News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Thu 25 Sep 2025· 90 articles
-
Judge orders release of teen accused in 2023 casino cyberattacks
A 17-year-old male who turned himself in to the Las Vegas Metropolitan Police last week has been released to his parents after Family Court Judge Dee Smart Butler deemed him neither a flight risk nor a danger to the community. As a condition of release, he…
DataBreaches -
Salesforce AI Hack Enabled CRM Data Theft
Salesforce’s Agentforce platform is reportedly vulnerable to a threat described as the ForcedLeak method, which researchers say could be used with prompt injection and an expired domain to enable CRM data theft. The technique was identified by Noma Security,…
DataBreaches -
U.S. CISA adds CISCO Secure Firewall ASA and Secure FTD flaws to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities in CISCO Secure Firewall ASA and Secure FTD to its Known Exploited Vulnerabilities catalog. CISA warns of an ongoing exploitation campaign by an advanced threat actor…
Security Affairs -
Cisco's Wave of Actively Exploited Zero-Day Bugs Targets Firewalls, IOS
Cisco has disclosed four actively exploited zero‑day flaws affecting millions of devices, including three tied to a state‑sponsored actor behind the ArcaneDoor cyberespionage campaigns. According to CISA, the attacks exploit zero‑day vulnerabilities to gain…
Dark Reading -
Chinese APT Drops 'Brickstorm' Backdoors on Edge Devices
A China-linked cyber-espionage group known as UNC5221 is compromising network appliances that cannot run traditional EDR to deploy a new version of the Brickstorm backdoor, targeting organisations across legal services, technology, SaaS providers and BPOs.…
Dark Reading -
Living Security Unveils HRMCon 2025 Speakers as Report Finds Firms Detect Just 19% of Human Risk
Living Security has announced the speaker lineup for the Human Risk Management Conference (HRMCon 2025), scheduled for October 20, 2025, in Austin and virtually. The event follows the 2025 State of Human Cyber Risk Report, revealing that organizations detect…
gbhackers.com -
Urgent: Cisco ASA Zero-Day Duo Under Attack; CISA Triggers Emergency Mitigation Directive
Cisco has disclosed two zero-day flaws in the VPN web server of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defence (FTD) Software, which are being exploited in the wild. The vulnerabilities are CVE-2025-20333 (CVSS 9.9) which could…
The Hacker News -
Salesforce AI Agents Forced to Leak Sensitive Data
Researchers have uncovered a vulnerability in Salesforce’s Agentforce AI that can cause exfiltration of CRM data via manipulated Web-to-Lead forms, a technique dubbed ForcedLeak for indirect prompt injection. The flaw is described as a cross-site scripting…
Dark Reading -
Living Security Unveils HRMCon 2025 Speakers as Report Finds Firms Detect Just 19% of Human Risk
Living Security announced the Human Risk Management Conference (HRMCon 2025) scheduled for October 20, 2025, in Austin, TX, and virtually. The event focuses on addressing human-driven cybersecurity risks, highlighted by a report revealing organizations…
SecurityOnline -
Operation HAECHI VI seized $439M from global cybercrime rings
Operation HAECHI VI, coordinated by Interpol, resulted in the seizure of $439 million from global cybercrime rings, involving authorities from 40 countries over five months (April-August 2025). The operation targeted various cyber-enabled financial crimes,…
Security Affairs -
Vane Viper Generates 1 Trillion DNS Queries to Power Global Malware and Ad Fraud Network
The article discusses the emergence of the Vane Viper malware, which generates 1 trillion DNS queries to support a global network for malware distribution and ad fraud. It highlights the scale and impact of this network on cybersecurity, emphasizing the need…
The Hacker News -
Volvo North America disclosed a data breach following a ransomware attack on IT provider Miljödata
Volvo North America disclosed a data breach that followed a ransomware attack on IT provider Miljödata. The incident occurred in August and impacted at least 25 companies, with Miljödata claiming the attack and data published on a Tor leak site by the…
Security Affairs -
Salesforce AI Hack Enabled CRM Data Theft
Salesforce has disclosed a prompt injection attack dubbed ForcedLeak that exploited an expired domain to target its Agentforce platform and exfiltrate CRM data. According to SecurityWeek, the method used with Agentforce’s Web-to-Lead functionality allowed…
SecurityWeek -
Introducing Microsoft Marketplace — Thousands of solutions. Millions of customers. One Marketplace.
