News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 16 so far |
Wed 3 Sep 2025· 99 articles
-
How Darktrace Detects Cryptomining: Threat Example & Walkthrough
Darktrace reports that in July 2025 the company detected and contained a cryptojacking attempt on a retail/e‑commerce network, initiated by a PowerShell payload designed to download and run NBMiner in memory. The initial compromise was observed on July 22…
darktrace.com -
Varonis Acquires Email Security Provider SlashNext to Enhance BEC Defenses
According to Yaki Faitelson, Varonis has acquired email security provider SlashNext to enhance BEC defenses and plans to integrate its advanced phishing protection into the Varonis Data Security Platform. The deal combines the two companies to provide…
Dark Reading -
Hacker Conversations: McKenzie Wark, Author of A Hacker Manifesto
According to SecurityWeek, Hacker Conversations: McKenzie Wark, Author of A Hacker Manifesto presents McKenzie Wark as a professor of Media and Cultural Studies at The New School in New York City, known for her book A Hacker Manifesto and for reframing…
SecurityWeek -
Apache DolphinScheduler Vulnerability Patched — Update Immediately
A low-severity security issue in Apache DolphinScheduler has been addressed in the latest release, identified as CVE-2024-43166 and classed under CWE-276: Incorrect Default Permissions. It affects all DolphinScheduler versions prior to 3.2.2, with a strong…
gbhackers.com -
Detecting Data Leaks Before Disaster
In January 2025, cybersecurity experts at Wiz Research found that Chinese AI specialist DeepSeek had suffered a data leak, putting more than 1 million sensitive log streams at risk, according to Wiz Research. They identified a publicly accessible ClickHouse…
The Hacker News -
PayPal users targeted in account profile scam
A Malwarebytes analysis details a highly convincing PayPal phishing email campaign with the subject line “Set up your account profile.” The sender appears as service@paypal[.]com (sometimes from service@paypal.co[.]uk) but is spoofed, a technique used to…
Malwarebytes -
Google Avoids Chrome Breakup but Must Share Search Data With Competitors
The U.S. District Court for the District of Columbia today imposed remedies in the Justice Department’s monopolization case against Google, ordering the tech giant to share critical search data with competitors and outlawing exclusive distribution agreements…
gbhackers.com -
Pennsylvania Attorney General Confirms Ransomware Behind Weeks-Long Outage
According to the Pennsylvania Office of Attorney General, ransomware was behind a three-weeks-long outage that disrupted email, phones and websites across the Commonwealth. The incident was first disclosed on 11 August, with some restoration of the website…
SecurityWeek -
NVIDIA Patches Vulnerabilities Causing DoS, EoP, and Data Exposure
NVIDIA today released critical security updates for its BlueField, ConnectX, DOCA, Mellanox DPDK, Cumulus Linux, and NVOS products, addressing multiple vulnerabilities that could allow denial of service, escalation of privileges, and information disclosure.…
gbhackers.com -
Chrome 140 Release Fixes Critical RCE Vulnerabilities
Google has released Chrome 140 to the stable channel for Windows, Mac and Linux, with the update rolling out to users over the coming days and weeks. The new version, 140.0.7339.80 for Linux and 140.0.7339.80/81 for Windows and Mac, delivers several security…
gbhackers.com -
Android Security Alert: Google Patches 120 Flaws, Including Two Zero-Days Under Attack
Google has shipped security updates addressing 120 flaws in Android as part of the September 2025 fixes, including two issues that have been exploited in targeted attacks. The vulnerabilities include CVE-2025-38352, a privilege escalation flaw in the Linux…
The Hacker News -
Gemini Arrives: Is a New Era for the Smart Home Coming?
