News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Tue 9 Sep 2025· 94 articles
-
How a Single Faulty Windows Driver Can Crash Your System and Cause Blue Screen of Death
Windows devices rely on a complex ecosystem of drivers to manage hardware and software interactions, and a single faulty driver can trigger a system-wide crash known as the Blue Screen of Death. The article details how Windows, during power transitions such…
gbhackers.com -
160,000 Impacted by Wayne Memorial Hospital Data Breach
Wayne Memorial Hospital announced that 160,000 individuals had their personal information exposed in a May 2024 data breach, which was identified on 3 June 2024 and involved ransomware. The attackers reportedly gained access between 30 May and 3 June 2024,…
SecurityWeek -
RatOn Android Malware Detected With NFC Relay and ATS Banking Fraud Capabilities
A new Android malware named RatOn has evolved from a simple NFC relay tool into a remote access trojan with Automated Transfer System capabilities to enable device-level fraud. According to ThreatFabric, RatOn merges overlay attacks with automatic money…
The Hacker News -
SessionReaper Vulnerability Puts Magento & Adobe Commerce Sites in Hacker Crosshairs
Adobe has broken its regular patch schedule to address CVE-2025-54236, a critical vulnerability in Magento Commerce and open-source Magento installations, dubbed “SessionReaper.” The flaw allows attackers to bypass input validation in the Magento Web API,…
gbhackers.com -
MO: City of St. Joseph hit by cyberattack, data potentially acquired in breach
The City of St. Joseph suffered a significant cyberattack in early June, an incident that crippled network services for an extended period and potentially exposed the personal data of thousands of residents, city officials confirmed on Monday. The city has…
DataBreaches -
Massive NPM Supply Chain Attack Hits Crypto Wallets
Massive NPM supply chain attack has affected crypto wallets, with hackers manipulating the Node Package Manager ecosystem by pushing malicious updates into 18 packages that together see more than two billion downloads every week. The malicious code was…
DataBreaches -
SAP Security Patch Day Addresses 21 Vulnerabilities, 4 Classified as Critical
SAP’s Security Patch Day on 9 September 2025 addressed 21 newly discovered vulnerabilities across its product portfolio, with four issues classified as Critical. The release covers components from NetWeaver to ABAP, S/4HANA and Business One, and four of the…
gbhackers.com -
Threat Actor Connected to Play, RansomHub and DragonForce Ransomware Operations
The DFIR Report links a single threat actor to three ransomware-as-a-service operations, tying together tools and campaigns used during a September 2024 intrusion. The attack began when a malicious EarthTime fake led to the .NET-based SectopRAT malware,…
SecurityWeekDragonForce -
From MostereRAT to ClickFix: New Malware Campaigns Highlight Rising AI and Phishing Risks
Cybersecurity researchers have detailed two linked campaigns that spotlight rising AI- and phishing-driven threats. The first centres on a phishing flow that delivers a stealthy banking Trojan-turned-remote access tool called MostereRAT, using EPL-coded…
The Hacker News -
New Cyber Attack Exploits DeskSoft to Spread Malware via RDP Command Execution
A new cyber attack has been identified that weaponises a trojanised version of DeskSoft’s EarthTime application to deploy malware via Remote Desktop Protocol (RDP) command execution, enabling network reconnaissance and lateral movement. Security analysts…
gbhackers.com -
Mitsubishi Electric to Acquire Nozomi Networks for Nearly $1 Billion
Mitsubishi Electric has signed a definitive agreement to acquire OT and IoT cybersecurity firm Nozomi Networks in a deal valued at nearly $1 billion, with Mitsubishi agreeing to buy the shares it does not already own for $883 million in cash. Nozomi Networks…
SecurityWeek -
SpamGPT: New AI Email Attack Tool Fueling Massive Phishing Operations
SpamGPT is described as an AI-driven email attack toolkit that has emerged on underground forums, pitched as an “AI-powered spam-as-a-service” platform for large-scale phishing campaigns. According to Varonis, its user-friendly interface and AI-assisted…
gbhackers.com -
Signal Solves Its Biggest Flaw with a New Privacy-Focused Cloud Backup
Signal has announced a privacy-focused cloud backup feature, introducing a zero-knowledge architecture to protect user data, with the rollout starting on Android and iOS to follow. For free accounts, it stores up to 45 days of messages and media, with older…
SecurityOnline -
Now It Can Listen: Google Gemini Adds Support for Audio File Uploads
