News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Wed 10 Sep 2025· 89 articles
-
The Time-Saving Guide for Service Providers: Automating vCISO and Compliance Services
The article introduces The Time-Saving Guide for Service Providers, which argues that automation can help MSPs and MSSPs deliver stronger cybersecurity outcomes while scaling their offerings. It notes that manual tasks such as risk assessments, policy…
The Hacker News -
GitLab Urges Immediate Update for Two High-Severity Flaws
GitLab has released new versions of its Community and Enterprise Editions to address several security vulnerabilities, including two high-severity flaws that could disrupt services and compromise data. CVE-2025-2256 covers Denial of Service in SAML…
SecurityOnline -
Threat Actor’s Self-Deployment of EDR Exposes Their Tools and Workflows
Huntress Security Operations Center (SOC) analysed alerts from a self-deployed EDR instance to gain unprecedented insight into an adversary’s day-to-day workflows, tool usage and evolving tradecraft, the article notes. The researchers published detailed…
gbhackers.com -
US Offers $10 Million Reward for Ukrainian Ransomware Operator
The US on Tuesday announced a reward of up to $10 million for information on Volodymyr Viktorovich Tymoshchuk, a Ukrainian national indicted for administering the LockerGoga, MegaCortex and Nefilim ransomware families. The individual, also known as Boba,…
SecurityWeek -
Firefox for iOS Now Summarizes Pages with a Shake
Firefox for iOS is rolling out a page summarisation feature, initially available to English-speaking users in the United States with broader language and region support still to be announced, the article notes on 10 September 2025. The function can be…
SecurityOnline -
The MacBook Pro Is Getting an OLED Display, But There’s a Catch
According to The Elec, Apple is preparing to adopt OLED displays in its upcoming MacBook Pro models, set for release next year and replacing the current mini-LED panels. The 14-inch and 16-inch MacBook Pro OLED screens will be manufactured by Samsung…
SecurityOnline -
Hackers Impersonate Google AppSheet in Latest Phishing Campaign
Hackers are exploiting Google’s AppSheet no‑code platform to harvest user credentials by abusing its trusted mail infrastructure and delivering malicious content from legitimate domains. The campaign targeted Google Workspace–centric organisations with…
gbhackers.com -
Highly Popular NPM Packages Poisoned in New Supply Chain Attack
SecurityWeek reports that malicious actors poisoned 18 NPM packages maintained by Josh Junon (Qix) after he was phished into giving up his account, with the attack designed to intercept cryptocurrency transactions. The attackers used phishing emails from…
SecurityWeek -
KillSec Ransomware is Attacking Healthcare Institutions in Brazil
KillSec Ransomware has claimed responsibility for a cyberattack on MedicSolution, a healthcare software provider in Brazil, with threats to leak sensitive data unless negotiations begin promptly. According to threat intelligence reporting by Resecurity, the…
Security Affairs -
Red Sea Cable Cuts Cause Azure Outage and Global Traffic Disruptions
According to the International Cable Protection Committee (ICPC), a disruption in submarine cables near Jeddah, Saudi Arabia, has affected multiple Microsoft cloud services and caused significant network latency. The incident occurred on 6 September 2025 at…
SecurityOnline -
The Open Web Is in “Rapid Decline,” Google Admits in Court
The Open Web Is in “Rapid Decline,” Google Admits in Court reports that, as artificial intelligence tools increasingly harvest internet content to generate summaries and answers, the open web is rapidly declining. It notes that when users get answers…
SecurityOnline -
Watch Out for Salty2FA: New Phishing Kit Targeting US and EU Enterprises
According to ANY[.]RUN, Phishing-as-a-Service platforms continue to evolve and Salty2FA is a new entrant designed to bypass multiple two-factor authentication methods and slip past traditional defenses. The Salty2FA kit has been spotted in campaigns…
The Hacker News -
Microsoft Patch Tuesday security updates for September 2025 fixed two zero-day flaws
Microsoft Patch Tuesday for September 2025 fixed 80 vulnerabilities across Windows and components, Office, Edge, Azure, Hyper-V, SQL Server, Defender Firewall Service and Xbox. The updates include two publicly disclosed zero-day flaws, CVE-2025-55234 (CVSS…
Security Affairs -