Google has announced that on 1 October 2025 (U.S. local time) it will host a special event to unveil the integration of Gemini into Google Home, signalling a new era of AI-driven smart home experiences. When the Pixel 10 series was revealed earlier, Google…
SecurityOnline -
Empire Red Teaming Tool Updated With Enhanced Agents and API Support
Empire’s makers, the BC-SECURITY team, have released a major update to its offensive security framework, Empire, adding enhanced agent capabilities and comprehensive API support to streamline post-exploitation operations and adversary emulation for Red Teams…
gbhackers.com -
MystRodX: Weaponizing DNS and ICMP for Data Theft
MystRodX is described as a sophisticated backdoor that exploits DNS and ICMP to activate and exfiltrate data from compromised systems, deployed via a dropper masquerading as a Mirai variant and remaining undetected for over 20 months. In passive mode the…
gbhackers.com -
Iranian Hackers Exploit 100+ Embassy Email Accounts in Global Phishing Targeting Diplomats
An Iran-nexus group is linked to a coordinated, multi-wave spear-phishing campaign targeting embassies and consulates worldwide, according to Dream. The activity is attributed to Iranian-aligned operators connected to a group known as Homeland Justice, with…
The Hacker News -
Jaguar Land Rover Operations ‘Severely Disrupted’ by Cyberattack
Jaguar Land Rover says its operations were “severely disrupted” by a cyberattack, with systems disconnected and retail and manufacturing activities hit across its global network. In a brief notice, the company said it proactively shut down systems to contain…
SecurityWeek -
Model Namespace Reuse: An AI Supply-Chain Attack Exploiting Model Name Trust
Model Namespace Reuse describes an AI supply-chain attack that exploits model name trust to gain Remote Code Execution and other capabilities on platforms such as Google Vertex AI, Azure AI Foundry and thousands of open‑source projects. The researchers…
unit42.paloaltonetworks.com -
Massive IPTV Piracy Network Uncovered by Silent Push
Silent Push has uncovered a massive IPTV-based piracy network that has been active for several years and is hosted across more than 1,100 domains and over 10,000 IP addresses. The researchers identified two companies profiting from hosting pirated content,…
silentpush.com -
Security Firms Hit by Salesforce–Salesloft Drift Breach
Hackers accessed customer contact information and case data from Salesforce instances at Cloudflare, Palo Alto Networks, and Zscaler as part of the Salesforce–Salesloft Drift data theft campaign. Between August 8 and August 18, they used compromised OAuth…
SecurityWeek -
Envoy Project Patches Two Flaws: DoS (CVE-2025-54588) and Session Hijacking (CVE-2025-55162) Risks
The Envoy Project has issued a security advisory addressing two vulnerabilities in its L7 proxy and communication bus: a DoS flaw in the DNS cache (CVE-2025-54588) and a session hijacking risk in the OAuth2 filter (CVE-2025-55162). According to…
SecurityOnline -
Android droppers evolved into versatile tools to spread malware
ThreatFabric researchers warn that Android droppers have shifted from delivering banking trojans to also spreading SMS stealers and spyware, with activity concentrated in Asia and India and other high-risk regions. According to ThreatFabric, dropper apps now…
Security Affairs -
Google Cloud & Cloudflare Missed 3-Year Phishing Campaign
An industrial-scale phishing campaign exploited Google Cloud and Cloudflare infrastructure and operated in plain sight for more than three years, targeting Fortune 500 companies and siphoning millions in potential revenue. Deep Specter Research’s…
gbhackers.com -
Android’s Anti-Theft Protection Now Backs Up to the Cloud
Android’s anti-theft protections for Android devices can now be backed up to the cloud, following an update to Google Play Services. The feature previously required manual reconfiguration after resetting a device, but the system now saves the user’s…
SecurityOnline -
OpenAI Acquires Statsig in $1.1B Deal, Shakes Up Leadership
On 2 September 2025, OpenAI announced the $1.1 billion acquisition of Statsig, a company specialising in A/B testing and product analytics, while initiating a major organisational restructuring. According to OpenAI, Fidji Simo joined as CEO of Applications…
SecurityOnline -
New BruteForceAI Tool Automates Login Page Detection and Attacks
A cutting-edge penetration testing tool called BruteForceAI has arrived, bringing automation and artificial intelligence to login page detection and brute-force attacks. Designed for security professionals and researchers, BruteForceAI streamlines two…
gbhackers.com -
CISA Alerts on Critical SunPower Vulnerability Allowing Full Device Takeover
