News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Mon 22 Sep 2025· 80 articles
-
God Mode Vulnerability Lets Attackers Access Any Resource in Microsoft Cloud Tenants
A recently disclosed flaw, tracked as CVE-2025-55241, allowed any attacker in possession of a single “Actor token” from a test or lab tenant to assume full administrative control over every Microsoft Entra ID (Azure AD) customer globally. Security researcher…
gbhackers.com -
Kawa4096 Ransomware Targets Multinational Corporations to Steal Sensitive Data
In June 2025, a previously unknown ransomware group dubbed Kawa4096 emerged, quickly drawing attention for targeting multinational organisations across finance, education and services in countries including Japan and the United States. The operation is…
gbhackers.com -
EU agency ENISA says ransomware attack behind airport disruptions
EU agency ENISA says that disruptions at multiple European airports were caused by a cyberattack linked to ransomware, with a third‑party services provider affected and law enforcement now investigating. The incident disrupted Collins Aerospace Muse…
Security Affairs -
Widespread Infostealer Campaign Targeting macOS Users
SecurityWeek reports a widespread campaign infecting macOS users by exploiting fraudulent GitHub repositories that impersonate well-known brands, including LastPass, to deliver the Atomic infostealer malware (AMOS). LastPass identifies two GitHub sites…
SecurityWeek -
FBI Warns of Spoofed IC3 Website
The article reports that the FBI warns of threat actors spoofing the official Internet Crime Complaint Center (IC3) government website, a hub for reporting cybercrime-related activity such as online extortion and ransomware. Spoofed IC3 sites are created to…
SecurityWeek -
Massive Lucid PhaaS Campaign: 17,500 Phishing Domains Mimic 316 Global Brands
Cybersecurity researchers have tied two sophisticated phishing campaigns to the Lucid and Lighthouse Phishing-as-a-Service platforms, revealing a massive operation that deployed over 17,500 phishing domains targeting 316 brands across 74 countries. The…
gbhackers.com -
Warning: New Windows 11 Updates Break Video Playback
According to Microsoft’s list of known issues updated on September 19, 2025, Windows 11 version 24H2 encounters playback failures for certain DRM-protected videos after installing the August 2025 Preview Update (KB5064081) or the September 2025 Patch Tuesday…
SecurityOnline -
Windows 11 Is Getting a Native Video Wallpaper Feature
Windows 11 is moving towards native video wallpapers, with Microsoft reportedly preparing the feature for official release after years of reliance on third‑party tools. The rollout is expected in upcoming Windows 11 updates for versions 24H2 and 25H2, with…
SecurityOnline -
MediaTek Unveils Dimensity 9500, a New King for Mobile AI and Gaming
MediaTek has officially unveiled the Dimensity 9500, its flagship computing platform built on TSMC’s third-generation 3nm (N3P) process, featuring an all-big-core CPU architecture and a dual-NPU AI computing engine. The CPU configuration consists of one…
SecurityOnline -
Apple’s In-House Chips Pave the Way for On-Device AI Revolution
Apple’s push to self-develop its own chips is accelerating, with the A-series and M-series lineage expanding to the Apple 16e, which debuted the company’s first proprietary 5G modem, the C1, and now the N1 wireless networking chip and the upgraded C1X 5G…
SecurityOnline -
Canada Police Shuts Down TradeOgre After $56M Crypto Theft
Montréal, Quebec, 18 September 2025 – in an unprecedented operation, the Royal Canadian Mounted Police (RCMP) Federal Policing – Eastern Region has executed the largest cryptocurrency seizure in Canadian history, recovering over 56 million dollars from the…
gbhackers.com -
Researchers expose MalTerminal, an LLM-enabled malware pioneer
Researchers exposed MalTerminal, the earliest known malware with built-in LLM capabilities, which SentinelLABS presented at LABScon 2025. According to SentinelLabs, MalTerminal can generate malicious logic at runtime, complicating detection as it uses LLMs…
Security Affairs -
Threat Actors Fake FBI IC3 Portal to Steal Visitor Information
Threat actors are spoofing the FBI’s IC3 portal to harvest visitor information, with the aim of tricking people into filing reports on fraudulent sites that mimic IC3[.]gov. According to FBI Alert I-091925-PSA, released on 19 September 2025, these fraudulent…
gbhackers.com -
