News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 13 so far |
Mon 1 Sep 2025· 63 articles
-
The Ongoing Fallout from a Breach at AI Chatbot Maker Salesloft
The Krebs on Security report details a mass-theft of Salesloft authentication tokens. According to Google Threat Intelligence Group, the attackers used the stolen tokens to siphon data from Salesforce instances and to access tokens for hundreds of integrated…
Krebs on Security -
Supply-chain attack hits Zscaler via Salesloft Drift, leaking customer info
According to Zscaler, a supply-chain attack tied to the Salesloft Drift campaign allowed unauthorized actors to access Drift credentials linked to Salesforce, exposing limited visibility into some of Zscaler’s Salesforce information. The breach affected…
Security Affairs -
Gmail’s protections are strong and effective, and claims of a major Gmail security warning are false.
Gmail’s protections are strong and effective, and claims of a major Gmail security warning are false, according to Google’s blog.
DataBreaches -
Android Droppers Now Deliver SMS Stealers and Spyware, Not Just Banking Trojans
Android droppers are shifting from primarily delivering banking trojans to distributing SMS stealers and spyware, researchers say, with campaigns run by dropper apps that mimic government or banking apps in India and other parts of Asia. ThreatFabric noted…
The Hacker News -
Zscaler data breach exposes customer info after Salesloft Drift compromise
Zscaler has warned of a data breach after threat actors gained access to its Salesforce instance following the Salesloft Drift supply-chain compromise, exposing customer information stored there. According to Zscaler’s advisory, unauthorized actors obtained…
BleepingComputer -
Amazon disrupts Russian APT29 hackers targeting Microsoft 365
Researchers have disrupted an operation attributed to the Russian state-sponsored threat group Midnight Blizzard, also known as APT29, which sought access to Microsoft 365 accounts and data. The watering hole campaign compromised multiple legitimate websites…
BleepingComputerUNC2452 -
Criminal IP Expands into European Cybersecurity Market through Partnership with DotForce
According to AI SPERA, Criminal IP is the AI-powered threat intelligence and attack surface management platform that has announced its official entry into the European market through a strategic partnership with DotForce, a premier cybersecurity distributor…
gbhackers.com -
WhatsApp fixes vulnerability used in zero-click attacks
WhatsApp says it has issued an update to patch a vulnerability that has been used in conjunction with an Apple vulnerability to target specific users and compromise their devices. Reportedly, attackers used this exploit against dozens of WhatsApp users, and…
Malwarebytes -
How to set up two-step verification on your WhatsApp account
Two-step verification, WhatsApp’s take on two-factor authentication, adds a PIN that must be entered when registering your phone number on a new device, helping to protect accounts even if an SMS code is compromised. The article explains how to enable it on…
Malwarebytes -
Food Delivery Robots Vulnerable to Hacks That Redirect Orders
A cybersecurity report details a startling vulnerability in Pudu Robotics’ management APIs that allowed anyone with minimal technical skill to seize control of the company’s food delivery and service robots, according to BobDaHacker. Almost every API…
gbhackers.com -
Microsoft Enforces MFA for Logging into Azure Portal
Microsoft has announced that it will make multifactor authentication (MFA) mandatory for all sign-ins to the Azure portal and related administrative centres, a policy first introduced in 2024. The move, disclosed on 26 August 2025, aims to dramatically…
gbhackers.com -
Apple May Drop Physical SIM Card in iPhone 17
Apple appears poised to remove the physical SIM card slot from its upcoming iPhone 17 models in more countries, with a rollout anticipated across the European Union. According to Apple SEED app, a platform used by Apple Store and authorised reseller staff…
gbhackers.com -
⚡ Weekly Recap: WhatsApp 0-Day, Docker Bug, Salesforce Breach, Fake CAPTCHAs, Spyware App & More
The article provides a weekly recap of significant cybersecurity events, including a WhatsApp 0-day vulnerability, a Docker bug, a Salesforce breach, and the emergence of fake CAPTCHAs and spyware applications. It highlights the importance of staying…
The Hacker News -
Crooks exploit Meta malvertising to target Android users with Brokewell
