News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Thu 11 Sep 2025· 86 articles
-
Exclusive: High-end fashion retailers Gucci, Balenciaga, Brion, and Alexander McQueen hit by Salesforce attacks
Exclusive: High‑end fashion retailers Gucci, Balenciaga, Brioni and Alexander McQueen were targeted in Salesforce data‑extortion attacks, with DataBreaches[.]Net noting two breaches affecting more than 50 million records in total. According to ShinyHunters,…
DataBreaches -
Top 10 Best Mobile Application Penetration Testing Services in 2025
The piece surveys the top 10 mobile application penetration testing services in 2025, emphasising a blend of automated platforms and expert-led manual testing to uncover vulnerabilities in iOS and Android apps, APIs, and third‑party libraries. It highlights…
gbhackers.com -
“Omni” wins a round in his extradition case
Diogo Santos Coelho, also known as “Omnipotent” of RaidForums, was arrested in January 2022 in the U.K. and has spent more than three years awaiting a decision on extradition from the U.S. and Portugal. Today, the High Court of Justice in London quashed a…
DataBreaches -
Meta ignored child sex abuse in VR, say whistleblowers
Two former Meta employees testified at a Senate hearing this week, accusing the company of downplaying child abuse dangers in its VR environment. The whistleblowers say they were instructed to limit how data on harm was collected, with internal work groups…
Malwarebytes -
Vyro AI Leak Reveals Poor Cyber Hygiene
Vyro AI has inadvertently leaked 116GB of sensitive user data from three products—ImagineArt, Chatly and Chatbotx—according to researchers at Cybernews who uncovered the breach. The data included AI prompts, bearer authentication tokens and user agents, with…
Dark Reading -
'Gentlemen' Ransomware Abuses Vulnerable Driver to Kill Security Gear
The Gentlemen ransomware is seen weaponising a legitimate vulnerable driver, ThrottleStop[.]sys, to kill antivirus and other security products such as EDR, researchers say. In a BYOVD (bring-your-own-vulnerable-driver) attack, threat actors use the driver's…
Dark Reading -
Storm-15672 articles this day · SecurityWeek first
Akira Ransomware exploits year-old SonicWall flaw with multiple vectors · Akira Ransomware Attacks Fuel Uptick in Exploitation of SonicWall Flaw
2 outlets-
Akira Ransomware exploits year-old SonicWall flaw with multiple vectors
Researchers warn that the Akira ransomware group is exploiting a year-old SonicWall firewall flaw, likely using three attack vectors for initial access, according to Rapid7. The vulnerability, tracked as CVE-2024-40766, carries a CVSS score of 9.3 and…
Security Affairs -
Akira Ransomware Attacks Fuel Uptick in Exploitation of SonicWall Flaw
The Akira ransomware group is exploiting a year-old SonicWall flaw, CVE-2024-40766, in a fresh round of attacks that Rapid7 warns may combine three attack vectors for initial access. The vulnerability, rated CVSS 9.3, is described as an improper access…
SecurityWeek
-
-
Apple CarPlay RCE Exploit Left Unaddressed in Most Cars
Apple CarPlay remains vulnerable to a zero-click RCE (CVE-2025-24132) despite a fix being available since April, with patches largely unimplemented by vendors and no car manufacturers yet applying them, nearly half a year on. According to The Bold Bureau via…
Dark Reading -
Top 10 Best Cloud Penetration Testing Companies in 2025
GBHackers’ Top 10 touts 2025 as a year when cloud penetration testing becomes a strategic necessity, highlighting firms that combine human expertise with scalable PTaaS platforms. The piece enumerates Synack, Bishop Fox, Offensive Security, CrowdStrike,…
gbhackers.com -
AI-Enhanced Malware Sports Super-Stealthy Tactics
According to Trend Micro, a threat actor is using legit-looking AI tools and software to sneak malware for future attacks on organisations worldwide, in a campaign tracked as "EvilAI" that has already affected hundreds of victims across manufacturing,…
Dark Reading -
Bulletproof Host Stark Industries Evades EU Sanctions
In May 2025, the European Union sanctioned Moldova-based PQ Hosting and its owners Yuri and Ivan Neculiti, linking them to Stark Industries Solutions Ltd, a bulletproof hosting provider long associated with Kremlin-linked activity. A new report from Recorded…
Krebs on Security -
Top 10 Best Penetration Testing as a Service (PTaaS) Companies in 2025
PTaaS has become a preferred approach in 2025, combining human-led penetration testing with automated platforms to deliver on-demand testing, real-time collaboration, and a centralised findings dashboard, as highlighted by gbhackers. The list of notable…
