News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Tue 23 Sep 2025· 86 articles
-
Jaguar Land Rover Says Shutdown Will Continue Until at Least Oct 1 After Cyberattack
Jaguar Land Rover said its production lines, halted after a cyberattack in August, will remain at a standstill until at least 1 October, the security news outlet reports. The company had sent workers home from its factories in central and northwest England…
SecurityWeek -
A Massive Telecom Threat Was Stopped Right As World Leaders Gathered at UN Headquarters in New York
On 23 September 2025, as close to 150 world leaders were gathering in New York for the UN General Assembly, the U.S. Secret Service quietly dismantled a hidden telecom network spanning the New York area. According to Associated Press, the cache comprised…
SecurityWeek -
Malwarebytes for Teams now includes VPN
Malwarebytes for Teams now includes personal VPN access at no additional cost for all registered devices, according to Malwarebytes Labs, with the feature aimed at helping users stay secure whether they’re on a café Wi‑Fi or mobile while travelling. The VPN…
Malwarebytes -
Fake Malwarebytes, LastPass, and others on GitHub serve malware
A Malwarebytes report warns that fake versions of Malwarebytes, LastPass and other software are circulating on GitHub pages in a large-scale campaign aimed at Mac users, with Malwarebytes for Mac among the impersonated apps. The criminals’ goal is to…
Malwarebytes -
GitHub Aims to Secure Supply Chain as NPM Hacks Ramp Up
GitHub has unveiled a plan to strengthen the NPM supply chain in response to recent package registry attacks, including the Shai-Hulud and Qix campaigns. On 22 September, a blog post by GitHub senior director of security research Xavier René-Corail outlined…
Dark Reading -
Exposed Docker Daemons Fuel DDoS Botnet
A new DDoS-for-hire botnet, dubbed ShadowV2 by researchers at Darktrace, is exploiting misconfigured Docker environments to weaponise cloud-native tools for attack campaigns. The campaign targets Internet-exposed Docker daemons on AWS EC2, with Censys data…
Dark Reading -
From FBI to CISO: Unconventional Paths to Cybersecurity Success
From FBI to CISO: Unconventional Paths to Cybersecurity Success, Dark Reading reports on Jason Manar’s career journey, including that he got his start in the FBI and worked on more than 1,000 intrusions before becoming CISO of Kaseya about four years ago.…
Dark Reading -
U.S. CISA adds Google Chromium flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Google Chromium flaw CVE-2025-10585 to its Known Exploited Vulnerabilities (KEV) catalog. In mid-September Google released security updates addressing four Chrome vulnerabilities, including…
Security Affairs -
Dark Reading Confidential: Battle Space: Cyber Pros Land on the Front Lines of Protecting US Critical Infrastructure
Dark Reading Confidential’s latest episode highlights how protecting US critical infrastructure is increasingly a national security and economic imperative, with the discussion centring on maritime ports as a case study. The guests note that the Port of Long…
Dark Reading -
Patch Bypassed for Supermicro Vulnerability Allowing BMC Hack
Binarly researchers have found a way to bypass a patch for a Supermicro vulnerability that could enable malicious firmware updates to the BMC. According to Binarly, the patch released by Supermicro could be bypassed, and as a result the vendor assigned a new…
SecurityWeek -
Two New Supermicro BMC Bugs Allow Malicious Firmware to Evade Root of Trust Security
Cybersecurity researchers released details of two medium-severity vulnerabilities in Supermicro Baseboard Management Controller (BMC) firmware, CVE-2025-7937 and CVE-2025-6198, which could let attackers bypass firmware verification and update the system with…
The Hacker News -
Defy Security Appoints Esteemed Cybersecurity Leader Gary Warzala to Its Board of Directors
