News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Thu 11 Sep 2025· 86 articles
-
kkRAT Exploits Network Protocols to Exfiltrate Clipboard Data
kkRAT is described as a newly discovered malware family that blends Ghost RAT and Big Bad Wolf and is notable for a network communication protocol that compresses data with zlib before applying an XOR-based encryption layer. According to Zscaler ThreatLabz,…
gbhackers.com -
Kosovo man pleads guilty to running online criminal marketplace BlackDB
Kosovo citizen Liridon Masurica, 33, of Gjilan, known as @blackdb, pleaded guilty to running the online criminal marketplace BlackDB[.]cc. He was arrested on 12 December 2024 and extradited to the United States, with the FBI-led investigation supported by…
Security Affairs -
Angular SSR Flaw (CVE-2025-59052) Exposes User Data: What Developers Need to Know
The Angular team has issued a security advisory addressing a high-severity server-side rendering flaw that could allow attackers to access sensitive data from unrelated requests, tracked as CVE-2025-59052 with a CVSS score of 7.1. According to Angular, the…
SecurityOnline -
‘Astronaut-in-distress’ romance scammer steals money from elderly woman
A fraudster described as an “astronaut in distress” conned a Japanese octogenarian from Hokkaidō Island, contacting her on social media in July and claiming he was under attack in space. According to Hokkaidō Broadcasting, the scammer asked the woman to send…
Malwarebytes -
‘Astronaut-in-distress’ romance scammer steals money from elderly woman
A Japanese octogenarian from Hokkaido Island was scammed out of thousands of yen after being contacted by someone who described himself as a desperate astronaut in need of help. According to Hokkaidō Broadcasting, the fraudster reached the woman on social…
Malwarebytes -
Storm-15672 articles this day · SecurityOnline first
SonicWall SSL VPN Flaw and Misconfigurations Actively Exploited by Akira Ransomware Hackers · ACSC Warns of Active Exploitation of SonicWall SSL VPN Vulnerability (CVE-2024-40766)
2 outlets-
SonicWall SSL VPN Flaw and Misconfigurations Actively Exploited by Akira Ransomware Hackers
Threat actors linked to the Akira ransomware group have continued to target SonicWall devices for initial access, with cybersecurity firm Rapid7 noting a spike in intrusions involving SonicWall appliances over the past month, following renewed Akira activity…
The Hacker News -
ACSC Warns of Active Exploitation of SonicWall SSL VPN Vulnerability (CVE-2024-40766)
The Australian Cyber Security Centre (ACSC) has warned of active exploitation of CVE-2024-40766, a critical vulnerability in SonicWall SSL VPNs that has been linked to Akira ransomware intrusions against Australian organisations. According to the advisory,…
SecurityOnline
-
-
Remote CarPlay Hack Puts Drivers at Risk of Distraction and Surveillance
SecurityWeek reports that researchers have disclosed a remote CarPlay attack that could let attackers spy on drivers or distract them. According to AirBorne, vulnerabilities in Apple’s AirPlay/SDK could be exploited for remote code execution and other…
SecurityWeek -
FinalDraft Malware: The Stealthy Threat Using Microsoft Services
FinalDraft Malware is described as a cross‑platform threat, capable of infecting Windows and Linux systems, that hides in plain sight by exploiting Microsoft services to evade detection. The malware communicates with C2 servers via Microsoft Outlook’s Drafts…
SOCRadar -
PoisonSeed Threat Actor Strengthens Credential Theft Operations with New Domains
PoisonSeed threat actor is reported to have strengthened credential theft operations by registering a new wave of domains designed to harvest enterprise credentials. According to DomainTools Investigations, 21 newly registered domains exhibiting hallmarks of…
gbhackers.comPoisonSeed -
Attackers abuse ConnectWise ScreenConnect to drop AsyncRAT
Attackers are using a compromised ConnectWise ScreenConnect installation to deploy AsyncRAT, with LevelBlue researchers warning of a scripted loader campaign that abuses the remote desktop tool to drop the malware. According to LevelBlue, the operators…
Security Affairs -
ZynorRAT Exploits Windows and Linux Systems to Gain Remote Access
During a threat-hunting exercise, the Sysdig Threat Research Team (TRT) identified a new sample dubbed ZynorRAT, a Go-based Remote Access Trojan that targets both Linux and Windows systems. It first appeared on VirusTotal on 8 July 2025, and TRT notes it…
gbhackers.com -
Fake Madgicx Plus and SocialMetrics Extensions Are Hijacking Meta Business Accounts
Cybersecurity researchers have uncovered two concurrent campaigns delivering fake browser extensions via malvertising and counterfeit sites to hijack Meta Business accounts. The malvertising drive promotes fake Meta Verified extensions, notably SocialMetrics…
