News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Fri 19 Sep 2025· 74 articles
-
Updates to Legion: A Cloud Credential Harvester and SMTP Hijacker
According to Cado Labs (now part of Darktrace), an updated version of Legion, a cloud credential harvester and SMTP hijacker, has been discovered with enhanced capabilities, including SSH abuse and the exploitation of additional AWS services such as…
darktrace.com -
Patch Now: Max-Severity Fortra GoAnywhere Bug Allows Command Injection
Fortra has released security updates for a maximum severity vulnerability in GoAnywhere MFT’s License Servlet, tracked as CVE-2025-10035, with the highest possible CVSS score of 10 out of 10. If exploited, the advisory notes that a threat actor with a…
Dark Reading -
Two of the Kremlin’s most active hack groups are collaborating, ESET says
Two of the Kremlin’s most active hacking units have been observed working together on malware attacks that target high-value Ukrainian devices, according to ESET. The two groups are Turla and Gamaredon, both widely considered to be units of Russia’s FSB.…
Ars Technica -
Capture the Flag Competition Leads to Cybersecurity Career
Capture the Flag competitions aren’t just for fun they can shape cybersecurity careers, as Splunk’s Boss of the SOC (BOTS) blue-team capture-the-flag event demonstrates during its annual .conf conference. According to Splunk, the 10-year-old contest tests…
Dark Reading -
'ShadowLeak' ChatGPT Attack Allows Hackers to Invisibly Steal Emails
ShadowLeak is a vulnerability that allows attackers to exfiltrate data from Gmail and other email environments through ChatGPT, with Radware researchers noting there is no trace on the end-user network. The attack works by embedding malicious code in an…
Dark Reading -
Fortra addressed a maximum severity flaw in GoAnywhere MFT software
Fortra addressed a maximum severity flaw in GoAnywhere MFT software, tracked as CVE-2025-10035 with a CVSS score of 10.0, described as a deserialization vulnerability in the License Servlet that could allow an attacker to execute arbitrary commands on…
Security Affairs -
'I Was a Weird Kid': Jailhouse Confessions of a Teen Hacker
Noah Urban, then an 18-year-old living in Palm Coast, Florida, watched a pixelated video in a Telegram group chat in September 2022 in which a boy begged him to transfer $200,000 to his captors, who were holding guns to his head. The article portrays Urban…
bloomberg.com -
UNC1549 Hacks 34 Devices in 11 Telecom Firms via LinkedIn Job Lures and MINIBIKE Malware
An Iran-nexus cyber espionage group known as UNC1549 has been attributed to a new campaign targeting European telecommunications firms, infiltrating 34 devices across 11 organisations. PRODAFT tracks the cluster under the name Subtle Snail and assesses it as…
The Hacker NewsUNC1549 -
Medical Associates of Brevard notifies 246,711 patients after cyberattack
Medical Associates of Brevard (MAB) notified 246,711 patients after a cyberattack, with the incident details first appearing when the Bian Lian ransomware gang added MAB to its dark web leak site on 23 January 2025. According to their submission to the Maine…
DataBreaches -
Top 10 AI Cyber Security Trainings
Published on 19 September 2025, the Top 10 AI Cyber Security Trainings guide from SOCRadar surveys programmes designed to blend cybersecurity with artificial intelligence. The list spans from SOCRadar’s own Mastering AI in Cybersecurity to offerings from…
SOCRadar -
‘I Was a Weird Kid’: Jailhouse Confessions of a Teen Hacker
Margi Murphy reports that on a September afternoon in 2022, a pixelated thumbnail of a teenager covered in blood appeared in a Telegram group chat, and Noah Urban, then an 18-year-old living in Palm Coast, Florida, watched as the kid begged for a transfer of…
DataBreaches -
In Other News: 600k Hit by Healthcare Breaches, Major ShinyHunters Hacks, DeepSeek’s Coding Bias
SecurityWeek’s In Other News reports that 600k people were affected by healthcare breaches, with Goshen Medical Center revealing a data breach impacting more than 450,000 individuals and the Retina Group of Florida exposing data for over 150,000 people. It…
SecurityWeekShinyHunters -
SystemBC Powers REM Proxy With 1,500 Daily VPS Victims Across 80 C2 Servers
SystemBC is a C-based malware that turns infected computers into SOCKS5 proxies, enabling communication with a C2 server and delivery of additional payloads. A proxy network named REM Proxy, powered by SystemBC, is said to offer about 80% of the botnet’s…
The Hacker News -
Plastic People, Plastic Cards: Synthetic Identities Plague Finance & Lending Sector
