 Found in Kea
The Internet Systems Consortium (ISC) has released a security advisory for a high-severity vulnerability in its Kea DHCP server, tracked as CVE-2025-40779 with a CVSS score of 7.5 that could allow a remote attacker to crash Kea with a single crafted packet.…
SecurityOnline -
Beyond the Terminal: Zed Editor Integrates Google Gemini for AI-Powered Coding
Zed Editor has integrated Google Gemini, enabling native access to the Gemini CLI code generation tool from within the editor in its latest release. Gemini CLI allows developers to communicate with Google’s AI models via the command line, unlocking a range…
SecurityOnline -
Beyond Translation: Google Translate Adds a Gemini-Powered Language Tutor
Google Translate has been updated with expanded Gemini AI capabilities to serve as a language-learning companion in addition to translation, according to Daily CyberSecurity. The new feature creates simulated dialogue scenarios and offers personalised…
SecurityOnline -
A Game-Changer for Gamers: Windows 11 Is Fixing Bluetooth Audio at Last
August 28, 2025 sees Windows 11 edging closer to high‑fidelity Bluetooth audio as Microsoft aims to fix the long-standing clash between stereo playback and microphone use. The article explains that classic Bluetooth audio relies on two profiles, A2DP and…
SecurityOnline -
Parallels Desktop 26 Arrives, Optimized for macOS Tahoe and Windows 11
Parallels has announced Parallels Desktop 26 for Mac, optimised for macOS Tahoe and the updated Windows 11, with compatibility aligned to the forthcoming Windows 11 25H2 update to enable seamless cross‑platform work on a single device. The release adopts a…
SecurityOnline
