News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Wed 10 Sep 2025· 89 articles
-
Critical flaw SessionReaper in Commerce and Magento platforms lets attackers hijack customer accounts
Adobe has fixed a critical vulnerability in its Commerce and Magento Open Source platforms, tracked as CVE-2025-54236 (also known as SessionReaper) with a CVSS score of 9.1, described as an improper input validation flaw that can enable customer account…
Security Affairs -
Senator blasts Microsoft for making default Windows vulnerable to “Kerberoasting”
A US Senator has urged the Federal Trade Commission to investigate Microsoft for “gross cybersecurity negligence,” citing the default use of the RC4 encryption cipher in Windows and its link to a 2024 ransomware breach at Ascension that affected 5.6 million…
Ars Technica -
Google Pixel 10 adds C2PA to camera and Photos to spot AI-generated or edited images
Pixel 10 integrates C2PA Content Credentials into the camera and Google Photos, allowing users to verify whether images are real or AI-generated, or edited. The feature was announced at the Made by Google 2025 event, with Content Credentials secured by…
Security Affairs -
Students Pose Inside Threat to Education Sector
K-12 institutions face an onslaught of attacks, but insider threats from students are equally prevalent, with many schools already stretched thin by underfunded security teams, according to Dark Reading. The piece notes that while much student activity is…
Dark Reading -
Growing Misuse of Selenium Grid for Cryptomining and Proxyjacking
Cado Security Labs (now part of Darktrace) identified two new campaigns exploiting misconfigured Selenium Grid instances for cryptomining and proxyjacking, highlighting the ongoing abuse of automation infrastructure. Attackers injected scripts to deploy…
darktrace.com -
Chinese Hackers Allegedly Pose as US Lawmaker
US lawmakers have accused China-backed threat actors of impersonating US Rep. John Moolenaar (R-Mich.) in a series of spearphishing attacks, with the aim of influencing policy during ongoing high-level trade engagements. On 8 September, according to the US…
Dark Reading -
8,000 Strong: Harden-Runner's Growing Impact on CI/CD Security
StepSecurity’s Harden-Runner has reached a milestone, protecting more than 8,000 open-source repositories with EDR-style runtime monitoring for CI/CD pipelines and thereby helping to stop supply chain attacks on GitHub Actions. The platform now monitors over…
StepSecurity -
Chinese APT Deploys EggStreme Fileless Malware to Breach Philippine Military Systems
An advanced persistent threat (APT) group from China has been attributed to the compromise of a Philippines-based military company using a previously undocumented fileless malware framework called EggStreme. According to Bitdefender, EggStreme is a tightly…
The Hacker News -
Jaguar Land Rover Admits Data Breach Caused by Recent Cyberattack
Jaguar Land Rover has admitted that the recent cyberattack, which caused factory shutdowns, also resulted in a data breach, though it has not disclosed what data might have been stolen. The incident emerged after the company said it extended the shutdown of…
SecurityWeek -
Notes of cyber inspector: three clusters of threat in cyberspace
Notes of cyber inspector: three clusters of threat in cyberspace outlines how hacktivism and geopolitically motivated APT groups have become a major threat, with the report identifying three main threat clusters based on TTPs observed in 2025. It notes that…
securelist.com -
Kikimora Announces Launch of Kikimora Agent: Accessible AI-Powered Cybersecurity Platform for SME Security
Kikimora has announced the launch of Kikimora Agent, an AI-powered platform designed to provide accessible cybersecurity management, vulnerability detection and asset monitoring for businesses, individuals and students. The launch, announced in Sofia,…
SecurityOnline -
The Quiet Revolution in Kubernetes Security
The Quiet Revolution in Kubernetes Security argues that as Kubernetes becomes the foundation of enterprise infrastructure, the underlying operating system must evolve with it. Talos Linux is presented as a secure-by-default, API-driven model for Kubernetes,…
Dark Reading -
CyberVolk Ransomware Targets Windows Systems in Critical Infrastructure and Research Institutions
CyberVolk ransomware first emerged in May 2024 and has since escalated its operations against government agencies, critical infrastructure and scientific institutions across Japan, France and the United Kingdom. The group operates with pro-Russian leanings,…
gbhackers.com -
Ransomware attack at blood center: Org tells users their data’s been stolen
