News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Thu 18 Sep 2025· 78 articles
-
ShadowLeak: Radware Uncovers Zero-Click Attack on ChatGPT
Radware has uncovered a server‑side data theft attack dubbed ShadowLeak that targets ChatGPT. The researchers say the attack exploits a zero‑click vulnerability in ChatGPT’s Deep Research agent when it is connected to Gmail and browsing, allowing the agent…
Security Affairs -
TikTok Deal Won't End Enterprise Risks
With a deal about the future of TikTok in the US beginning to take shape, cybersecurity professionals are urged to look beyond ownership changes. The Wall Street Journal and other outlets reported that a consortium of US technology firms, venture capitalists…
Dark Reading -
SonicWall Breached, Firewall Backup Data Exposed
Security vendor SonicWall confirmed that threat actors breached its cloud backup service for firewalls and accessed backup firewall preference files belonging to fewer than 5% of its install base, exposing encrypted credentials and configuration files that…
Dark Reading -
Microsoft Defender delivered 242% return on investment over three years
The Forrester TEI study found that organisations using Microsoft Defender delivered a 242% return on investment over three years, with a net present value of $12.6 million. It shows Defender helps consolidate tools, reduce licensing overhead, and streamline…
Microsoft -
Top 10 Best NGFW (Next‑Generation Firewall) Providers in 2025
GBHackers’ 18 September 2025 roundup, written by Varshini, surveys the Top 10 Best NGFW (Next‑Generation Firewall) Providers in 2025, highlighting a roster that includes Sophos, Forcepoint, Cisco, Palo Alto Networks, Huawei, Barracuda, Fortinet, WatchGuard,…
gbhackers.com -
New attack on ChatGPT research agent pilfers secrets from Gmail inboxes
A new prompt-injection attack nicknamed ShadowLeak targets OpenAI’s Deep Research agent, a ChatGPT-integrated tool that can access a user’s email inbox and other resources to perform autonomous web actions. The attack exfiltrates confidential information…
Ars Technica -
Top 10 Best Security Orchestration, Automation, And Response (SOAR) Tools in 2025
Top 10 Best Security Orchestration, Automation, And Response (SOAR) Tools in 2025 surveys the leading platforms that aim to streamline security workflows, automate incident response, and reduce alert fatigue, with the piece published on 18 September 2025 by…
gbhackers.com -
How weak passwords and other failings led to catastrophic breach of Ascension
The Ars Technica piece recounts how Ascension’s ransomware breach exposed 5.6 million patients’ records and disrupted care across 140 hospitals, highlighting security failings alongside Microsoft’s ongoing use of Kerberos with a weaker fallback. It notes the…
Ars Technica -
ChatGPT Deep Research Targeted in Server-Side Data Theft Attack
Researchers at web security company Radware described a zero-click server-side data theft technique dubbed ShadowLeak that targeted ChatGPT’s Deep Research capability. According to Radware, the attack did not require user interaction and relied on a…
SecurityWeek -
SonicWall warns customers to reset credentials after MySonicWall backups were exposed
SonicWall has urged customers to reset credentials after backup files for MySonicWall were exposed, with the company saying it blocked attackers’ access and is working with cybersecurity experts and law enforcement to determine the breach’s scope. In its…
Security Affairs -
SonicWall Urges Password Resets After Cloud Backup Breach Affecting Under 5% of Customers
SonicWall is urging customers to reset credentials after a cloud backup breach that affected MySonicWall accounts and involved less than 5% of its customers. The company said suspicious activity targeted the cloud backup service for firewalls, with unknown…
The Hacker News -
Scattered Spider2 articles this day · gbhackers.com first
Two teenage suspected Scattered Spider members charged in UK over TfL hack · New ‘shinysp1d3r’ Ransomware-as-a-Service Targets VMware ESXi in Ongoing Development
2 outlets-
Two teenage suspected Scattered Spider members charged in UK over TfL hack
Two teenage suspected Scattered Spider members have been charged in the United Kingdom in connection with last year’s Transport for London hack. The National Crime Agency said Thalha Jubair, 19, from East London, and Owen Flowers, 18, from Walsall, were…
DataBreaches -
New ‘shinysp1d3r’ Ransomware-as-a-Service Targets VMware ESXi in Ongoing Development
New ‘shinysp1d3r’ is described as a ransomware-as-a-service (RaaS) network that is currently in development and is designed to encrypt VMware ESXi environments, according to EclecticIQ analysts. The firm notes that ShinyHunters may recruit new affiliates and…
