News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Sat 30 Aug 2025· 13 articles
-
TamperedChef infostealer delivered through fraudulent PDF Editor
Threat actors have been distributing a convincing PDF editing app that delivers an info-stealing malware dubbed TamperedChef, via Google ad-promoted websites advertising AppSuite PDF Editor. According to Truesec, the campaign spans more than 50 domains…
BleepingComputer -
Google Urges 2.5B Gmail Users to Reset Passwords After Salesforce Breach
Google’s Threat Intelligence Group has identified a financially motivated voice phishing operation that infiltrates Salesforce environments to steal data and demand ransoms, with the primary threat cluster labelled UNC6040. According to Google’s Threat…
gbhackers.com -
Attackers Abuse Velociraptor Forensic Tool to Deploy Visual Studio Code for C2 Tunneling
Cybersecurity researchers highlighted a campaign where unknown threat actors abused the open‑source endpoint monitoring and digital forensic tool Velociraptor to download and execute Visual Studio Code, with the apparent aim of creating a tunnel to an…
The Hacker News -
Huge Fines Imposed by Thailand’s PDPC: A Major Alert on Data Privacy Violations (Thailand)
On 1 August 2025 Thailand’s Personal Data Protection Committee (PDPC) announced the issuance of 8 fines totalling THB 14.5 million (approximately USD 448,000), levied against one government agency and other private entities for non-compliance with the…
DataBreaches -
Massachusetts AG Secures $795,000 Settlement for Alleged Data Security and Breach Notification Failures by Peabody Properties Inc.
On 19 August 2025, Massachusetts Attorney General Andrea Joy Campbell announced a $795,000 settlement with Peabody Properties, Inc. for alleged violations of the Massachusetts Consumer Protection Act and the Massachusetts Data Security Law and Data Security…
DataBreaches -
Lab Dookhtegan hacking group disrupts communications on dozens of Iranian ships
Lab Dookhtegan, a hacking group, allegedly disrupted the communications of 60 Iranian ships run by sanctioned firms National Iranian Oil Tanker Company and Iran Shipping Lines, hitting at least 39 tankers and 25 cargo ships. Hackers breached the satellite…
Security Affairs -
Amazon Takes Down Russian APT29 Infrastructure Targeting Users
Amazon’s cybersecurity team has disrupted a sophisticated watering hole campaign orchestrated by APT29, a Russian-linked group, during August 2025. The operation shifted from AWS domain impersonation to compromising legitimate websites and injecting…
gbhackers.comAPT29 -
Citrix 0-Day Flaw Under Active Exploitation Since May
Security researchers have warned that CVE-2025-6543, a critical Citrix NetScaler vulnerability, has been exploited as a zero-day since at least early May 2025, enabling remote code execution through memory overflow attacks. The flaw, initially downplayed as…
gbhackers.com -
QNAP Flaw Allows Attackers to Bypass Authentication
QNAP Systems has released security patches to address multiple vulnerabilities affecting QVR firmware in legacy VioStor NVR systems. According to QNAP’s security advisory QSA-25-29, the company disclosed two significant flaws on 29 August 2025, urging users…
gbhackers.com -
WhatsApp Issues Emergency Update for Zero-Click Exploit Targeting iOS and macOS Devices
WhatsApp has issued an emergency update for zero-click exploits believed to have been used against iOS and macOS devices, linked to a recently disclosed Apple flaw in targeted zero‑day attacks. According to Apple, CVE-2025-43300 is an out-of-bounds write in…
The Hacker News -
A Deceptive Ad on Facebook Is Spreading Advanced Android Malware
Bitdefender Labs has issued a warning about a global malvertising campaign that uses Meta’s advertising system to push an advanced Android malware, now targeting mobile users worldwide after initially focusing on Windows. According to Bitdefender Labs, the…
SecurityOnline -
BadSuccessor (CVE-2025-53779) Technique Persists Despite Microsoft Patch
At DEF CON 2025, Akamai security researcher Yuval Gordon revealed BadSuccessor (CVE-2025-53779), an Active Directory vulnerability in Windows Server 2025’s delegated Managed Service Account feature that allowed a low-privileged user to escalate directly to…
SecurityOnline -
MystRodX: A Stealthy New Backdoor Found Hiding in Networks for Over 20 Months
MystRodX, a stealthy backdoor uncovered by XLab, appeared in the wild as a brand-new family with unique encryption layers and activation mechanisms, after being initially mistaken for Mirai. On 6 June 2025, suspicious activity from an IP address distributing…
SecurityOnline
