News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Fri 19 Sep 2025· 74 articles
-
Scattered Spider5 articles this day · Ars Technica first
Two Scattered Spider Suspects Arrested in UK; One Charged in US · U.K. Arrests Two Teen Scattered Spider Hackers Linked to August 2024 TfL Cyber Attack
4 outlets-
Two Scattered Spider Suspects Arrested in UK; One Charged in US
Two Scattered Spider suspects have been arrested in the UK and another charged in the US over the group’s alleged cyber offences, with Thalha Jubair, 19, from East London, and Owen Flowers, 18, from Walsall, West Midlands, facing UK charges related to a TfL…
SecurityWeek -
U.K. Arrests Two Teen Scattered Spider Hackers Linked to August 2024 TfL Cyber Attack
UK law enforcement has arrested two teen members of the Scattered Spider hacking group in connection with an August 2024 cyber attack on Transport for London (TfL), the National Crime Agency said. Thalha Jubair, 19, from East London, and Owen Flowers, 18,…
The Hacker News -
DOJ Charges UK National Linked to Scattered Spider in $115M Cyber Extortion Scheme
The U.S. Department of Justice (DOJ) has unsealed a criminal complaint charging Thalha Jubair, a 19-year-old United Kingdom national, with leading roles in an international cybercrime and extortion campaign attributed to the Scattered Spider group.…
SecurityOnline -
ShinyHunters Expands With AI-Powered Vishing, Supply Chain Intrusions, and Insider Recruitment
ShinyHunters, one of the most notorious financially motivated eCrime groups, is broadening its arsenal with AI-driven social engineering, supply chain compromises, and insider recruitment, according to new research from EclecticIQ. Analysts warn that…
SecurityOnline -
Two UK teens charged in connection to Scattered Spider ransomware attacks
According to Ars Technica, two UK teens have been charged in connection with the Scattered Spider ransomware attacks: Thalha Jubair, 19, of London, and Owen Flowers, 18, from Walsall in the West Midlands. The US and UK authorities say Jubair was part of…
Ars Technica
-
-
CISA Alerts of Hackers Targeting Ivanti Endpoint Manager Mobile Vulnerabilities to Distribute Malware
According to CISA, cyber threat actors weaponised two critical Ivanti Endpoint Manager Mobile (EPMM) vulnerabilities—CVE-2025-4427 and CVE-2025-4428—to deploy sophisticated loaders and listeners on compromised servers. The malware comprises two loader…
gbhackers.com -
Why Are YouTube View Counts Plummeting? The Surprising Reason Behind the Drop
Since August, numerous YouTube creators have reported a sharp decline in video view counts, with technology-focused channels some days seeing drops as high as 50%. The open-source filter list EasyList released an update on 11 August 2025 that added a rule…
SecurityOnline -
Russian Airline Hit by Cyberattack, Website and Systems Disrupted
KrasAvia, a Russian regional carrier, is grappling with a major IT outage that appears to follow a cyberattack, with online booking completely down since early Friday and passengers unable to buy tickets online. The airline has redirected customers to…
gbhackers.com -
Russian Hackers Gamaredon and Turla Collaborate to Deploy Kazuar Backdoor in Ukraine
Cybersecurity researchers have found that two Russian groups, Gamaredon and Turla, are collaborating to target Ukrainian entities and deploy Kazuar backdoors, according to ESET. The Slovak firm observed Gamaredon tools PteroGraphin and PteroOdd used to run…
The Hacker NewsTurla -
New iOS Video Injection Tool Bypasses Biometric Locks on Jailbroken iPhones
A newly discovered video injection toolkit for iOS devices that have been jailbroken can circumvent biometric checks and even exploit services lacking biometric safeguards. Developed to run on iOS 15 or later, the toolkit uses a remote presentation transfer…
gbhackers.com -
Weaponized ScreenConnect App Spreads AsyncRAT and PowerShell RAT
