News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Thu 25 Sep 2025· 90 articles
-
ZendTo Flaw Lets Attackers Bypass Security Controls to Access Sensitive Data
A critical vulnerability in ZendTo, tracked as CVE-2025-34508, allows authenticated users to traverse the system path and access or modify sensitive files belonging to other users. The flaw affects ZendTo versions 6.15-7 and earlier, with a patch released in…
gbhackers.com -
Two WordPress Core Vulnerabilities Disclosed Without Patch: Sensitive Data Exposure and Stored XSS
Two WordPress core vulnerabilities were disclosed without a patch, impacting all versions up to and including 6.8.2 and involving sensitive data exposure and stored XSS. The first flaw, CVE-2025-58246, is classified as a Sensitive Information Exposure…
SecurityOnline -
Transform Cloud Operations with Unified Real-Time CDR and Automated Investigations
Darktrace has announced that its Darktrace / CLOUD platform now unites real-time detection, automated cloud forensics, and investigation within a single workflow, enabling security teams to detect novel threats in real time and respond with forensic depth.…
darktrace.com -
Industry-First Automated Cloud Forensics
Darktrace has launched the industry’s first truly automated cloud forensics solution, Darktrace / Forensic Acquisition & Investigation, designed to bring automated forensic investigations to security teams of all sizes. According to Darktrace, the platform…
darktrace.com -
CTEM's Core: Prioritization and Validation
CTEM, or Continuous Threat Exposure Management, reframes vulnerability handling by emphasising prioritisation of exposures by real business impact and validating them in your own environment, rather than chasing every alert. The piece notes that more than…
The Hacker News -
Threatsday Bulletin: Rootkit Patch, Federal Breach, OnePlus SMS Leak, TikTok Scandal & More
Threatsday Bulletin rounds up a busy week of cybersecurity twists, led by SonicWall’s SMA 100 firmware update designed to remove rootkit malware after a report that UNC6148 deployed OVERSTEP on end-of-life SMA 100 devices. It also flags a text-message…
The Hacker News -
LinkedIn will use your data to train its AI unless you opt out now
LinkedIn plans to share user data with Microsoft and its affiliates for AI training, an approach the article describes as framed as a “legitimate interest” that won’t ask for permission; instead you must opt out. To opt out, the piece directs readers to…
Malwarebytes -
Chinese Spies Lurked in Networks for 393 Days, Hunted for Zero-Day Intel
According to Google’s Threat Intelligence Group and Mandiant, researchers analysed a recent BrickStorm campaign linked to UNC5221, a Chinese APT, with the attackers dwelling in compromised networks for hundreds of days to obtain valuable information. The…
SecurityWeek -
RedNovember Hackers Targeting Government and Tech Organizations to Install Backdoor
According to Recorded Future’s Insikt Group, TAG-100 was exposed in July 2024 as a cyber-espionage campaign that leveraged the Go-based backdoor Pantegana against high-profile government, intergovernmental and private organisations worldwide, and TAG-100 has…
gbhackers.comStorm-2077 -
TikTok is misusing kids’ data, says privacy watchdog
According to the Federal Privacy Commissioner, along with commissioners in British Columbia, Québec and Alberta, a group of Canadian privacy authorities has accused TikTok of scooping up information about hundreds of thousands of children who shouldn’t have…
Malwarebytes -
Hackers Use GitHub Notifications to Impersonate Y Combinator and Steal Wallet Funds
A recent wave of phishing attacks targeted developers and startups by impersonating Y Combinator through GitHub notifications. Victims were tricked into believing they had been selected for startup funding, only to face requests to verify their wallets or…
gbhackers.com -
CSA Unveils SaaS Security Controls Framework to Ease Complexity
According to Cloud Security Alliance, the CSA’s SaaS Working Group has developed a SaaS Security Capability Framework (SSCF) to reduce the complexity of securing multiple SaaS applications by standardising customer-facing controls. Version 1.0 defines six…
SecurityWeek -
Hackers Use AI-Generated Code to Obfuscate Payloads and Bypass Traditional Defenses
Hackers are using AI-generated code to obfuscate payloads and bypass traditional defences, with defenders noting that AI-assisted threats remain detectable when analytic methods adapt. On 18 August 2025, according to Microsoft Threat Intelligence, a targeted…
gbhackers.com -
Tech Overtakes Gaming as Top DDoS Attack Target, New Gcore Radar Report Finds