A ransomware attack targeted the New York Blood Center (NYBC), which began sending data breach notifications to its users after the incident. The attack was first noticed on 26 January 2025, and victims are only now being notified as investigations continue.…
Malwarebytes -
Multiple Vulnerabilities in GitLab Patched, Blocking DoS and SSRF Attack Vectors
GitLab has released critical security updates across multiple versions to address six vulnerabilities that could enable denial-of-service, server-side request forgery and information disclosure, with versions 18.3.2, 18.2.6, and 18.1.6 for both Community…
gbhackers.com -
CHILLYHELL macOS Backdoor and ZynorRAT RAT Threaten macOS, Windows, and Linux Systems
Cybersecurity researchers have unveiled two new malware families: a modular Apple macOS backdoor called CHILLYHELL and a Go-based remote access Trojan named ZynorRAT that can target Windows and Linux as well. According to Jamf Threat Labs, CHILLYHELL is…
The Hacker News -
Newly Identified Domains Likely Linked to Continued Activity from PoisonSeed E-Crime Actor
DomainTools Investigations identified a set of malicious domains registered since 01 June 2025 that are likely linked to the PoisonSeed e-crime actor, with the majority referencing SendGrid and others co-hosted on IPs alongside SendGrid-spoofing domains.…
dti.domaintools.comPoisonSeed -
Pre-approved GLP-1 prescription scam could be bad for your health
A Malwarebytes piece reports a text-scams claiming a GLP-1 weight‑loss prescription has been pre-approved, purportedly from a doctor such as “Dr. Santos,” and urging recipients to click a link. The article notes that GLP‑1 drugs like Ozempic, Wegovy and…
Malwarebytes -
September 2025 Patch Tuesday: 2 Zero-Days (CVE-2025-55234 & CVE-2024-21907), 81 Microsoft Flaws
September 2025 Patch Tuesday fixes two publicly disclosed zero-days and 81 Microsoft flaws, including CVE-2025-55234 and CVE-2024-21907. According to SOCRadar, CVE-2025-55234 is a privilege escalation flaw in the Windows SMB protocol that can be exploited…
SOCRadar -
AsyncRAT Leverages Fileless Techniques to Bypass Detection
According to LevelBlue threat researchers, AsyncRAT was deployed via a multi-stage fileless loader that used legitimate system tools to leave almost no footprint on disk. The intrusion began when a valid but compromised ScreenConnect client provided…
gbhackers.com -
Geordie Emerges From Stealth With $6.5M for AI Agent Security Platform
Geordie has emerged from stealth with $6.5 million in funding for a platform designed to help enterprises address the security risks associated with the use of agentic AI. The London-based company aims to give organisations deep visibility into AI agents and…
SecurityWeek -
Meta Verified Scam Ads on Facebook Steal User Account Details
Meta Verified scam ads on Facebook are deception aimed at stealing user credentials by promising free verification badges. Security researchers say a new malvertising campaign targets Facebook users with malicious ads that claim to unlock Meta’s blue…
gbhackers.com -
Red Access Raises $17 Million for Agentless Security Platform
Red Access today announced raising $17 million in a Series A funding round, bringing the total raised by the company to $23 million. The round was led by Norwest Venture Partners, with additional support from Elron Ventures, SentinelOne’s S Ventures, Singtel…
SecurityWeek -
Dormant macOS Backdoor ChillyHell Resurfaces
Dormant macOS Backdoor ChillyHell has resurfaced in a new version, described by researchers as a modular backdoor that can brute-force passwords, drop payloads and communicate with C2 infrastructure. Jamf Threat Labs says a new ChillyHell sample uploaded to…
Dark Reading -
Apple CarPlay Vulnerability Allows Remote Code Execution to Gain Root Access
On September 10, 2025, a vulnerability in Apple's CarPlay ecosystem was disclosed, allowing remote code execution with root privileges, posing significant risks to connected vehicles. The flaw, tracked as CVE-2025-24132, affects the AirPlay protocol used by…
gbhackers.com -
Kikimora Announces Launch of Kikimora Agent: Accessible AI-Powered Cybersecurity Platform for SME Security
Kikimora has announced the launch of Kikimora Agent, an AI-powered platform described as accessible cybersecurity management, vulnerability detection and asset monitoring for businesses, individuals and students. The solution blends conversational AI with…
gbhackers.com -
Apple Unveils iPhone Memory Protections to Combat Sophisticated Attacks
