News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Tue 9 Sep 2025· 94 articles
-
Data Is the New Diamond: Latest Moves by Hackers and Defenders
There have been ongoing developments in data theft activity targeting Salesforce instances, with the Salesloft Drift supply chain attack highlighted in a recent Unit 42 Threat Brief. The attacks are attributed by Google to UNC6395, a threat activity cluster…
unit42.paloaltonetworks.com -
Microsoft Patch Tuesday, September 2025 Edition
Microsoft Patch Tuesday, September 2025 Edition notes that Microsoft Corp. today issued security updates to fix more than 80 vulnerabilities in Windows and related software, with 13 of those earning a critical rating, and there are no known zero‑day flaws in…
Krebs on Security -
Catching the Ransomware EDR Couldn't See
In a Darktrace blog post published on 13 February 2025, a lab-led ransomware scenario demonstrated how an up-to-date EDR could be bypassed using a ClickFix social engineering technique. The attack delivered an obfuscated HTML page that, after user…
darktrace.com -
EoP Flaws Again Lead Microsoft Patch Day
In September 2025, Microsoft’s monthly security update again saw elevation of privilege (EoP) bugs outnumbering other vulnerability types, with 81 unique CVEs disclosed across its product portfolio. According to Microsoft, 38 of these vulnerabilities enable…
Dark Reading -
SAP September 2025 Patch Day fixed 4 critical flaws
SAP’s September 2025 Patch Day fixed four critical flaws in NetWeaver as part of 21 new security notes and four updates. Onapsis Research Labs helped SAP patch two critical flaws in NetWeaver AS Java, including CVE-2025-42944 (CVSS 10.0) in the RMI-P4 module…
Security Affairs -
As hackers exploit one high-severity SAP flaw, company warns of 3 more
SAP warns that users of its S/4HANA and NetWeaver products should patch promptly as high-severity flaws emerge across multiple programmes. The highest-severity issue, rated 10, is in NetWeaver and CVE-2025-42944 allows unauthenticated attackers to execute…
Ars Technica -
Popeyes, Tim Hortons, Burger King platforms have “catastrophic” vulnerabilities, say hackers
Popeyes, Tim Hortons, and Burger King platforms operated by Restaurant Brands International have “catastrophic” vulnerabilities, according to Malwarebytes. Two ethical hackers uncovered flaws that could allow an attacker to access voice recordings, add or…
Malwarebytes -
Is the Browser Becoming the New Endpoint?
The debate over whether the browser is the new endpoint is evolving, but it’s clear that its use has surged and security must catch up. The workday now revolves around the browser, which holds highly sensitive data such as credentials and session information…
Dark Reading -
Qantas Reduces Executive Pay Following Cyberattack
Qantas Group’s latest annual report notes that a cyber incident earlier this year led to a data breach affecting customers, with the breach first detected on 30 June after a third‑party platform used by a contact centre was compromised. The attackers were…
Dark Reading -
Top 10 Best Internal Network Penetration Testing Providers in 2025
The article lists the Top 10 Best Internal Network Penetration Testing Providers for 2025, profiling UnderDefense, Secureworks, Rapid7, NetSPI, Cobalt[.]io, Synack, AppSecure, Bishop Fox, ScienceSoft, and Astra as leading options. It explains that these…
gbhackers.com -
Microsoft Patches 86 Vulnerabilities
Microsoft has released its September 2025 Patch Tuesday updates, addressing a total of 86 vulnerabilities across Windows and other products. According to release notes, none of the security holes patched this month have been exploited in the wild, though…
SecurityWeek -
Supply chain attack targets npm, +2 Billion weekly npm downloads exposed
A supply chain attack hit npm, exposing the platform’s heavily used ecosystem after a maintainer fell for a phishing email designed to harvest 2FA credentials, with more than 2 billion weekly downloads impacted. The incident targeted Josh Junon, known on npm…
Security Affairs -
Huge NPM Supply-Chain Attack Goes Out With Whimper
On 8 September 2025, threat actors compromised the NPM account of Qix through a phishing attack and published poisoned versions of 18 open-source packages that together account for more than 2 billion weekly downloads. The malware was crypto-stealing and,…
Dark Reading -
Adobe Patches Critical ColdFusion and Commerce Vulnerabilities
