News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 16 so far |
Mon 1 Sep 2025· 63 articles
-
Linux UDisks Daemon Vulnerability Lets Attackers Access Privileged User Files
Red Hat has disclosed a critical security flaw in the Udisks daemon that allows unprivileged users to exploit an out-of-bounds read vulnerability and gain access to files owned by privileged accounts. The vulnerability, tracked as CVE-2025-8067, was publicly…
gbhackers.com -
Hackers Exploit Windows Defender Policies to Shut Down EDR Agents
According to GBHackers On Security, cybercriminals are weaponising Windows Defender Application Control (WDAC) policies to disable Endpoint Detection and Response (EDR) agents en masse. The original proof-of-concept, dubbed “Krueger,” demonstrated embedding…
gbhackers.com -
CVE-2024-52284: SUSE Fleet Vulnerability Exposes Sensitive Helm Values in Plain Text
CVE-2024-52284, identified in SUSE Rancher’s Fleet, is a high-severity flaw that exposes sensitive Helm values stored in plain text within BundleDeployment resources, potentially allowing unauthorized disclosure of credentials and other secrets. The…
SecurityOnline -
CVE-2025-57803: Critical Flaw in ImageMagick Could Lead to Remote Code Execution
CVE-2025-57803 is a critical vulnerability in ImageMagick’s BMP encoder that can lead to heap corruption and potentially remote code execution, with a CVSS score of 9.8 (Critical). The flaw affects 32-bit builds of ImageMagick prior to versions 7.1.2-2 and…
SecurityOnline -
South Korea Fines SK Telecom $96.5M Over Massive Data Breach
In April 2025, South Korea’s leading telecommunications provider SK Telecom (SKT) uncovered a long-standing software vulnerability that had allowed attackers to lurk within its internal systems for years, with some researchers believing the intrusion may…
SecurityOnline -
Elon Musk’s xAI Sues Ex-Engineer Over Stolen Grok AI Secrets
Elon Musk’s artificial intelligence company xAI filed a lawsuit on August 28, 2025, in the U.S. District Court for the Northern District of California, accusing former engineer Xuechen Li of stealing trade secrets and violating the Computer Fraud and Abuse…
SecurityOnline -
Is Gmail’s Spam Filter Politically Biased? The FTC Investigates
The Federal Trade Commission has turned its scrutiny toward Google, asking whether Gmail’s email filtering harbours political bias, with FTC Chair Andrew Ferguson sending a letter to Alphabet CEO Sundar Pichai alleging that Republican-related emails may be…
SecurityOnline -
Microsoft Urges OEMs to Fix Windows 11 USB-C Problems
Microsoft is urging OEMs to fix Windows 11 USB-C problems that affect detection, notifications and overall functionality. Windows 11 now offers USB-C support that detects connection failures, slow charging and unsupported accessories, but these features rely…
SecurityOnline -
Grok’s New Code Model Is Here to Revolutionize Development
Grok’s new code model is here to revolutionise development, with Elon Musk’s artificial intelligence company, xAI, announcing the launch of a new coding agent model named “grok-code-fast-1”, now available for free for a limited time. Positioned as a direct…
SecurityOnline -
Another Ryzen 9000 CPU Burnout: What’s Really Going On?
Earlier this year, reports emerged of AMD Ryzen 9000 series failures on systems using Asrock motherboards, with AMD suggesting the root cause was likely noncompliance with official BIOS guidelines and the application of excessively high voltages. A new case…
SecurityOnline -
Why Meta Is Turning to Its Rivals to Win the AI Race
Meta is diversifying its AI approach, pursuing an “all-of-the-above strategy” that combines its own Llama models with external collaborations while evaluating temporary use of rival technologies. According to The Information, Meta’s newly established…
SecurityOnline -
Malicious npm Package Masquerades as Nodemailer, Drains Crypto Wallets
Researchers from Socket’s Threat Research Team disclosed a dangerous npm package, nodejs-smtp, which impersonates nodemailer to infiltrate development environments and drain cryptocurrency wallets. The package, published under the alias nikotimon, includes a…
SecurityOnline -
Beyond Defense: New Report Exposes How Russian Cyber Firms Aid the Kremlin’s War
According to CNA, the report “Hacking and Firewalls Under Siege: Russia’s Cyber Industry During the War on Ukraine” argues that private Russian cybersecurity firms are deeply entwined with the Kremlin’s cyber operations, offering both defensive and offensive…
SecurityOnline -
CVE-2025-8077 (CVSS 9.8): CRITICAL Flaw in NeuVector Exposes Kubernetes Clusters to Full Takeover
The SUSE Rancher Security Team has issued a critical advisory for NeuVector, noting CVE-2025-8077 (CVSS 9.8) exposes Kubernetes clusters to full compromise if not remediated. NeuVector’s flaw stems from a weak, hardcoded credential in built-in admin…
SecurityOnline -
Deepfakes and Deception: North Korean IT Workers Infiltrating Companies to Fund Regime
A new Threat Intel report by Rakesh Krishnan details North Korean IT workers infiltrating the global remote job market through fake identities, deepfakes and compromised platforms to fund the regime’s weapons programmes. Investigators found around 50 active…
SecurityOnline -
Unraveling a Phishing Spree That Abuses Email Marketing and Cloud Services
Researchers at Trustwave SpiderLabs have published an analysis showing a rise in phishing campaigns that rely on URL redirectors, compromised domains and abused cloud services to evade detection. The report notes abuse of legitimate email marketing…
SecurityOnline -
CVE-2024-58259: DoS Flaw in Rancher Manager Allows Unauthenticated Attackers to Crash Servers
CVE-2024-58259 is a high-severity DoS flaw in Rancher Manager that could be exploited by both unauthenticated and authenticated attackers, with a CVSS score of 8.2. The issue stems from Rancher Manager not enforcing request body size limits on certain public…
SecurityOnline -
TAOTH Campaign: Hijacked Software Updates Are Spreading Malware Across Asia
Trend Micro researchers have detailed a cyber-espionage operation dubbed TAOTH, which uses hijacked software updates and spear-phishing to deliver multiple malware families across Eastern Asia. The campaign, which began in late 2024, has targeted dissidents,…
SecurityOnline -
Fraudulent Scholarship Apps: A New Malware Campaign Targets Students in Bangladesh
According to CRIL, Cyble Research and Intelligence Labs, a new Android malware campaign dubbed SikkahBot has been active since July 2024 and is targeting students in Bangladesh by disguising itself as official Bangladesh Education Board scholarship apps. The…
SecurityOnline -
A Dangerous Loophole in the VS Code Marketplace Is Allowing Malicious Extensions
ReversingLabs researchers have uncovered a dangerous loophole in the Visual Studio Code marketplace that allows threat actors to reuse the names of previously removed extensions to distribute malware, including ransomware in development. The researchers…
SecurityOnline -
Silver Fox APT Exploits Microsoft-Signed Driver to Deploy ValleyRAT Backdoor
On 1 September 2025, Check Point Research (CPR) revealed a sophisticated Silver Fox APT campaign that uses a previously unknown, Microsoft-signed vulnerable driver to disable endpoint protections and deploy the ValleyRAT backdoor across Windows systems. The…
SecurityOnlineVoid Arachne -
-
CVE-2025-8067: Linux Privilege Escalation Flaw Found in UDisks Daemon, PoC Releases
CVE-2025-8067 is a Linux privilege escalation flaw in the UDisks daemon, disclosed after a security researcher published a PoC that demonstrates how the issue can be exploited. The vulnerability arises in how the UDisks daemon handles loop device creation…
SecurityOnline
