News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Thu 4 Sep 2025· 89 articles
-
A Practical Approach for Post-Quantum Migration With Hybrid Clouds
The post-quantum migration for hybrid clouds is expected to be long, complex and resource-intensive, requiring organisations to inventory cryptographic assets, upgrade protocols, replace libraries and validate integrations across numerous systems. A…
Dark Reading -
TP-Link warns of botnet infecting routers and targeting Microsoft 365 accounts
TP-Link has issued a warning about a botnet that exploits two vulnerabilities to infect small office/home routers, which are then used to attack Microsoft 365 accounts. According to TP-Link, the affected models include the Archer C7 and TL-WR841N/ND, though…
Malwarebytes -
Frostbyte10 Vulnerabilities Let Hackers Gain Remote Access
Armis Labs has uncovered ten critical security flaws collectively named “Frostbyte10” in Copeland’s E2 and E3 building management controllers, devices that handle refrigeration, HVAC, lighting and other essential functions. According to Armis Labs, these…
gbhackers.com -
US, Allies Push for SBOMs to Bolster Cybersecurity
Government agencies in the US and 14 allied countries have released new guidance on the advantages of widespread adoption of Software Bills of Materials (SBOMs). The joint guidance argues that SBOM adoption improves security and reduces risks and costs by…
SecurityWeek -
Severe Hikvision HikCentral product flaws: What You Need to Know
Security researchers warn of three vulnerabilities in Hikvision HikCentral, a centralised management platform used for video surveillance, access control and security operations. The flaws include CVE-2025-39245 (base score 4.7) in HikCentral Master Lite…
Security Affairs -
Microsoft Confirms UAC Bug Disrupts App Installation on Windows 10 & 11
Microsoft has officially acknowledged a significant User Account Control (UAC) bug that is causing widespread installation issues across Windows 10 and Windows 11 systems, traceable to a security update released in August 2025 (KB5063878) which addressed…
gbhackers.com -
Preemptive Cyber Defense Use-Cases
Silent Push describes its Preemptive Cyber Defense Use-Cases as a way for cybersecurity teams to block threats early by delivering attacker infrastructure intelligence at scale, offering context and insight not available in any other CTI platform. The…
silentpush.com -
Popular Android VPN apps found to have security flaws and China links
A Malwarebytes report published on 4 September 2025 highlights security flaws and China links in popular Android VPN apps. The study, “Hidden Links: Analyzing Secret Families of VPN Apps,” is by researchers from the University of Toronto’s Citizen Lab and…
Malwarebytes -
Cybercriminals Exploit X’s Grok AI to Bypass Ad Protections and Spread Malware to Millions
Cybersecurity researchers have flagged a new technique dubbed Grokking, used by cybercriminals to bypass X’s malvertising protections and spread malicious links via Grok, its AI assistant, according to Guardio Labs researcher Nati Tal. The method works…
The Hacker News -
Google Fined $379 Million by French Regulator for Cookie Consent Violations
According to CNIL, the French data protection authority, Google was fined $379 million (€325 million) for cookie consent violations, with Chinese e‑commerce firm Shein fined $175 million (€150 million) for the same issue. The regulator said both companies…
The Hacker News -
No we didn’t warn all Gmail users about imminent digital doom, says Google
Google pushed back on sensational claims that it issued a broad warning to all Gmail users about a major security issue, saying in a blog post that the story was false and that it did not issue such a warning. The article notes that in June Google was…
Malwarebytes -
CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited
According to CISA, two TP-Link router flaws—CVE-2023-50224 and CVE-2025-9377—are listed in the Known Exploited Vulnerabilities catalog with evidence of in‑the‑wild exploitation. CVE-2023-50224 is an authentication bypass by spoofing vulnerability in the…
The Hacker News -
Integrations Overview
Integrations Overview, published on 4 September 2025, explains that Silent Push integrates proprietary threat intelligence and Indicators of Future Attack (IOFA)™ directly into existing SIEM and SOAR platforms to automate decisions and accelerate response…