gbhackers.com
-
-
Palo Alto Networks Acknowledges SquareX Research on Limitations of SWGs Against Last Mile Reassembly Attacks
Palo Alto Networks has acknowledged SquareX’s research on the limitations of Secure Web Gateways (SWGs) against Last Mile Reassembly attacks. SquareX first discovered and disclosed Last Mile Reassembly attacks at DEF CON 32 last year, warning of more than 20…
gbhackers.com -
Disrupted phishing service was after Microsoft 365 credentials
According to Microsoft and Cloudflare, a Phishing-as-a-Service operation known as RaccoonO365 was disrupted. The primary goal of RaccoonO365 (or Storm-2246 as Microsoft calls it) was to rent out a phishing toolkit that specialised in stealing Microsoft 365…
Malwarebytes -
Qilin Ransomware Attack Impacts 104 Organizations in August
In August, Qilin Ransomware claimed 104 victims, reasserting its position at the top of the global ransomware arena and nearly doubling the second-place total of Akira, which reported 56 attacks. The attack marked the fourth time in five months that Qilin…
gbhackers.comQilin -
BMW Reportedly Hit by Everest Ransomware, Internal Files Stolen
Everest, a ransomware group, has claimed a major breach at Bayerische Motoren Werke AG (BMW), alleging the theft of 600,000 lines of sensitive internal documents. According to Everest’s leak site, BMW’s data exfiltration is described as a “staggering”…
gbhackers.com -
Survival Flight reports second cybersecurity incident in less than a year
Survival Flight reports its second cybersecurity incident in less than a year, with the organisation stating that on July 17 it discovered an incident affecting its IT systems, disclosed in August via a substitute notice. The notice indicates that name,…
DataBreaches -
Palo Alto Networks Acknowledges SquareX Research on Limitations of SWGs Against Last Mile Reassembly Attacks
Palo Alto Networks has publicly recognised SquareX’s research on the limitations of Secure Web Gateways (SWGs) against Last Mile Reassembly attacks, marking a watershed moment for browser‑native security. According to Palo Alto Networks’ press release, the…
SecurityOnline -
CountLoader Broadens Russian Ransomware Operations With Multi-Version Malware Loader
CountLoader is a newly identified malware loader used by Russian ransomware groups to deliver post-exploitation tools such as Cobalt Strike and AdaptixC2, as well as a remote access trojan known as PureHVNC RAT. It appears in three versions—.NET, PowerShell,…
The Hacker News -
Tracking New Entrants in Global Spyware Markets
Tracking New Entrants in Global Spyware Markets notes that spyware’s proliferation continues to threaten human rights and national security, with NSO Group recently fined $168 million in punitive damages by a US court for targeting WhatsApp’s infrastructure…
gbhackers.com -
Insight Partners Confirms Data Breach Exposing Users’ Personal Data
Insight Partners has officially confirmed a significant data breach that exposed personal information tied to the company, following a months-long intrusion. The threat actor gained unauthorized access on or around 25 October 2024 through a sophisticated…
gbhackers.com -
Tiffany Data Breach Impacts Thousands of Customers
Tiffany and Company has informed US and Canadian customers that their personal information related to Tiffany gift cards was accessed by hackers. According to the notification sent to impacted individuals, a threat actor gained unauthorized access to Tiffany…
SecurityWeek -
SonicWall Advises Users to Reset Logins After Config Backup Leak
SonicWall has alerted its customers to reset all login credentials after a recent leak exposed firewall configuration backups, and officials advise organisations to follow three stages—containment, remediation, and monitoring—to minimise risk and restore…
gbhackers.com -
SilentSync RAT Delivered via Two Malicious PyPI Packages Targeting Python Developers
Two new malicious PyPI packages, sisaws and secmeasure, were found delivering a Windows-focused remote access trojan named SilentSync, with both packages now removed from PyPI. Zscaler ThreatLabz described SilentSync as capable of remote command execution,…
The Hacker News -
Hackers Target Facebook Accounts in Latest Phishing Attack
A newly disclosed phishing campaign targets Facebook users by abusing the platform’s external URL warning feature to harvest login credentials. Attackers hide malicious destinations behind Facebook’s own domain via the “You’re about to leave Facebook”…
gbhackers.com -
How CISOs Can Drive Effective AI Governance
