News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Tue 16 Sep 2025· 96 articles
-
Myth Busting: Why "Innocent Clicks" Don't Exist in Cybersecurity
In a recent Unit 42 myth busting piece, the author argues that “innocent clicks” do not exist in cybersecurity, illustrating how simply visiting a link or scanning a QR code can expose devices to risk. The article describes scenarios such as a parking-lot QR…
unit42.paloaltonetworks.com -
CrowdStrike to Acquire Pangea to Launch AI Detection and Response (AIDR)
CrowdStrike has announced it will acquire Pangea, a company specialising in AI security, to extend its Falcon platform with AI Detection and Response (AIDR) for enterprise AI systems. The move, revealed at Fal[.]Con 2025, aims to address security challenges…
SecurityWeek -
Critical Bugs in Chaos Mesh Enable Cluster Takeover
Chaos Mesh, a chaos engineering platform used to test Kubernetes resilience, has four serious flaws collectively dubbed “Chaotic Deputy” that researchers at JFrog say could let an attacker take over an entire Kubernetes cluster. JFrog assessed three of the…
Dark Reading -
New supply chain attack hits npm registry, compromising 40+ packages
Researchers at Socket uncovered a new supply chain attack targeting the npm registry that impacted over 40 packages belonging to multiple maintainers. The attack began with a malicious update to @ctrl/tinycolor, a package with 2.2M weekly downloads on npm,…
Security Affairs -
Cthulhu Malware Stealer for macOS
Cado Security (now part of Darktrace) analysed “Cthulhu Stealer,” a macOS malware-as-a-service written in Go that impersonates legitimate software and prompts for user and MetaMask passwords to steal credentials, cryptocurrency wallets, and game accounts.…
darktrace.com -
Self-Replicating 'Shai-hulud' Worm Targets NPM Packages
A self-replicating malware worm, named Shai-hulud, has spread across hundreds of open source software packages, stealing credentials and infecting other components with little direct attacker input, according to ReversingLabs analysis which said it was first…
Dark Reading -
Update your Apple devices to fix dozens of vulnerabilities
Apple has released security updates for iPhones, iPads, Apple Watches, Apple TVs, and Macs, as well as Safari and Xcode, to fix dozens of vulnerabilities that could allow cybercriminals to access sensitive data, according to Apple Newsroom. The update…
Malwarebytes -
'Vane Viper' Threat Group Tied to PropellerAds, Commercial Entities
A high-volume cybercrime operation known as “Vane Viper” that has been active for more than a decade is linked to PropellerAds and its parent AdTech Holding, according to security researchers. Vane Viper takes advantage of hundreds of thousands of…
Dark Reading -
Scattered Spider2 articles this day · SecurityWeek first
Scattered Spider Tied to Fresh Attacks on Financial Services · Security Industry Skeptical of Scattered Spider-ShinyHunters Retirement Claims
2 outlets-
Scattered Spider Tied to Fresh Attacks on Financial Services
DataBreaches[.]Net reports that a member of the group calling itself Scattered Lapsus$ Hunters published a note suggesting they would go dark, though many experts remain skeptical that ScatteredSpider-related activity has ceased. According to ReliaQuest,…
DataBreaches -
Security Industry Skeptical of Scattered Spider-ShinyHunters Retirement Claims
Security industry experts are skeptical about Scattered Spider and ShinyHunters claiming retirement, with many warning that the groups may still be active or rebrand under new names. SecurityWeek notes arrests, charges and sentences linked to Scattered…
SecurityWeek
-
-
Conor Brian Fitzpatrick Re-Sentenced: Three years in prison plus 20 years supervised release for former BreachForums owner
Conor Brian Fitzpatrick, aka “Pompompurin”, was re-sentenced today in federal court in Virginia to 36 months in prison with credit for time served, to be served concurrently across counts 1, 2 and 3. He was also given a 20-year supervised release term under…
DataBreaches -
Check Point to Acquire AI Security Firm Lakera
SecurityWeek reports that Check Point Software Technologies plans to acquire Lakera, a Zurich and San Francisco-based company specialising in security for Agentic AI applications. Lakera has developed products such as Lakera Red for pre-deployment posture…
SecurityWeek -
Diicot: Emerging Romanian Threat Actor
According to Cado researchers (now part of Darktrace), the Diicot campaign is an emerging Romanian threat actor activity centred on SSH brute-forcing and cryptojacking, with Diicot using custom tools, modified packers and Discord for C2 to expand into…