Defy Security has announced the appointment of Gary Warzala to its Board of Directors, with the company describing him as an esteemed cybersecurity leader. Warzala brings more than 20 years of leadership experience, having served as Chief Information…
gbhackers.com -
Eurojust Arrests 5 in €100M Cryptocurrency Investment Fraud Spanning 23 Countries
Eurojust says five suspects have been arrested in connection with an elaborate online investment fraud scheme that stole more than €100 million from over 100 victims across 23 countries, including France, Germany, Italy and Spain. According to Eurojust, the…
The Hacker News -
Top 10 Best Penetration Testing Companies in 2025
GBHackers On Security published a 2025 overview on 23 September 2025 of the top 10 penetration testing companies, led by Raxis, BreachLock, ThreatSpike Labs, Sprocket Security, Underdefence, Acunetix, Rapid7, Pentera, Intruder and Invicti. The piece…
gbhackers.com -
Defy Security Appoints Esteemed Cybersecurity Leader Gary Warzala to Its Board of Directors
Defy Security today announced the appointment of Gary Warzala to its Board of Directors, with the news coming from Pittsburg, United States, on 23 September 2025, according to CyberNewsWire. Warzala brings more than 20 years of leadership experience in…
SecurityOnline -
SolarWinds Makes Third Attempt at Patching Exploited Vulnerability
SolarWinds has issued a hotfix for a remote code execution vulnerability in Web Help Desk, marking what the firm calls its third attempt at patching the deserialization flaw tracked as CVE-2025-26399 (CVSS 9.8). The vulnerability is described as an…
SecurityWeek -
US uncovers 100,000 SIM cards that could have “shut down” NYC cell network
According to the US Secret Service, it has located and seized a cache of telecom devices large enough to shut down the cellular network in New York City, and believes a nation-state is responsible. The agency says more than 300 co-located SIM servers and…
Ars Technica -
Can you disappear online? (Lock and Code S06E19)
In the Lock and Code S06E19 episode, Malwarebytes notes that there’s more about you online than you might realise, with Acxiom and Experian highlighted as firms that probe and estimate your behaviours and preferences. The podcast explains that data about you…
Malwarebytes -
Microsoft Purview delivered 30% reduction in data breach likelihood
According to Forrester Consulting’s Total Economic Impact™ study commissioned by Microsoft, Microsoft Purview achieved a 30% reduction in the likelihood of data breaches by implementing fine‑tuned data loss prevention policies and improving visibility across…
Microsoft -
U.S. Secret Service Seizes 300 SIM Servers, 100K Cards Threatening U.S. Officials Near UN
The U.S. Secret Service said it dismantled a network of devices across the New York tri-state area that threatened U.S. government officials and posed an imminent national security risk. The agency reported more than 300 co-located SIM servers and 100,000…
The Hacker News -
American Archive of Public Broadcasting allowed access to restricted media for years
A security flaw in the American Archive of Public Broadcasting (AAPB) website allowed unauthorized access to protected and private media for years, according to BleepingComputer. The AAPB is a collaborative initiative between the Library of Congress and WGBH…
Malwarebytes -
US Secret Service dismantled covert communications network near the U.N. in New York
The US Secret Service dismantled a covert communications network uncovered near the U.N. headquarters in New York, seizing 100,000 SIM cards and 300 servers. The operation involved a system capable of sending 30 million texts per minute and could be used to…
Security Affairs -
Deploy your own AI vibe coding platform — in one click!
Cloudflare has open-sourced VibeSDK, an AI vibe coding platform that can be deployed with just one click, inviting organisations to run an end‑to‑end platform themselves or test via a demo platform.
