News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 13 so far |
Sun 31 Aug 2025· 19 articles
-
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 60
Security Affairs’ Malware Newsletter Round 60 delivers a curated collection of malware-focused articles and research from across the international landscape, as described in the piece published by Pierluigi Paganini.
Security Affairs -
AI Waifu RAT Exploits Users with Advanced Social Engineering Tactics
AI Waifu RAT has emerged as a malware campaign that combines artificial intelligence with social engineering to target niche online communities, specifically LLM role-playing groups. Security researchers describe it as a remote access trojan masquerading as…
gbhackers.com -
Vulnerabilities in Sitecore CMS Platform Allow Excute Arbitrary Code Remotely
Security researchers have uncovered a chain of vulnerabilities in Sitecore Experience Platform that could allow attackers to fully compromise sites without authentication. The most severe is CVE-2025-53693, an HTML cache poisoning flaw that lets attackers…
gbhackers.com -
Netskope Windows Client Vulnerability Enables Privilege Escalation via Rogue Server
A serious security vulnerability in Netskope’s Windows client has been disclosed that could allow attackers to escalate privileges from a low-privileged user to full system-level access, tracked as CVE-2025-0309. The flaw affects all versions of the Netskope…
gbhackers.com -
OpenAI is testing "Thinking effort" for ChatGPT
OpenAI is testing a feature called the Thinking effort picker for ChatGPT, allowing users to choose how hard the model thinks. There are four levels: light, standard, extended, and max, with internal juice budgets of 5, 18, 48 and 200 respectively. More…
BleepingComputer -
APT292 articles this day · Security Affairs first
A Digital Watering Hole: How Russia’s APT29 Is Abusing Microsoft Auth Flow · Amazon blocks APT29 campaign targeting Microsoft device code authentication
2 outlets-
A Digital Watering Hole: How Russia’s APT29 Is Abusing Microsoft Auth Flow
Amazon’s threat intelligence team identified and disrupted a watering hole campaign conducted by APT29 (also known as Midnight Blizzard), a threat actor linked to Russia’s Foreign Intelligence Service (SVR). The operation leveraged compromised websites to…
SecurityOnline -
Amazon blocks APT29 campaign targeting Microsoft device code authentication
Amazon blocked a Russia-linked APT29 watering hole campaign that hijacked Microsoft device code authentication via compromised sites, according to Amazon. The attackers operated an opportunistic campaign using bogus sites designed to trick visitors into…
Security Affairs
-
-
White House Orders Grok’s Reinstatement for Federal Use
The White House has reportedly ordered the reinstatement of xAI’s Grok chatbot for federal use, following a period in which the GSA approved OpenAI, Google, and Anthropic models for the federal procurement list. According to Wired, internal documents show…
SecurityOnline -
Windows 11 25H2 Update Is Here: What’s New?
The Windows 11 2025 annual update, known as version 25H2, is here and is being rolled out to the Windows Insider Release Preview channel for early testing, with the October release still anticipated. Classified as a minor update, 25H2 is delivered as an…
SecurityOnline -
Why the U.S. Government Is Buying a Stake in Intel
Following the U.S. government’s formal acquisition of equity in Intel, the chipmaker has secured a substantial capital infusion and relief from several CHIPS Act requirements. According to The Wall Street Journal and Reuters, Intel confirmed in newly filed…
SecurityOnline -
Meta’s New AI NPCs Will Make Horizon Worlds Come to Life
Meta is once again infusing its metaverse platform, Horizon Worlds, with generative AI experiences, enabling developers to create AI-driven NPCs powered by large language models. This update, expected to roll out soon, marks a pivotal step in Horizon Worlds’…
SecurityOnline -
Microsoft Challenges OpenAI with First In-House AI Models
Microsoft has announced two in-house AI models, MAI-Voice-1 and MAI-1-preview, signalling a move beyond reliance on OpenAI while aligning with a broader plan to build a proprietary AI ecosystem. MAI-Voice-1 is described as Microsoft's first natural speech…
SecurityOnline -
Nuclear Fusion Race Heats Up: A $863M Boost for CFS
Massachusetts-based nuclear fusion startup Commonwealth Fusion Systems (CFS) has announced the completion of a new $863 million funding round, backed by NVIDIA, Google, Breakthrough Energy Ventures, Morgan Stanley, Stanley Druckenmiller, and a Japanese…
SecurityOnline -
Can Llama 4.X Save Meta’s AI Ambitions?
Following the release of the Llama 4 series this April, Meta’s progress in AI has faced criticism for underperformance in tasks such as code generation, reasoning and instruction adherence, compared with rivals. According to insiders, Llama 4.X — reportedly…
SecurityOnline -
Xbox’s New ‘Play History Sync’ Feature is a Game-Changer
Microsoft has rolled out a cross-device “Play History Sync” feature for Xbox Cloud Gaming, extending it to all players after earlier trials under the updated Xbox Insiders programme. The update enables progress to move across Xbox consoles, PCs and Windows…
SecurityOnline -
Security Affairs newsletter Round 539 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs rounds off its Round 539 International Edition, by Pierluigi Paganini, dated 31 August 2025, spotlighting a stream of recent security stories curated for readers worldwide. Highlights include Amazon blocks APT29 campaign targeting Microsoft…
Security Affairs -
IBM watsonx Orchestrate Vulnerability (CVE-2025-0165) Exposes Systems to SQL Injection Attacks
The security advisory warns of a SQL injection vulnerability in IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data, tracked as CVE-2025-0165, with a CVSS score of 7.6. According to IBM, the flaw stems from insufficient sanitisation of SQL queries…
SecurityOnline -
A Single URL Can Crash Your Website: Critical DoS Flaw (CVE-2025-58047) Found in Volto CMS
The Plone Zope Security Team has released an advisory addressing a denial-of-service vulnerability in Volto, the ReactJS-based frontend of the Plone CMS, tracked as CVE-2025-58047 with a CVSS score of 7.5. The advisory describes a DoS possible by invoking a…
SecurityOnline -
Trojan Horse: A Fake PDF Editor Is Actually a Malware-Laden Backdoor
Security researchers at G DATA Security Lab have exposed the AppSuite PDF Editor as a malware-laden backdoor masquerading as a legitimate productivity tool, following the threat actors’ bid to get antivirus vendors to whitelist it. The investigation shows…
SecurityOnline