According to Gcore Radar’s Q1–Q2 2025 analysis, total DDoS attack volume rose 41% year on year, with volumes climbing from 969,000 in H2 2024 to 1.17 million in H1 2025. The largest attack peaked at 2.2 Tbps, surpassing the 2 Tbps record from late 2024.…
The Hacker News -
Volvo Group Employee Data Stolen in Ransomware Attack
Volvo Group North America has informed current and former employees of a data breach linked to the third-party supplier Miljödata, which was hit by a ransomware attack in August. The DataCarry ransomware group claimed the incident, adding Miljödata to its…
SecurityWeek -
Massive npm infection: the Shai-Hulud worm and patient zero
According to Securelist, the Shai-Hulud worm has infected over 500 npm packages in a supply-chain attack, with a notable impact on popular libraries such as the @ctrl/tinycolor package, which is downloaded by more than two million users each week. The…
securelist.com -
New Phishing Scam Aims at PyPI Maintainers to Steal Login Information
A fresh domain-confusion phishing campaign is targeting PyPI maintainers, with malicious actors trying to harvest login credentials by sending unsolicited emails that urge recipients to “verify your email address” under the guise of account maintenance and…
gbhackers.com -
NVIDIA Open-Sources Audio2Face: Generative AI for Lifelike Character Animation is Now Free
NVIDIA has announced the open-sourcing of its Audio2Face model and accompanying SDK, enabling developers to integrate lifelike character animation into games and 3D applications, with a comprehensive open-source training framework for fine-tuning or…
SecurityOnline -
Instagram Crosses 3 Billion Users: Meta Prepares Major Redesign to Make Reels the Default Feed
Instagram has reached a new milestone, surpassing 3 billion monthly active users, according to Bloomberg, marking a dramatic leap from 2 billion reported in 2022. Meta says the redesign will spotlight Reels more prominently, with a redesigned navigation bar…
SecurityOnline -
Cisco Patches Zero-Day Flaw Affecting Routers and Switches
Cisco on Wednesday announced patches for 14 vulnerabilities in IOS and IOS XE, including a flaw that has been exploited in the wild. The exploited issue, tracked as CVE-2025-20352 (CVSS 7.7), is a stack overflow in the SNMP subsystem that can be triggered by…
SecurityWeek -
Qualcomm Launches APV: The Open Standard for Pro-Grade Video to Rival Apple ProRes
Qualcomm has launched APV, the Open Standard for Pro-Grade Video, designed to rival Apple ProRes. Alongside the Snapdragon 8 Elite Gen 5, the company unveiled support for APV encoding, intended for professional video capture and post-production control.…
SecurityOnline -
Malware Deployment via Copyright Takedown Claims by Threat Actors
The article discusses a cyber threat campaign by the Lone None group, which exploits copyright takedown notices to distribute sophisticated malware, including Pure Logs Stealer and Lone None Stealer. The campaign uses spoofed emails that appear to come from…
gbhackers.com -
SetupHijack Tool Abuses Race Conditions in Windows Installer to Hijack Setups
According to Hacker House, security researchers have released SetupHijack, a proof-of-concept tool that exploits race conditions and insecure file handling in Windows installers and updaters. It targets installers and updaters that drop files into…
gbhackers.com -
Qualcomm Unveils Snapdragon X2 Elite Chips: 5.0GHz Clock Speed to Power Next-Gen AI PCs
At the Snapdragon Summit 2025 in Hawaii, Qualcomm officially unveiled two PC-class processors—Snapdragon X2 Elite Extreme and Snapdragon X2 Elite—designed for Windows PCs. Fabricated on TSMC’s third-generation 3nm process (N3P), both chips feature Qualcomm’s…
SecurityOnline -
Snapdragon 8 Elite Gen 5 Unveiled: The Fastest Mobile Chip Powers Next-Gen Agentic AI
According to Qualcomm, at the Snapdragon Summit 2025 in Hawaii the company unveiled its next-generation flagship mobile platform—the Snapdragon 8 Elite Gen 5—hailed as the world’s fastest mobile system-on-chip. Built on TSMC’s third-generation 3nm process…
SecurityOnline -
Steam Confirms Malware Found in BlockBlasters Game
Steam has officially confirmed that malware was found in the BlockBlasters game, following player reports and security scans flagging unusual activity in the game’s files. The incident began with reports on 23 September that Steam’s built-in virus scanner…
gbhackers.com -
Google Chrome DevTools Unleashes AI Debugging with New Model Context Protocol (MCP) Server