gbhackers.com -
Kivimäki walks free during appeal over Vastaamo data breach
Kivimäki walks free during appeal over Vastaamo data breach, a report dated 11 September 2025, notes that Aleksanteri Kivimäki, convicted of thousands of cybercrimes linked to the Vastaamo data breach, has been released from custody by the Helsinki Court of…
DataBreaches -
Vidar Infostealer Back with a Vengeance
The Vidar infostealer has returned with a vengeance, evolving with a suite of new obfuscation techniques and covert data exfiltration methods, according to Aryaka Threat Research Lab. Researchers say the latest campaign uses encrypted command-and-control…
Dark Reading -
Google Pixel 10 Adds C2PA Support to Verify AI-Generated Media Authenticity
On 11 September 2025, Google announced that its new Pixel 10 phones support the Coalition for Content Provenance and Authenticity (C2PA) standard out of the box to verify the origin and history of digital content. To this end, C2PA’s Content Credentials have…
The Hacker News -
Webinar Today: Breaking AI – Inside the Art of LLM Pen Testing
SecurityWeek is running a live webinar titled Webinar Today: Breaking AI – Inside the Art of LLM Pen Testing, which promises a new model for AI pen testing grounded in social engineering, behavioural manipulation and therapeutic dialogue. The session, led…
SecurityWeek -
Senator Wyden Urges FTC to Probe Microsoft for Ransomware-Linked Cybersecurity Negligence
U.S. Senator Ron Wyden has urged the Federal Trade Commission to probe Microsoft for what he calls “gross cybersecurity negligence” that enabled ransomware attacks on U.S. critical infrastructure, including healthcare networks, in a four-page letter to FTC…
The Hacker News -
Cisco Patches High-Severity IOS XR Vulnerabilities
Cisco on Wednesday released patches for three vulnerabilities in IOS XR software, as part of its September 2025 security advisory bundled publication. The flaws are tracked as CVE-2025-20248 (CVSS 6), CVE-2025-20340 (CVSS 7.4) and CVE-2025-20159 (CVSS 5.3).…
SecurityWeek -
Google fixes critical Chrome flaw, researcher earns $43K
Google has fixed a critical use-after-free vulnerability in its Chrome browser that could potentially lead to code execution, tracked as CVE-2025-10200, with a Chrome update addressing this issue alongside another flaw, CVE-2025-10201. The update, released…
Security Affairs -
UK Train Operator LNER Warns Customers of Data Breach
According to SecurityWeek, British train operator LNER has disclosed a data breach affecting customer information after hackers gained access to files held by an unnamed third-party supplier. The compromised data includes customer contact details and some…
SecurityWeek -
Threat Actors Leveraging Open-Source AdaptixC2 in Real-world Attacks
In early May 2025, Unit 42 researchers observed multiple real-world deployments of AdaptixC2, an open-source post-exploitation and adversarial-emulation framework designed for red team operations, being used to infect enterprise systems. AdaptixC2 is modular…
gbhackers.com -
The US is now the largest investor in commercial spyware
The United States has emerged as the largest investor in commercial spyware, a global industry that has enabled covert surveillance of journalists, human rights defenders, politicians and diplomats, according to a new Atlantic Council report. In 2024, 20 new…
Ars Technica -
Critical Chrome Vulnerability Earns Researcher $43,000
SecurityWeek reports that Google patched a critical use-after-free vulnerability in Chrome, which earned a researcher $43,000 in a bug bounty. The flaw, tracked as CVE-2025-10200 and described as a use-after-free issue in the browser’s ServiceWorker…
SecurityWeek -
Angular SSR Vulnerability Allows Attackers to Access Sensitive Data
A high vulnerability in Angular’s server-side rendering (SSR) feature can lead to sensitive data exposure when multiple requests are handled concurrently, tracked as CVE-2025-59052. The flaw stems from a global race condition in the platform injector, which…
gbhackers.com -
When AI chatbots leak and how it happens
The Malwarebytes piece reports on a Cybernews article highlighting that Vyro AI’s ImagineArt app has over 10 million downloads on Google Play, with Vyro AI also marketing Chatly (over 100,000 downloads) and Chatbotx (a web-based chatbot with about 50,000…
Malwarebytes -
Massive L7 DDoS Botnet Exploits 5.76M Hijacked Devices for Record Attacks
