News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Fri 29 Aug 2025· 72 articles
-
FreePBX Servers Targeted by Zero-Day Flaw, Emergency Patch Now Available
The Hacker News reports that a zero-day vulnerability in FreePBX, CVE-2025-57819 with a CVSS of 10.0, is actively exploited and affects systems whose administrator control panel is exposed to the public internet. According to The Hacker News, the issue…
The Hacker News -
TransUnion Data Breach Compromises Over 4 Million Customers
In a significant data breach disclosed by TransUnion LLC, more than 4.4 million consumers had sensitive personal information compromised in late July 2025. The breach, located at TransUnion’s Chicago headquarters, occurred on 28 July 2025 and was uncovered…
gbhackers.com -
Multi Flaws Found in HikCentral, Including a Bypass for Admin Access (CVE-2025-39247)
According to HSRC, three vulnerabilities affect different HikCentral products, ranging from CSV injection to privilege escalation and a critical access control bypass. CVE-2025-39245 (CVSS 4.7) concerns CSV injection in some HikCentral Master Lite versions,…
SecurityOnline -
Google: Salesloft Drift breach hits all integrations
Google has warned that the Salesloft Drift OAuth breach is broader than Salesforce, affecting all integrations and prompting users to treat connected tokens as potentially compromised, according to GTIG and Mandiant. Attackers used stolen OAuth tokens to…
Security Affairs -
Feds Seize $6.4M VerifTools Fake-ID Marketplace, but Operators Relaunch on New Domain
Authorities from the Netherlands and the United States have dismantled VerifTools, an illicit marketplace that sold counterfeit identity documents to cybercriminals worldwide, linking approximately $6.4 million of illicit proceeds to the operation. Two…
The Hacker News -
DPRK Remote Work Tactics: Leveraging Code-Sharing Platforms
DPRK IT workers have leveraged popular code-sharing platforms such as GitHub, CodeSandbox, and Medium to cultivate convincing developer portfolios and land remote positions under fabricated identities, with investigators identifying roughly 50 active GitHub…
gbhackers.com -
-
Interlock Ransomware Strikes: A New Strain Is Wrecking Havoc in North America and Europe
The AhnLab Security Emergency Response Center (ASEC) has published new research on the Interlock ransomware group, which has been conducting continuous attacks against organisations across multiple industries and critical infrastructure sectors in both North…
SecurityOnline -
Beyond Scambaiting: YouTubers Help DOJ Bust a $65 Million Fraud Ring
The U.S. Department of Justice has announced federal indictments against 28 alleged members of a Chinese organised crime network accused of orchestrating a $65 million fraud scheme that preyed on thousands of senior citizens across the United States,…
SecurityOnline -
Threat Actors Use Facebook Ads to Deliver Android Malware
Threat Actors Use Facebook Ads to Deliver Android Malware campaigns, as described by Bitdefender Labs, exploiting Meta’s platform to distribute a sophisticated Android banking trojan masquerading as a free TradingView Premium app. According to Bitdefender…
gbhackers.com -
Dutch intelligence warn that China-linked APT Salt Typhoon targeted local critical infrastructure
Dutch intelligence says China-linked APT Salt Typhoon targeted the Netherlands, with the campaign hitting local critical infrastructure rather than major telecoms. In a joint assessment, MIVD and AIVD said Chinese cyber spies linked to Salt Typhoon accessed…
Security AffairsGhostEmperor -
Google Warns Salesloft OAuth Breach Extends Beyond Salesforce, Impacting All Integrations
According to Google Threat Intelligence Group (GTIG) and Mandiant, the recent wave of attacks targeting Salesforce instances via Salesloft Drift is much broader than initially thought, and now extends to all integrations. Google has advised all Salesloft…
The Hacker News -
New Mac Malware Dubbed “JSCoreRunner” Weaponizing PDF Conversion Site to Deliver Malware
A new Mac malware campaign named JSCoreRunner has been uncovered by Mosyle, which disclosed that the threat achieved zero detections on VirusTotal at the time of discovery. It propagates via a malicious website called fileripple[.]com, which masquerades as a…
gbhackers.com -
Silver Fox Hackers Use Driver Vulnerability to Evade Security on Windows Systems
According to Check Point Research, on 28 August 2025 the Silver Fox APT group was observed exploiting a previously unknown vulnerable driver to bypass endpoint detection and response and antivirus on fully updated Windows 10 and 11 systems. They used the…
gbhackers.comVoid Arachne -
TamperedChef Malware Disguised as Fake PDF Editors Steals Credentials and Cookies
Cybersecurity researchers have uncovered a malvertising-driven campaign delivering an information stealer named TamperedChef via a trojanised PDF editor called AppSuite PDF Editor. According to Truesec researchers Mattias Wåhlén, Nicklas Keijser, and Oscar…
The Hacker News -
Google’s $9 Billion Bet: The New Investment Fueling AI in Virginia
Google has announced plans to invest an additional $9 billion in Virginia by the end of 2026 to expand its cloud and AI infrastructure, according to Alphabet President and CFO Ruth Porat. A portion of the investment will fund a new data centre in…
SecurityOnline -
NVIDIA Refuses to Pay 15% China Revenue Share Without a Law
NVIDIA has said it has no intention of paying a 15% China revenue share unless the U.S. government formally codifies the measure into law. The company’s Chief Financial Officer Colette Kress emphasised this stance during its latest earnings call. The policy,…
SecurityOnline -
Cloud Gaming for Everyone: Xbox Opens Its Streaming Service to Game Pass Core and Standard
On 29 August 2025, Microsoft announced that Xbox Cloud Gaming will be integrated into the entry-level Game Pass Core and the standard Game Pass Standard subscriptions, a feature previously exclusive to Game Pass Ultimate. The rollout will begin with testing…
SecurityOnline -
A New Race for Silicon: Apple Secures Half of TSMC’s 2nm Chip Production
According to DigiTimes, Apple has reportedly reserved nearly half of TSMC’s 2nm production capacity, with the A20 processor powering the iPhone 18 series slated for 2026. TSMC confirmed that volume production of its 2nm (N2) process will begin in Q4 2025,…
SecurityOnline -
PoC Published: Critical Unauthenticated Command Injection Flaw in D-Link Routers (CVSS 9.8), No Patch!
