News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Mon 15 Sep 2025· 73 articles
-
Samsung Patches Zero-Day Exploited Against Android Users
Samsung’s September 2025 security updates for Android devices include a patch for a vulnerability that has been exploited in the wild. The exploited bug, tracked as CVE-2025-21043 (CVSS score 8.8), is described as an out-of-bounds write issue in the…
SecurityWeek -
Top 10 Best Ransomware Protection Companies in 2025
GBHackers’ roundup for 2025 lists Norton 360, Bitdefender, TotalAV, McAfee, Sophos, SentinelOne, Malwarebytes, Palo Alto Networks Cortex XDR, CrowdStrike Falcon, and ESET as the Top 10 ransomware protection options. The piece notes Norton 360’s all‑in‑one…
gbhackers.com -
Samsung Zero-Day Exploit CVE-2025-21043 Patched After Active Attacks on Android Devices
Samsung has released security updates to patch a critical zero-day vulnerability actively exploited against Android devices, tracked as CVE-2025-21043 with a CVSS score of 8.8, enabling remote code execution when processing malicious images. According to…
SecurityOnline -
AppSuite-PDF, PDF Editor Operators Exploited 26 Code-Signing Certificates to Fake Legitimacy
Analysis by GBHackers News, in collaboration with CertCentral[.]org, identifies that AppSuite-PDF and the PDF Editor campaigns abused at least 26 distinct code-signing certificates issued to 24 companies in places such as Panama, Malaysia, the United States,…
gbhackers.com -
AI-Powered Villager Pen Testing Tool Hits 11,000 PyPI Downloads Amid Abuse Concerns
AI-powered Villager, a penetration testing tool linked to a China-based company, has attracted nearly 11,000 downloads on PyPI, raising concerns it could be repurposed by cybercriminals for malicious use. The framework, dubbed Villager, is assessed to be the…
The Hacker News -
A week in security (September 8 – September 14)
A week in security (September 8–September 14) was posted on 15 September 2025 by Malwarebytes Labs, summarising recent cybersecurity coverage. The page highlights several stand‑out stories, including Meta workers’ whistleblowers alleging the company…
Malwarebytes -
Microsoft Warns Windows 11 23H2 Support Ending in 60 Days
Microsoft has issued an urgent reminder that Windows 11 22H2 will reach end of support in 60 days, with October 14, 2025 the deadline when critical security updates will cease for Enterprise, Education, and IoT Enterprise editions. According to Microsoft,…
gbhackers.com -
DarkCloud Stealer Targets Financial Firms via Weaponized RAR Files
DarkCloud Stealer is described as targeting financial institutions, with August 2025 marking a dramatic surge in such attacks and a wave of phishing emails containing malicious RAR archives designed to prey on Windows users. According to CyberProof, the…
gbhackers.com -
HiddenGh0st, Winos and kkRAT Exploit SEO, GitHub Pages in Chinese Malware Attacks
Chinese-speaking users are the target of an SEO poisoning campaign that uses fake software sites and Google search manipulation to deliver malware, according to Fortinet FortiGuard Labs researcher Pei Han Liao. The activity, discovered in August 2025, leads…
The Hacker News -
Over 500GB of Sensitive Great Firewall of China Data Leaked Online
A massive data breach has exposed the inner workings of China’s internet censorship system, with over 500GB of sensitive documents from the Great Firewall of China (GFW) leaked online. The breach, which occurred on 11 September 2025, represents the largest…
gbhackers.com -
Yurei Ransomware Uses PowerShell to Deploy ChaCha20 File Encryption
Yurei Ransomware, first observed on 5 September 2025, is a Go-based operation identified by CPR as using ChaCha20 encryption and PowerShell commands to compromise victim systems. According to Check Point Research (CPR), the group operates on a…
gbhackers.com -
FlowiseAI Password Reset Token Vulnerability Enables Account Takeover
A critical vulnerability in FlowiseAI has been disclosed that enables attackers to takeover user accounts with minimal effort. The flaw, tracked as CVE-2025-58434, affects FlowiseAI’s npm package flowise on both cloud-hosted and self-hosted deployments. It…
gbhackers.com -
Top 10 Best Web Application Firewall (WAF) Solutions In 2025
In 2025, the article highlights a Top 10 of Web Application Firewall (WAF) solutions, with Wallarm, F5 BIG-IP Advanced, Barracuda, AppTrana, AWS, Microsoft Azure, Akamai, Fortinet FortiWeb, Cloudflare and Imperva leading the field. It emphasises that modern…
gbhackers.com -
UK ICO finds students behind majority of school data breaches
According to the UK ICO, students were responsible for the majority of data breaches affecting schools, with an analysis of 215 insider breach reports from January 2022 to August 2024 showing they caused 57% of all cases and 97% of breaches connected to…
Security Affairs -
INC ransom group claimed the breach of Panama’s Ministry of Economy and Finance
INC ransom group claimed the breach of Panama’s Ministry of Economy and Finance, with the group saying they have access to over 1.5 TB of data including internal mail, confidential data and budgets. Panama’s Ministry of Economy and Finance (MEF) disclosed…
Security Affairs -
VoidProxy PhaaS Targets Microsoft 365 and Google Accounts in New Campaign
VoidProxy, a phishing-as-a-service (PhaaS) operation, has emerged targeting Microsoft 365 and Google accounts, according to Okta. The campaign is described as using advanced adversary-in-the-middle techniques to bypass multi-factor authentication and steal…
gbhackers.com -
Linux CUPS Flaw Allows Remote Denial of Service and Authentication Bypass
Two critical security vulnerabilities have been discovered in the Common Unix Printing System (CUPS), a widely used printing subsystem for Unix-like operating systems, exposing Linux machines to remote denial-of-service attacks and authentication bypass. The…
gbhackers.com -
Windows 11’s New “Speed Test” Feature: A Gimmick or a Genuine Upgrade?