Qrator Labs has revealed that a sprawling Layer 7 DDoS botnet has swollen to 5.76 million compromised devices, unleashing unprecedented traffic against critical online services. Monitored since late March, the botnet’s first assault on March 26 saw…
gbhackers.com -
Fake Bureau Motor Vehicles texts are after your personal and banking details
Malwarebytes reports that scammers are sending texts claiming to be from the Bureau of Motor Vehicles, insisting you have outstanding traffic tickets. The post, dated 11 September 2025 and authored by Pieter Arntz, includes an example message that references…
Malwarebytes -
CoreDNS Vulnerability Allows Attackers to Poison DNS Cache and Block Updates
CoreDNS has a vulnerability in its etcd plugin (CVE-2025-58063) that lets attackers pin DNS records in caches for years by miscasting a 64-bit lease ID as a 32-bit TTL. The flaw arises in the TTL() function of plugin/etcd/etcd[.]go and can cause extremely…
gbhackers.com -
UAE’s K2 Think AI Jailbroken Through Its Own Transparency Features
Security researchers have shown that UAE’s K2 Think AI can be jailbroken by exploiting its own transparency features. The article explains that Adversa exploited the model’s explainability controls to bypass guardrails, turning transparency into a potential…
SecurityWeek -
Kenyan Filmmakers Targeted with FlexiSPY Spyware Tracking Messages and Social Media
The investigation reveals that commercially available FlexiSPY spyware was clandestinely installed on devices belonging to Kenyan filmmakers while they were in police custody, prompting renewed concerns over press freedom and government overreach. Forensic…
gbhackers.com -
100,000 Impacted by Cornwell Quality Tools Data Breach
American mobile tools manufacturer Cornwell Quality Tools says a data breach discovered late last year affected more than 100,000 people. According to notification letters, the company found unusual activity on 20 December 2024, and an investigation showed…
SecurityWeek -
Attackers Abuse Kubernetes DNS to Extract Git Credentials from ArgoCD
A newly described attack targets ArgoCD and Kubernetes by abusing Kubernetes DNS to steal Git credentials, potentially giving attackers access to private code repositories. The method relies on CoreDNS within the kube-system namespace; attackers create a…
gbhackers.com -
Russian APT Attacks Kazakhstan's Largest Oil Company
A Russia-linked threat actor has attacked Kazakhstan’s oil and gas sector, with researchers from Seqrite Labs naming the group “Noisy Bear.” Noisy Bear reportedly compromised a Kazakhstan-based KazMunayGas (KMG) finance department employee’s email and sent…
Dark Reading -
EggStreme Malware Emerges With Fileless Techniques and DLL Sideloading Payloads
A Chinese APT group compromised a Philippine military company using a new, fileless malware framework dubbed EggStreme, according to GBHackers. The campaign unfolds through a multi-stage toolset that injects code into memory and uses DLL sideloading to run…
gbhackers.com -
Cyber Attack Exposes LNER Train Passengers’ Personal Data
London North Eastern Railway (LNER) has confirmed an unauthorized breach at one of its third-party suppliers exposed the contact details and travel histories of some passengers. No banking or password data were involved, and passwords and login credentials…
gbhackers.com -
Senator Urges FTC Probe of Microsoft Over Security Failures
Senator Ron Wyden has urged the Federal Trade Commission to investigate Microsoft’s cybersecurity practices, arguing the company’s security lapses have caused real harm to critical infrastructure and public safety. In his letter to FTC Chairman Andrew…
SecurityWeek -
AI Emerges as the Hope—and Risk—for Overloaded SOCs
With security teams overwhelmed by alerts, the SecurityWeek piece cites a Prophet Security analysis of 282 security leaders from companies with more than 1,000 employees, primarily in the United States, showing SMEs receive around 500 alerts a day and larger…
SecurityWeek -
Palo Alto Networks User-ID Agent Flaw Leaks Passwords in Cleartext
A newly disclosed vulnerability in the Palo Alto Networks User-ID Credential Agent on Windows systems allows service account passwords to be exposed in cleartext under certain non-default configurations. Tracked as CVE-2025-4235, the flaw carries a CVSS base…
gbhackers.com -
Email Security Startup AegisAI Launches With $13 Million in Funding
AegisAI, an AI-native email security startup, launched with $13 million in seed funding from Accel and Foundation Capital. Founded by Cy Khormaee and Ryan Luo, former Google Safe Browsing and reCAPTCHA leaders, the company aims to prevent email attacks such…
SecurityWeek