Google Gemini has added audio file upload support, allowing users to upload audio through the web, iOS, and Android and have it transcribed or summarised. The feature, described by the company’s Vice President of Labs and head of the Gemini AI team as a "#1…
SecurityOnline -
TOR-Based Cryptojacking Attack Expands Through Misconfigured Docker APIs
Cybersecurity researchers have identified a TOR-based cryptojacking variant that expands a recent campaign by abusing exposed Docker APIs. The attack chain begins with breaking into misconfigured Docker APIs to launch a new container based on the Alpine…
The Hacker News -
RatOn: The New Android Trojan That Steals Crypto and Uses NFC Relay Attacks
ThreatFabric has uncovered RatOn, a newly developed Android banking trojan that merges overlay fraud with NFC relay attacks, automated money transfers, and cryptocurrency wallet theft. The first known RatOn samples date back to 5 July 2025, with continuous…
SecurityOnline -
CVE-2025-7350: Critical RCE Flaw in Rockwell Stratix Switches Scores CVSS 9.6
CVE-2025-7350 is described as a critical remote code execution flaw in Rockwell Automation’s Stratix industrial Ethernet switches, with a CVSS score of 9.6. The vulnerability would allow unauthenticated remote attackers to execute code by exploiting CSRF…
SecurityOnline -
[Webinar] Shadow AI Agents Multiply Fast — Learn How to Detect and Control Them
On 9 September 2025, The Hacker News reports that Shadow AI Agents are multiplying across enterprises, operating outside security’s line of sight and tied to identities you may not know exist. The piece describes an invisible swarm of agents that impersonate…
The Hacker News -
Plex Urges Password Resets Following Data Breach
Plex has disclosed that an unauthorized third party accessed a limited subset of customer data from one of its databases, including emails, usernames, securely hashed passwords, and authentication data. The company urged users with Plex accounts to reset…
SecurityWeek -
New Malware Exploits Exposed Docker APIs to Gain Persistent Root SSH Access
A new strain of malware uncovered by the Akamai Hunt Team targets exposed Docker APIs, with first observations in August 2025 within Akamai’s honeypot infrastructure. It differs from the June 2025 Trend Micro report by blocking other attackers from accessing…
gbhackers.com -
How Leading CISOs are Getting Budget Approval
Budget season is again spotlighting security, with CISOs urged to frame their asks in business terms rather than purely technical ones. According to Gartner analysis, 88% of Boards see cybersecurity as a business risk, not merely an IT issue, so leaders…
The Hacker News -
MostereRAT Exploits AnyDesk and TightVNC for Remote Access on Windows Systems
MostereRAT exploits AnyDesk and TightVNC to gain remote access on Windows systems, with FortiGuard Labs noting a phishing campaign that delivers the trojan to compromise machines. The attack begins with emails targeting Japanese users, directing victims to…
gbhackers.com -
SentinelOne to Acquire Observo AI in $225 Million Deal
SentinelOne is set to acquire Observo AI, a California-based company that has developed an AI-native data pipeline platform for DevOps and security, in a deal described as worth $225 million. According to SEC filings, SentinelOne will pay roughly $225…
SecurityWeek -
Jaguar Land Rover Halts Operations Longer Due to Cyberattack Impact
Jaguar Land Rover’s UK factories will remain closed until at least Wednesday as the company continues to recover from a cyberattack that struck its systems on 31 August. The carmaker shut down its IT networks in response to the breach, halting production at…
gbhackers.com -
New Exploitation Method Discovered for Linux Kernel Use-After-Free Vulnerability
A new exploitation method has been discovered for the Linux kernel use-after-free vulnerability tracked as CVE-2024-50264, a flaw described as a race condition in the AF_VSOCK subsystem present since Linux kernel 4.8. The article notes that the bug allows an…
gbhackers.com -
Dynatrace Data Breach Exposes Customer Information Stored in Salesforce
Dynatrace has confirmed that customer data stored in Salesforce was exposed following a third‑party breach involving Salesloft’s Drift application, in August 2025. The incident granted attackers unauthorized access to Salesforce CRM data across multiple…
gbhackers.com -
Windows Defender Vulnerability Lets Hackers Hijack and Disable Services Using Symbolic Links
A newly demonstrated attack technique has revealed a flaw in how Windows Defender manages its update and execution mechanism. By exploiting symbolic links, attackers can hijack Defender’s service folders, gain full control over its executables, and even…