In the Windows 11 Insider Preview, Microsoft has introduced a more convenient network speed testing feature that sits in the system tray beside the network icon. Users can launch the test by right-clicking the network symbol, or from the Wi‑Fi icon’s…
SecurityOnline -
PoC Available: FlowiseAI Flaw (CVE-2025-58434) Allows Full Account Takeover (CVSS 9.8)
FlowiseAI’s open‑source platform has a critical flaw, CVE‑2025‑58434, rated CVSS 9.8, that allows unauthenticated account takeover across cloud and self‑hosted deployments. The weakness lies in the forgot-password endpoint, which returns a valid password…
SecurityOnline -
FBI Alert: Two Cybercriminal Groups Are Actively Compromising Salesforce
Two cybercriminal groups, UNC6040 and UNC6395, are actively compromising Salesforce instances to steal data and extort victims, according to the alert. Since late 2024, UNC6040 has relied on voice phishing to trick call centre staff into sharing Salesforce…
SecurityOnlineUNC6395 -
AI Content War: Penske Media Sues Google Over AI Overviews
Penske Media has formally filed a lawsuit in the U.S. District Court for the District of Columbia accusing Google of unlawfully appropriating its website content through the AI-generated search summaries in Google’s AI Overviews feature. The complaint…
SecurityOnline -
VaultGemma: Google’s New AI Model Is the First with Differential Privacy
VaultGemma is Google’s new AI model described as the most powerful large language model trained entirely from scratch, fortified with differential privacy protections. The model, designed with one billion parameters and built upon Gemma 2, is released with…
SecurityOnline -
Digiever NVR Flaws (CVE-2025-10264, CVE-2025-10265) Let Hackers Steal Credentials & Take Control
Two critical flaws in Digiever’s Network Video Recorder (NVR) products—CVE-2025-10264 (CVSS 10) and CVE-2025-10265 (CVSS 9.8)—have been flagged by the Taiwan Computer Emergency Response Team (TWCERT/CC) for exposing systems to credential theft and remote…
SecurityOnline -
Unveiling BaoLoader: How One Malware Family Abuses Trust for 7 Years
BaoLoader, the malware family now tracked as AppSuite-PDF and PDF Editor campaigns, has been abusing the global trust model of software distribution for more than seven years, according to Expel. The researchers state that the developers used at least 26…
SecurityOnline -
CVE-2025-9556 (CVSS 9.8):Critical Vulnerability in LangChainGo Puts LLM Apps at Risk
CVE-2025-9556 (CVSS 9.8) is a critical vulnerability in LangChainGo, the Go implementation of LangChain, that exposes LLM applications to server-side weaknesses. According to CERT/CC Vulnerability Note, the flaw allows arbitrary file reads through the Gonja…
SecurityOnline -
Phishing Wave Hits U.S. Energy Giants: Chevron, ConocoPhillips Targeted
According to Hunt Intelligence, the U.S. energy sector saw a sharp rise in phishing activity in 2025, with look-alike domains crafted to impersonate major brands such as Chevron, ConocoPhillips, PBF Energy, and Phillips 66. Hunt Intelligence’s data show more…
SecurityOnline -
China-Aligned Hackers Unleash Upgraded Toneshell and New USB Worm
IBM X-Force has published findings on Hive0154, a China-aligned threat actor also tracked as Mustang Panda, Stately Taurus and Camaro Dragon, which has long operated with a large malware arsenal of loaders, backdoors and USB-propagating malware. According to…
SecurityOnlineMUSTANG PANDA -
VMScape (CVE-2025-40300): A New CPU Flaw Threatens Cloud Security
Security researchers at ETH Zurich have revealed VMScape (CVE-2025-40300), a practical end-to-end Spectre-BTI exploit that can allow a malicious guest to leak memory from unmodified QEMU processes running on an AMD Zen 4 host at a rate of 32 bytes per…
SecurityOnline -
EvilAI Malware Campaign Exploits Trust in AI Tools to Infiltrate Global Industries
Trend Micro researchers have uncovered a sophisticated malware campaign dubbed EvilAI, which disguises itself as productivity and AI-enhanced tools to infiltrate organisations worldwide, with a global footprint spanning manufacturing, government, and…
SecurityOnline -
Apple’s N1 Chip Has a Major Wi-Fi 7 Limitation
Apple’s in-house N1 network chip does not support the 320 MHz bandwidth that Wi‑Fi 7 enables, meaning the chip’s maximum channel width remains at 160 MHz and there is no immediate leap in wireless throughput. The article notes that Wi‑Fi 7’s 320 MHz channels…
SecurityOnline -
Apple Watch Series 11 Unveils FDA-Approved Hypertension Alerts
Apple has unveiled the Series 11 with algorithm-driven Hypertension Alerts, a feature that has already gained approval from the U.S. Food and Drug Administration, according to the U.S. Food and Drug Administration (FDA). Beginning 19 September 2025, the…
SecurityOnline -
CUPS Flaws Allow Linux Remote DoS (CVE-2025-58364) and Authentication Bypass (CVE-2025-58060)
OpenPrinting has released patches addressing two security flaws in the Common Unix Printing System (CUPS), tracked as CVE-2025-58364 and CVE-2025-58060, affecting multiple versions of CUPS and cups-browsed and exposing systems to remote DoS and…
SecurityOnline -
Windows 11’s New Full-Screen Prompts for Microsoft 365
Windows 11 is introducing a new full-screen interface called the Second Out-of-Box Experience (SCOOBE) in the latest Developer and Insider Preview builds to remind users to renew their Microsoft 365 subscriptions. The SCOOBE prompts appear after a system…
SecurityOnline
