News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Thu 4 Sep 2025· 89 articles
-
The number of mis-issued 1.1.1.1 certificates grows. Here’s the latest.
The Ars Technica report confirms that three mis-issued TLS certificates for Cloudflare’s 1.1.1[.]1 service were discovered, with nine additional certificates issued since February 2024, bringing the total to 12. Cloudflare said that all certificates have…
Ars Technica -
Federal Cuts Put Local, State Agencies at Cyber-Risk
TechTarget and Informa Tech’s Digital Business Combine is showcased as a joint effort that powers an unparalleled network of 220+ online properties covering 10,000+ granular topics for an audience of 50+ million professionals, delivering original, objective…
Dark Reading -
Sitecore Zero-Day Sparks New Round of ViewState Threats
A critical Sitecore zero-day vulnerability, tracked as CVE-2025-53690, is under active exploitation in a new round of ViewState deserialization attacks affecting Sitecore products such as Experience Manager, Experience Platform and Experience Commerce,…
Dark Reading -
Federal Cuts Put Local, State Agencies at Cyber Risk
Cybercriminals and state-sponsored attackers have increasingly targeted local and state governments, a trend unfolding as federal budget and staffing cuts bite. On 24 August, Nevada suffered a ransomware incident causing outages and data theft, with…
Dark Reading -
Sextortion with a twist: Spyware takes webcam pics of users watching porn
Sextortion has taken a technological twist with the open‑source infostealer Stealerium, which now automates spying on users browsing porn by screenshotting pages and triggering a webcam photo as they view NSFW content. According to wired[.]com, Proofpoint…
Ars Technica -
Bridgestone Americas Confirms Cyberattack
Bridgestone Americas confirmed that a cyberattack impacted its operations, with reports of disruptions at North American plants. The American division said it identified a limited cyber incident that affected some of its manufacturing facilities, and that…
Dark Reading -
Chinese Hackers Game Google to Boost Gambling Sites
A professional cybercrime operation likely based in China is using a sophisticated bag of tricks to run an SEO manipulation campaign aimed at artificially boosting the search rankings of various gambling websites. The operation, tracked by ESET as…
Dark Reading -
ISC2 Aims to Bridge DFIR Skill Gap with New Certificate
ISC2 has rolled out a Threat Handling Foundations Certificate to help cybersecurity professionals improve Digital Forensics and Incident Response in the wake of increasingly disruptive attacks, many of which can lead to breaches. The four-course offering…
Dark Reading -
Phishing Empire Runs Undetected on Google, Cloudflare
Researchers say a global phishing-as-a-service operation, cloaked on Google Cloud and Cloudflare, has run for more than three years. The Deep Specter Research team describes it as multi-year, industrial-scale phishing that hijacks abandoned or expired…
Dark Reading -
Czech Warning Highlights China Stealing User Data
The Czech Republic’s National Cyber and Information Security Agency, NÚKIB, warned in a public advisory that certain products and services are sending data back to the People’s Republic of China, with the notice stressing transfers of system and user data to…
Dark Reading -
$10M reward for Russia’s FSB officers accused of hacking US Critical infrastructure
According to Rewards for Justice, the United States Department of State is offering up to $10 million for information leading to the identification of Russia’s FSB officers Pavel Aleksandrovich Akulov, Mikhail Mikhailovich Gavrilov and Marat Valeryevich…
Security Affairs -
Hackers exploited Sitecore zero-day flaw to deploy backdoors
Threat actors have been exploiting a zero-day vulnerability in legacy Sitecore deployments to deploy WeepSteel reconnaissance malware, with CVE-2025-53690 described as a ViewState deserialization flaw caused by a sample ASP[.]NET machine key in pre-2017…
BleepingComputer -
Lessons learned from OT attacks: Why behavioral detection beats signatures
Rethinking Signature-Based Detection for Power Utility Cybersecurity argues that signature-based detection, while still useful for commodity IT malware, is ill-suited to OT environments and power utilities. The piece highlights historic OT incidents,…
darktrace.com -
Russian APT28 Deploys “NotDoor” Outlook Backdoor Against Companies in NATO Countries