gbhackers.com -
APT37 Deploys New Rust and Python Malware Targeting Windows Systems
According to GBHackers On Security, the North Korean-aligned threat group APT37, also known as ScarCruft, Ruby Sleet, and Velvet Chollima, has evolved its cyber warfare capabilities by deploying Rust and Python-based malware targeting Windows systems. The…
gbhackers.comRuby Sleet -
SAP Security Patch Day Fixes Four Critical Flaws, Including a CVSS 10.0 RCE (CVE-2025-42944)
SAP’s September 2025 Patch Day saw 21 new Security Notes released and 4 updates, with four vulnerabilities rated critical and others also warranting attention for enterprise SAP deployments. The most severe, CVE-2025-42944 in SAP NetWeaver’s RMI-P4, is an…
SecurityOnline -
20 Popular npm Packages With 2 Billion Weekly Downloads Compromised in Supply Chain Attack
A supply chain attack compromised 20 popular npm packages that together attract over 2 billion weekly downloads, after a maintainer’s account was phished and the attacker targeted the co-maintainer Josh Junon, known as Qix. The incident began when Junon…
The Hacker News -
Chinese Hackers Salt Typhoon and UNC4841 Team Up to Breach Critical Infrastructure
Cybersecurity researchers at Silent Push have uncovered a sophisticated Chinese espionage operation linking two prominent threat actors, Salt Typhoon and UNC4841, revealing infrastructure used to target government and corporate networks across more than 80…
gbhackers.comGhostEmperor -
LunaLock Ransomware threatens victims by feeding stolen data to AI models
LunaLock, a new ransomware gang, has introduced a distinctive cyber extortion tactic by threatening to turn stolen art into AI training data. The group, which targeted the artists’ platform Artists&Clients, stole digital art and demanded a $50,000 ransom,…
Security Affairs -
Hackers Hijack 18 Popular npm Packages Downloaded Over 2 Billion Times Weekly
Hackers hijacked 18 extremely popular npm packages, downloaded more than 2 billion times every week, injecting them with malware that targets cryptocurrency users and developers. Early on 8 September, a security feed flagged the sudden update of 18…
gbhackers.com -
Maduro Hails Huawei Mate X6 Gift From China as ‘Unhackable’ by U.S.
Venezuelan President Nicolás Maduro showcased a Huawei Mate X6 gifted to him by Chinese President Xi Jinping and hailed it at a Caracas press conference as “the best phone in the world,” claiming that “the Americans can’t hack it, neither their spy planes,…
gbhackers.com -
Qualys Confirms Cyberattack Campaign Targeting Salesforce via Salesloft and Drift
Qualys has confirmed that it was recently impacted by a cybersecurity campaign targeting Salesloft and Drift, two third‑party SaaS platforms that integrate with Salesforce. The attack centred on stealing third‑party OAuth tokens linked to Drift, allowing…
gbhackers.com -
Salesforce Breach Through Salesloft Drift Hits Google, Cloudflare, and 750 Firms
Beginning in July 2025, several high-profile organisations reported breaches of their Salesforce CRM systems after attackers gained access and exfiltrated data, the Daily CyberSecurity reports. Among those affected were Google and Cloudflare, whose CRM…
SecurityOnline -
Intel’s 14A Process Will Be Its Most Expensive and Advanced Yet
Intel is advancing its 14A process node (equivalent to 1.4 nanometres), a technology described as its most expensive and advanced yet, designed for both its own products and foundry customers. According to Citi’s 2025 Global TMT Conference, Intel CFO David…
SecurityOnline -
Google’s AI Search Goes Global: New AI Mode Supports Five Languages
On 9 September 2025, Google announced that its AI Mode search feature will now support five languages: Japanese, Korean, Indonesian, Hindi and Brazilian Portuguese, extending its reach beyond English-speaking users. The service first entered public testing…
SecurityOnline -
Plex Urges Password Reset After Data Breach
According to Plex, a cyberattack led to a data breach that exposed a limited subset of customer data from one of its databases, including emails, usernames, securely hashed passwords and authentication data, with an unidentified attacker able to extract the…
SecurityOnline -
Intel’s Major Leadership Reshuffle: What Does It Mean for the Future?
On 8 September 2025, Intel announced that Michelle Johnston Holthaus—who has served the company for more than 30 years and most recently was Chief Executive of Products—will step down, though she will remain for a short period as a strategic advisor.…
SecurityOnline