Remote Monitoring and Management tools such as ConnectWise ScreenConnect are being abused as Trojan delivery vectors, with installers trojanised to deploy dual Remote Access Trojans—AsyncRAT and a custom PowerShell RAT—against U.S. organisations, according…
gbhackers.com -
Unpatched Vulnerabilities Expose Novakon HMIs to Remote Hacking
Unpatched vulnerabilities in Novakon’s HMIs could enable remote hacking, with researchers finding five flaw types in the vendor’s industrial‑control products. According to CyberDanube’s advisory, the issues include an unauthenticated buffer overflow that…
SecurityWeek -
Researchers Reveal Connection Between Belsen and ZeroSeven Cybercrime Groups
According to KELA, the analysis points to a potential connection between two Yemen-linked threat actors: the newly surfaced Belsen Group and the longer‑standing ZeroSevenGroup. The Belsen Group first appeared in January 2025 on BreachForums, announcing the…
gbhackers.com -
Cloudflare Confirms API Outage Caused by React useEffect Overload Issue
Cloudflare experienced a significant outage on 12 September 2025, affecting its Tenant Service API, multiple APIs, and the Cloudflare Dashboard. According to Cloudflare, the incident was primarily triggered by a React programming bug that caused excessive…
gbhackers.com -
Windows 11 Notepad to Receive AI Upgrade for Free Text Writing and Summarizing
Microsoft has announced a significant upgrade to Windows 11 Notepad, introducing AI-powered writing assistance directly into the classic text editor. The update adds three core functions—Write, Summarize, and Rewrite—accessible via the right-click context…
gbhackers.com -
SystemBC Botnet Compromises 1,500 VPS Every Day to Rent Out for DDoS Attacks
SystemBC, a resilient SOCKS5 malware network first spotted in 2019, has evolved its proxy infrastructure to compromise an average of 1,500 virtual private servers (VPS) each day, shifting from residential devices to high‑capacity VPS nodes for broader…
gbhackers.com -
New Loader “CountLoader” Uses PDFs to Launch Ransomware Attacks
Security researchers have uncovered CountLoader, a new malware loader that uses weaponised PDF files to deliver ransomware payloads across multiple regions, with a focus on Ukrainian targets. The loader operates in three versions—.NET, PowerShell, and…
gbhackers.com -
0-Click ChatGPT Agent Flaw Exposes Gmail Data to Attackers
Researchers have identified a critical zero-click flaw in ChatGPT’s Deep Research agent that can silently exfiltrate Gmail data without any user interaction, according to Radware. The attack uses service-side exfiltration techniques, operating entirely…
gbhackers.com -
SolarWinds Issues Advisory Following Salesloft Drift Security Breach
On 19 September 2025, SolarWinds Corporation released an official security advisory in response to a significant data breach involving Salesforce systems. The breach, which occurred through compromised OAuth tokens linked to the Salesloft Drift integration,…
gbhackers.com -
CISA Warns of Two Malware Strains Exploiting Ivanti EPMM CVE-2025-4427 and CVE-2025-4428
According to CISA, two sets of malware were found in an unnamed organisation’s network after Ivanti Endpoint Manager Mobile (EPMM) was exploited via CVE-2025-4427 and CVE-2025-4428, which have been abused as zero-days prior to Ivanti’s May 2025 fixes. The…
The Hacker News -
The Great Firewall Leaks: A 600GB Trove of Secrets Exposed
China’s Great Firewall has suffered what researchers describe as the largest data breach in its history, with nearly 600GB of files leaked. The trove includes source code, internal communications, work documents and complete server images, offering for the…
SecurityOnline -
Intel’s Arc GPUs Are Safe, But a “Murky Future” Looms
Intel’s Arc GPUs are described as not being discontinued, with the piece noting that Intel intends to maintain its own GPU product line while continuing to invest in R&D, even as market observers speculate about a scaled-back approach. The article reports…
SecurityOnline -
Steam to End Support for 32-Bit Windows 10