ICS Patch Tuesday: Rockwell Automation Leads With 8 Security Advisories
ICS Patch Tuesday saw Rockwell Automation lead with eight new advisories, all of them high-severity and covering vulnerabilities in recent product releases. Rockwell fixed issues including a sensitive data exposure in FactoryTalk Analytics LogixAI, DoS and…
SecurityWeek -
Sophos Wireless Access Point Vulnerability Allows Attackers to Bypass Authentication
According to Sophos, a critical authentication bypass vulnerability has been identified in the AP6 Series Wireless Access Points, with exploitation possible by an attacker who can reach the device’s management interface. The flaw is tracked as CVE-2025-10159…
gbhackers.com -
GONEPOSTAL Malware Exploits Outlook for Stealthy Command-and-Control
GONEPOSTAL is described as a sophisticated espionage campaign that turns Microsoft Outlook into a covert command-and-control channel, representing a notable evolution in living-off-the-land techniques. According to Kroll, the operation uses a two-stage…
gbhackers.com -
Windows BitLocker Flaw Allows Privilege Escalation by Attackers
Microsoft has warned about two serious Windows BitLocker flaws that could let attackers escalate privileges on affected machines, tracked as CVE-2025-54911 and CVE-2025-54912, publicly disclosed on 9 September 2025. Both are described as use-after-free…
gbhackers.com -
DarkSamural APT Group Deploys LNK/PDF Malware to Steal Critical Information
DarkSamural, a newly identified subspecies of the OceanLotus APT, has launched a campaign targeting high-value organisations in Pakistan, using malicious LNK files masquerading as PDF documents and MSC containers powered by GrimResource technology to deliver…
gbhackers.comQUILTED TIGER -
Critical SAP NetWeaver Flaw Allows Attackers to Execute Arbitrary Code
A critical security vulnerability has been identified in SAP NetWeaver AS Java Deploy Service, allowing authenticated attackers to execute arbitrary code and potentially take full control of affected systems, according to Divya's report published on 10…
gbhackers.com -
GitHub Abused by Kimsuky Hackers Delivering Malware Through LNK Files
GBHackers reports that GitHub is being abused by the North Korea-backed APT group Kimsuky, which is described as exploiting GitHub repositories to deliver malware via weaponized LNK files. According to S2W’s Threat Intelligence Center, TALON, the campaign…
gbhackers.comKimsuky -
Gentlemen Ransomware Exploits Drivers and Group Policies to Breach Organizations
The Gentlemen ransomware group has emerged as a sophisticated threat actor, targeting manufacturing, construction, healthcare and insurance sectors across 17 countries, according to Trend Micro. Their campaign combines legitimate driver abuse, Group Policy…
gbhackers.com -
Workday Data Breach Exposed Customer Data and Case Details
Workday has disclosed a third-party security breach that exposed customer data via a compromised third‑party application. On 23 August 2025, Workday detected a critical vulnerability in Salesloft’s Drift application, which is integrated with Salesforce…
gbhackers.com -
Chrome Security Update Fixes Critical Remote Code Execution Flaw
Google has released an urgent security update for Chrome to fix two significant vulnerabilities, including a critical remote code execution flaw, with the stable channel updating Chrome to version 140.0.7339.127/.128 for Windows, 140.0.7339.132/.133 for Mac,…
gbhackers.com -
Voicemail Goldmine: A Data Exposure of 1.6M Audio Files Puts Gym Members at Risk
Cybersecurity researcher Jeremiah Fowler has disclosed a data exposure involving more than 1.6 million gym audio recordings, with personal details from internal calls, voicemails, and staff communications leaking across U.S. and Canadian brands. The…
SecurityOnline -
-
Sophos Fixes Critical Authentication Bypass (CVE-2025-10159) in AP6 Series Wireless Access Points
Sophos has released a fix for a critical authentication bypass vulnerability (CVE-2025-10159) affecting its AP6 Series Wireless Access Points, the flaw rated CVSS 9.8 could allow attackers with network access to the device’s management interface to gain full…
SecurityOnline -
Apple Extends Free Satellite Connectivity for iPhone 14 and 15 Users
According to Apple, following the unveiling of the iPhone 17 series, it will grant an additional year of free satellite connectivity to users of the iPhone 14 and iPhone 15. This marks the third extension of complimentary access since the feature debuted…
SecurityOnline -
