News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Mon 22 Sep 2025· 80 articles
-
Operation Rewrite: Chinese-Speaking Threat Actors Deploy BadIIS in a Wide Scale SEO Poisoning Campaign
In March 2025, Unit 42 uncovered a wide-scale SEO poisoning campaign dubbed “Operation Rewrite,” driven by a Chinese-speaking threat actor, with infrastructure and techniques overlapping with the Group 9 cluster and connections to DragonRank. The campaign…
unit42.paloaltonetworks.com -
[Dark Reading Virtual Event] Know Your Enemy: How cybercriminals and nation-state hackers operate
According to Dark Reading, the Know Your Enemy: How cybercriminals and nation-state hackers operate event is a full-day virtual event scheduled for 13 November 2025. It will examine the most prolific threat actors in cybercrime and cyber espionage and how…
Dark Reading -
Iran-Linked Hackers Target Europe With New Malware
An Iran-linked cyber-espionage group known as Nimbus Manticore has expanded its operations beyond the Middle East to target Western Europe’s critical infrastructure, with Denmark, Portugal and Sweden named as targets for defense manufacturing,…
Dark Reading -
Attackers Use Phony GitHub Pages to Deliver Mac Malware
An emerging threat campaign is using targeted SEO poisoning to hit Mac users with infostealers, according to LastPass's Threat Intelligence, Mitigation, and Escalation (TIME) team. The group publishes GitHub repositories that claim to offer MacOS versions of…
Dark Reading -
No Need to Hack When It’s Leaking: App for outing Charlie Kirk’s critics leaked its users’ personal data
An app called Cancel the Hate, used to anonymously report individuals accused of criticising Charlie Kirk, leaked its users’ personal data and was taken offline while Straight Arrow News investigates the breach. The article notes the app launched in the wake…
DataBreaches -
Potent Atomic credential stealer can bypass Gatekeeper
According to LastPass, malware distributors are using prominent ads to impersonate a wide range of services and infect Macs with a potent credential stealer, with the latest targeting LastPass users. Late last week, LastPass said it detected a campaign that…
Ars Technica -
Stellantis probes data breach linked to third-party provider
Stellantis is investigating a data breach after unauthorized access to a third-party provider’s platform that supports its North American customer service operations, with the company not naming the impacted provider. The multinational carmaker said the…
Security Affairs -
Understanding CCSPA | Definition & Requirements
According to the Canadian Centre for Cybersecurity (Cyber Centre), the Canadian federal Government introduced Bill C-8 to enact the Critical Cyber Systems Protection Act (CCSPA), giving Canada its first federal, cross-sector, legally binding cybersecurity…
darktrace.com -
Top 10 Best Cybersecurity Compliance Management Software in 2025
GBHackers On Security surveys the Top 10 Best Cybersecurity Compliance Management Software in 2025, highlighting Drata, Vanta, OneTrust, Hyperproof, AuditBoard, Secureframe, LogicGate, Cyber Sierra, Risk Cognizance, and ZenGRC (Reciprocity). The piece notes…
gbhackers.com -
ComicForm and SectorJ149 Hackers Deploy Formbook Malware in Eurasian Cyberattacks
A previously undocumented hacking group named ComicForm has been targeting organisations in Belarus, Kazakhstan and Russia since at least April 2025, according to NSHC ThreatRecon Team. The phishing campaign sends emails with Russian or English text and…
The Hacker NewsComicForm -
Beware of Zelle transfer scams
Beware of Zelle transfer scams explains how social engineering is used to drain victims’ money, with the case of Michael Wilson who was contacted by scammers spoofing a Chase Bank number and claiming fraudulent Zelle transfers had been made in his name. The…
Malwarebytes -
Airport Chaos Shows Human Impact of 3rd-Party Attacks
A cyberattack targeting Collins Aerospace’s MUSE software used for airport check-in and baggage tagging disrupted several European hubs over the weekend, with major venues such as Heathrow reporting issues that led to delays and some cancellations. According…
Dark Reading -
ChatGPT solves CAPTCHAs if you tell it they’re fake
ChatGPT can bypass image-based CAPTCHAs when it is primed that the challenges are fake, a finding reported in Malwarebytes’ post dated 22 September 2025. The article notes that researchers used prompt injection to persuade ChatGPT-4o that it was solving fake…
Malwarebytes -
15 Years of Zero Trust: Why It Matters More Than Ever