Cybercriminals Exploit ICS Computers via Scripts and Phishing Attacks
Industrial control systems (ICS) continue to face rising cybersecurity challenges as threat actors use sophisticated malicious scripts and phishing campaigns to target critical infrastructure, according to new data from Q2 2025. While overall attack rates…
gbhackers.com -
Fortra Patches Critical GoAnywhere MFT Vulnerability
Fortra has released patches for a critical vulnerability in its GoAnywhere MFT software, tracked as CVE-2025-10035 with a CVSS score of 10, described as a deserialization of untrusted data issue that could enable command injection. According to Fortra’s…
SecurityWeek -
A week in security (September 15 – September 21)
A week in security covers September 15–21, 2025, with Malwarebytes Labs highlighting several notable developments. according to OpenAI, ChatGPT Deep Research has fixed a zero-click prompt-injection vulnerability that could exfiltrate PII, reported on…
Malwarebytes -
Beware: GitHub repos distributing Atomic Infostealer on macOS
LastPass warns macOS users about fake GitHub repositories distributing malware disguised as legitimate tools, redirecting victims to download the Atomic infostealer macOS infostealer. According to LastPass Threat Intelligence, Mitigation, and Escalation…
Security Affairs -
Attackers Bypass Windows “Mark of the Web” Protections Using LNK-Stomping
A sophisticated attack technique called LNK Stomping is enabling cybercriminals to bypass Windows security protections designed to block malicious files downloaded from the internet. The technique exploits a vulnerability in Windows shortcuts that was…
gbhackers.com -
Microsoft Patches Critical Entra ID Flaw Enabling Global Admin Impersonation Across Tenants
A critical token validation failure in Microsoft Entra ID (formerly Azure Active Directory) could have allowed attackers to impersonate any user, including Global Administrators, across any tenant. The vulnerability, tracked as CVE-2025-55241, has been…
The Hacker News -
Threat Actors Market Stealthy New RAT as Alternative to ScreenConnect FUD
Cybersecurity researchers have identified a RAT marketed as a fully undetectable (FUD) alternative to ScreenConnect, marking a notable shift in malware-as-a-service. The campaign touts the tool’s ability to bypass security warnings from Google Chrome and…
gbhackers.com -
Hackers Abuse GitHub Pages to Spread Stealer Malware to macOS Users
Hackers are abusing GitHub Pages to spread stealer malware aimed at macOS users, a campaign that relies on search engine optimisation to lure victims. According to LastPass, the LastPass Threat Intelligence, Mitigation, and Escalation team has identified an…
gbhackers.com -
MalTerminal: New GPT-4-Powered Malware That Writes Its Own Ransomware
MalTerminal is described as GPT-4-powered malware that dynamically generates ransomware code or reverse shells at runtime, marking a notable shift in how malicious logic can be created. According to SentinelLABS, these LLM-enabled threats offload…
gbhackers.com -
Hackers Deploy New EDR-Freeze Tool to Disable Security Software
A security researcher has released a new tool that can temporarily disable endpoint detection and response (EDR) systems and antivirus software without requiring vulnerable drivers. The tool, named EDR-Freeze and developed by researcher TwoSevenOneT, uses…
gbhackers.com -
EDR-Freeze: How a Researcher Turned Windows Error Reporting Into a Weapon Against Antivirus
A ZeroSalarium security researcher has demonstrated a new technique to bypass endpoint protections by abusing Windows Error Reporting, rather than the BYOVD driver route, to suspend antivirus and EDR processes from user space. According to the study, the…
SecurityOnline -
LastPass Warns of New SEO Poisoning Attack Targeting Mac Users
LastPass warns of a new SEO poisoning campaign that targets Mac users via fraudulent GitHub repositories, with attackers leveraging top search results to lure victims into downloading malicious payloads masquerading as legitimate software. The campaign uses…
SecurityOnline -
Meta Open-Sources New AI Model for On-Device Reasoning
On 22 September 2025, Meta announced the open-sourcing of its MobileLLM-R1 series of on-device models, designed to run directly on mobile devices and optimised for reasoning in mathematics, programming, and scientific domains. MobileLLM-R1 is the newest…
SecurityOnline -
