News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 17 so far |
Wed 3 Sep 2025· 99 articles
-
A Single Click Can Hijack Your PC: CVE-2025-58176 RCE Flaw Found in Dive Desktop App
3 September 2025: The Open Agent Platform has issued a security advisory warning of a critical vulnerability in its Dive desktop application, tracked as CVE-2025-58176 (CVSS 8.8), with remote code execution risks triggered through a maliciously crafted…
SecurityOnline -
TinyLoader Malware Spreads via Network Shares and Malicious Shortcut Files on Windows
A recently discovered TinyLoader malware campaign targets Windows users with a multi‑vector attack, including network share exploitation, USB propagation, and deceptive shortcut files, according to GBHackers On Security. The operation serves as a delivery…
gbhackers.com -
A New Push for Edge: Microsoft Retires Its Popular Editor Extension
In August 2025, Microsoft announced the discontinuation of its Microsoft Lens document scanner app, and now the company has decided to retire the Microsoft Editor AI extension. Users may continue to access it until 31 October 2025, after which the extension…
SecurityOnline -
Ubuntu Is Swapping Out Sudo for a More Secure, Rust-Based Version
According to Canonical, the upcoming Ubuntu 25.10 release will replace the long-standing default sudo utility with sudo-rs, a reimplementation written in the Rust programming language, and this transition will extend to the forthcoming Ubuntu 26.04 LTS.…
SecurityOnline -
-
NVIDIA Issues Security Updates for BlueField, DOCA, Mellanox, ConnectX, Cumulus Linux, and NVOS
NVIDIA has issued a batch of security updates addressing vulnerabilities across BlueField DPUs, DOCA, Mellanox, ConnectX, Cumulus Linux and NVOS, with several flaws rated high to critical in impact. According to NVIDIA, the most severe, CVE-2025-23256,…
SecurityOnline -
Salesloft Takes Drift Offline After OAuth Token Theft Hits Hundreds of Organizations
Salesloft said it would take Drift offline temporarily “in the very near future” after a wide-reaching supply chain attack that has led to mass theft of authentication tokens. The incident, which began to be exploited as early as 8 August 2025 and continued…
The Hacker News -
Unsecured Database Linked to Navy Federal Credit Union Exposed Online
Cybersecurity researcher Jeremiah Fowler has revealed a significant data exposure involving a massive, unprotected database potentially linked to Navy Federal Credit Union (NFCU), the largest credit union in the United States serving military personnel,…
SecurityOnline -
JetBrains Makes RubyMine Free for Non-Commercial Use
On 3 September 2025, JetBrains announced that RubyMine will move to a non-commercial free model, joining other free offerings such as CLion and an AI Assistant free tier, according to…
SecurityOnline -
Cloudflare Confirms Supply Chain Attack, Customer Support Data Exposed
According to Cloudflare, the data exposure affected customer support submissions filed between 12 August 2025 and 17 August 2025, with any content within those tickets—including descriptions, attached logs, passwords, tokens, or other sensitive…
SecurityOnline -
Dolby Vision 2 Arrives: A New Imaging Standard Promises “Beyond HDR” Quality
Ahead of IFA 2025, Dolby Laboratories has unveiled its latest imaging standard, Dolby Vision 2, which it touts as the next evolutionary leap beyond existing HDR specifications, promising a visual experience that feels “beyond HDR.” According to Dolby…
SecurityOnline -
Local-First & Secure: A New Open-Source Password Manager Enters the Scene
A new open‑source password manager, 2Fas Pass, has entered the market with a local‑first design to maximise security, according to 2Fas Auth. The service requires no account creation and stores data locally on iOS and Android, with encrypted local data…
SecurityOnline -
Beyond Big Tech: Switzerland’s New Open-Source AI Is Built for the Public Good
Switzerland has launched Apertus, an open-source large language model created as public infrastructure and jointly developed by EPFL, ETH Zurich and the Swiss National Supercomputing Centre (CSCS). The project is supported by Swisscom and the Hugging Face…
SecurityOnline -
DOJ Wins Landmark Antitrust Case Against Google, Orders Sweeping Remedies to Restore Competition
In a historic ruling, the U.S. Department of Justice’s Antitrust Division has won sweeping remedies in its monopolisation case against Google, aimed at curbing the tech giant’s dominance in online search and extending oversight into generative AI products.…
SecurityOnline -
Android Security Bulletin – September 2025 Patches Actively Exploited Flaws (CVE-2025-38352 & CVE-2025-48543) and Critical RCE
The Android Security Bulletin for September 2025 notes that devices running Android 10 and later with the 2025-09-05 patch level are protected against all identified threats. It highlights two vulnerabilities under active exploitation: CVE-2025-38352 (CVSS…
SecurityOnline -
CISA Warns of Critical Flaw in SunPower Solar Inverters (CVE-2025-9696, CVSS 9.6)
CISA has issued a security advisory highlighting a critical vulnerability in SunPower PVS6 solar inverters, tracked as CVE-2025-9696 and rated CVSS 9.6. The flaw stems from hardcoded encryption parameters in the BluetoothLE interface of the PVS6, and…
SecurityOnline -
CISA Flags Two Actively Exploited Vulnerabilities: TP-Link Router Reset Flaw and WhatsApp Zero-Day Chain
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, signalling active exploitation in the wild and urging urgent remediation, as reported on 3 September 2025. The first flaw is CVE-2020-24363 (CVSS 8.8), affecting…
SecurityOnline -
Inf0s3c Stealer: A Stealthy Python Malware Is Abusing Discord to Steal Data
Inf0s3c Stealer is a Python-based information grabber designed to exfiltrate sensitive user and system data from Windows machines, with Cyfirma’s Threat Intelligence team releasing a technical analysis of its capabilities. According to Cyfirma’s Threat…
SecurityOnline -
Predators for Hire: A New Report Exposes the Thriving Global Spyware Industry
Commercial spyware has grown into a global, multi‑million euro industry, thriving despite repeated scandals and exposure. A strategic report from Sekoia[.]io’s Threat Detection & Research (TDR) team, “Predators for Hire: A Global Overview of Commercial…
SecurityOnline