Fifteen Years of Zero Trust: Why It Matters More Than Ever argues that zero trust remains essential as attacks evolve with AI, quantum computing, and billions of hyper-connected devices. The piece traces the model back to John Kindervag’s early work at…
Dark Reading -
BlockBlasters Steam Game Disguises Malware as Patch for Computer Download
BlockBlasters, a vibrant 2D platformer/shooter from Genesis Interactive, launched on 31 July 2025 but the August patch Build 19799326, released on 30 August 2025, concealed malware rather than a routine update. According to G DATA MXDR, the patch carried…
gbhackers.com -
Stellantis Confirms Data Breach Affecting Citroën, Fiat, Jeep, and More
Stellantis has confirmed a data breach affecting its North American customer service operations, potentially impacting customers across brands including Citroën, Fiat, Jeep, and Chrysler. The company detected unauthorized access to a third‑party service…
gbhackers.com -
FBI alerts public to spoofed IC3 site used in fraud schemes
The FBI warns that criminals are spoofing the official Crime Complaint Center (IC3) website to steal personal data and commit financial fraud, targeting users who report cybercrimes. The fake sites mimic the real IC3 domain by making slight changes in…
Security Affairs -
Mycroft Raises $3.5 Million for AI-Powered Security and Compliance Platform
Mycroft, a Canada-based startup, has emerged from stealth with a platform that uses autonomous AI agents to manage and operate the security and IT stack. The company has raised $3.5 million in seed funding in a round led by Luge Capital, with participation…
SecurityWeek -
Come build with us: Cloudflare's new hubs for startups
Cloudflare is expanding its offices into a new, more open model for startups, with doors planned to be opened to external startups and builders from 2026 for collaboration, networking, or simply working in a new location. Beginning in January 2026, selected…
Cloudflare -
Free access to Cloudflare developer services for non-profit and civil society organizations
Cloudflare has announced that non-profit, civil society and public interest organisations are now eligible to join Cloudflare for Startups, with credits of up to $250,000 available for a range of developer and core products. According to Cloudflare, the…
Cloudflare -
Introducing free access to Cloudflare developer features for students
Cloudflare has announced free access to its developer features for students, with 12 months of free access for eligible student accounts in the United States who have a verified .edu email address. According to Cloudflare, the offer covers Workers, Pages…
Cloudflare -
Cap'n Web: a new RPC system for browsers and web servers
Cap'n Web is a new RPC protocol and implementation in pure TypeScript, described as a spiritual sibling to Cap'n Proto and designed to fit neatly into the web stack. It is an object-capability RPC system with bidirectional calling, allows passing functions…
Cloudflare -
A Lookback at Workers Launchpad and a Warm Welcome to Cohort #6
Launchpad is expanding beyond a programme to become a growing community of builders, and Cloudflare has now introduced Cohort #6 as the next group of entrepreneurs to take the stage. Since 2022, the launchpad has welcomed 145 startups from 23 countries,…
Cloudflare -
Help build the future: announcing Cloudflare’s goal to hire 1,111 interns in 2026
The Cloudflare blog outlines its most ambitious intern programme yet, aiming to hire as many as 1,111 interns over the course of 2026, in hub locations around the world. The programme emphasises real work, with interns joining active teams and delivering…
Cloudflare -
Supporting the future of the open web: Cloudflare is sponsoring Ladybird and Omarchy
Cloudflare has announced sponsorship of two independent, open source projects, Ladybird and Omarchy, as part of its effort to support the future open web. Ladybird is described as a new, independent browser built from scratch, with two main components:…
Cloudflare -
Nimbus Manticore Deploys New Malware Targeting Europe
Nimbus Manticore, a mature Iran-nexus APT tracked by Check Point Research as UNC1549 or Smoke Sandstorm, has been operating a long‑running campaign targeting defence manufacturing, telecommunications and aviation, aligned with IRGC priorities. The group has…
Check PointUNC1549 -
Threat Actors Exploit Oracle Database Scheduler to Infiltrate Corporate Networks
Threat actors have begun exploiting the Oracle Database Scheduler’s External Jobs feature to execute arbitrary commands on corporate database servers, enabling stealthy initial footholds and rapid escalation of privileges. By abusing the extjobo[.]exe…
