News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Thu 18 Sep 2025· 78 articles
-
Israeli Cyber Fund Glilot Capital Raises $500 Million
Glilot Capital, an Israeli venture fund, announced it has raised $500 million to expand support for startups building cybersecurity, AI and enterprise software. The fresh capital, mainly from large financial organisations in the US, Europe and Israel, takes…
SecurityWeek -
Google Discover Evolves into a Multimedia Hub, Integrating Instagram, X, and YouTube
Google Discover is evolving from a news-focused tool into a personalised multimedia hub that will incorporate posts from Instagram and X, as well as YouTube Shorts, all within a single feed. The rollout will begin gradually over the coming weeks, with…
SecurityOnline -
Microsoft Launches MCP Server for AI to Access Official Documentation
The Daily CyberSecurity article reports that Microsoft has launched the MCP Server, enabling AI models to access Microsoft Learn’s official documentation in real time. It notes that MCP Server support has already been integrated into Microsoft Visual Studio,…
SecurityOnline -
TP-Link Router Zero-Day Lets Attackers Execute Code by Bypassing ASLR
Researchers have uncovered a zero‑day in TP-Link routers that allows attackers to bypass ASLR and remotely execute arbitrary code, tracked as CVE-2025-9961 in the CWMP (TR-069) binary and triggered by malformed SOAP requests. According to ByteRay’s team, the…
gbhackers.com -
Chrome 140 Update Patches Sixth Zero-Day of 2025
Chrome 140 has been released to patch the sixth zero-day vulnerability addressed in 2025, tracked as CVE-2025-10585, which Google Threat Analysis Group reported as exploited in attacks. According to Google Threat Analysis Group, the flaw is a type confusion…
SecurityWeek -
Warning to Mac Studio M3 Ultra Owners: Postpone Your macOS Upgrade
Mac Studio M3 Ultra users are advised to postpone upgrading to macOS 26.0 Tahoe after reports of installation errors that cause the upgrade to fail. The issue appears to occur in the final stage, where the Mac reboots and reverts to version 15.7, with the…
SecurityOnline -
Critical WatchGuard Vulnerability Lets Unauthenticated Attackers Run Arbitrary Code
WatchGuard has disclosed a critical vulnerability in its Firebox line, tracked as CVE-2025-9242, that allows an unauthenticated remote attacker to run arbitrary code due to an out-of-bounds write in the IKEv2 handling routine. The flaw affects a broad range…
gbhackers.com -
Jaguar Land Rover will extend its production halt into a third week following a cyberattack
Jaguar Land Rover will extend its production halt into a third week, keeping operations suspended until at least 24 September 2025 after a cyberattack hit the company earlier this month. The carmaker said the pause is due to the controlled restart of global…
Security Affairs -
Insight Partners Confirms Data Breach Result of Ransomware Attack
Insight Partners has disclosed that the data breach revealed earlier this year was the result of a ransomware attack, with the breach affecting more than 12,000 individuals. The attack was detected on 16 January 2025, and attackers gained access to the…
SecurityWeek -
Researchers Expose Hidden Alliances Between Ransomware Groups
Researchers are revealing a fractured ransomware ecosystem, where hidden connections and alliances bind what were once treated as discrete groups. A new collaborative map led by Jon DiMaggio at Analyst1, in partnership with Scylla Intel and the DomainTools…
gbhackers.com -
Malicious Typosquatted PyPI Packages Spreading SilentSync RAT
On 4 August 2025, two malicious PyPI packages named sisaws and secmeasure were discovered by Zscaler ThreatLabz to deliver SilentSync, a Python-based remote access trojan (RAT), to unsuspecting developers via typosquatting of legitimate libraries. The…
gbhackers.com -
Windows Greenshot Vulnerability Lets Attackers Execute Malicious Code – PoC Published
A critical security vulnerability in the Greenshot screenshot utility has been disclosed, allowing local attackers to execute arbitrary code within the trusted Greenshot process. The flaw, tracked as CVE-2025-59050, affects Greenshot versions up to 1.3.300…
gbhackers.com -
Google Patches Chrome Zero-Day CVE-2025-10585 as Active V8 Exploit Threatens Millions