According to The Cybersecurity and Infrastructure Security Agency (CISA), a high-severity alert (ICSA-25-245-03) warns of a critical vulnerability in SunPower’s PVS6 solar inverter series that could allow attackers on adjacent networks to gain complete…
gbhackers.com -
Jaguar Land Rover shuts down systems after cyberattack, no evidence of customer data theft
Jaguar Land Rover shut down systems to mitigate a cyberattack that disrupted production and retail operations, with the incident affecting the Solihull production plant and occurring over the weekend. UK dealers reported disruptions that blocked car…
Security Affairs -
Disney to Pay $10 Million Over Children’s Data Privacy Violations
In a landmark settlement announced on 2 September 2025, The Walt Disney Company has agreed to pay a $10 million civil penalty to resolve allegations by the United States Department of Justice that its subsidiaries violated federal law by collecting personal…
gbhackers.com -
Cloudflare Blocks Record-Breaking 11.5 Tbps DDoS Attack
Cloudflare has reported blocking a record-breaking volumetric DDoS attack that peaked at 11.5 terabits per second (Tbps). According to Cloudflare, the largest of hundreds of hyper-volumetric DDoS incidents over recent weeks reached 11.5 Tbps and 5.1 billion…
The Hacker News -
Android Issues Security Update to Patch Actively Exploited 0-Day Flaws
Google has released a critical Android Security Bulletin for September 2025, addressing multiple high-severity vulnerabilities that are currently being actively exploited in the wild. The security patch level 2025-09-05 or later is required to protect…
gbhackers.com -
Chrome 140 Patches Six Vulnerabilities, Including High-Severity V8 Flaw (CVE-2025-9864)
Google has released Chrome 140 on the stable channel for Windows, macOS and Linux, with builds 140.0.7339.80 (Linux) and 140.0.7339.80/81 (Windows and Mac) rolling out over the coming days and weeks. The update patches six security vulnerabilities, including…
SecurityOnline -
Top 10 Best Identity and Access Management (IAM) Tools in 2025
GBHackers’ roundup of Top 10 Best Identity and Access Management (IAM) Tools for 2025 highlights Okta, Microsoft Entra ID, Ping Identity, SailPoint, ForgeRock, IBM Security Verify, Auth0, RSA SecurID, Keycloak, and Oracle Identity Management as the leading…
gbhackers.com -
IIS WebDeploy RCE Vulnerability Gets Public PoC
A newly disclosed remote code execution (RCE) vulnerability in Microsoft’s IIS Web Deploy toolchain has drawn attention after a public PoC was released. Tracked as CVE-2025-53772, the flaw exists in the unsafe deserialization logic of the…
gbhackers.com -
Hackers Use Hexstrike-AI to Exploit Zero-Day Flaws in Just 10 Minutes
Hexstrike-AI has emerged as a game‑changer for cybercriminals, capable of scanning, exploiting and persisting inside targets in under ten minutes after its release. The framework was quickly co‑opted from its original red‑team framing into an offensive…
gbhackers.com -
Stealthy Python Malware Uses Discord to Steal Windows Data
Inf0s3c Stealer is described as a stealthy Python-based grabber that targets Windows hosts, packed as a 64-bit Portable Executable first compressed with UPX 5.02 and then packed using PyInstaller. The sample imports Windows API functions to enumerate…
gbhackers.com -
UAE to Implement Cyber Education Initiative
UAE to Implement Cyber Education Initiative aims to teach cybersecurity across Grades 1–12, with the programme starting in the 2025-2026 academic year. The ministry will introduce teaching guides in English and provide practical instruction to improve…
Dark Reading -
Hijacked by RapperBot: Devices Exploited for Instant DDoS Attacks
A newly uncovered variant of the RapperBot malware covertly commandeers internet-connected devices—particularly outdated network video recorders (NVRs)—to form a DDoS army in seconds. Security researchers, according to Bitsight, detail an exploit chain that…
gbhackers.com -
Jaguar Land Rover Confirms Cyberattack Disrupting Global IT Systems
Jaguar Land Rover (JLR), the UK’s leading luxury automotive manufacturer, has disclosed that it is the victim of a significant cyberattack affecting its global information technology infrastructure. According to Jaguar Land Rover’s announcement, an…
gbhackers.com -
CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation
CISA has added TP-Link TL-WA855RE Wi‑Fi Ranger Extender flaws to its Known Exploited Vulnerabilities (KEV) catalog amid evidence of active exploitation, according to CISA. The vulnerability, CVE-2020-24363 (CVSS 8.8), involves missing authentication that…
The Hacker News -
Cloudflare Confirms Data Breach – Customer Data Exposed via Salesforce Attack
Cloudflare has disclosed a significant data breach affecting customer information following a supply chain compromise aimed at its Salesforce integration with Salesloft Drift, with the incident occurring between 12 and 17 August 2025. According to…
gbhackers.com