The Hacker News -
Cracking the Boardroom Code: Helping CISOs Speak the Language of Business
CISOs increasingly face a board that wants to understand how cyber risk affects revenue, governance and growth, not a wall of vulnerabilities, so the article argues for teaching security leaders to translate technical issues into business terms. It…
The Hacker News -
Community Notes: Meta Invites All Users to Test New Fact-Checking System
Meta has begun inviting all users to participate in testing its Community Notes fact-checking system, according to Meta. In the current trial, users who are not yet approved note authors can still express their judgment by liking or disliking notes, and…
SecurityOnline -
PlayStation Launches Family App for Mobile Parental Controls
PlayStation has launched the PlayStation Family App, a dedicated mobile solution that extends the console’s parental controls to smartphones and tablets, enabling parents to manage their children’s gaming habits in real time. The guided setup helps with…
SecurityOnline -
NVIDIA NVDebug Tool Vulnerability Lets Attackers Gain Elevated System Access
NVIDIA has disclosed a critical vulnerability in its NVDebug tool that could allow attackers to gain elevated system access, execute code, or tamper with data. The security bulletin, issued on 8 September 2025, describes three high-severity flaws in NVDebug…
gbhackers.com -
Wyden Urges FTC to Investigate Microsoft Over Weak RC4 Encryption Enabling Kerberoasting
Wyden has formally requested the Federal Trade Commission investigate Microsoft for cybersecurity negligence that allegedly enabled ransomware attacks against critical infrastructure, in a letter dated 10 September 2025. The inquiry focuses on Microsoft’s…
gbhackers.com -
1.5 Billion Packets Per Second DDoS Attack Detected with FastNetMon
FastNetMon today disclosed that it detected a record-scale distributed denial-of-service attack targeting the website of a leading DDoS scrubbing vendor in Western Europe. The assault reached 1.5 billion packets per second (1.5 Gpps), a massive UDP flood…
gbhackers.com -
Cursor AI Code Editor RCE Flaw Allows Malicious Code to Autorun on Machines
Cursor AI Code Editor has been found to be vulnerable to remote code execution when developers open code repositories, with malicious code potentially running automatically and without any warning prompt. The flaw relies on a misconfiguration where Cursor…
gbhackers.com -
1.5 billion packets per second DDoS attack detected with FastNetMon
According to CyberNewsWire, a record-scale distributed denial-of-service attack was detected by FastNetMon targeting the website of a leading DDoS scrubbing vendor in Western Europe. The attack reached 1.5 billion packets per second (1.5 Gpps), marking one…
SecurityOnline -
Jaguar Land Rover discloses a data breach after recent cyberattack
Jaguar Land Rover has disclosed a data breach following a cyberattack that, in early September, led to the shutdown of systems to mitigate the incident and disrupted production at the Solihull plant as well as retail operations. UK dealers reported…
Security Affairs -
Top 10 Best External Penetration Testing Companies in 2025
GBHackers’ 2025 ranking of the Top 10 Best External Penetration Testing Companies highlights IBM Security (X-Force Red), Rapid7, Trustwave, Coalfire, Synack, CrowdStrike, Secureworks, Offensive Security, Bishop Fox and NetSPI. The article emphasises that the…
gbhackers.com -
DDoS Mitigation Provider Hit by Massive 1.5 Billion Packets Per Second Attack
FastNetMon today announced it detected a record-scale distributed denial-of-service attack targeting the website of a leading DDoS scrubbing vendor in Western Europe. The attack peaked at 1.5 billion packets per second (1.5 Gpps), one of the largest…
gbhackers.com -
ChillyHell macOS Malware: Three Methods of Compromise and Persistence
Jamf Threat Labs recently uncovered a developer-signed macOS backdoor, dubbed ChillyHell, on VirusTotal that uses sophisticated endpoint profiling and persists via several mechanisms while remaining notarised for years. The threat is a modular C++ backdoor…
gbhackers.com -
Chrome Extension Scam Exposed: Hackers Stealing Meta Accounts
A campaign aimed at Meta advertisers using fake AI-powered ad optimisation tools has been uncovered, with cybercriminals distributing malicious Chrome extensions designed to harvest credentials and hijack business accounts. According to Cybereason Security…
gbhackers.com -
ACSC Warns of Actively Exploited SonicWall Access Control Vulnerability