Steam has announced its support roadmap for 32-bit Windows 10, confirming that Steam for Windows 10 (32-bit) will reach end of support on 1 January 2026, after which users will no longer receive updates of any kind for the client. While the software will not…
SecurityOnline -
The iPhone Fold is Coming: Apple’s 2026 Strategy Revealed
According to Nikkei Asia, Apple has informed its supply chain partners that shipments of the iPhone 18 series, slated for release in 2026, will increase by 10% compared with this year, with a long‑rumoured foldable iPhone reportedly planned for trial…
SecurityOnline -
NVIDIA and Intel Form Historic Partnership to Redefine Computing
On 19 September 2025, NVIDIA announced a deep strategic partnership with Intel following substantial moves in the ownership and collaboration space, including the U.S. government becoming Intel’s largest shareholder with an $8.9 billion investment. The deal…
SecurityOnline -
Nokia Patches Critical Flaws in CloudBand and NCS: CVE-2023-49564 and CVE-2023-49565
Nokia has published a security advisory warning customers of two high-severity vulnerabilities affecting its CloudBand Infrastructure Software (CBIS) and Nokia Container Services (NCS) platforms. The flaws, CVE-2023-49564 and CVE-2023-49565, carry CVSS base…
SecurityOnline -
CVE-2025-59340: Critical HubSpot’s Jinjava Engine Flaw Exposes Thousands of Websites to RCE
CVE-2025-59340 is a critical flaw in HubSpot’s Jinjava template engine that powers thousands of websites and processes hundreds of millions of page views per month on the HubSpot CMS. The vulnerability (CVSS 9.8) could allow attackers to bypass Jinjava’s…
SecurityOnline -
CISA Warns of Malicious Listener Malware Exploiting Ivanti Endpoint Manager Mobile
According to The Cybersecurity and Infrastructure Security Agency (CISA), a Malware Analysis Report details threat actors exploiting vulnerabilities in Ivanti Endpoint Manager Mobile (EPMM) to deploy malicious listeners and execute arbitrary code on…
SecurityOnline -
CVE-2025-10035 (CVSS 10): Critical Deserialization Flaw in GoAnywhere MFT Exposes Enterprises to Remote Exploitation
CVE-2025-10035 (CVSS 10) is a newly disclosed deserialization flaw in Fortra’s GoAnywhere MFT, carrying the maximum CVSS score of 10.0, and the issue resides in the product’s License Servlet, posing a severe risk to organisations that expose their GoAnywhere…
SecurityOnline -
MuddyWater APT Shifts Tactics to Custom Malware
Group-IB analysts have released new intelligence on MuddyWater, the Iranian state‑sponsored APT linked to Tehran’s Ministry of Intelligence and Security, signalling a continued rise in operational sophistication. The report notes a shift away from widespread…
SecurityOnlineMuddyWater -
XillenStealer: New Open-Source Malware Lowers Cybercrime Barrier
XillenStealer is described as an open-source, Python-based information stealer publicly available on GitHub, with its core features including harvesting host identifiers, hardware specifications, browser credentials, cryptocurrency wallets, and network…
SecurityOnline -
CISA Warns of Critical Flaw in Delta DIALink: CVE-2025-58321 (CVSS 10.0)
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a security advisory warning of two serious vulnerabilities in Delta Electronics DIALink, a widely used industrial networking tool. The flaws, CVE-2025-58320 and CVE-2025-58321, arise from…
SecurityOnline -
North Korean Hackers Evolve Tactics with New Malware Campaign
GitLab Threat Intelligence has published a detailed analysis of a new malware campaign linked to North Korean nation-state actors, marking a tactical evolution in how groups like Contagious Interview and Famous Chollima deploy their tools. According to the…
SecurityOnline -
The Adtech as a Threat Actor: How Vane Viper Is Hiding in Plain Sight
According to Infoblox, Vane Viper is a prolific threat actor that operates as an adtech platform, using its corporate parent AdTech Holding and subsidiary PropellerAds to run a wide-reaching traffic distribution system. The report notes that Vane Viper has…
SecurityOnline