Google has released security updates for Chrome to address four vulnerabilities, including a zero-day CVE-2025-10585 that it says has been exploited in the wild and is a type confusion in the V8 engine. According to Google, an exploit for CVE-2025-10585…
The Hacker News -
Raven Stealer Targets Google Chrome Users to Exfiltrate Sensitive Data
Raven Stealer is described as a sophisticated information‑stealing malware that targets Google Chrome and other Chromium‑based browsers, including Edge and Brave. It harvests passwords, cookies, payment data, and autofill entries from infected systems,…
gbhackers.com -
Hackers Abuse RTL/LTR Text Tricks and Browser Flaws to Mask Malicious Links
Cybersecurity researchers at Varonis Threat Labs have uncovered a persistent vulnerability that has remained unaddressed for over a decade, allowing attackers to exploit browser handling of Right-to-Left and Left-to-Right text scripts to create deceptive…
gbhackers.com -
Google Chrome 0-Day Under Active Attack – Update Immediately
Google has released an urgent security update for Chrome browser users worldwide, addressing four critical vulnerabilities, including one zero-day flaw that is currently being actively exploited in the wild. The most concerning vulnerability is…
gbhackers.com -
Notepad Goes Private: Microsoft Adds On-Device AI
Notepad is getting on-device AI capabilities, moving away from Microsoft Copilot’s cloud-based models that were subject to usage limits. According to the article, the feature allows Notepad to use local AI models on devices equipped with an NPU chip or NPU…
SecurityOnline -
Slow Charger? Your Apple Watch Now Has a New Warning for That
Apple Watch users are getting a new warning in watchOS 26 when charging speeds are unusually slow, a feature that follows a similar iOS 18 notification for iPhone when charging power is insufficient. When the watch detects a slower charging speed, it…
SecurityOnline -
Microsoft Paint’s New Features Are Making It More Like Photoshop
Microsoft Paint is being updated in a test release to resemble Photoshop more closely, with a new project feature that saves work as .paint files. The .paint format preserves the editing state rather than compressing it into a non-editable image, allowing…
SecurityOnline -
Meta’s New AI Tools Are Redefining the Metaverse
At this year’s Connect conference, Meta showcased a suite of AI-powered tools designed to make virtual worlds more lifelike and immersive, edging closer to a seamless creation-to-participation experience. At the heart of the update lies Horizon Engine,…
SecurityOnline -
New iPhone Air Camera Flaw: What You Need to Know
According to CNN, Henry Casey noticed a peculiarity while photographing a concert: roughly one in ten images taken with the iPhone Air or iPhone 17 Pro showed small black patches and wavy white lines. The anomaly appears to be triggered by LED backgrounds…
SecurityOnline -
The UK’s AI Revolution: NVIDIA’s £11 Billion Plan
NVIDIA has announced a sweeping partnership with the UK government and a coalition of industry leaders to build an unprecedented scale of AI infrastructure in the country, according to gov[.]uk. The centerpiece is a joint investment of £11 billion by NVIDIA,…
SecurityOnline -
Three Bugs Degraded Claude’s Response Quality
Since the start of August 2025, Claude’s response quality has degraded, with Anthropic later publishing a detailed postmortem explaining that the issues stemmed from bugs in the AI infrastructure rather than deliberate intervention. According to Anthropic, a…
SecurityOnline -
A Safer Chat: OpenAI Unveils ChatGPT for Teens
OpenAI has announced that by the end of 2025 it will officially launch “ChatGPT for Teens”, a version of its AI platform designed for users aged 13 to 18, with the aim of strengthening privacy and safety protections while giving parents enhanced management…
SecurityOnline -
The MacBook is Getting a Touchscreen, But Not How You Think
Renowned analyst Ming-Chi Kuo has revealed that Apple is preparing to bring touchscreen technology to its MacBook lineup, with the first model — an OLED MacBook Pro — expected to enter mass production by the end of 2026. The addition of a touchscreen to the…
SecurityOnline -
Meta Unveils Ray-Ban Display: Smart Glasses with a Built-In Screen