The Google Chrome development team has released a public preview of the Chrome DevTools Model Context Protocol (MCP) server for developers, opening DevTools to AI coding agents. The MCP server is designed so AI agents can directly debug web pages within…
SecurityOnline -
Malicious Rust Crates Steal Solana and Ethereum Keys — 8,424 Downloads Confirmed
Cybersecurity researchers uncovered two malicious Rust crates impersonating the legitimate library fast_log, named faster_log and async_println, published on May 25, 2025 by the threat actors behind the aliases rustguruman and dumbnbased. The campaigns…
The Hacker News -
Hackers Deploy Stealthy Malware on WordPress Sites to Gain Admin Access
Attackers have stepped up their tactics by deploying stealthy backdoors disguised as legitimate WordPress components, giving hackers persistent administrative access even after other malware is discovered and removed. During a recent site clean-up, two…
gbhackers.com -
Gcore Radar Report Reveals 41% Surge in DDoS Attack Volumes
Gcore has released a Radar report for Q1-Q2 2025 showing a 41% rise in DDoS attack volumes compared with the same period in 2024. The findings highlight an escalation in both the total number of DDoS attacks and their magnitude, with the largest attack…
gbhackers.com -
Cisco fixed actively exploited zero-day in Cisco IOS and IOS XE software
Cisco fixed an actively exploited zero-day in Cisco IOS and IOS XE Software, tracked as CVE-2025-20352, which affects the SNMP subsystem and can be triggered by a crafted SNMP packet over IPv4 or IPv6. The vulnerability allows remote authenticated attackers…
Security Affairs -
LNK Malware Leverages Legit Windows Files to Slip Past Defenses
In a campaign described by GBHackers On Security, LNK malware is being used to deliver a Remote Access Trojan by reviving Windows shortcut (.LNK) files and LOLBins such as odbcconf[.]exe. The attack chain starts when victims download a file named “cyber…
gbhackers.com -
Hackers Exploit Hikvision Camera Flaw to Steal Sensitive Data
Security researchers have observed renewed exploit campaigns targeting an eight-year-old backdoor in Hikvision cameras to harvest configuration files, user lists, and snapshots. Attackers automate scans across IP ranges, appending a base64-encoded “auth”…
gbhackers.com -
Gcore Radar Report Reveals 41% Surge in DDoS Attack Volumes
Gcore has disclosed findings from its Q1-Q2 2025 Radar report, released on 25 September 2025, showing a 41% increase in DDoS attack volumes year on year. According to Gcore, the total number of DDoS attacks rose from 969,000 in H2 2024 to 1.17 million in H1…
SecurityOnline -
Cisco Warns of Actively Exploited SNMP Vulnerability Allowing RCE or DoS in IOS Software
According to Cisco, on 25 September 2025, Cisco has warned of a high-severity vulnerability in IOS Software and IOS XE Software that could let a remote attacker execute arbitrary code or trigger a DoS under specific conditions. The flaw, CVE-2025-20352 (CVSS…
The Hacker News -
BRICKSTORM Backdoor Hits Tech and Legal Firms with Stealthy New Campaign
The article discusses the BRICKSTORM backdoor, a persistent and stealthy cyber threat targeting U.S. technology and legal firms. Tracked by Google Threat Intelligence Group and investigated by Mandiant, BRICKSTORM campaigns have maintained undetected access…
gbhackers.com -
Linux Kernel ksmbd Flaw Lets Remote Attackers Execute Arbitrary Code
A critical vulnerability in the Linux Kernel’s ksmbd file sharing component allows remote attackers to execute code with kernel privileges, tracked as CVE-2025-38561. Authentication is required, but a successful exploit can grant full control of the affected…
gbhackers.com -
COLDRIVER APT Group Uses ClickFix to Deliver New PowerShell-Based Backdoor BAITSWITCH
In a report dated 25 September 2025, the COLDRIVER APT group, also known as Star Blizzard, Callisto, and UNC4057, is observed expanding its arsenal with a multi‑stage ClickFix campaign to deliver two new families: a downloader called BAITSWITCH and a…
gbhackers.comCallisto -
NVIDIA Merlin Flaw Enables Remote Code Execution with Root Access
A critical vulnerability in NVIDIA’s Merlin Transformers4Rec library exposes remote code execution with root privileges, tracked as CVE-2025-23298 and disclosed by the Trend Micro Zero Day Initiative (ZDI) Threat Hunting Team. The flaw arises from unsafe…
gbhackers.com -
Cisco IOS 0-Day RCE Vulnerability Actively Targeted
Cisco has disclosed a critical zero-day vulnerability in its IOS and IOS XE software, tracked as CVE-2025-20352, which is being actively exploited in real-world attacks, according to the vendor. The flaw resides in the SNMP subsystem and can cause…
gbhackers.com