gbhackers.com -
Researchers Earn $150,000 for L1TF Exploit Leaking Data From Public Cloud
Academic researchers from Vrije Universiteit Amsterdam demonstrated that transient execution CPU vulnerabilities are practical to exploit in real-world scenarios to leak memory from VMs running on public cloud services, in what SecurityWeek describes as L1TF…
SecurityWeek -
European Airport Disruptions Caused by Ransomware Attack
European airports experienced disruptions after a ransomware attack on Collins Aerospace, with the incident affecting check-in and boarding systems across Europe and forcing some operations to revert to manual processes, causing delays and flight…
SecurityWeek -
Stellantis detects breach at third-party provider for North American customers
According to Reuters, Stellantis detected unauthorised access to a third-party service provider’s platform that supports its North American customer service operations, with the incident still under investigation. The company said the breach exposed only…
DataBreaches -
Data Leak? Crypto.com Fires Back At ‘Unfounded’ Allegations
According to Bloomberg and several other news outlets, Crypto[.]com has pushed back against a report that a 2023 breach exposed user details and was kept from authorities. The story centres on a hacking group known as Scattered Spider and a young suspect…
DataBreaches -
Cloudflare 0-Day, Ameli Patient Leak, and New Fraud Tools Detected on Dark Web
SOCRadar’s Dark Web Team has identified a wave of underground listings that highlight both technical exploits and large-scale data breaches, including a threat actor claiming to sell a private Cloudflare 0-Day bypass method through Host Header Injection,…
SOCRadar -
Inboxfuscation Tool Bypasses Exchange Inbox Rules and Evades Detection
Advanced persistent threat actors are increasingly targeting Microsoft Exchange inbox rules to maintain persistence and siphon data without triggering alarms, according to gbHackers. The newly released Inboxfuscation tool delivers a Unicode-based obfuscation…
gbhackers.com -
⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 Bit-Flips, npm Worm & More
The weekly recap focuses on a rapid-fire threat landscape, led by Google patches for Chrome including CVE-2025-10585, a zero-day described as a type confusion in V8 that has been exploited in the wild. It also highlights a wave of AI and supply‑chain…
The Hacker News -
Heathrow Airport Cyberattack: What Happened, Who’s Affected, and What CISOs Should Know
According to Heathrow Airport, on the night of Friday 19 September 2025 a cyberattack targeted Collins Aerospace’s Muse software, a cloud-based platform used for electronic check-ins and boarding, rendering check-in systems offline at several major airports…
SOCRadar -
Code Analysis Published for Chrome Type Confusion 0-Day Vulnerability
According to Google’s Threat Analysis Group, a critical zero-day flaw in the TurboFan compiler of Chrome’s V8 JavaScript engine was discovered on 16 September 2025 and is tracked as CVE-2025-10585. The vulnerability allows attackers to trigger a type…
gbhackers.com -
Subtle Snail Impersonation Tactics: How HR Representatives Can Engage Employees to Steal Login Credentials
Subtle Snail, an Iran-linked espionage group also tracked as UNC1549 under the Unyielding Wasp (Tortoiseshell) umbrella of the Charming Kitten network, has shifted its focus to European telecom, aerospace and defence firms since June 2022. In a recent wave,…
gbhackers.com -
HoundBytes Launches Automated Security Analyst
HoundBytes, a Romania-based cybersecurity consultant and MDR firm, has launched WorkHorse, an automated security analyst designed to replace the repetitive work of Tier 1 SOC analysts. According to SecurityWeek, the solution easily integrates with an…
SecurityWeek -
BlackLock Ransomware Targets Windows, Linux, and VMware ESXi Systems
BlackLock, a rebranded ransomware group formerly known as El Dorado, has emerged as a cross‑platform threat, with analysis showing it can target Windows, Linux and VMware ESXi systems using a single Go‑written binary. According to AhnLab Security…
gbhackers.comBlackLock -
How to Gain Control of AI Agents and Non-Human Identities
Non-human identities—including service accounts, API tokens, and AI agents—are proliferating in cloud-first environments, often created automatically and left unmanaged with little ownership or oversight, according to The Hacker News. The article notes that…
The Hacker News