Synthetic identities are increasingly used to commit fraud in the finance and lending sector, with researchers warning that firms face mounting losses from new accounts. The total financial risk for lenders in the United States rose to $3.3 billion in 2024,…
Dark Reading -
Fortra Releases Critical Patch for CVSS 10.0 GoAnywhere MFT Vulnerability
Fortra has disclosed a critical vulnerability in GoAnywhere MFT, tracked as CVE-2025-10035, with a CVSS score of 10.0, the highest severity rating. The flaw is a deserialization vulnerability in the License Servlet that could allow an actor with a forged…
The Hacker News -
BreachLock Named Sample Vendor for PTaaS and AEV in Two New 2025 Gartner® Reports
BreachLock, the global leader in offensive security, has been recognised as a Sample Vendor for Penetration Testing as a Service (PTaaS) in the 2025 Gartner Hype Cycle for Application Security, and as a sample vendor for Adversarial Exposure Validation (AEV)…
SecurityOnline -
BreachLock Named Sample Vendor for PTaaS and AEV in Two New 2025 Gartner® Reports
BreachLock has been named as a Sample Vendor for Penetration Testing as a Service (PTaaS) and Adversarial Exposure Validation (AEV) in two Gartner reports, a move described by CyberNewsWire as recognising the company’s ongoing commitment to scalable,…
gbhackers.com -
17,500 Phishing Domains Target 316 Brands Across 74 Countries in Global PhaaS Surge
The phishing-as-a-service (PhaaS) offerings Lighthouse and Lucid have been linked to more than 17,500 phishing domains targeting 316 brands across 74 countries. According to Netcraft, these deployments show the scale of the current PhaaS campaigns and the…
The Hacker News -
Transforming Cyber Frameworks to Take Control of Cyber-Risk
CIOs, CTOs and CISOs today must continually adapt security protocols and tooling to keep pace with a shifting technology landscape, a challenge that is especially acute for public sector cyber leaders working with limited budgets and lean IT teams. The piece…
Dark Reading -
Iranian State APT Blitzes Telcos & Satellite Companies
Iranian state-backed actors are behind a campaign described as some of the most bespoke cyberattacks observed, targeting 11 global telecommunications firms, satellite operators and aerospace equipment manufacturers. In the span of just a couple of weeks,…
Dark Reading -
Top 10 Best API Security Testing Companies in 2025
GBHackers’ Top 10 Best API Security Testing Companies in 2025 ranks Salt Security, Traceable, Imperva, APIsec, StackHawk, Akto[.]io, Cequence Security, Noname Security, Levo and Treblle as the leading API security testing providers for the year. The piece,…
gbhackers.com -
Critical Azure Entra ID Flaw Highlights Microsoft IAM Issues
A critical Microsoft authentication vulnerability in Entra ID could have enabled cross‑tenant compromises, according to researcher Dirk-jan Mollema, who disclosed the flaw after finding an authentication failure in the Azure AD Graph API. The elevation of…
Dark Reading -
Turla2 articles this day · gbhackers.com first
Turla and Gamaredon Working Together in Fresh Ukrainian Intrusions · Russian Hacking Groups Gamaredon and Turla Target Organizations to Deliver Kazuar Backdoor
2 outlets-
Turla and Gamaredon Working Together in Fresh Ukrainian Intrusions
Two Russian state-sponsored threat actors have been working together in recent cyberattacks against Ukrainian targets, according to ESET. The company found that between February and April 2025, tools that Gamaredon had deployed were used to restart and…
SecurityWeek -
Russian Hacking Groups Gamaredon and Turla Target Organizations to Deliver Kazuar Backdoor
Two prominent Russian state‑sponsored hacking groups, Gamaredon and Turla, have been observed collaborating in sophisticated cyberattacks against Ukrainian organisations to deploy the Kazuar backdoor. Security researchers say the effort shows unprecedented…
gbhackers.com
-
-
Dark Web Profile: Dire Wolf Ransomware
According to SOCRadar, Dire Wolf emerged in 2025 and quickly carried out disruptive ransomware attacks in multiple regions, with the group appearing on dark web leak sites within weeks of its public debut. The threat group is described as financially…
SOCRadar -
HubSpot’s Jinjava Engine Flaw Exposes Thousands of Sites to RCE Attacks
HubSpot’s Jinjava template engine has a critical flaw that could expose thousands of sites to remote code execution. The issue, tracked as CVE-2025-59340, carries a CVSS v3.1 score of 10.0 and stems from a sandbox bypass that lets attackers circumvent…
gbhackers.com -
AI-Driven Phishing Attacks: Deceptive Tactics to Bypass Security Systems
The article discusses the rise of AI-driven phishing attacks that utilize platforms like Lovable, Netlify, and Vercel to host fake captcha pages. These phishing campaigns mislead users by presenting a captcha challenge, which lowers suspicion and evades…
