News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Fri 26 Sep 2025· 73 articles
-
Threat Insights: Active Exploitation of Cisco ASA Zero Days
According to Cisco, a sophisticated state-sponsored threat actor is actively exploiting three zero-day vulnerabilities in Cisco ASA and FTD software, targeting government networks worldwide for data exfiltration. The campaign involves CVE-2025-20333,…
unit42.paloaltonetworks.com -
Archer Health was leaking protected health information. Criminals appear to have found it.
Archer Health, an in-home healthcare provider, was leaking protected health information from a misconfigured bucket, according to Website Planet. The unencrypted and non-password-protected database reportedly contained approximately 145k files, totaling 23…
DataBreaches -
Volvo Employee SSNs Stolen in Supplier Ransomware Attack
Volvo Group North America was caught in a supply-chain ransomware incident centred on Miljödata, a Swedish occupational SaaS provider, with Miljödata’s cloud infrastructure breached in August. As a Miljödata customer, Volvo NA’s systems remained untouched,…
Dark Reading -
Microsoft uncovers new variant of XCSSET macOS malware in targeted attacks
Microsoft Threat Intelligence researchers have found a new version of the macOS malware XCSSET that has been used in limited attacks. According to Microsoft Threat Intelligence researchers, the variant can steal Firefox data and hijack the clipboard, and it…
Security Affairs -
Columbia University Irving Medical Center pays $600K in data breach lawsuit settlement
Columbia University Irving Medical Center has agreed to a $600,000 settlement stemming from a data breach that was logged in May 2024. The incident affected 29,629 patients whose names, dates of birth, medical record numbers, provider names, and a laboratory…
DataBreaches -
Top 10 Best AI Penetration Testing Companies in 2025
The article, dated 26 September 2025, presents the Top 10 Best AI Penetration Testing Companies in 2025, outlining a range of automated and intelligent platforms. It names CalypsoAI, XBOW, Pentera, SplxAI, Penligent, PentestGPT, AutoPentest, Mindgard, Mend…
gbhackers.com -
Teens arrested by Dutch police reportedly suspected of spying for Russia
Two teenagers, both aged 17, were arrested in the Netherlands on suspicion of espionage allegedly on behalf of pro-Russian hackers. One boy has been remanded in custody, while the other has been released on home bail. Dutch prosecution service spokesperson…
DataBreaches -
ApolloMD notifies patients of 11 physician practices affected by a June cyberattack
ApolloMD notified patients about a June cyberattack affecting 11 physician practices, after Qilin added ApolloMD to its darkweb leak site with a June 6 claim and 238 GB of files. The incident involved unauthorized access on May 22–May 23, and ApolloMD…
DataBreaches -
Researchers Expose SVG and PureRAT Phishing Threats Targeting Ukraine and Vietnam
On 26 September 2025, researchers observed a new phishing campaign targeting Ukraine and Vietnam that impersonates government agencies to deliver CountLoader, which then drops Amatera Stealer and PureMiner. According to Fortinet FortiGuard Labs, the attack…
The Hacker News -
Hackers threaten parents: Get nursery to pay ransom or we leak your child’s data
Hackers calling themselves Radiant claim they stole sensitive data relating to around 8,000 children from nursery chain Kido, which operates in the UK, US, China and India. The stolen information purportedly includes names, photos, addresses, dates of birth…
Malwarebytes -
Iranian State Hackers Use SSL.com Certificates to Sign Malware
Security researchers say multiple threat groups, including Iran’s Charming Kitten offshoot Subtle Snail, are deploying malware signed with certificates from SSL[.]com, a Houston-based certificate authority. According to Check Point Software and Prodaft…
Dark Reading -
In Other News: LockBit 5.0, Department of War Cybersecurity Framework, OnePlus Vulnerability
In Other News: LockBit 5.0 has been released after a law enforcement crackdown, with Trend Micro researchers analysing Windows, Linux and ESXi variants that use randomized 16-character file extensions, are configured to avoid Russian-language systems, and…
SecurityWeek -
Hackers exploit Fortra GoAnywhere flaw before public alert
According to watchTowr Labs, hackers exploited the Fortra GoAnywhere MFT flaw, CVE-2025-10035, as early as 10 September 2025, about a week before Fortra’s public advisory was issued. The flaw is a deserialization vulnerability in the License Servlet of…
Security Affairs -
Interpol Says 260 Suspects in Online Romance Scams Have Been Arrested in Africa
According to Interpol, 260 people suspected of online romance and extortion scams were arrested across 14 African countries in a July–August operation. The network targeted more than 1,400 victims who together lost nearly $2.8 million, the international…
SecurityWeek -
An AI Index for all our customers
Cloudflare has announced the private beta of AI Index for domains on Cloudflare, a new type of web index that helps content creators make their data discoverable by AI and gives AI builders access to better data for fair compensation. According to…
Cloudflare -
Monitoring AS-SETs and why they matter
