News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Mon 15 Sep 2025· 73 articles
-
Hackers steal millions of Gucci, Balenciaga, and Alexander McQueen customer records
Hackers stole the private data of millions of Gucci, Balenciaga and Alexander McQueen customers, including names, contacts, addresses and details of spending at luxury stores worldwide, according to Security Affairs. The parent group, Kering, confirmed the…
Security Affairs -
The Risks of Code Assistant LLMs: Harmful Content, Misuse and Deception
In a detailed public assessment, Unit 42 examines the risks posed by code assistant LLMs used as IDE plugins, warning that both users and threat actors can abuse features such as chat, auto‑completion and unit test generation to inject backdoors, leak data…
unit42.paloaltonetworks.com -
Update: Kering confirms Gucci and other brands hacked; claims no conversations with hackers?
DataBreaches[.]net reports that, after initial coverage on 11 September, it has seen samples and chat logs suggesting that ShinyHunters hacked Kering brands including Gucci, Balenciaga, Brioni and Alexander McQueen, with claims of more than 43 million Gucci…
DataBreaches -
Hackers claim access to law enforcement portals, but do they really have access?
Hackers claim access to law enforcement portals, but DataBreaches[.]net reports the claims centre on the CJIS instant background check service and Google’s Law Enforcement Request System portal (LERS), with screenshots shared by the group known as Scattered…
DataBreaches -
KillSec Ransomware Hits Brazilian Healthcare Software Provider
KillSec ransomware has hit MedicSolution, a Brazilian healthcare software provider, with researchers saying the attack breached a major element of the healthcare technology supply chain and stole sensitive patient data. The group claimed responsibility on 8…
Dark Reading -
FBI Warns of Threat Actors Hitting Salesforce Customers
According to the FBI's Internet Crime Complaint Center (IC3), two threat actors, UNC6040 (also known as ShinyHunters) and UNC6395, are targeting Salesforce customers to steal data and extort victims. Since October 2024 UNC6040 has carried out social…
Dark Reading -
Mustang Panda Deploys SnakeDisk USB Worm to Deliver Yokai Backdoor on Thailand IPs
According to IBM X-Force researchers Golo Mühr and Joshua Chung, the China-aligned threat actor Mustang Panda has been observed deploying an updated version of the TONESHELL backdoor alongside a previously undocumented USB worm called SnakeDisk. The…
The Hacker NewsMUSTANG PANDA -
Fairmont Federal Credit Union 2023 data breach impacted 187K people
Fairmont Federal Credit Union (FFCU) says a 2023 data breach exposed personal, financial and medical information for 187,038 members. The incident was detected in January 2024, with the investigation continuing until August 2025, and authorities noted that…
Security Affairs -
689,000 Affected by Insider Breach at FinWise Bank
According to the Maine Attorney General’s Office, 689,000 individuals were affected by an insider breach at FinWise Bank, with data linked to American First Finance (AFF). The incident involved a former FinWise employee accessing AFF data after their…
SecurityWeek -
Zero Trust Is 15 Years Old — Why Full Adoption Is Worth the Struggle
Zero Trust is 15 years old, having turned fifteen on 14 September 2025, and while it remains a leading cybersecurity principle, its uneven implementation leaves many organisations both stronger in some parts and dangerously exposed in others. The article…
SecurityWeek -
Integrating CrowdStrike Falcon Fusion SOAR with Cloudflare’s SASE platform
Cloudflare has announced a new integration between the Cloudflare One platform and CrowdStrike’s Falcon Fusion SOAR, part of an ongoing partnership with CrowdStrike. The out-of-the-box integration provides two pre-built connectors for Zero Trust Access and…
Cloudflare -
Silent Push Raises $10 Million for Threat Intelligence Platform
According to SecurityWeek, Virginia-based threat intelligence company Silent Push on Monday announced raising $10 million in Series B funding. The investment came from StepStone Group, Ten Eleven, and Knollwood Investment Advisory, and it will be used to…
SecurityWeek -
Building Resilient IT Infrastructure From the Start
Building Resilient IT Infrastructure From the Start argues that securing modern infrastructure requires embedding security across the whole organisation, not just in security teams. It notes that cloud complexity and hybrid environments have increased attack…