Adobe has patched nearly two dozen vulnerabilities across nine of its products in the September 2025 Patch Tuesday updates, including critical flaws in ColdFusion and Commerce. The critical ColdFusion vulnerability is tracked as CVE-2025-54261, with a CVSS…
SecurityWeek -
Microsoft September 2025 Patch Tuesday – 81 Vulnerabilities and 2 Zero Days Fixed
Microsoft’s September 2025 Patch Tuesday fixes 81 security vulnerabilities across its product portfolio, including two zero-day flaws that are actively being exploited, with 10 rated Critical and 71 rated Important. The updates cover Windows, Microsoft…
gbhackers.com -
Kosovo National Pleads Guilty To Operating An Online Criminal Marketplace
Liridon Masurica, also known as “@blackdb,” has pleaded guilty to conspiracy to commit access device fraud, according to the U.S. Attorney’s Office, Middle District of Florida. He was the lead administrator of BlackDB[.]cc, an online criminal marketplace in…
DataBreaches -
“LockerGoga,” “MegaCortex,” and “Nefilim” Ransomware Administrator Charged with Ransomware Attacks
A Ukrainian national, Volodymyr Viktorovich Tymoshchuk, also known as deadforz, Boba, msfv and farnetwork, has been charged by the U.S. District Court for the Eastern District of New York with administering LockerGoga, MegaCortex and Nefilim ransomware…
DataBreaches -
9/9/25, 4:34 PM
Unifying network and email security closes critical gaps in defenses, enabling faster detection, investigation and response across the entire attack lifecycle. An integrated, AI-driven approach helps security teams share intelligence and coordinate actions,…
darktrace.com -
Salty2FA Takes Phishing Kits to Enterprise Level
A recent phishing campaign using the Salty2FA kit shows adversarial tooling moving to enterprise‑grade capability, researchers said. According to Ontinue, the kit features subdomain rotation, the abuse of legitimate platforms for initial access, and dynamic…
Dark Reading -
FortiDDoS Vulnerability Lets Hackers Execute Unauthorized OS Commands
Fortinet has disclosed a significant OS command injection vulnerability in its FortiDDoS-F appliances that could allow privileged attackers to execute unauthorized code or commands through the CLI. The flaw, identified as CVE-2024-45325, stems from improper…
gbhackers.com -
Multiple Vulnerabilities Discovered in Ivanti Connect Secure, Policy Secure, and ZTA Gateways
According to Ivanti, six medium- and five high-severity vulnerabilities affect Ivanti Connect Secure, Policy Secure, ZTA Gateways and Neurons for Secure Access, with issues ranging from missing authorisation checks and CSRF flaws to SSRF and…
gbhackers.com -
CVE-2025-40795 (CVSS 9.8): Critical Flaw in Siemens SIVaaS Exposes Network Share Without Authentication
CVE-2025-40795 (CVSS 9.8) is a critical flaw in Siemens SIVaaS that could expose a network share without authentication. The vulnerabilities, tracked as CVE-2025-40795 through CVE-2025-40798, affect the Siemens User Management Component (UMC) used in…
SecurityOnline -
Ivanti Endpoint Manager Vulnerabilities Allow Remote Code Execution by Attackers
According to Ivanti, Ivanti released Security Advisory for Endpoint Manager versions 2024 SU3 and 2022 SU8, detailing two high-severity flaws (CVE-2025-9712 and CVE-2025-9872). The vulnerabilities arise from insufficient filename validation and can allow…
gbhackers.com -
Ivanti Patches Two High-Severity RCE Flaws in Endpoint Manager
Ivanti has released security updates for Endpoint Manager (EPM) addressing two high-severity remote code execution vulnerabilities caused by insufficient filename validation, both with a CVSS score of 8.8. According to Ivanti, CVE-2025-9712 allows a remote…
SecurityOnline -
Zoom Security Update Fixes Vulnerabilities in Windows Client and Workplace Platform
On 9 September 2025, Zoom released an urgent security update for its Windows client and Workplace platform to tackle ten security bulletins across Windows and macOS clients and Workplace. The update fixes a critical Untrusted Search Path flaw in the Windows…
gbhackers.com -
Link11 Reports 225% more DDoS attacks in H1 2025 with new tactics against infrastructure
According to Link11 European Cyber Report, the threat landscape around distributed denial-of-service (DDoS) attacks intensified in the first half of 2025, with attacks targeting the Link11 network rising by 225% compared with the same period in 2024. The…
gbhackers.com -
Axios Abuse and Salty 2FA Kits Fuel Advanced Microsoft 365 Phishing Attacks
Threat actors are abusing HTTP client tools such as Axios alongside Microsoft 365 Direct Send to run highly efficient phishing campaigns, ReliaQuest has found. Axios activity surged 241% from June to August 2025, with Axios accounting for 24.44% of activity…
