News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Tue 16 Sep 2025· 96 articles
-
Seraphic Browser-Native Protection Now Available for Purchase on the CrowdStrike Marketplace
Seraphic today announced that its Secure Enterprise Browser (SEB) is now available for purchase in the CrowdStrike Marketplace, following its presentation at Fal[.]Con 2025. The release includes a CrowdStrike Falcon Next-Gen SIEM integration that correlates…
SecurityOnline -
China slaps 1-hour deadline on reporting serious cyber incidents
According to DataBreaches[.]Net, Beijing will require Chinese network operators to report serious cyber incidents within 60 minutes of spotting them, under the new National Cybersecurity Incident Reporting Management Measures that come into force on 1…
DataBreaches -
Neon Cyber Emerges from Stealth, Shining a Light into the Browser
Neon Cyber emerged from stealth on 16 September 2025 after raising seed funding from Austin-based Silverton Partners in April 2025. The company argues that securing the workforce, not just infrastructure, is the missing piece in today’s cybersecurity, and it…
SecurityWeek -
Rowhammer Attack Demonstrated Against DDR5
Researchers from ETH Zurich and Google have demonstrated a practical Rowhammer attack against DDR5, named Phoenix, which can achieve root on a commodity DDR5 system with default settings. The attack is tracked as CVE-2025-6202 and was shown to be effective…
SecurityWeek -
AWSDoor: New Persistence Technique Attackers Use to Hide in AWS Cloud Environments
The article discusses a new persistence technique called AWSDoor, which attackers use to maintain access in Amazon Web Services (AWS) environments. AWSDoor automates the modification of AWS Identity and Access Management (IAM) settings, allowing attackers to…
gbhackers.com -
Jaguar Land Rover issues update on job safety after cyber attack
Jaguar Land Rover has issued an update on job safety in the wake of its crippling cyber attack, noting that production remains paused while investigations continue. The company said it has extended the current pause in production until Wednesday 24 September…
DataBreaches -
Cybercrime Government News People Recorded Future US national charged in Finnish psychotherapy center extortion
According to The Record, Finnish prosecutors have charged a second individual, U.S. national Daniel Lee Newhard, with attempted extortion of the Vastaamo psychotherapy centre. The Finnish Prosecution Service announced on Monday that it had charged Newhard…
DataBreaches -
WordPress Plugin Vulnerability Let Attackers Bypass Authentication via Social Login
A critical vulnerability in the Case Theme User WordPress plugin allows unauthenticated attackers to hijack any account on vulnerable sites, including administrators, via the social login feature. According to Wordfence Intelligence, on 31 May 2025 a report…
gbhackers.com -
Apple Backports Fix for CVE-2025-43300 Exploited in Sophisticated Spyware Attack
Apple on Monday backported fixes for CVE-2025-43300, a memory‑corruption risk in ImageIO that could occur when processing a malicious image file and has a CVSS score of 8.8, the article notes. According to The Hacker News, Apple is aware of a report that…
The Hacker News -
Securing the Agentic Era: Introducing Astrix's AI Agent Control Plane
Astrix’s Agent Control Plane (ACP) is pitched as the industry’s first end-to-end enterprise solution for securing AI agents, designed to deploy secure-by-design agents across the organisation. It delivers short‑lived, precisely scoped credentials and…
The Hacker News -
Apple Patches 18 Vulnerabilities in visionOS 26 Allowing Access to Sensitive User Data
Apple has released visionOS 26, addressing eighteen security flaws that could allow unauthorized access to sensitive user data. The update, issued on 15 September 2025, covers a wide range of components in the Apple Vision Pro platform. According to Apple’s…
gbhackers.com -
ChatGPT’s New Calendar Integration Can Be Abused to Steal Emails
According to EdisonWatch, a new ChatGPT calendar integration can be abused to execute an attacker’s commands and even steal a user’s emails. The researchers analysed OpenAI’s Model Context Protocol tool support, which lets the gen-AI service interact with a…
SecurityWeek -
Microsoft’s Latest Update Breaks SMBv1, Here’s How to Fix It
16 September 2025: Microsoft has confirmed that the September 2025 security updates have caused connectivity issues with SMB v1 shares, affecting a range of Windows versions including all Windows 11 builds, Windows 10 22H2/21H2, and Windows Server 2022/2025,…
SecurityOnline -
