News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Fri 12 Sep 2025· 61 articles
-
VirtualBox 7.2.2 Update Released with Fix for Guest GUI Crashes
Oracle has released VirtualBox 7.2.2, a maintenance update that addresses multiple GUI crashes and stability issues across Windows, Linux and macOS platforms, according to VirtualBox. Released on 10 September 2025, the update aims to improve reliability and…
gbhackers.com -
Daikin Security Gateway Vulnerability Allows Unauthorized System Access
Daikin’s Security Gateway has a critical authentication bypass vulnerability tracked as CVE-2025-10127, discovered by security researchers and affecting Security Gateway systems running App version 100 and Frm version 214. The flaw stems from a weak password…
gbhackers.com -
New VMScape Spectre-BTI Attack Targets Isolation Flaws in AMD and Intel CPUs
Cybersecurity researchers at ETH Zurich have disclosed a critical new Spectre-based attack named VMSCAPE that exploits incomplete branch predictor isolation in virtualized cloud environments, tracked as CVE-2025-40300. The attack targets the KVM/QEMU…
gbhackers.com -
Microsoft Teams Launches Automatic Alerts for Malicious Links
Microsoft Teams is rolling out automatic alerts for malicious links, a feature built to boost security in workplace chats. The system operates as part of Microsoft Defender for Office 365, according to Microsoft Defender for Office 365, and uses advanced…
gbhackers.com -
Cornwell Quality Tools Suffers Data Breach, 100,000 User Records Exposed
Cornwell Quality Tools has confirmed a significant data breach affecting 103,782 individuals, with unauthorized attackers gaining access to the company’s computer network on 12 December 2024. The intrusion exposed a range of sensitive data, including names,…
gbhackers.com -
Cursor AI Code Editor Flaw Enables Silent Code Execution via Malicious Repositories
The Hacker News reports a disclosed security weakness in Cursor, an AI-powered code editor, that could trigger silent code execution when a maliciously crafted repository is opened. The flaw arises because Workspace Trust is disabled by default, allowing VS…
The Hacker News -
OpenAI and Microsoft Solidify Partnership in New Restructuring Deal
On 12 September 2025, OpenAI announced the completion of a new corporate restructuring in which its nonprofit parent will retain governing authority, and OpenAI and Microsoft will each hold about 30% equity, establishing a parity between the two partners.…
SecurityOnline -
The End of an Era: Microsoft Is Finally Killing VBScript
In May 2024, Microsoft announced a plan to gradually phase out VBScript, the dynamic scripting language it originally developed in 1996, with support for its use having persisted even after active development was declared to have ceased in 2008. Microsoft…
SecurityOnline -
Firefox Finally Adds MKV Video Support After an 8-Year Wait
Firefox has finally moved to support MKV video files in its Nightly builds, following more than eight years of requests. According to the article, initial playback within MKV containers is limited to AVC/H.264 and AAC due to codec constraints, with support…
SecurityOnline -
Apple Issues New Spyware Alerts for French Officials and Journalists
Apple has issued a new round of spyware attack alerts to certain users in France, with the identified targets including journalists, lawyers, activists, politicians, senior officials, and members of the country’s Strategic Sectors Committee. According to…
SecurityOnline -
FTC Launches Investigation into AI Chatbots and Their Effect on Kids
According to the U.S. Federal Trade Commission (FTC), a formal investigation into artificial intelligence chatbots designed to function as digital companions has been announced, with the objective of determining how AI companies evaluate, test, and monitor…
SecurityOnline -
CVE-2025-10127 (CVSS 9.8): Critical Daikin Flaw Could Give Hackers Full System Access
CVE-2025-10127 (CVSS 9.8) is a critical flaw in Daikin Security Gateway devices that could allow attackers to bypass authentication and gain full system access, according to CISA. The advisory notes an authorization bypass through a user‑controlled key…
SecurityOnline -
CVE-2025-58754: Axios Vulnerability Puts Node.js Processes at Risk of DoS Attacks
CVE-2025-58754 has been disclosed for Axios, a popular promise-based HTTP client used in Node[.]js and browsers, with a CVSS score of 7.5. According to the advisory, when Axios runs on Node[.]js and is given a data: URL, it does not perform HTTP and instead…
SecurityOnline -
CISA Urges Immediate Patching: Critical Dassault Systèmes Flaw (CVE-2025-5086) Actively Exploited
The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw in Dassault Systèmes DELMIA Apriso to its Known Exploited Vulnerabilities (KEV) Catalog, following confirmed evidence of active exploitation in the wild. Tracked as…
SecurityOnline -
Unveiling VoidProxy: The Phishing-as-a-Service That Bypasses MFA
According to Okta Threat Intelligence, VoidProxy is a previously unreported Phishing-as-a-Service platform that represents a serious threat to cloud identity security, capable of capturing credentials, MFA codes and session tokens in real time via…
SecurityOnline -
Going Dark: ShinyHunters/ScatteredSpider/LAPSUS$ Say Goodbye
On September 8, the “scattered LAPSUS$ hunters 4.0” Telegram channel posted a message criticising law enforcement and claiming arrests had been made in France, with the arrested person described as missing for hours and the post noting that authorities would…
DataBreachesScattered Spider -
PyInstaller Flaw : Are Your Python Apps Vulnerable to Hijacking?
The PyInstaller project has released fixes for a local privilege escalation vulnerability affecting applications packaged with versions before 6.0.0, tracked as CVE-2025-59042 with a CVSS score of 7.0. The flaw could allow an unprivileged attacker to trigger…
SecurityOnline -
EggStreme: New Fileless Malware from a Chinese APT Targets Philippine Military
EggStreme is described by Bitdefender Threat researchers as a modular, multi‑stage fileless malware framework used by a Chinese APT to compromise a Philippine military company. The campaign was first detected in early 2024, and the framework operates by…
SecurityOnline -
BlackNevas Ransomware: A Persistent Global Threat With Impossible-to-Decrypt Payloads
According to AhnLab, BlackNevas is a ransomware group that has been steadily launching attacks across industries and regions since late 2024, with operations focused on the Asia-Pacific region but extending to Europe and North America. The group’s targets…
SecurityOnline -
ToneShell Backdoor Evolves With Anti-Analysis Tricks, Continues Targeting Myanmar
Intezer researchers have released a technical analysis of a new ToneShell variant, a lightweight backdoor tied to the China-nexus group Mustang Panda, which is now showing enhanced anti-analysis capabilities while continuing to target Myanmar. According to…
SecurityOnlineMUSTANG PANDA -
kkRAT: A New Malware Blends Crypto Hijacking with Legitimate RMM Tools
Zscaler ThreatLabz has identified kkRAT as a new malware family that blends crypto hijacking with the deployment of legitimate remote‑monitoring and management tools, active since early May 2025 and targeting Chinese‑speaking users alongside other RATs such…
SecurityOnline