The iPhone Fold: What to Expect from Apple’s Groundbreaking New Device
According to Mark Gurman, Apple’s first foldable iPhone, the iPhone Fold, is expected to resemble “two iPhone Airs placed side by side” when folded and to unfold flat, with a titanium alloy chassis aimed at balancing sleekness and durability. The report…
SecurityOnline -
-
CountLoader: A New Malware Loader Linked to Russian Ransomware Groups
According to Silent Push’s report, researchers have identified a newly emerging malware loader named CountLoader, which they assess to be linked with multiple ransomware groups, primarily Russian-speaking cybercriminals. The campaign targets Ukrainian…
SecurityOnline -
CVE-2025-55241: Microsoft Entra ID Flaw with CVSS 10.0 Could Have Compromised Every Tenant Worldwide
CVE-2025-55241, tracked with a CVSS score of 10.0, was disclosed by security researcher Dirk-jan Mollema as a flaw in Microsoft Entra ID (formerly Azure AD) that could have allowed attackers to compromise virtually every tenant worldwide. The vulnerability…
SecurityOnline -
BiDi Swap: A Decade-Old Unicode Flaw Still Enables URL Spoofing
BiDi Swap is a long-standing Unicode flaw that continues to enable URL spoofing by exploiting how browsers render mixed LTR and RTL scripts. The Varonis Threat Labs team highlights that attackers can craft deceptive URLs that appear legitimate while…
SecurityOnline -
CopyCop Expands Its Disinformation Network With AI-Generated Content and Global Targets
According to Insikt Group, CopyCop, also known as Storm-1516, is rapidly expanding its disinformation infrastructure and global influence operations. Since March 2025, the Russian covert network has established over 200 new fictional media websites targeting…
SecurityOnlineStorm-1516 -
BlackLock Ransomware: A New Cross-Platform Threat Spreading Rapidly
BlackLock Ransomware: A New Cross-Platform Threat Spreading Rapidly was analysed by the AhnLab Security Intelligence Center (ASEC), which notes that the group emerged around March 2024 and publicly revealed operations in June 2024 with a Dedicated Leak Site.…
SecurityOnlineBlackLock -
PyPI Under Attack: New Malware ‘SilentSync’ Is Stealing Credentials
Zscaler ThreatLabz has uncovered a new supply chain attack targeting the Python Package Index (PyPI), with two malicious packages named sisaws and secmeasure masquerading as legitimate libraries in August 2025 and delivering a Python-based RAT dubbed…
SecurityOnline -
The Database Was the Door: A Ransomware Attack Began with an Exposed Oracle Serve
Yarix’s Incident Response Team (YIR) has published an in-depth analysis of a targeted intrusion that began with repeated login attempts against an Oracle Database Server. According to Yarix, the entry point detected was the use of a function of Oracle DBS,…
SecurityOnline -
GOLD SALEM: A New Ransomware Group Is Exploiting SharePoint Flaws
GOLD SALEM, also known as the Warlock Group, has been exploiting SharePoint flaws since March 2025, publishing details of 60 victims across North America, Europe and South America by mid-September 2025. The group used a chain of…
SecurityOnline -
CVE-2025-9961: TP-Link Router Flaw Could Be Exploited for RCE, PoC Released
Security researchers at ByteRay have published a detailed exploitation write-up of CVE-2025-9961, a vulnerability in TP-Link’s CWMP (CPE WAN Management Protocol) service that can be weaponised to achieve remote code execution on affected devices. The report…
SecurityOnline -
Microsoft Launches Gaming Copilot on Windows & Xbox App
Microsoft has announced the broad launch of Gaming Copilot on Windows PCs and the Xbox App, following its beta debut for Xbox Insiders under the name Copilot for Gaming. The AI-powered assistant is designed to provide game guides, account information, and…
SecurityOnline -
Meta Opens Smart Glasses Platform to Developers and AI
On the second day of Connect 2025, Meta announced that it would open its smart glasses platform to external developers to build AI-powered services for the Ray-Ban and Oakley glasses, unlocking richer and more interactive experiences. According to Meta, the…
SecurityOnline -
Microsoft to Build the “World’s Most Powerful AI Data Center” in Wisconsin
Microsoft has announced a further $4 billion investment in Wisconsin to build its second hyperscale AI data centre, bringing the total for the two facilities to more than $7 billion. The new campus will be in Mt Pleasant, Wisconsin, and will join a first…
SecurityOnline