Cloudflare -
Cloudflare Confidence Scorecards - making AI safer for the Internet
Cloudflare has launched Application Confidence Scorecards as part of its AI Security features within the Cloudflare One SASE platform to help manage the risks of Shadow AI. The scores assess AI-enabled and SaaS applications across two rubrics: the…
Cloudflare -
Threat Actors Breach Enterprise Infrastructure Within 18 Minutes of Initial Access
Threat actors are accelerating their foothold in corporate networks, with the average time from initial breach to lateral movement dropping to 18 minutes in the June–August 2025 period, according to GBHackers’ summary of the period. In one incident, Akira…
gbhackers.com -
U.S. Secret Service Shuts Down 300 SIM Servers and 100K SIM Cards Disabling Cell Towers
According to the U.S. Secret Service, agents dismantled a network of more than 300 co-located SIM servers and 100,000 SIM cards deployed at multiple locations, created to conceal the source of communications and enable rapid rotation of numbers and…
gbhackers.com -
Building unique, per-customer defenses against advanced bot threats in the AI era
Cloudflare is unveiling a per-customer approach to bot defence that uses behavioural anomaly detection unique to each bot management customer, delivering hyper-personalized protections as AI-powered scraping grows more sophisticated. The new platform deploys…
Cloudflare -
SpyCloud Report: 2/3 Orgs Extremely Concerned About Identity Attacks Yet Major Blind Spots Persist
According to SpyCloud, the 2025 Identity Threat Report found that while 86% of security leaders report confidence in preventing identity-based attacks, 85% of organisations were affected by a ransomware incident at least once in the past year, with over…
gbhackers.com -
Helping protect journalists and local news from AI crawlers with Project Galileo
On 23 September 2025, Cloudflare announced that Project Galileo will now include access to Bot Management and AI Crawl Control services, enabling participants to protect their websites from AI crawlers for free. The programme, which includes roughly 750…
Cloudflare -
Why Cloudflare, Netlify, and Webflow are collaborating to support Open Source tools like Astro and TanStack
Cloudflare is partnering with Netlify and Webflow to sponsor Astro and TanStack, two cornerstone open-source tools, in a bid to strengthen the open web. The collaboration aims to keep these projects resilient by ensuring they aren’t dependent on a single…
Cloudflare -
Launching the x402 Foundation with Coinbase, and support for x402 transactions
Cloudflare is partnering with Coinbase to create the x402 Foundation, according to Coinbase. The foundation’s mission is to encourage the adoption of the x402 protocol, an updated framework that lets clients and services exchange value on the web using a…
Cloudflare -
SolarWinds Releases Hotfix for Critical CVE-2025-26399 Remote Code Execution Flaw
SolarWinds has released hot fixes to address a critical vulnerability tracked as CVE-2025-26399 in its Web Help Desk software, which could allow remote code execution with an CVSS score of 9.8. The flaw is described as an unauthenticated AjaxProxy…
The Hacker News -
Unit 221B Raises $5 Million for Threat Intel Aiding Hacker Arrests
Unit 221B has announced raising $5 million in a seed funding round led by J2 Ventures, with additional support from Pipeline Capital and other investors, according to SecurityWeek. The New York‑based threat intelligence firm says the funds will be used to…
SecurityWeek -
Hackers Hijacking IIS Servers Using Malicious BadIIS Module to Serve Malicious Content
Hackers are hijacking IIS servers with a native module called BadIIS that plugs directly into the IIS request pipeline, giving attackers full server privileges and enabling them to inspect and proxy traffic. Once deployed on compromised machines, BadIIS…
gbhackers.com -
Microsoft Publishes Guide for Certificate-Based Authentication in Windows Admin Center
Microsoft has released comprehensive guidance for implementing certificate-based authentication in Windows Admin Center (WAC), according to Microsoft, aimed at giving administrators stronger security through smart card integration and Active Directory…
gbhackers.com -
SpyCloud Report: 2/3 Orgs Extremely Concerned About Identity Attacks Yet Major Blind Spots Persist
According to SpyCloud, the 2025 Identity Threat Report reveals a dangerous disconnect between perceived security readiness and actual exposure, with 86% of security leaders confident in preventing identity-based attacks yet 85% of organisations affected by…
SecurityOnline -
New npm Malware Steals Browser Passwords via Steganographic QR Code
A novel npm package named fezbox has been uncovered by the Socket Threat Research Team as a sophisticated malware delivery mechanism that exfiltrates username and password credentials from browser cookies via an embedded QR code. Published under the npm…
gbhackers.com -
All Microsoft Entra Tenants Were Exposed to Silent Compromise via Invisible Actor Tokens: Researcher
All Microsoft Entra Tenants were exposed to silent compromise due to undocumented Actor tokens used in backend service-to-service communications, combined with a validation flaw in Azure AD Graph API, according to Microsoft Security Response Center (MSRC).…
SecurityWeek -
A suspected Scattered Spider member suspect detained for casino network attacks
A suspected Scattered Spider member linked to attacks on Las Vegas casinos was arrested on 17 September 2025. The Las Vegas Metropolitan Police Department said the teenage suspect surrendered to the Clark County Juvenile Detention Center and was booked on…
Security AffairsScattered Spider -
Lean Teams, Higher Stakes: Why CISOs Must Rethink Incident Remediation
Lean teams are expanding the risk as C-suite talk of doing more with less collides with security realities, since the 292-day average containment window for breaches remains a dangerous benchmark for stretched security groups. The article notes that 86% of…
The Hacker News