Wine 10.15: A Major Step Towards Faster Windows Gaming on Linux
Wine 10.15 has been released, described as a major step towards faster Windows gaming on Linux and the foundation for playing Windows games on SteamOS. According to Daily CyberSecurity, the update includes several highlights: the Unicode character table is…
SecurityOnline -
Chrome’s New Preloading is a Game-Changer
Chrome has moved from full prerendering to a lighter-weight preloading approach in Chrome, aiming to deliver near-instant loading with less memory overhead. Instead of rendering an entire page in advance, the new mechanism preloads only the necessary…
SecurityOnline -
Top 10 Best MSSP (Managed Security Service Providers) in 2025
The article discusses the Top 10 Best Managed Security Service Providers (MSSPs) for 2025, highlighting the increasing complexity of cyber threats and the need for organizations to outsource their cybersecurity needs. Key trends in the MSSP market include…
gbhackers.com -
China Accuses NVIDIA of Anti-Monopoly Violations
According to Reuters, China’s State Administration for Market Regulation (SAMR) issued a statement today declaring that NVIDIA’s $6.9 billion acquisition of Mellanox in 2019 violated both the Anti-Monopoly Law of the People’s Republic of China and the…
SecurityOnline -
Threat Actors Exploit MCP Servers to Steal Sensitive Data
Threat Actors Exploit MCP Servers to Steal Sensitive Data discusses a stealthy supply chain risk posed by Unvetted Model Context Protocol (MCP) servers, which can run arbitrary code and exfiltrate data if not properly sandboxed. The piece details a PoC…
gbhackers.com -
Apple Ends iCloud Support for Older Devices
According to Apple’s newly published support documentation, devices running iOS 10 or macOS 10.12 no longer meet the minimum system requirements for iCloud services. As a result, these systems will lose access to backups, photo synchronization and the Find…
SecurityOnline -
NVIDIA CUDA is Coming to Ubuntu Repositories
Canonical has announced that it will begin packaging and distributing the NVIDIA CUDA Toolkit directly through the Ubuntu repositories, a move that will see CUDA tools, libraries, and runtimes available natively rather than exclusively from NVIDIA’s site.…
SecurityOnline -
AV2 Codec: The Future of Video Compression is Coming
According to The Alliance for Open Media (AOMedia), the standards for the AV2 video codec are being finalised, with plans to release the specification by the end of 2025. The alliance, whose members include Google, Apple, Amazon, Cisco, Intel, the Mozilla…
SecurityOnline -
“A dare, a challenge, a bit of fun:” Children are hacking their own schools’ systems, says study
A new Malwarebytes summary highlights how a growing number of school insider incidents are being driven by students, with the Information Commissioner's Office (ICO) report noting that over half of insider cyberattacks in education were caused by students.…
Malwarebytes -
Watch out for the “We are hiring” remote online evaluator message scam
According to Malwarebytes, the 16 September 2025 post highlights a widespread scam text offering remote online evaluator work under the banner “We are hiring.” The messages, which vary only in background images, claim a salary of $100–$600 per day for 1–2…
Malwarebytes -
Is Your iOS 26 Battery Draining? Here’s Why
With the release of iOS 26, Apple has warned that battery life may appear to dip temporarily as devices run more background and foreground processes such as data indexing, asset downloads, and app updates. The company notes that these effects are transient…
SecurityOnline -
Apple’s iOS 26: The Liquid Glass Revolution
Apple released the stable version of iOS 26 shortly after unveiling the iPhone 17 series, with updates for iPadOS 26, watchOS 26, macOS 26 Sequoia, and tvOS 26 now available for download. The standout feature is the Liquid Glass design language, unveiled…
SecurityOnline -
SmokeLoader Employs Optional Plugins to Steal Data and Launch DoS Attacks
SmokeLoader, also known as Smoke or Dofoil, has been active since 2011 as a versatile malware loader designed to deliver second‑stage payloads such as trojans, ransomware, and information stealers. Its extensible plugin framework enables modules for data…
gbhackers.com -
RevengeHotels: a new wave of attacks leveraging LLMs and VenomRAT
RevengeHotels, also known as TA558, has emerged in a new wave of attacks across Latin America, leveraging large language model–generated code and VenomRAT, with the campaign already observed in 2025. The group’s primary targets remain hotels and front desks,…
securelist.comRevengeHotels -