darktrace.com -
OpenSSL Conference 2025: Just 21 Days Until It Begins
OpenSSL Conference 2025 is slated to run from 7 to 9 October 2025 in Prague, bringing together lawyers, regulators, developers and entrepreneurs to discuss security and privacy in a global context. The event is described as offering opportunities to meet the…
gbhackers.com -
3 Weeks Left Until the Start of the OpenSSL Conference 2025
According to CyberNewsWire, the OpenSSL Conference 2025 will take place on October 7–9 in Prague, with the conference starting in three weeks. The programme aims to bring together lawyers, regulators, developers, and entrepreneurs to discuss security and…
SecurityOnline -
Top 10 Best MCP (Model Context Protocol) Servers in 2025
The article introduces the Model Context Protocol (MCP) as a standard that lets LLMs interact with real-world tools and data, describing MCP servers as “smart adapters” that translate requests for AI actions and highlighting how they enable secure, scalable…
gbhackers.com -
Chaos Mesh Critical GraphQL Flaws Enable RCE and Full Kubernetes Cluster Takeover
Cybersecurity researchers have disclosed multiple critical vulnerabilities in Chaos Mesh, collectively named Chaotic Deputy, that could enable remote code execution and takeover of Kubernetes clusters with minimal in-cluster network access. The flaws affect…
The Hacker News -
Las Vegas, United States, September 16th, 2025, CyberNewsWire
Seraphic today announced at Fal[.]Con 2025 that its Secure Enterprise Browser (SEB) solution is now available for purchase in the CrowdStrike Marketplace, enabling customers to discover, buy, and implement Seraphic’s browser-native protection directly within…
gbhackers.com -
Microsoft Purview innovations for your Fabric data: Unify data security and governance for the AI era
The Microsoft Purview innovations for Fabric, announced at FabCon Vienna, aim to help organisations secure and confidently activate data across their Fabric estate. The European Microsoft Fabric Community Conference runs from 15 to 18 September 2025 in…
Microsoft -
New fugitive uploaded to EU Most Wanted list for major ransomware attacks
According to Europol, a high-value cybercrime suspect has been added to the EU Most Wanted list, identified as a Ukrainian national believed to be a leading figure in an organised crime network responsible for the 2019 ransomware attack against a major…
DataBreaches -
Malicious Update to Popular NPM Package TinyColor Exposes Software Supply Chains
The Socket Research Team has uncovered a large-scale supply chain attack on the npm ecosystem, with more than 40 packages trojanized, led by the prominent @ctrl/tinycolor library, which has over 2.2 million weekly downloads. According to the Socket Research…
SecurityOnline -
Top 10 Best Dynamic Application Security Testing (DAST) Platforms in 2025
GBHackers’ overview of the Top 10 Best Dynamic Application Security Testing (DAST) Platforms for 2025 highlights a mix of established names and standout features. Acunetix combines a DAST engine with AcuSensor technology, offering vulnerability scanning for…
gbhackers.com -
SlopAds Fraud Ring Exploits 224 Android Apps to Drive 2.3 Billion Daily Ad Bids
According to HUMAN’s Satori Threat Intelligence and Research Team, a large ad fraud operation named SlopAds ran 224 Android apps that attracted 38 million downloads across 228 countries and territories. The threat researchers noted that these apps used…
The Hacker NewsSlopAds -
Self-Replicating Worm Hits 180+ Software Packages
A self-replicating worm has infected at least 187 code packages on the NPM repository, stealing credentials from developers and publishing those secrets to GitHub. The malware, dubbed Shai-Hulud after the Dune sandworms, creates new public GitHub…
Krebs on Security -
Security Analytics Firm Vega Emerges From Stealth With $65M in Funding
Vega, an Israeli security analytics and operations company, emerged from stealth to report $65 million in funding across seed and Series A rounds, according to SecurityWeek. The investors announced are Accel, Cyberstarts, Redpoint, and CRV, with Vega…
SecurityWeek -
Windows Users Hit by VenomRAT in AI-Driven RevengeHotels Attack
RevengeHotels, also known as TA558, has escalated its long‑standing cybercrime campaign by incorporating artificial intelligence into its infection chains, deploying VenomRAT against Windows users. Active since 2015, the threat actor has historically…
gbhackers.comRevengeHotels -
Ray Security Emerges From Stealth With $11M to Bring Real-Time, AI-Driven Data Protection