SecurityOnline -
CRITICAL Zero-Day CVE-2025-57819 in FreePBX Is Under Active Attack (CVSS 10.0)
The Sangoma FreePBX Security Team has issued a critical advisory about a newly discovered vulnerability in FreePBX, tracked as CVE-2025-57819 with a maximum CVSSv4 score of 10.0. The flaw allows unauthenticated attackers to bypass login protections,…
SecurityOnline -
RedExt – Browser Extension-Based C2 Framework for Red Team Recon
RedExt is a browser extension-based Command and Control (C2) framework designed for authorised red team operations, built as a Manifest V3 Chrome extension with a Flask-based C2 server to enable deep browser-level data collection through a dark-themed…
darknet.org.uk -
CVE-2025-50979: SQL Injection Flaw in NodeBB Forum Software, PoC Available
CVE-2025-50979 is a SQL injection vulnerability in NodeBB Forum Software versions up to v4.3.0, with a CVSS score of 8.6, disclosed by the developers of NodeBB. According to CVE description, NodeBB v4.3.0 is vulnerable to SQL injection in its…
SecurityOnline -
Is This a Rebrand? New Sinobi Ransomware Group Shows Code Overlap with Lynx
According to eSentire’s Threat Response Unit (TRU), a ransomware attack attributed to an affiliate of the Sinobi Group raises questions that Sinobi may be a rebrand of Lynx, a RaaS operation first observed in 2024. TRU notes significant code overlaps and…
SecurityOnlineSinobi -
Anthropic Report: Criminals Are Weaponizing AI to Automate Cyberattacks at Scale
According to Anthropic’s Threat Intelligence team, a new report reveals how criminals are weaponising advanced AI systems like Claude to automate cyberattacks, build fraudulent personas, and scale operations previously unimaginable. The findings describe…
SecurityOnline -
Malware-less Ransomware: How Storm-0501 is Pivoting to Cloud-Native Attacks
According to Microsoft Threat Intelligence, Storm-0501, a financially motivated threat actor, has dramatically shifted its ransomware operations from on‑premises to cloud‑native campaigns, a move first observed in 2021 with Sabbath ransomware against U.S.…
SecurityOnlineStorm-0501 -
A Deceptive AI Lure Is Hiding ScreenConnect & XWorm RAT to Hijack Your PC
According to Trustwave SpiderLabs Threat Hunt team, a deceptive AI-themed campaign is abusing the allure of artificial intelligence to lure users into downloading a pre-configured ScreenConnect installer that hides a multi-stage infection chain delivering…
SecurityOnline -
Beyond Email: Why Your Microsoft Teams Chat Is Now a Phishing Danger Zone
Security researchers at Hunters have published a new analysis showing attackers are increasingly abusing Microsoft Teams as an entry point for phishing, vishing, and malware delivery campaigns by exploiting external collaboration features. The report notes a…
SecurityOnline -
Kaspersky Report: Vulnerabilities Are Exploding, and Attackers Are Adapting
According to Kaspersky’s Q2 2025 vulnerability analysis, the number of registered vulnerabilities is rising year on year, with exploitation in the wild increasing alongside it. The findings show attackers continue to rely on long‑standing flaws in Windows,…
SecurityOnline -
ShadowSilk Unmasked: The Hybrid Espionage Group Targeting Central Asian Governments
ShadowSilk, also tracked as a hybrid espionage campaign overlapping with YoroTrooper, has been active since at least 2023 and remains active as of July 2025, according to Group-IB. The operation has targeted government institutions across Central Asia and…
SecurityOnlineYoroTrooper -
After 21 Years, the Typepad Blogging Platform Is Shutting Down
The Typepad blogging platform, online for 21 years, has announced that it will cease operations on 30 September 2025. The company warns that all users must export their content in advance, as data will become irretrievable once the service is discontinued.…
SecurityOnline -
Copilot Is Coming to Your Living Room with New Samsung Smart TV Partnership
According to Microsoft, Copilot is expanding beyond PCs and smartphones to Samsung’s 2025 televisions and smart displays, bringing an animated, semi-transparent humanoid-like “beige orb” as a companion assistant for home use. The feature can be summoned via…
SecurityOnline