Crooks are exploiting Meta malvertising to distribute Brokewell to Android users, with Bitdefender reporting a campaign that lakes the TradingView Premium brand to lure targets with fake Android apps. Since 22 July, at least 75 malicious ads have directed…
Security Affairs -
SUSE Fleet: Plain Text Storage of Vulnerability Exploit Helm Values
A high-severity vulnerability in SUSE’s Fleet, a GitOps management tool for Kubernetes clusters, has been disclosed by security researcher samjustus via GitHub Security Advisory GHSA-6h9x-9j5v-7w9h. The vulnerability, tracked as CVE-2024-52284, allows Helm…
gbhackers.com -
Google Web Designer Vulnerability Lets Hackers Take Over Client Systems
A critical client-side remote code execution (RCE) vulnerability in Google Web Designer exposed Windows users to full system compromise, according to Balint Magyar’s detailed write-up. The flaw affects versions prior to 16.4.0.0711, released on 29 July 2025,…
gbhackers.com -
Phishing Campaign Exploits Ads to Breach Hotel Property Management Systems
A sophisticated malvertising campaign targeting hoteliers and vacation rental operators impersonates well-known hospitality service providers, with Okta Threat Intelligence reporting that attackers have bought sponsored ads on Google Search to steer users to…
gbhackers.com -
When Browsers Become the Attack Surface: Rethinking Security for Scattered Spider
As enterprises move more of their operations into the browser, security teams face a growing set of cyber challenges, with the article noting that over 80% of security incidents now originate from web applications accessed via Chrome, Edge, Firefox, and…
The Hacker NewsScattered Spider -
Hackers Exploit Email Marketing Platforms to Deliver Hidden Malware
Hackers are increasingly exploiting legitimate email marketing platforms to deliver hidden malware, with Trustwave SpiderLabs observing a marked uptick in phishing campaigns that cloak malicious links behind these familiar services. By hijacking established…
gbhackers.com -
Critical Next.js Flaw Lets Attackers Bypass Authorization Controls
A newly disclosed critical vulnerability in the Next[.]js framework, tracked as CVE-2025-29927, enables unauthenticated attackers to bypass middleware-based authorization by abusing the x-middleware-subrequest HTTP header. According to Security Researchers,…
gbhackers.com -
MediaTek Issues Security Update to Patch Multiple Chipset Flaws
MediaTek today published its September 2025 Product Security Bulletin, disclosing and remediating a series of critical and moderate vulnerabilities in its modem and system components, with patches already delivered to OEMs for at least two months and no…
gbhackers.com -
Travelers to the UK targeted in ETA scams
Travelers to the UK are being targeted by ETA scams as new visa-free regulations roll out, with a £10 (US$13.50) application fee and the need to provide passport details, a valid photo, and answers about suitability when applying for an Electronic Travel…
Malwarebytes -
APT372 articles this day · The Hacker News first
North Korea’s APT37 deploys RokRAT in new phishing campaign against academics · ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean Academics
2 outlets-
North Korea’s APT37 deploys RokRAT in new phishing campaign against academics
On 1 September 2025, North Korea’s APT37 launched Operation HanKook Phantom, a phishing campaign using RokRAT to target academics, ex-officials, and researchers linked to the Association. The campaign relies on a fake “National Intelligence Research Society…
Security Affairs -
ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean Academics
ScarCruft, also known as APT37, has been observed delivering RokRAT malware in a campaign named Operation HanKook Phantom that targets South Korean academics and related sectors. According to Seqrite Labs, the attackers appear to be aiming for intelligence…
The Hacker News
-
-
Hackers Register Domains to Target 2026 FIFA World Cup in Cyberattack
A concerning surge in malicious domain registrations is being used to exploit the upcoming 2026 FIFA World Cup, with threat actors positioning themselves more than a year before the tournament begins, according to PreCrime Labs, the threat research division…
gbhackers.com -
Salesforce Publishes Forensic Guide After Series of Cyberattacks
Salesforce has published a forensic investigation guide aimed at helping organisations detect, analyse, and remediate security incidents within their Salesforce environments. The guide distils best practices across three core areas—activity logs, user…
gbhackers.com -
Fraudulent Scholarship Apps Target Students in “Defarud” Scam Campaign