gbhackers.com -
ChatGPT Deep Research zero-click vulnerability fixed by OpenAI
OpenAI has patched a vulnerability dubbed ShadowLeak in its ChatGPT Deep Research project, which researchers disclosed yesterday. The zero-click flaw could be exploited by sending a specially crafted email to a target, leaking sensitive inbox information…
Malwarebytes -
FOIA Document on Breach of Sensitive DHS Domestic Intelligence Sharing Portal
A 2024 internal oversight report from the Office of Intelligence and Analysis of the U.S. Department of Homeland Security shows a two-months-long data breach in an intelligence sharing hub that compromised sensitive information from the FBI, the National…
DataBreaches -
CISA Analyzes Malware From Ivanti EPMM Intrusions
According to CISA, malware deployed in attacks targeting Ivanti EPMM exploited two vulnerabilities, CVE-2025-4427 (CVSS 5.3) and CVE-2025-4428 (CVSS 7.2), which were disclosed on 13 May after initial exploitation began. By late May, it emerged that a…
SecurityWeek -
ChatGPT Tricked Into Solving CAPTCHAs
SecurityWeek reports that the AI security platform SPLX demonstrated how prompt injections can bypass a ChatGPT agent’s built-in policies to solve CAPTCHAs. In their test, they primed a ChatGPT-4o chat by asking it to solve a list of fake CAPTCHAs and to…
SecurityWeek -
Luxury Jeweler Tiffany Reports Data Breach Exposing User Personal Data
According to GBHackers on Security, luxury jeweller Tiffany and Company has confirmed a data breach that exposed the personal information of 2,590 customers. The company detected unauthorized access to an external system on 9 September 2025, though the…
gbhackers.com -
How To Automate Alert Triage With AI Agents and Confluence SOPs Using Tines
According to The Hacker News, run by the team at workflow orchestration and AI platform Tines, a prebuilt workflow in its library uses AI agents to automatically identify and deploy the appropriate SOPs from Confluence to triage security alerts. The…
The Hacker News -
Scattered Spider2 articles this day · gbhackers.com first
UK police arrested two teen Scattered Spider members linked to the 2024 attack on Transport for London · UK Police Arrest Two Scattered Spider Hackers Over London Transport Breach
2 outlets-
UK police arrested two teen Scattered Spider members linked to the 2024 attack on Transport for London
UK police have arrested two teenagers who are members of the Scattered Spider group in connection with the August 2024 cyberattack on Transport for London (TfL), according to the National Crime Agency announcement. The suspects are Thalha Jubair, 19, from…
Security Affairs -
UK Police Arrest Two Scattered Spider Hackers Over London Transport Breach
UK law enforcement agencies have arrested two individuals linked to the Scattered Spider cybercriminal group in connection with a sophisticated attack on London’s transport networks. The arrests were announced on Tuesday and involved 19-year-old Thalha…
gbhackers.com
-
-
Nokia CBIS/NCS Manager API Vulnerability Allows Attackers to Bypass Authentication
According to Orange Cert, on 18 September 2025 a critical authentication bypass vulnerability affecting Nokia’s CBIS (CloudBand Infrastructure Software) and NCS (Nokia Container Service) Manager API, CVE-2023-49564, was publicly disclosed. The flaw carries a…
gbhackers.com -
Netskope Raises Over $908 Million in IPO
According to SecurityWeek, Netskope has debut on Nasdaq and its shares rose more than 18%, boosting the company’s value to about $8.6 billion. The California-based secure access service edge provider priced its IPO at $19 per share, selling 47.8 million…
SecurityWeek -
Threat landscape for industrial automation systems in Q2 2025
According to Kaspersky ICS CERT, the threat landscape for industrial automation systems in Q2 2025 saw the percentage of ICS computers blocked for malicious objects fall to 20.5%, a decline of 1.4 percentage points from the previous quarter. The rate was…
securelist.com -
Reddit Demands More from Google: A New Era for AI Deals?
Reddit is renegotiating its licensing deal with Google, which currently pays $60 million annually for access to Reddit content used to train AI models. According to an unnamed company executive, the talks focus on two core demands: stronger support from…
SecurityOnline -
Gemini is Now Free in Chrome: Here’s What It Can Do for You
Google has announced that Gemini, its intelligent assistant previously reserved for AI Pro and AI Ultra subscribers, is now freely available to all Chrome desktop users in the United States, provided the browser language is set to English. According to…
SecurityOnline