Dark Reading -
Sidewinder Hackers Weaponize Nepal Protests to Spread Cross-Platform Malware
Sidewinder, a well-known advanced persistent threat (APT) group, has adapted its tactics to exploit the Nepalese protests, mounting a coordinated campaign that targets mobile and Windows users with malware and credential phishing. The campaign sees phishing…
gbhackers.comRAZOR TIGER -
Terra Security Raises $30 Million for AI Penetration Testing Platform
Terra Security has announced a $30 million Series A funding round, bringing the total raised by the Tel Aviv-based startup to $38 million. The round was led by Felicis, with additional support from Dell Technology Capital and SVCI, and comes as Terra plans…
SecurityWeek -
Phishing Campaigns Exploit RMM Tools to Sustain Remote Access
Phishing campaigns are leveraging remote monitoring and management (RMM) tools—ITarian (formerly Comodo), PDQ Connect, SimpleHelp, and Atera—to gain and sustain remote access to compromised systems. By disguising malicious installers as legitimate updates to…
gbhackers.com -
Alphabet’s Verily covered up HIPAA violations, whistleblower says in lawsuit
A whistleblower alleges that Alphabet’s health-tech subsidiary Verily used the health data of more than 25,000 patients without authorisation and actively covered up those violations. The executive, Ryan Sloan, claims Verily fired him after he reported HIPAA…
DataBreaches -
Ex-WhatsApp cybersecurity executive says Meta endangered billions of users in new suit
According to The Guardian, a former top cybersecurity executive at WhatsApp filed a lawsuit alleging that Meta disregarded internal flaws in the app’s digital defenses and exposed billions of users. The complainant says the company systematically violated…
DataBreaches -
RCE Risk in Cursor AI Code Editor When Opening Folders
RCE Risk in Cursor AI Code Editor When Opening Folders highlights a silent autorun vulnerability in Cursor, stemming from the editor bypassing Visual Studio Code’s Workspace Trust protection. The flaw means that simply opening a repository in Cursor can…
SOCRadar -
Burger King Uses DMCA to Remove Blog Exposing Drive-Thru System Security Flaws
Burger King has invoked the Digital Millennium Copyright Act to force the removal of a security researcher’s blog post that disclosed serious vulnerabilities in its drive-thru “Assistant” system, with ethical hacker BobDaHacker’s report showing how attackers…
gbhackers.com -
6 Browser-Based Attacks Security Teams Need to Prepare For Right Now
Browser-based attacks have surged as criminals target users where they log in to business apps, with the browser now the common battleground for credential theft, session hijacking and data exfiltration, according to The Hacker News. The piece outlines six…
The Hacker News -
IBM QRadar SIEM Vulnerability Allows Unauthorized Actions by Attackers
A permissions issue in IBM QRadar SIEM could enable local privileged users to modify configuration files without proper authorisation. Tracked as CVE-2025-0164, the flaw stems from incorrect permission assignment for a critical resource, potentially…
gbhackers.com -
Pro-Russian Hackers Target Critical Industries Across the Globe
According to GBHackers, pro-Russian hacking groups have intensified campaigns against critical industries worldwide as Russia leverages cyber operations to offset sanctions and bolster war capabilities. The report highlights SectorJ149 (also known as…
gbhackers.com -
⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero-Days & More
The Hacker News’ weekly recap highlights a shift toward targeting the complex ties that bind organisations, with bootkits and AI-powered attacks taking centre stage alongside supply-chain breaches and zero-days. A key threat noted is a HybridPetya ransomware…
The Hacker News -
FBI Shares IoCs for Recent Salesforce Intrusion Campaigns
The FBI has shared IoCs for two Salesforce-targeting intrusion campaigns, tracked as UNC6040 and UNC6395, which involve data theft and extortion from Salesforce customers. The first campaign uses vishing to persuade employees to grant access or share…
SecurityWeekUNC6395 -
Red AI Range: Advanced AI Tool for Identifying and Mitigating Security Flaws
Red AI Range (RAR) is a turnkey platform for AI red teaming and vulnerability assessment, enabling security professionals to simulate realistic attack scenarios, uncover weaknesses, and deploy fixes all within a controlled, containerised environment. By…