Fraudulent scholarship apps have been linked to an Android malware campaign called SikkahBot, active since July 2024 and targeting Bangladeshi students. Disguised as applications from the Bangladesh Education Board, it uses shortened links such as…
gbhackers.com -
Hackers Exploit macOS Security Features to Spread Malware
A recent security analysis shows hackers are turning macOS’s built‑in protections into pathways for malware distribution as macOS gains market share. The piece explains the platform’s layered security model—including Keychain, Transparency, Consent and…
gbhackers.com -
IBM Watsonx Vulnerability Enables SQL Injection Attacks
A critical vulnerability in the IBM Watsonx Orchestrate Cartridge for IBM Cloud Pak for Data has been disclosed, enabling blind SQL injection attacks that could compromise sensitive data. Tracked as CVE-2025-0165, the flaw allows authenticated attackers to…
gbhackers.com -
CVE-2025-54857 (CVSS 9.8): Critical Flaw in Seiko Solutions Device Allows Remote Takeover
A critical security flaw, CVE-2025-54857 (CVSS 9.8), has been found in SkyBridge BASIC MB-A130 networking devices from Seiko Solutions Inc, with firmware versions 1.5.8 and earlier affected, according to the advisory. The vulnerability stems from…
SecurityOnline -
Critical ImageMagick Vulnerability Allows Remote Code Execution
A critical security vulnerability has been discovered in ImageMagick, the open-source image processing software, tracked as CVE-2025-57803 with a severity of 9.8 out of 10. The flaw arises from a 32-bit integer overflow in ImageMagick’s BMP encoder…
gbhackers.com -
Malicious npm Package Impersonates Popular Nodemailer, Puts 3.9M Weekly Downloads at Risk of Crypto Theft
A sophisticated cryptocurrency theft scheme has emerged in which a malicious npm package, nodejs-smtp, impersonates the Nodemailer library that averages about 3.9 million weekly downloads. According to Socket’s Threat Research Team, the fraudulent package…
gbhackers.com -
MediaTek September 2025 Security Bulletin: High-Severity Modem Flaws Could Enable Remote Attacks
MediaTek has published its September 2025 Product Security Bulletin, which details several high- and medium-severity vulnerabilities affecting a wide range of its chipsets. The bulletin states there is “no evidence that these vulnerabilities have been…
SecurityOnline -
Apple Is Quietly Testing an AI Chatbot for Its Store Employees
According to MacRumors, Aaron Perris revealed that Apple is internally testing an AI chatbot named “Asa,” designed primarily to help Apple Store retail employees master product features and differentiated use cases, such as the iPhone, to better engage with…
SecurityOnline -
IBM and AMD Unite to Build the Future of Quantum Computing
IBM and AMD have unveiled a deep strategic partnership to co-develop a Quantum-Centric Supercomputing system that blends high-performance computing with quantum processing, aimed at driving scientific and industrial innovation. The collaborators plan a…
SecurityOnline -
iPhone 17: The Final Goodbye to the Physical SIM Card?
According to MacRumors, the iPhone 17 series is highly likely to eliminate the physical SIM card slot in more countries and regions, offering only an eSIM design. Apple first took this step in 2022 with the iPhone 14 series, where U.S. models were shipped…
SecurityOnline -
Fraudster stole over $1.5 million from city of Baltimore
A security report details that a scammer stole over $1.5 million from the City of Baltimore by spoofing a vendor and tricking staff into altering bank details. Between February and March 2025, the city’s Department of Accounts Payable completed two EFT…
Security Affairs -
Windows 11 25H2 Preview Build Released: Here’s What’s New
Windows 11, version 25H2 (Build 26200.5074) is now rolling out to the Release Preview Channel as an enablement package, giving enthusiasts and enterprises an early look ahead of general availability later in 2025. according to Microsoft, the update is…
gbhackers.com -
A week in security (August 25 – August 31)
A week in security (August 25 – August 31) is a Malwarebytes Labs round‑up posted on 1 September 2025 that highlights several security stories from the final week of August. It notes that on 28 August 2025 the FCC disconnected over a thousand voice operators…
Malwarebytes -
APT Groups Weaponize Infostealer Malware in Precision Attacks
The piece describes a shift in cyber espionage where APT groups are weaponising opportunistic infostealer malware for targeted campaigns against diplomatic institutions. Recent threat intelligence from Hudson Rock’s Cavalier platform has exposed a pattern of…
gbhackers.com