Beyond Qualcomm and Broadcom: Apple’s In-House Chips Take Over iPhone Connectivity
According to Apple, the tech giant is gradually phasing out Qualcomm’s modems in favour of its in-house C1/C1X 5G chips while also introducing its own Wi‑Fi and Bluetooth silicon, already deployed in the iPhone 17 lineup. The custom N1 chip is designed to…
SecurityOnline -
NVIDIA’s Newest Acquisition: The AI Programming Startup That’s Set to Reshape Development
NVIDIA has acquired Solver, an AI programming startup founded in 2022, as part of its strategy to strengthen its integrated ecosystem for AI development, according to The Information. Solver, which originally operated as Laredo Labs in San Jose and focuses…
SecurityOnline -
iPhone 17 Pro: A Cinematic Leap with a Pro-Grade Camera System
The iPhone 17 Pro and iPhone 17 Pro Max were officially unveiled by Apple, with a design shift from titanium to a thermo-forged aluminium alloy unibody and reinforced Ceramic Shield 2 glass on both the front and back. According to Apple, the engineers…
SecurityOnline -
Apple Unveils iPhone Air: The Thinnest, Lightest, and Most Durable iPhone Ever
Apple has unveiled the iPhone Air, billed as the thinnest and lightest iPhone yet, with a thickness of 5.6mm and a 6.5-inch Super Retina XDR OLED display supporting ProMotion up to 120Hz and up to 3,000 nits peak brightness. The chassis is crafted from 80%…
SecurityOnline -
iPhone 17: A Pro-Level Experience for Everyone
The iPhone 17, unveiled as a continuation of the iPhone 16 in design, adds a host of upgrades powered by the new A19 processor. It features ProMotion display technology with refresh rates up to 120Hz on a 6.3-inch Super Retina XDR display, and an always-on…
SecurityOnline -
Apple Watch Series 11: A New Era of Health and Connectivity
According to Apple, the Apple Watch Series 11 marks a new era with a display twice as scratch-resistant as its predecessor, now featuring 5G connectivity across the United States, Europe, Japan, China, and India with expected Taiwan support as well. The…
SecurityOnline -
Apple’s New AirPods Pro 3: The Ultimate Upgrade for Sound and Health
At its autumn keynote, Apple unveiled the new AirPods Pro 3, touting enhanced active noise cancellation, real-time multilingual translation, and integrated heart-rate monitoring, with interchangeable ear tips expanded to five sizes to better fit more ears.…
SecurityOnline -
Southeast Asian Scam Centers Face More Financial Sanctions
Southeast Asian scam centres are under increasing pressure as the US Treasury’s Office of Foreign Assets Control sanctioned 19 entities operating in Burma and Cambodia on 8 September 2025, including a Burma-based scam hub run by the Karen National Army and…
Dark Reading -
Patch Tuesday: Microsoft Fixes 86 Flaws, Including 9 Critical and 2 Zero-Days (CVE-2025-55234 & CVE-2024-21907)
Microsoft’s September 2025 Patch Tuesday fixed 86 vulnerabilities across Windows, Office, SQL Server, Hyper-V, NTLM, TCP/IP and graphics components, including two zero-days and nine rated critical. In total, the updates address 41 elevation of privilege…
SecurityOnline -
Chrome 140 Released, Patches Critical (CVE-2025-10200) and High-Severity (CVE-2025-10201) Vulnerabilities
Google has issued a Stable channel update for Chrome on Windows, Mac and Linux, bringing the browser to versions 140.0.7339.127/.128 on Windows, 140.0.7339.132/.133 on Mac, and 140.0.7339.127 on Linux. The most severe flaw addressed is CVE-2025-10200, a…
SecurityOnline -
8,000 Strong: Harden-Runner's Growing Impact on CI/CD Security
StepSecurity’s Harden-Runner now protects more than 8,000 open-source repositories with EDR-style runtime monitoring for CI/CD pipelines, aiming to stop supply chain attacks and secure GitHub Actions. It monitors over 8 million jobs weekly, spanning…
StepSecurity -
Adobe Commerce Flaw CVE-2025-54236 Lets Hackers Take Over Customer Accounts
Adobe has warned of a critical flaw in its Commerce and Magento Open Source platforms, tracked as CVE-2025-54236 (aka SessionReaper), with a CVSS score of 9.1 and described as an improper input validation flaw that could let an attacker take over customer…
The Hacker News -
SAP Patches Critical NetWeaver (CVSS Up to 10.0) and Previously Exploited S/4HANA Flaws
SAP has issued security updates to address multiple flaws, including three critical vulnerabilities in NetWeaver that could allow code execution or arbitrary file uploads, and a high-severity S/4HANA issue. The patched flaws include CVE-2025-42944 (CVSS…
The Hacker News