gbhackers.com -
Google Launched Behind-the-Scenes Campaign Against California Privacy Legislation; It Passed Anyway
According to Associated Press, in April a Rhode Island resident received a plea from Google to help defeat California’s AB 566, a measure that would require browsers to offer an automatic way for users to tell websites not to share their personal information…
SecurityWeek -
Another Reprieve for TikTok: A Fourth Deadline Extension Is Expected
TikTok’s fate in the United States remains a political and legal football, with a fourth extension to the sell-or-ban deadline expected, according to Reuters. The original deadline, set to expire on September 17, has repeatedly been pushed back as Washington…
SecurityOnline -
OpenAI’s New Grove Incubator Is Building the Next Generation of AI Startups
OpenAI has unveiled its internal incubation initiative, OpenAI Grove, which, unlike traditional startup accelerators, aims to spark ideas and build networks with founders before their concepts are fully formed. Grove emphasises the early ideation stage,…
SecurityOnline -
Qualcomm Unveils the Snapdragon 8 Elite Gen 5, Launching First with Xiaomi
According to Weibo, Qualcomm has officially confirmed that its upcoming flagship computing platform will bear the name Snapdragon 8 Elite Gen 5, returning to the traditional “Snapdragon 8 + generation number” structure with an Elite designation. The company…
SecurityOnline -
A New Era for AI: Microsoft Unveils an Optical Computer That’s 100x More Efficient
Microsoft Research’s Cambridge team has unveiled the Analog Optical Computer (AOC), a light-based system assembled from off-the-shelf components such as smartphone camera sensors, Micro LEDs, and lenses, which demonstrated speeds and energy efficiency…
SecurityOnline -
LIC India, Bouygues, IMSS Data for Sale; Paris Phishing Toolkit Unveiled
On 15 September 2025, SOCRadar’s Dark Web Team reported new underground activity involving data for sale and a newly introduced phishing toolkit. The report highlights alleged databases of LIC India, Bouygues Telecom, and IMSS as being advertised for sale,…
SOCRadar -
Hackers using generative AI “ChatGPT” to evade anti-virus defenses
According to GBHackers, hackers are using generative AI, specifically ChatGPT, to create deepfake IDs and accompany spear-phishing lures that evade anti-virus scanning. In July 2025, the Genians Security Center (GSC) identified a campaign attributed to North…
gbhackers.comKimsuky -
Shiny tools, shallow checks: how the AI hype opens the door to malicious MCP servers
Shiny tools, shallow checks: how the AI hype opens the door to malicious MCP servers examines how the Model Context Protocol (MCP)—a framework for connecting AI assistants to external data sources and tools—can be weaponised as a supply-chain foothold. The…
securelist.com -
West Virginia Credit Union Notifying 187,000 People Impacted by 2023 Data Breach
According to SecurityWeek, Fairmont Federal Credit Union is notifying over 187,000 individuals that their personal and financial information was stolen in a data breach dating back to 2023. The incident involved files containing names, dates of birth, Social…
SecurityWeek -
9/15/25, 9:14 AM
SEO poisoning is a tactic used to push deceptive websites to the top of search results, and Darktrace identifies a campaign in June 2025 that delivered a variant of the Oyster backdoor through trojanised PuTTY downloads. The act of typing in typosquatted…
darktrace.com -
BlackNevas Ransomware Encrypts Files, Exfiltrates Corporate Data
BlackNevas is described as a ransomware operation with a dual-extortion model that encrypts files and steals sensitive data, reportedly focusing 50% of its activity in the Asia-Pacific region. The group’s Asia-Pacific targets include Japan, Thailand, and…
gbhackers.com -
-
LangChainGo Vulnerability Allows Malicious Prompt Injection to Access Sensitive Data
A recently disclosed flaw in LangChainGo, the Go port of the LangChain framework for large language models, allows attackers to read arbitrary files on a server by injecting malicious prompt templates. Tracked as CVE-2025-9556, the vulnerability stems from…
gbhackers.com -
FBI Releases IOCs on Cyber Threats Exploiting Salesforce for Data Theft
The FBI has released a detailed flash advisory disclosing indicators of compromise (IOCs) and tactics used by two cybercrime groups—UNC6040 and UNC6395—to breach Salesforce customer environments and siphon sensitive data. According to the bulletin,…
gbhackers.com