At Connect 2025, Meta officially unveiled its first smart glasses with a built-in display — the Ray-Ban Display — confirming that the device will launch in the United States on 30 September at a retail price of $799. The rollout will begin through physical…
SecurityOnline -
SonicWall Security Incident: Exposed Backups Could Put Your Firewall at Risk
SonicWall has disclosed a security incident involving the exposure of firewall configuration backup files stored within certain MySonicWall accounts, a breach announced on 18 September 2025. The exposed files contained sensitive configuration data that could…
SecurityOnline -
Jenkins Patches High-Severity Vulnerabilities, Including a DoS Flaw
Jenkins has released a security advisory addressing multiple high- and medium-severity flaws that could enable denial-of-service, unauthorized data access, or log manipulation in both weekly and Long-Term Support (LTS) releases. The most severe issue is…
SecurityOnline -
Hacktivists Launch Coordinated Attacks on India’s Infrastructure
According to CYFIRMA, India’s digital infrastructure faced an unprecedented surge in cross-border hacktivist operations during July–August 2025, combining breaches, disruptions, phishing and advanced malware against judicial, defence and transport sectors.…
SecurityOnline -
Chrome Emergency Update: Zero-Day (CVE-2025-10585) in V8 Exploited in the Wild
Google has released a Stable Channel update to version 140.0.7339.185/.186 for Windows and Mac, and 140.0.7339.185 for Linux, addressing four high-severity flaws, with CVE-2025-10585 in V8 highlighted as the zero-day already exploited in the wild. The…
SecurityOnline -
Introducing StepSecurity Threat Intelligence: Real-Time Supply Chain Attack Alerts for Your SIEM
StepSecurity has launched Threat Intelligence, a real-time supply chain attack alerting system designed for seamless SIEM and SOC integration, delivering actionable intelligence within minutes of compromise and cutting MTTD and MTTR from days to minutes. It…
StepSecurity -
Critical Vulnerabilities Discovered in Planet Technology Industrial Cellular Gateways
According to the Taiwan Computer Emergency Response Team / Coordination Center (TWCERT/CC) advisory, two critical vulnerabilities in Planet Technology’s Industrial Cellular Gateways have been disclosed, tracked as CVE-2025-9971 and CVE-2025-9972, each…
SecurityOnline -
Microsoft Dismantles RaccoonO365 Phishing Service
Microsoft’s Digital Crimes Unit (DCU) has dismantled the RaccoonO365 phishing service, seizing 338 websites linked to the operation and cutting off criminals’ access to victims, according to Microsoft. Since July 2024, RaccoonO365 kits have been used to…
SecurityOnline -
The Silent Spy: How Chinese Hackers are Exploiting U.S.-China Policy
TA415, the state-aligned Chinese threat actor also known as APT41, Brass Typhoon and Wicked Panda, has launched a series of spearphishing campaigns targeting U.S. government, think tank, and academic organisations in July and August 2025, according to…
SecurityOnlineAPT41 -
FileFix: A New Attack Hides Malware in Plain Sight
September 18, 2025 reports from Acronis’ Threat Research Unit (TRU) detail a rare in-the-wild FileFix campaign, the first observed outside proof-of-concept demonstrations and building on the recent ClickFix wave. The campaign uses steganography to embed a…
SecurityOnline -
Raven Stealer: A Stealthy New Threat in the Malware Ecosystem
Raven Stealer is a stealthy new entrant in the commodity malware ecosystem, designed as a lightweight information stealer targeting both individuals and enterprises, developed primarily in Delphi and C++. According to Point Wild’s analysis, it steals…
SecurityOnline -
Phoenix (CVE-2025-6202): A New Rowhammer Attack Bypasses DDR5 Protections
Phoenix (CVE-2025-6202) is a new Rowhammer attack that bypasses in-DRAM mitigations on DDR5, with researchers reporting that it affects all tested SK Hynix DDR5 devices and can lead to memory corruption and privilege escalation. According to ETH Zurich, the…
SecurityOnline -
From Simple Bug to RCE: A Flaw (CVE-2025-21692) in the Linux Kernel, PoC Published
A vulnerability tracked as CVE-2025-21692 has been disclosed in the Linux kernel, affecting the Enhanced Transmission Selection (ETS) qdisc, with a PoC and a deep technical write‑up published. The flaw stems from a logic error in the ets_class_from_arg…
SecurityOnline