The Hacker News reports that the Russian state-sponsored group APT28 has been linked to a new Microsoft Outlook backdoor named NotDoor, deployed against multiple NATO‑country companies. NotDoor is a VBA macro for Outlook designed to monitor incoming emails…
The Hacker NewsAPT28 -
Texas sues PowerSchool over breach exposing 62M students, 880k Texans
Texas Attorney General Ken Paxton has filed a lawsuit against PowerSchool after a December breach exposed the personal information of 62 million students, including over 880,000 Texans, according to the Office of the Attorney General of Texas. PowerSchool…
BleepingComputer -
GhostRedirector2 articles this day · gbhackers.com first
GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS Module · GhostRedirector Hackers Target Windows Servers Using Malicious IIS Module
2 outlets-
GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS Module
Cybersecurity researchers have disclosed a previously undocumented threat cluster named GhostRedirector that has compromised at least 65 Windows servers, primarily in Brazil, Thailand, and Vietnam. The attacks, per ESET, deployed a passive C++ backdoor…
The Hacker News -
GhostRedirector Hackers Target Windows Servers Using Malicious IIS Module
ESET security researchers have uncovered a sophisticated cyber threat campaign dubbed GhostRedirector that targets Windows servers across multiple countries, compromising at least 65 machines in Brazil, Thailand and Vietnam. The group has developed two…
gbhackers.com
-
-
Chess.com discloses recent data breach via file transfer app
Chess[.]com has disclosed a data breach after threat actors gained unauthorized access to a third-party file transfer application used by the platform. The incident occurred in June 2025, with the attackers maintaining access for two weeks between 5 June and…
BleepingComputer -
Iran-Nexus Hackers Impersonate Omani MFA to Target Governments Entities
Cybersecurity researchers have linked a sophisticated Iran-linked spear-phishing operation to the impersonation of an Omani MFA in Paris, using hijacked diplomatic communications to target government entities worldwide. According to the report, the campaign…
gbhackers.com -
Blast Radius of Salesloft Drift Attacks Remains Uncertain
Many high-profile Salesloft Drift customers have disclosed data breaches tied to a recent supply-chain attack, but the extent and severity remain unclear. According to Google, from 8 to 18 August a threat actor (UNC6395) breached Salesloft’s Drift SaaS…
Dark Reading -
New TP-Link zero-day surfaces as CISA warns other flaws are exploited
TP-Link has confirmed an unpatched zero-day affecting multiple router models, with CISA warning that other flaws have already been exploited in attacks. The zero-day was discovered by independent threat researcher Mehrun (ByteRay), who first reported it to…
BleepingComputer -
France slaps Google with €325M fine for violating cookie regulations
The French data protection authority, CNIL, has fined Google €325 million ($378 million) for violating cookie regulations and for displaying ads between Gmail users’ emails without their consent, according to CNIL. The regulator said investigations carried…
BleepingComputer -
Bridgestone Confirms Cyberattack Impacts Manufacturing Facilities Across North America
Bridgestone Americas has confirmed a cyberattack that has impacted manufacturing facilities across North America, including two plants in Aiken County, South Carolina. The tyre maker says it has launched a comprehensive forensic analysis and believes it…
gbhackers.com -
Apple Seeks Researchers for 2026 iPhone Security Program
Apple has kicked off the application period for the 2026 Security Research Device Program, with white hat researchers able to apply until 31 October. Through the Security Research Device Program, or SRDP, eligible researchers receive an iPhone that enables…
SecurityWeek -
9/4/25, 2:27 PM
Researchers from Cado Security Labs (now part of Darktrace) identified a campaign named GuLoader targeting European industrial and engineering companies, with spearphishing emails carrying archive attachments such as iso, 7z, gzip or rar to deliver the…
darktrace.com -
6 browser-based attacks all security teams should be ready for in 2025
The article outlines six browser-based attack techniques that security teams should be ready for in 2025, arguing that the browser has become the new battleground and a primary route to compromises of business apps and data. It identifies the six key…
BleepingComputer -
Why Threat Hunting Should Be Part of Every Security Program