Introducing Microsoft Marketplace is described as a reimagining that unites Azure Marketplace and Microsoft AppSource into a single destination for cloud solutions, AI apps and agents, with availability in the US today and coming soon for customers…
blogs.microsoft.com -
New SVG-based phishing campaign is a recipe for disaster
Malwarebytes reports a new SVG-based phishing campaign that proves to be a recipe for disaster, with several SVG files dating back to 26 August 2025 used in targeted attacks. The article explains that SVGs, written in XML, can contain HTML and JavaScript,…
Malwarebytes -
BQTLOCK Ransomware Attacking Windows Users Via Telegram to Encrypt Files and Delete Backup
Security researchers have uncovered a new ransomware-as-a-service (RaaS) strain named BQTLOCK that targets Windows users via Telegram channels and dark web forums. Since mid-July, affiliates have been distributing a ZIP archive containing a malicious…
gbhackers.com -
Salesforce Patches Critical ForcedLeak Bug Exposing CRM Data via AI Prompt Injection
Salesforce has patched a critical flaw, codenamed ForcedLeak, that allows potential exfiltration of sensitive data from its Agentforce CRM AI tool via an indirect prompt injection. Discovered by Noma Security, the vulnerability has a CVSS score of 9.4 and…
The Hacker News -
XCSSET evolves again: Analyzing the latest updates to XCSSET’s inventory
XCSSET evolves again: analysing the latest updates to XCSSET’s inventory, Microsoft Threat Intelligence reports a new variant in the wild that adds browser targeting, clipboard hijacking and enhanced persistence. The update describes a four‑stage infection…
Microsoft -
Chinese State-Sponsored Hackers Targeting Telecommunications Infrastructure to Steal Sensitive Data
Salt Typhoon, a Chinese state-sponsored cyber threat group, has intensified long-term espionage operations against global telecommunications infrastructure, according to recent legal and intelligence reporting. Aligned with the Ministry of State Security…
gbhackers.comGhostEmperor -
PyPI Warns Users of Fresh Phishing Campaign
PyPI is warning users about a fresh phishing campaign that relies on domain confusion to harvest credentials, a continuation of a campaign conducted in July. Threat actors impersonating PyPI ask recipients to verify their email address for security purposes…
SecurityWeek -
Announcing Cloudflare Email Service’s private beta
Cloudflare has announced the private beta of its Cloudflare Email Service, expanding its Email Routing capabilities with a new Email Sending feature that lets developers dispatch transactional emails directly from Cloudflare Workers. The service aims to…
Cloudflare -
Choice: the path to AI sovereignty
Choice: the path to AI sovereignty argues that sovereignty is essentially about choice—allowing nations to select the right tools, control their data, and deploy applications without vendor lock-in. Cloudflare states its mission is to help build a better…
Cloudflare -
Announcing the Cloudflare Data Platform: ingest, store, and query your data directly on Cloudflare
Cloudflare today announced three launches that form the Cloudflare Data Platform: Cloudflare Pipelines, which ingests events and applies SQL transformations before sinking them into Iceberg or storing as JSON or Parquet on R2; R2 Data Catalog, a managed…
Cloudflare -
Every Cloudflare feature, available to everyone
According to The Cloudflare Blog, over the next year Cloudflare will make nearly every feature it offers available to any customer who wants to buy and use it, with no contract and no need to speak to a sales team. Today’s launch starts by bringing Single…
Cloudflare -
Safe in the sandbox: security hardening for Cloudflare Workers
Safe in the sandbox explains how Cloudflare is hardening Workers security by extending V8-based containment.
Cloudflare -
R2 SQL: a deep dive into our new distributed query engine
R2 SQL is a serverless query engine that lets you run SQL queries over petabytes of data stored in Iceberg tables stored in Cloudflare’s R2, delivering results in seconds. The system hinges on a two-phase approach: a Query Planner that uses metadata from the…
Cloudflare -
Partnering to make full-stack fast: deploy PlanetScale databases directly from Workers
Cloudflare has announced a partnership with PlanetScale to allow Cloudflare Workers to connect directly to PlanetScale databases, enabling full-stack applications backed by Postgres or MySQL. According to Cloudflare Blog, connections are automatically…
Cloudflare -
Cloudflare's developer platform keeps getting better, faster, and more powerful. Here's everything that's new.