The Hacker News -
Exposed Docker APIs Likely Exploited to Build Botnet
SecurityWeek reports that threat actors are exploiting exposed Docker APIs to deploy malware and cryptocurrency miners and potentially build a new botnet, according to Trend Micro and Akamai. The attacks begin with a request to the exposed API to fetch a…
SecurityWeek -
SAP Patches Critical NetWeaver Vulnerabilities
SAP has released 21 new and four updated security notes, addressing several critical-severity NetWeaver vulnerabilities that could enable remote code execution and privilege escalation. The most severe flaw, CVE-2025-42944 (CVSS 10/10), is an insecure…
SecurityWeek -
Phishing Alert: Kimusky Hackers Masquerade as Tax Authority with ‘September Tax Return Due Date’ Email
Phishing alerts describe a campaign attributed to the North Korean threat actor known as Kimsuky, with emails masquerading as notices from the National Tax Service (NTS) about a “September Tax Return Payment Due Notice.” The subject line references the NTS…
gbhackers.com -
Ransomware Losses Climb as AI Pushes Phishing to New Heights
Ransomware remains the main threat to business, with the 2025 Midyear Cyber Risk Report from Resilience noting that phishing has leapt to clear prominence as the most common point of failure, aided by AI. The analysis shows vendor-related risk down from 22%…
SecurityWeek -
Microsoft to Add New AI-Powered Actions in File Explorer
Microsoft is rolling out AI-powered actions in File Explorer, letting users interact with files more deeply without leaving the folder view. By right-clicking any supported file, a new “AI actions” menu entry will appear, from which users can access…
gbhackers.com -
Ex-WhatsApp Security Chief Sues Meta Over Vulnerabilities, Retaliation
Ex-WhatsApp security chief Attaullah Baig has filed a whistleblower lawsuit against Meta and several of the company’s top executives, accusing them of retaliation after he tried to get critical cybersecurity failures fixed. Baig, who joined WhatsApp in 2021…
SecurityWeek -
Aembit Named to Fast Company’s Seventh-Annual List of the 100 Best Workplaces for Innovators
Aembit was named to Fast Company’s seventh-annual list of the 100 Best Workplaces for Innovators, recognising organisations that cultivate a culture of innovation across all levels. The company, described as the non-human IAM provider, earned the No. 43 spot…
gbhackers.com -
Data from Police Body Camera Apps Routed to Chinese Cloud Servers Over TLS Port 9091
According to brownfinesecurity[.]com, a budget-friendly body camera system’s companion mobile app, Viidure, transmits sensitive device identifiers and user data to cloud servers based in China over a nonstandard TLS port. The investigation found the most…
gbhackers.com -
Link11 Reports 225% more DDoS attacks in H1 2025 with new tactics against infrastructure
The threat landscape for distributed denial-of-service (DDoS) attacks intensified in the first half of 2025, with attacks targeting the Link11 network rising by 225% compared with the same period in 2024, according to Link11 European Cyber Report. The volume…
SecurityOnline -
English Court of Appeal Rules on Compensation for Data Breaches
The English Court of Appeal has handed down an important judgment in Farley v. Paymaster (Equiniti) on when compensation may be claimed for nonmaterial damage such as distress or anxiety arising from GDPR and DPA breaches. The case concerned misaddressed…
DataBreaches -
RatOn Hijacks Bank Account to Launch Automated Money Transfers
According to ThreatFabric, RatOn is a mobile banking trojan developed from scratch by a threat actor group observed since July 2025, and it combines traditional overlay attacks with NFC relay tactics to hijack bank accounts and initiate automated money…
gbhackers.com -
Google misled users about their privacy and now owes them $425m, says court
A court has ordered Google to pay $425m in a class action after finding it misled users about their online privacy. The suit began in July 2020 when Anibal Rodriguez filed a case arguing that Google’s Web & App Activity setting misrepresented data…
Malwarebytes -
U.S. Cracks Down on Scam Networks in Southeast Asia Draining Billions
According to the Office of Foreign Assets Control (OFAC), the U.S. Treasury imposed sanctions on a sprawling network of scam centres operating in Southeast Asia to curb transnational cybercrime and human rights abuses. The action targets nine entities in…
gbhackers.com