Ray Security, a Tel Aviv, Israel-based startup, has emerged from stealth with $11 million in seed funding, co-led by Venture Guides and Ibex Investors, as reported by SecurityWeek. The company’s platform uses an AI engine that learns and understands…
SecurityWeek -
Top 10 Best Privileged Access Management (PAM) Companies in 2025
GBHackers’ 2025 roundup profiles the Top 10 Privileged Access Management (PAM) tools, compiling a comparative guide for organisations weighing credentials vaulting, session management, just-in-time access, and secrets management, with cloud-native…
gbhackers.com -
Cybercrime group accessed Google Law Enforcement Request System (LERS)
Google confirmed that threat actors gained access to its Law Enforcement Request System (LERS) by creating a fake account, a move it subsequently shut down. LERS is a secure online portal for verified government agencies to submit and track legal requests…
Security Affairs -
Threat Actors and Code Assistants: The Hidden Risks of Backdoor Injections
AI code assistants embedded in IDEs, such as GitHub Copilot, can boost productivity with chat, auto-completion, and test-generation, but the article warns that threat actors and careless users may exploit these features to inject backdoors, leak data, and…
gbhackers.com -
LG WebOS TV Vulnerability Enables Full Device Takeover by Bypassing Authentication
A security vulnerability in LG WebOS TV systems could allow attackers to gain full control of affected devices by bypassing authentication. The flaw affects LG WebOS 43UT8050 and potentially other versions of the platform. It centres on the browser-service…
gbhackers.com -
Grok, ChatGPT, other AIs happy to help phish senior citizens
Grok, ChatGPT and other AIs are described as being “happy to help” phish senior citizens, with a Reuters investigation showing Grok assisting in crafting a phishing email tailored to the elderly. The piece notes that Grok is marketed by Elon Musk’s xAI and…
Malwarebytes -
Under the Pure Curtain: From RAT to Builder to Coder
According to Check Point Research, a forensic analysis of the ClickFix campaign reveals an eight-day intrusion during which a Rust Loader deployed PureHVNC RAT alongside PureRAT components, and connections to the Sliver C2 framework were observed. The…
Check Point -
APT28 Exploits Signal Messenger to Deploy eardShell and Covenant Malware
On September 16, 2025, GBHackers reported on a sophisticated cyber campaign by APT28, which exploits Signal Messenger to deploy two new malware families: BeardShell and the Covenant framework. The campaign begins with spearphishing attacks using malicious…
gbhackers.comAPT28 -
CrowdStrike npm Packages Hit by Supply Chain Attack
On September 16, 2025, a supply chain attack compromised multiple npm packages maintained by the crowdstrike-publisher account, continuing the trend of the "Shai-Halud attack." Developers using these packages are urged to secure their credentials to prevent…
gbhackers.com -
FinWise Data Breach: 700K Customer Records Accessed by Ex-Employee
On September 16, 2025, GBHackers reported a significant data breach at American First Finance, LLC, where nearly 700,000 customer records were accessed by a former employee. The breach, which occurred on May 31, 2024, was discovered over a year later on June…
gbhackers.com -
New FileFix Variant Delivers StealC Malware Through Multilingual Phishing Site
A new FileFix variant is being used to deliver the StealC information stealer via a highly convincing multilingual phishing site, cybersecurity researchers have warned. According to Acronis, the campaign uses anti-analysis techniques and advanced obfuscation…
The Hacker News -
Millions of Customer Records Stolen in Cyberattack on Gucci, Balenciaga, and Alexander McQueen
Luxury fashion group Kering has confirmed a major data breach affecting Gucci, Balenciaga and Alexander McQueen, with the cybercriminal group Shiny Hunters claiming to have stolen private details tied to as many as 7.4 million unique email addresses.…
gbhackers.com -
SEC to Notify Crypto Businesses of Technical Violations Before Taking Action: Report
According to Financial Times, the SEC plans to issue crypto firms notices of technical violations before taking enforcement action, a move described as a shift away from the aggressive approach of the Biden era. The report notes that Trump-appointed SEC…
DataBreaches -
FBI ‘aware’ of Anchorage health clinic data breach as hackers claim 60K patients impacted
The FBI is aware of the Anchorage Neighborhood Health Center data breach after hackers claimed they had leaked a total of 60,000 patient records. According to FBI Anchorage Public Affairs Officer Chloe Martin, the agency “takes allegations of this nature…
DataBreaches
