News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Sat 13 Sep 2025· 11 articles
-
Interview with Valéry Rieß-Marchive – Managing Leaks in Ransomware Negotiations
Valéry Rieß-Marchive discusses how organisations should handle crisis communications during cyberattacks, with a focus on the risks and impacts of leaked ransomware negotiations. He notes that an undisclosed cyberattack becoming public is a primary risk,…
DataBreaches -
UNC63953 articles this day · The Hacker News first
FBI warns of Salesforce attacks by UNC6040 and UNC6395 groups · FBI Flash Alert: Cyber Criminal Groups UNC6040 and UNC6395 Compromising Salesforce Instances for Data Theft and Extortion
3 outlets-
FBI warns of Salesforce attacks by UNC6040 and UNC6395 groups
According to FLASH alert, the FBI warns of data theft and extortion campaigns by two cybercriminal groups, UNC6040 and UNC6395, increasingly targeting Salesforce platforms. Since early 2025, UNC6040 has used vishing and social engineering to induce…
Security Affairs -
FBI Flash Alert: Cyber Criminal Groups UNC6040 and UNC6395 Compromising Salesforce Instances for Data Theft and Extortion
According to Federal Bureau of Investigation (FBI), the FBI has issued a Flash Alert detailing malicious activity by cyber criminal groups UNC6040 and UNC6395, described as responsible for a rising number of data theft and extortion intrusions. The alert,…
DataBreaches -
FBI Warns of UNC6040 and UNC6395 Targeting Salesforce Platforms in Data Theft Attacks
The FBI has issued a flash alert detailing IoCs linked to two cybercriminal groups, UNC6040 and UNC6395, which are conducting data theft and extortion campaigns. According to the FBI, both groups have recently targeted organisations’ Salesforce platforms via…
The Hacker News
-
-
Mustang Panda Uses SnakeDisk USB Worm and Toneshell Backdoor to Target Air-Gap Systems
According to IBM X-Force researchers, sophisticated new malware campaigns are being conducted by the China-aligned threat actor Hive0154, also known as Mustang Panda. The findings include an advanced Toneshell backdoor variant, dubbed Toneshell9, that evades…
gbhackers.comMUSTANG PANDA -
China’s Great Firewall suffers its biggest leak ever as 500GB of source code and docs spill online — censorship tool has been sold to three different countries
China’s Great Firewall suffered its biggest leak yet, with more than 500GB of internal documents, source code, work logs and internal communications from the system dumped online, including packaging repos and operational runbooks used to build and maintain…
DataBreaches -
AI Pentesting Tool ‘Villager’ Merges Kali Linux with DeepSeek AI for Automated Security Attacks
Security researchers at Straiker’s AI Research (STAR) team have uncovered Villager, an AI-native penetration testing framework developed by Chinese-based group Cyberspike, which has already accumulated over 10,000 downloads within two months of its release…
gbhackers.com -
HybridPetya ransomware bypasses UEFI Secure Boot echoing Petya/NotPetya
HybridPetya ransomware bypasses UEFI Secure Boot to infect EFI partitions, echoing the Petya/NotPetya attacks of 2016–2017, according to ESET. Researchers discovered the new malware on VirusTotal, and it exploits CVE-2024-7344 to bypass UEFI Secure Boot on…
Security Affairs -
A deep dive into Cloudflare’s September 12, 2025 dashboard and API outage
According to The Cloudflare Blog, there was an outage in Cloudflare’s Tenant Service API which led to a broad outage of many APIs and the Cloudflare Dashboard. The immediate trigger was a bug in the dashboard that caused repeated calls to the Tenant Service…
Cloudflare -
“Pompompurin’s” re-sentencing is scheduled for Tuesday. What will the judge do this time?
According to DataBreaches[.]Net, “Pompompurin” (Conor Brian Fitzpatrick) is set for re-sentencing on 16 September before Judge Brinkema, the same judge who originally sentenced him. He was arrested in March 2023 and charged with three counts including…
DataBreaches -
Meet ZynorRAT: The New Cross-Platform Malware Controlled via Telegram
The Sysdig Threat Research Team has identified ZynorRAT as a cross‑platform Remote Access Trojan written in Go, targeting both Linux and Windows, with its core C2 infrastructure built around Telegram bots. It is in early development, offering traditional RAT…
SecurityOnline