According to the Australian Cyber Security Centre (ACSC), a critical SonicWall vulnerability is being actively exploited in the wild, impacting a wide range of SonicWall firewall devices. Tracked as CVE-2024-40766, the flaw affects SonicOS management access…
gbhackers.com -
Key Operators of LockerGoga, MegaCortex, and Nefilim Ransomware Gangs Arrested
According to the U.S. District Court for the Eastern District of New York, Volodymyr Viktorovich Tymoshchuk, a Ukrainian national known as deadforz, Boba, msfv and farnetwork, has been charged for his role in administering LockerGoga, MegaCortex and Nefilim…
gbhackers.com -
AsyncRAT Exploits ConnectWise ScreenConnect to Steal Credentials and Crypto
Cybersecurity researchers have detailed a campaign that abuses ConnectWise ScreenConnect, a legitimate remote monitoring and management tool, to deliver a fileless loader that drops AsyncRAT to steal credentials and cryptocurrency data. The infection chain…
The Hacker News -
Hackers Reap Minimal Gains from Massive npm Supply Chain Breach
On 8 September 2025, at approximately 9am EST, the npm ecosystem faced a severe supply chain attack. A threat actor leveraged social engineering to compromise the account of well-known npm developer Qix, subsequently publishing malicious releases for several…
gbhackers.com -
Dell PowerProtect Data Manager Flaw Allows System Compromise by Attackers
Dell has released a critical security update for its PowerProtect Data Manager (PPDM) platform to address multiple vulnerabilities that could allow attackers to compromise systems and execute arbitrary commands, with the advisory DSA-2025-326 naming the…
gbhackers.com -
Reflected XSS Flaw Enables Attackers to Evade Amazon CloudFront Protection Using Safari
A browser-specific reflected Cross-Site Scripting vulnerability was found on help-ads.target[.]com that could bypass Amazon CloudFront’s Web Application Firewall protections, but only when tested in the Safari browser. The bug bounty discovery showed that…
gbhackers.com -
A New Era for Developers: Microsoft Waives App Publishing Fees
Microsoft has announced that, beginning today, individual developers will no longer be charged any fees for publishing applications through the Microsoft Store, removing costs for registration, hosting, or digital signing. Developers may now submit a wide…
SecurityOnline -
Microsoft Copilot to Be Powered by Two AIs: OpenAI and Now Anthropic
According to The Information, Microsoft is preparing to announce in the coming weeks the integration of Anthropic’s Claude model into selected Office 365 Copilot features, marking a shift away from sole reliance on OpenAI’s technology stack and signalling…
SecurityOnline -
CyberVolk Ransomware’s Decryption Flaw Makes Data Recovery Impossible
The CyberVolk ransomware has been actively targeting public institutions and critical infrastructure since May 2024, according to AhnLab, which notes its geopolitical motivation and the resulting unrecoverable encryption design. The analysis describes a…
SecurityOnline -
High-Severity Flaws in Sunshine for Windows Allow Privilege Escalation
According to CERT Coordination Center (CERT/CC), two critical local security flaws affect Sunshine for Windows v2025.122.141614 (and likely earlier versions) that could lead to privilege escalation and arbitrary code execution. The flaws are CVE-2025-10198…
SecurityOnline -
Beyond Cobalt Strike: A New Open-Source Hacking Tool Is on the Rise
AdaptixC2 is an open-source post-exploitation and adversarial emulation framework that researchers say is being increasingly abused by threat actors, expanding beyond its original use for penetration testing. According to Palo Alto Networks’ Unit 42, it has…
SecurityOnline -
CVE-2025-8696: DoS Flaw in Stork UI Allows Unauthenticated Attackers to Crash Servers
The CVE-2025-8696 vulnerability in Stork UI, a tool for monitoring and managing ISC DHCP and BIND installations, has been described as a high-severity DoS risk that could be exploited by unauthenticated attackers to crash affected servers. The advisory notes…
SecurityOnline -
ChillyHell: A New macOS Backdoor Bypassed Apple Notarization for Years
ChillyHell is a new macOS backdoor from a modular malware family that bypassed Apple’s notarization for years, according to Jamf Threat Labs. The sample, which masquerades as a legitimate app bundle (applet[.]app) and is a Mach-O executable, was notarized by…
SecurityOnline -
KillSec Ransomware Strikes Brazilian Healthcare Provider, Exposing Patient Data
According to Resecurity, KillSec ransomware targeted MedicSolution, a healthcare software provider in Brazil, compromising the exposure of over 34 GB of data and more than 94,818 files containing sensitive patient information. The group has claimed…
SecurityOnline