Cloudflare’s developer platform is expanding with a raft of new capabilities announced on 25 September 2025, including broader Node[.]js API access such as node:fs and node:https, and the ability to use models from OpenAI and Anthropic in AI Search, which…
Cloudflare -
North Korean Hackers Use New AkdoorTea Backdoor to Target Global Crypto Developers
The article, dated 25 September 2025, reports that North Korea-linked threat actors behind the Contagious Interview campaign have been attributed to a previously undocumented backdoor called AkdoorTea, along with TsunamiKit and Tropidoor, according to ESET.…
The Hacker News -
CVE-2025-20352: Zero-Day in Cisco IOS & IOS XE SNMP Exploited, Allows DoS and Root RCE
CVE-2025-20352 is a high-severity flaw (CVSS 7.7) affecting the Simple Network Management Protocol (SNMP) subsystem in Cisco IOS and IOS XE software, originating from a stack overflow condition. Cisco reports that the zero-day is under active exploitation,…
SOCRadar -
How Cloud Service Disruptions Are Making Resilience Critical for Developers
Cloud-based dev pipelines and AI-enabled coding tools are increasingly exposed to outages that can ripple across development teams, with recent incidents showing that even partial cloud disruptions can halt progress. For example, Anthropic’s Claude[.]ai and…
Dark Reading -
A year of improving Node.js compatibility in Cloudflare Workers
According to The Cloudflare Blog, Cloudflare has spent the last year expanding Node[.]js compatibility in Workers, enabling hundreds of npm modules and even the Express framework to run with a native-like experience. The effort covers a substantial subset of…
Cloudflare -
Chinese Cyberspies Hacked US Defense Contractors
According to Recorded Future, a Chinese cyberespionage group known as RedNovember has compromised at least two US defense contractors and numerous organisations across the Americas, Europe, Asia and Africa. The group’s activity spanned from July 2024 to July…
SecurityWeek -
The Scam That Won’t Quit: Malicious “TradingView Premium” Ads Jump from Meta to Google and YouTube
Bitdefender researchers have identified a persistent malicious campaign that began on Facebook Ads, promoting "free access" to TradingView Premium and other financial platforms. This campaign has expanded to Google and YouTube, posing risks to users and…
bitdefender.com -
Volvo Group Reports Data Breach Following Ransomware Attack on HR Vendor
Volvo Group has disclosed a data breach tied to a ransomware attack on its HR software provider Miljödata. On 20 August 2025 Miljödata suffered the attack, which encrypted systems and disrupted operations, with the incident only detected on 23 August and a…
gbhackers.com -
As many as 2 million Cisco devices affected by actively exploited 0-day
According to Cisco, as many as 2 million devices running Cisco IOS and Cisco IOS XE are vulnerable to an actively exploited zeroday (CVE-2025-20352) that can remotely crash or execute code on affected systems. The flaw stems from a stack overflow in the IOS…
Ars Technica -
RTX Confirms Airport Services Hit by Ransomware
RTX has officially confirmed that airport services were disrupted by a ransomware incident, disclosed in an SEC filing after the company became aware of the breach on 19 September 2025. The disruption affected the MUSE passenger processing software used by…
SecurityWeek -
Perspective: Why Politics in the Workplace is a Cybersecurity Risk
Perspective: Why Politics in the Workplace is a Cybersecurity Risk argues that bringing politics into professional spaces undermines decision‑making, collaboration, and ultimately security teams. The piece outlines how ideology can distort decisions,…
SecurityWeek -
Cisco IOS/XE Vulnerability Allows Unauthorized Access to Confidential Data
Cisco has disclosed a high‑severity vulnerability (CVE-2025-20160) in its IOS and IOS XE platforms, arising from improper validation of the TACACS+ shared secret configuration. The flaw occurs when TACACS+ is enabled but no secret is set, allowing a…
gbhackers.com -
New Malicious Rust Crates Impersonate fast_log to Steal Solana and Ethereum Wallet Keys
A pair of malicious Rust crates masquerading as the popular fast_log library have been uncovered, harvesting private Solana and Ethereum keys from developers’ environments. The impostor crates, named faster_log and async_println, were published under the…
gbhackers.com