silentpush.com -
Wytec Expects Significant Financial Loss Following Website Hack
Wytec International, Inc. says its website was defaced by unknown threat actors on 25 August 2025 and the site has since been taken down while it reviews its web platform and adds security measures. The site was restored from backups after the initial…
SecurityWeek -
ChatGPT’s “Projects” Feature is Now Free for All Users
The Projects feature in ChatGPT has been extended to free users as of 4 September 2025, allowing all ChatGPT users to organise conversations around specific themes. Projects act like structured folders for dialogues and support custom instructions that shape…
SecurityOnline -
Hackers Exploit Sitecore Zero-Day for Malware Delivery
According to Google, threat actors have been mass-exploiting a Sitecore zero-day by using an exposed ASP[.]NET machine key to perform ViewState deserialization attacks on internet-accessible Sitecore deployments. The issue is tracked as CVE-2025-53690, with…
SecurityWeek -
US Announces $10M Bounty on FSB Hackers Behind Cisco Exploits
According to the U.S. Department of Justice, the United States has unveiled a $10 million reward for information leading to the arrest of three Russian officers of the FSB who allegedly carried out cyberattacks on U.S. critical infrastructure and exploited…
gbhackers.com -
Django Web Vulnerability Allows Attackers to Execute SQL Injection
The Django development team has disclosed a high‑severity SQL injection flaw in the FilteredRelation feature, tracked as CVE-2025-57833, which could let attackers inject code by crafting unexpected query parameters. According to Django’s weblog, the issue…
gbhackers.com -
Chinese APT Groups Exploit Router Flaws to Breach Enterprises
Chinese state-sponsored APT groups have escalated cyber espionage campaigns since 2021, systematically targeting global telecommunications, government, and military networks through sophisticated router exploitation techniques. The actors, operating under…
gbhackers.com -
Two Exploited Vulnerabilities Patched in Android
Two privilege escalation flaws in Android Runtime (CVE-2025-48543) and the Linux kernel (CVE-2025-38352) were exploited in targeted attacks, according to SecurityWeek. Google this week rolled out fixes as part of the September 2025 patch set, which patched…
SecurityWeek -
U.S. CISA adds TP-Link Archer C7(EU) and TL-WR841N flaws to its Known Exploited Vulnerabilities catalog
According to U.S. Cybersecurity and Infrastructure Security Agency (CISA), TP-Link Archer C7(EU) and TL-WR841N flaws have been added to its Known Exploited Vulnerabilities (KEV) catalog. The entry describes two CVEs: CVE-2023-50224, a TP-Link TL-WR841N…
Security Affairs -
Jury Rules Against Google in $425M Privacy Lawsuit
In July 2020, a user filed a lawsuit against Google over its App Activity Tracking feature, alleging that Google continued to monitor and collect data even after users had disabled the option to opt out. The case gained class-action status, meaning nearly…
SecurityOnline -
Massive IPTV Hosted Across More Than 1,000 Domains And Over 10,000 IP Addresses
According to Silent Push, a cybersecurity firm, a colossal illegal IPTV network has been exposed, active for years across more than 1,000 domains and over 10,000 unique IP addresses. The network illegally streams content from Netflix, Disney+, Prime Video…
gbhackers.com -
The September Pixel Drop Is Here, and It’s a Huge One
The September Pixel Drop brings Android 16’s Material 3 Expressive UI to older devices, extending features from the Pixel 10 series to Pixel 6 onward and the Pixel Tablet, effectively letting nearly four years of Pixel models benefit. The update adds live…
SecurityOnline -
Google Alerts to Active Exploitation of Sitecore Zero-Day Flaw
Security researchers warn of an active exploitation of Sitecore’s zero-day flaw, tracked as CVE-2025-53690, which attackers can trigger by tampering with the ViewState mechanism in ASP[.]NET. The vulnerability allows remote code execution on unpatched…
gbhackers.com -
Hackers Exploit X’s Grok AI to Push Malicious Links Through Ads