Apple has announced Memory Integrity Enforcement (MIE) on its new iPhone 17 and iPhone Air, delivering always-on memory safety protection for key attack surfaces such as the kernel and more than 70 userland processes, with the devices running iOS 26.…
SecurityWeek -
Microsoft Fixes 80 Flaws — Including SMB PrivEsc and Azure CVSS 10.0 Bugs
Microsoft on Tuesday fixed 80 security flaws in its software, including eight rated Critical and 72 rated Important, with none described as exploited in the wild as a zero-day. Of the flaws, 38 relate to privilege escalation, followed by 22 remote code…
The Hacker News -
Amp’ed RF BT-AP 111 Bluetooth Access Point Vulnerability Enables Admin Takeover
The article discusses a critical vulnerability in the Amp’ed RF BT-AP 111 Bluetooth Access Point, which exposes its HTTP-based administrative interface without authentication controls. This flaw allows unauthenticated attackers with network access to gain…
gbhackers.com -
Google Drive Desktop for Windows Flaw Lets Users Gain Full Access to Others’ Drives
A serious flaw in Google Drive Desktop for Windows allows a multi-user machine to access another person’s entire Drive content without re-authentication, by abusing the hidden DriveFS cache. The vulnerability hinges on DriveFS, a folder under each user’s…
gbhackers.com -
Apple’s “Most Significant Upgrade” to iPhone Security Is Here
Apple Security Engineering and Architecture (SEAR) has unveiled Memory Integrity Enforcement (MIE), an always-on, hardware-assisted memory safety technology designed to block entire classes of memory corruption vulnerabilities across iPhone devices. Apple…
SecurityOnline -
Hush Security Emerges Stealth to Eliminate Credential Threats With No-Secrets Platform
Hush Security has emerged from stealth with an $11 million seed funding round and a machine access platform that eliminates secrets. The Tel Aviv-based startup, founded in 2024 by Micha Rave, Chen Nisnkorn, Shmulik Ladkani and Alon Horowitz, replaces vaults…
SecurityWeek -
Lazarus Hackers Abuse Git Symlink Vulnerability in Stealthy Phishing Campaign
Lazarus Hackers have been linked to a stealthy phishing campaign that exploits a recently disclosed Git symlink vulnerability, CVE-2025-48384, to target cryptocurrency and financial institutions worldwide. According to KuCoin’s security team, the operation…
gbhackers.com -
HackerOne Data Breach, Hackers Illegally Access Salesforce Environment
HackerOne confirmed a data breach affecting its Salesforce environment due to a vulnerability in the Drift application provided by Salesloft. The breach allowed unauthorized access to certain customer records, although no sensitive vulnerability data was…
gbhackers.com -
Critical Flaws in Microsoft Office Enable Remote Code Execution by Attackers
Microsoft has disclosed two serious security vulnerabilities in its Office suite that allow attackers to execute arbitrary code on affected systems, publicly releasing details on 9 September 2025. The flaws, tracked as CVE-2025-54910 and CVE-2025-54906,…
gbhackers.com -
Apple iPhone Air and iPhone 17 Feature A19 Chips With Spyware-Resistant Memory Safety
According to The Hacker News, Apple on 10 September 2025 revealed Memory Integrity Enforcement (MIE), a new security feature built into its iPhone 17 and iPhone Air models. Apple says MIE provides always-on memory safety protection across the kernel and more…
The Hacker News -
AdaptixC2: A New Open-Source Framework Leveraged in Real-World Attacks
According to Unit 42, AdaptixC2 is a recently identified, open-source post-exploitation and adversarial emulation framework that threat actors are using in campaigns, with limited public documentation of its real‑world use. The researchers observed two…
unit42.paloaltonetworks.com -
China-Linked APT41 Hackers Target U.S. Trade Officials Amid 2025 Negotiations
According to The House Select Committee on China, an advisory warning has been issued about an ongoing series of highly targeted cyber espionage campaigns linked to the PRC amid US–China trade talks. The committee says these campaigns aim to compromise…
The Hacker NewsAPT41 -
Plex users: Reset your password!
Plex users are being urged to reset their passwords after a data breach, with Plex stating that an attacker accessed a “limited subset” of customer data, including email addresses, usernames, hashed passwords and authentication data. According to Plex, any…
Malwarebytes -
Fortinet, Ivanti, Nvidia Release Security Updates
Fortinet, Ivanti, and Nvidia on Tuesday announced security updates addressing more than a dozen high- and medium-severity vulnerabilities across their product lines. Ivanti resolved two high-severity insufficient filename validation issues in Endpoint…
SecurityWeek