AI governance must be a living system that guides daily use, not a rigid set of restrictions, says The Hacker News in its exploration of CISOs steering AI in enterprise settings. Since ChatGPT arrived in November 2022, many CISOs published strict policies,…
The Hacker News -
Threat Actor Infests Hotels With New RAT
RevengeHotels has expanded its arsenal with a new remote access trojan (RAT) in attacks targeting the hospitality sector, with VenomRAT implants seen in 2025. The group, also known as TA558, has focused on stealing hotel guests’ credit card information and…
SecurityWeekRevengeHotels -
Microsoft seizes 338 websites to disrupt rapidly growing ‘RaccoonO365’ phishing service
Microsoft has seized 338 phishing websites linked to the RaccoonO365 operation, in a move described by DataBreaches[.]Net as disrupting a rapidly growing service that allowed novices to mimic official Microsoft communications to steal Microsoft 365…
DataBreaches -
Splunk Publishes Guide to Spot Remote Work Fraud in Organizations
Splunk today unveiled a comprehensive guide designed to empower security teams to detect Remote Employment Fraud (REF) during the onboarding phase, when imposters have already passed HR vetting and gained network access. According to Splunk, the guide builds…
gbhackers.com -
KR: Lotte Card hack exposes data of 3 million users
Lotte Card has confirmed that a hacking attack compromised the personal data of 2.97 million users, marking the biggest data breach this year. According to the Financial Supervisory Service and Financial Security Institute, more than 200 gigabytes of data…
DataBreaches -
Update your Chrome today: Google patches 4 vulnerabilities including one zero-day
Google has released an update for its Chrome browser to patch four security vulnerabilities, including one zero-day tracked as CVE-2025-10585, with the zero-day described as a type confusion in V8 by Google Threat Analysis Group. The update raises Chrome to…
Malwarebytes -
Age verification and parental controls coming to ChatGPT to protect teens
OpenAI is planning to predict user ages to enhance teen safety, with a long-term system to determine whether users are over 18; if an adult cannot be verified, ChatGPT will eventually offer a different chat experience. According to OpenAI, the model should…
Malwarebytes -
SonicWall Prompts Password Resets After Firewall Configurations Exposed in Breach
SonicWall has prompted some of its customers to reset their passwords after hackers gained access to their backup firewall preference files stored in a cloud service. The compromised backup files contain encrypted credentials, but the information they store…
SecurityWeek -
Warlock Ransomware Deployed via Compromised GOLD SALEM Networks and Bypassed Security Solutions
Counter Threat Unit™ (CTU) researchers are tracking a sophisticated threat actor known as Warlock Group, which CTU designates as GOLD SALEM, and they have been active since March 2025, compromising enterprise networks and bypassing security solutions to…
gbhackers.com -
CVE-2025-10585 is the sixth actively exploited Chrome zero-day patched by Google in 2025
CVE-2025-10585 is the sixth actively exploited Chrome zero-day vulnerability patched by Google in 2025, with Google addressing four Chrome vulnerabilities in its latest updates, including this one. The zero-day is a type confusion issue in the V8 JavaScript…
Security Affairs -
Russian CopyCop Network Expands: 200+ Fake News Sites Target US, Canada, and France
According to GBHackers, the Russian covert influence network known as CopyCop has expanded its disinformation operations, creating over 200 new fake websites since March 2025 to target audiences in the United States, France and Canada. The network now…
gbhackers.comStorm-1516 -
SolarWinds Issues Advisory on Salesforce Data Breach Linked to Salesloft Drift
SolarWinds has issued a security advisory about a major Salesforce data breach that exposed sensitive information from numerous companies, though SolarWinds itself says its systems were not impacted. According to SolarWinds’ advisory, the breach was…
SecurityOnline -
PureVPN Vulnerability Reveals IPv6 Address While Reconnecting to Wi-Fi
A security vulnerability has been identified in PureVPN’s Linux clients, affecting both the GUI (version 2.10.0) and the CLI (version 2.0.1) on Ubuntu 24.04.3 LTS, which can reveal users’ real IPv6 addresses during network reconnections. The primary issue…
gbhackers.com -
Nearly 250,000 Impacted by Data Breach at Medical Associates of Brevard
Florida-based Medical Associates of Brevard has said its data breach, disclosed in mid-January 2025, impacts nearly 250,000 individuals. The BianLian ransomware group took credit for the January attack, claiming to have stolen personal information, protected…
SecurityWeek