Threat hunting should be part of every mature security program, the article argues, because the more you hunt, the more you learn and the more gaps you fill between what tools detect and what they miss. It emphasises that threat hunting is a mindset rather…
Dark Reading -
Tire giant Bridgestone confirms cyberattack impacts manufacturing
Tire giant Bridgestone confirmed it is investigating a cyberattack that is impacting some of its manufacturing facilities in North America. On 2 September 2025, reports surfaced about a cybersecurity incident affecting two of Bridgestone Americas’ production…
BleepingComputer -
How Gray-Zone Hosting Companies Protect Data the US Wants Erased
According to Wirestock, Inc via Alamy Stock Photo, the article notes that since the new US administration took office in 2025, Kolja Weber and his team have been quietly helping abortion clinics, civil rights organisations and independent newsrooms relocate…
Dark Reading -
NoisyBear Exploits ZIP Files for PowerShell Loaders and Data Exfiltration
The article reports that the threat actor NoisyBear has launched a cyber-espionage campaign named Operation BarrelFire, using specially designed phishing lures that imitate internal Kazakhstani energy sector communications. According to Seqrite Labs, the…
gbhackers.com -
Roblox introduces age checks to use communication features
Roblox has announced plans to expand age estimation to all users who access on-platform communication features by the end of this year. The company describes age estimation as analysing a selfie to estimate a user’s age and place them into age groups (under…
Malwarebytes -
Sendmarc appoints Rob Bowker as North American Region Lead
Sendmarc today announced the appointment of Rob Bowker as North American Region Lead, with Bowker tasked to oversee regional expansion and grow the MSP partner community, develop strategic VAR partnerships, and broaden the enterprise customer base. He brings…
gbhackers.com -
Give your PC a fresh start: New free tools to boost your PC’s speed, security, and peace of mind
Malwarebytes has launched Malwarebytes Tools, a free set of features designed to give Windows PCs a breath of fresh air, now available in preview mode inside the Malwarebytes app. The tools include Startup Applications, which lets you see what’s booting up…
Malwarebytes -
Addressing the unauthorized issuance of multiple TLS certificates for 1.1.1.1
Cloudflare reports that unauthorized certificates were issued for 1.1.1[.]1 by Fina CA, affecting its public DNS resolver service rather than any other Cloudflare properties. From February 2024 to August 2025, twelve certificates were issued for 1.1.1[.]1…
Cloudflare -
AI Supply Chain Attack Method Demonstrated Against Google, Microsoft Products
According to Palo Alto Networks, researchers have uncovered a new AI supply chain attack method called Model Namespace Reuse, which they demonstrated against Google and Microsoft products. The attack works by threat actors registering names tied to deleted…
SecurityWeek -
Dark Web Profile: GLOBAL Ransomware
GLOBAL Ransomware, also known as the GLOBAL GROUP, emerged in mid-2025 as a RaaS operation on the Russian Anonymous Marketplace (RAMP), with forensic links to earlier families such as Mamona and BlackLock. According to SOCRadar, it offers affiliates an…
SOCRadar -
Sendmarc appoints Rob Bowker as North American Region Lead
Sendmarc has appointed Rob Bowker as North American Region Lead, with the announcement noting the appointment was made on 4 September 2025 in Wilmington, United States. Bowker will oversee regional expansion, emphasising growth of the MSP partner community,…
SecurityOnline -
US Offers $10 Million for Three Russian Energy Firm Hackers
According to Rewards for Justice, the US Department of State this week announced rewards of up to $10 million for information on three Russian Federal Security Service officers: Pavel Aleksandrovich Akulov, Mikhail Mikhailovich Gavrilov, and Marat…
SecurityWeek -
Microsoft says recent Windows updates cause app install issues
Microsoft says the August 2025 security updates are triggering unexpected User Account Control prompts and app installation issues for non-admin users across all supported Windows versions, according to Windows release health dashboard update. The issue…
BleepingComputer -
Sola Security Rases $35M to Bring No-Code App Building to Cybersecurity Teams
On 4 September 2025, Israeli startup Sola Security announced it had raised a $35 million Series A round, taking total funding to $65 million. The company says its AI-powered no-code security platform lets security teams design, customise, and deploy tools in…
SecurityWeek