Hackers are exploiting X’s Grok AI to push malicious links through promoted posts, bypassing the platform’s ban on URLs in paid promotions. The report explains that Grok can still identify, summarise, and suggest external sites when prompted in replies,…
gbhackers.com -
Iran MOIS Phishes 50+ Embassies, Ministries, Int'l Orgs
Iranian state hackers tied to the Homeland Justice APT used a trove of compromised email accounts to phish dozens of diplomatic missions and international organisations from six continents. Researchers from Dream Security and Clear Sky Cyber Security have…
Dark Reading -
New Scam Targets PayPal Users During Account Profile Setup
A highly sophisticated phishing campaign is targeting PayPal users with a deceptive email designed to grant scammers direct access to their accounts. The attack, which has been circulating for at least a month, leads victims to the official PayPal website…
gbhackers.com -
TLS Certificate Mis-Issuance Exposes 1.1.1.1 DNS Service to Exploitation
Security researchers revealed that three unauthorized TLS certificates were issued in May 2025 for 1.1.1[.]1, the public DNS service run by Cloudflare and APNIC. The certificates were mis-issued by the Fina RDC 2020 certificate authority, potentially…
gbhackers.com -
New ‘NotDoor’ Malware Targets Outlook Users for Data Theft and System Compromise
A new backdoor malware named NotDoor has been singled out as targeting Microsoft Outlook users to theft data and seize control of infected systems. Russian state‑sponsored hackers have been attributed to APT28, also known as Fancy Bear, with the group linked…
gbhackers.com -
XWorm Malware Adopts New Infection Chain to Bypass Security Detection
Cybersecurity researchers have traced XWorm’s infection chain as it shifts from predictable distribution to more deceptive, multi-stage techniques designed to evade detection. According to Trellix Advanced Research Center, the campaign now begins with a…
gbhackers.com -
CVE-2025-5086 (CVSS 9.0): A Critical RCE in DELMIA Apriso with Exploit Attempts Seen in the Wild
CVE-2025-5086 (CVSS 9.0) is a critical RCE flaw in DELMIA Apriso that has seen real-world exploit attempts since the June 2025 advisory. According to Dassault Systèmes, the deserialization of untrusted data vulnerability affects Release 2020 through Release…
SecurityOnline -
Apple and Google Are Partnering to Bring Gemini AI to Siri
According to Bloomberg’s Mark Gurman, Apple and Google are set to finalise an agreement this week that will bring Google’s Gemini AI into Siri, upgrading Apple’s voice assistant with more advanced capabilities. Under the arrangement, Apple will evaluate and…
SecurityOnline -
A Misissued Certificate Found for Cloudflare’s 1.1.1.1 DNS Service
Cybersecurity researchers have warned about three anomalous TLS certificates tied to Cloudflare’s 1.1.1[.]1 DNS service, issued in May 2025 but only disclosed recently. The certificates were issued by Fina RDC 2020, an intermediate authority under Fina Root…
SecurityOnline -
A New Alliance: Perplexity AI Teams Up with PayPal for Global Rollout
Perplexity AI has announced a partnership with PayPal to extend access to its Comet browser, offering US and selected international PayPal and Venmo users complimentary access to a $200 Perplexity Pro subscription. According to PayPal, the promotion is part…
SecurityOnline -
Stealerium: How an Open-Source Infostealer Is Being Used in Phishing Campaigns
Proofpoint threat researchers have flagged a surge in campaigns distributing Stealerium, an open-source infostealer first released on GitHub in 2022 “for educational purposes,” now being adopted and modified for real-world attacks. According to Proofpoint,…
SecurityOnline -
A Critical Flaw Is Exposing the AI Supply Chain to “Model Namespace Reuse” Attacks
A critical flaw in the AI supply chain could allow attackers to hijack machine learning pipelines across major platforms, researchers say, exposing models to “Model Namespace Reuse” attacks. According to Unit 42, Hugging Face plays a central role, since…
SecurityOnline -
Tidal Cyber Raises $10 Million for CTI and Adversary Behavior Platform
According to SecurityWeek, Tidal Cyber has announced a $10 million Series A funding round, bringing the total raised by the company to $15 million. Founded in 2022 by three former MITRE experts, the Washington, DC-based startup has built a threat-informed…
SecurityWeek