Fraud Prevention Company SEON Raises $80 Million in Series C Funding
SEON today announced raising $80 million in Series C funding, bringing the company’s total raised to $187 million, according to SecurityWeek. The round was led by Sixth Street Growth, with additional support from Hearst and previous investors Creandum,…
SecurityWeek -
New Phoenix Rowhammer Attack Bypasses DDR5 Chip Protections
A new variation of the Rowhammer attack, dubbed Phoenix, can bypass built-in DDR5 protections and compromise DRAM modules from the world’s largest memory maker, SK Hynix. Researchers reverse‑engineered the in‑DRAM protections and found blind spots that let…
gbhackers.com -
Apple Rolls Out iOS 26, macOS Tahoe 26 With Patches for Over 50 Vulnerabilities
Apple has announced the release of iOS 26 and macOS Tahoe 26, each bringing patches for more than 50 vulnerabilities. The iOS 26 and iPadOS 26 updates address 27 unique CVEs that could lead to memory corruption, information disclosure, crashes, or sandbox…
SecurityWeek -
Endpoint Security Firm Remedio Raises $65 Million in First Funding Round
Remedio, the endpoint security company formerly known as Gytpol, has announced $65 million in its first funding round. The bootstrapped Israeli firm says the round was led by Bessemer Venture Partners, with additional support from Picture Capital and TLV…
SecurityWeek -
AISURU Botnet Fuels Record-Breaking 11.5 Tbps DDoS Attack With 300,000 Hijacked Routers
The AISURU botnet, leveraging an estimated 300,000 compromised routers worldwide, has been identified as the force behind a record-breaking 11.5 Tbps distributed denial-of-service attack in September 2025, according to XLab. This unprecedented event eclipses…
gbhackers.com -
China-linked Mustang Panda deploys advanced SnakeDisk USB worm
China-linked Mustang Panda has been spotted deploying a new USB worm named SnakeDisk alongside an updated backdoor in its arsenal, according to Security Affairs. The campaign combines SnakeDisk with a newer version of the TONESHELL backdoor and the Yokai…
Security AffairsMUSTANG PANDA -
Phoenix RowHammer Attack Bypasses Advanced DDR5 Memory Protections in 109 Seconds
According to ETH Zürich and Google, a new RowHammer variant named Phoenix targets SK Hynix DDR5 memory and can bypass advanced protections designed to resist RowHammer. The attack is linked to CVE-2025-6202, with a CVSS score of 7.1, and researchers claim it…
The Hacker News -
Microsoft Releases Fix for Windows 11 24H2 Bluetooth Audio Malfunction Affecting Headsets and Speakers
Microsoft has resolved a widespread Bluetooth audio problem that left Windows 11 version 24H2 users without functioning headsets, speakers, and built‑in laptop audio. The fix came as a targeted driver update released on 12 September 2025, addressing…
gbhackers.com -
Apple Releases Security Update Patching Multiple Vulnerabilities in iOS 26 and iPadOS 26
Apple has released a comprehensive security update for iOS 26 and iPadOS 26, addressing 27 vulnerabilities across multiple system components. The update, released on 15 September 2025, targets devices including iPhone 11 and later models, along with iPad…
gbhackers.com -
Spring Framework Security Flaws Allow Authorization Bypass and Annotation Detection Issues
A pair of medium-severity vulnerabilities in Spring Framework and Spring Security were disclosed on 15 September 2025, affecting the annotation detection mechanism used by Spring Security’s method security features and potentially enabling authorization…
gbhackers.com -
New Maranhão Stealer Targets Users Through Pirated Software and Cloud Services
A new information-stealing campaign named Maranhão Stealer has emerged, targeting gaming enthusiasts who download pirated software distributed via cloud-hosted platforms. The campaign, first identified by security researchers in May 2025, represents a…
gbhackers.com -
Popular NPM Package ‘ctrl/tinycolor’ with 2M Weekly Downloads and 40+ Others Compromised in Supply Chain Attack
The popular NPM package ctrl/tinycolor, together with over 40 other JavaScript packages, was compromised in a self-propagating supply chain attack that has escalated threats in the ecosystem. The incident targets versions 4.1.1 and 4.1.2, which collectively…
gbhackers.com -
0-Click Linux Kernel KSMBD Vulnerability Enables Remote Code Execution via N-Day Exploit
A recent vulnerability in the Linux Kernel’s KSMBD module allows an attacker to execute arbitrary code on a target system without any user interaction, according to GBHackers. Researchers demonstrated a stable exploit against KSMBD in Linux 6.1.45 that…
gbhackers.com