AS-SETs are IRR objects that let network operators group related networks, with Cloudflare using AS13335:AS-CLOUDFLARE to collate its own ASNs and BYOIP customer networks for routing communications. They remain a trust-based, best-effort mechanism, and the…
Cloudflare -
Cloudflare just got faster and more secure, powered by Rust
Cloudflare has announced a major upgrade to its software stack, replacing the long-running FL1 with a Rust-based FL2 built on the Oxy framework to boost speed and security. The update, shared on 26 September 2025, claims a median 10 ms improvement in…
Cloudflare -
Introducing Observatory and Smart Shield — see how the world sees your website, and make it faster in one click
According to Cloudflare, the company is launching Observatory in open beta alongside Smart Shield, with both products available today across all subscription tiers. Observatory unifies real-user data, synthetic testing, error rates and backend telemetry to…
Cloudflare -
Prep is Underway, But 2026 FIFA World Cup Poses Significant Cyber Challenges
The 2026 FIFA World Cup will be bigger than past tournaments, with 48 teams, 104 games and 16 stadiums across Canada, Mexico and the United States. Organisers face significant security challenges as the event becomes more technology- and…
Dark Reading -
Google and Flo to pay $56 million after misusing users’ health data
Google and Flo Health settled class-action lawsuits over claims they shared Flo Health users’ intimate health data with third parties such as Google, Meta, AppsFlyer and Flurry, including information about menstruation or pregnancy from 2016 to 2019. The…
Malwarebytes -
Malicious MCP Server Discovered Stealing Sensitive Emails Using AI Agents
A new MCP server named postmark-mcp has been found secretly exfiltrating every email it processes, according to GBHackers on Security. The malicious activity traces to version 1.0.16, which hides a BCC that copies outbound emails to the attacker’s personal…
gbhackers.com -
‘No Harm, No Foul:’ Courts Take Tougher Line on Data-Breach Suits
A deluge of data-breach lawsuits has a growing number of U.S. judges insisting victims show exactly how their leaked personal data caused tangible harm, a high bar that is getting more cases tossed out of court. Judges are also requiring plaintiffs to trace…
DataBreaches -
Network performance update: Birthday Week 2025
Cloudflare’s Network performance update for Birthday Week 2025 reports that the company continues to position itself as the fastest network for the greatest number of last-mile ISPs, based on a trimean of TCP connection times measured from 6 August to 4…
Cloudflare -
Introducing new regional Internet traffic and Certificate Transparency insights on Cloudflare Radar
Cloudflare has expanded Cloudflare Radar with two major enhancements: regional Internet traffic insights and Certificate Transparency data, announced in a two‑part launch during Birthday Week and published on 26 September 2025. The regional traffic insight…
Cloudflare -
Code Mode: the better way to use MCP
Code Mode rethinks MCP by converting MCP tools into a TypeScript API and having an LLM write code that calls that API, rather than invoking tools directly. The approach lets agents handle more and more complex tools when exposed as code rather than as raw…
Cloudflare -
Eliminating Cold Starts 2: shard and conquer
Cloudflare’s Eliminating Cold Starts 2 introduces “Worker sharding,” a technique that uses a consistent hash ring to route requests to shard servers and their corresponding shard clients across Cloudflare’s network. The approach aims to reduce the total…
Cloudflare -
Rocket Report: Keeping up with Kuiper; New Glenn’s second flight slips
Ars Technica’s Rocket Report covers a busy period for satellite launches, including another Kuiper deployment from Amazon and a continued cadence of production satellites from ULA. The Atlas V mission carried 27 Project Kuiper satellites, bringing Amazon to…
Ars Technica -
New COLDRIVER Malware Campaign Joins BO Team and Bearlyfy in Russia-Focused Cyberattacks
The Hacker News reports a fresh COLDRIVER campaign aimed at Russia, describing two new lightweight malware families, BAITSWITCH and SIMPLEFIX, delivered via a multi-stage ClickFix-style operation. According to Zscaler ThreatLabz, BAITSWITCH acts as a…
The Hacker NewsBearlyfy -
Apache Airflow Vulnerability Lets Read-Only Users Access Sensitive Data
Apache Airflow maintainers have disclosed a serious security issue, tracked as CVE-2025-54831, that allows users holding only read permissions to view sensitive connection details via both the Airflow API and the web interface. The vulnerability affects…
gbhackers.com -
Neon App pays users to record their phone calls, sells data for AI training
Neon Mobile, described by Malwarebytes as a “bizarre app” in TechCrunch, pays users to record and share their audio calls so the data can be sold to AI companies for developing and training models. The app promises payments of $0.15 per minute when you are…
Malwarebytes -
Microsoft Reduces Israel’s Access to Cloud and AI Products Over Reports of Mass Surveillance in Gaza
Microsoft has disabled services to a unit within the Israeli military after a company review determined its artificial intelligence and cloud computing products were being used to help carry out mass surveillance of Palestinians. The action follows reports…
SecurityWeek -
Neon, the No. 2 social app on the Apple App Store, pays users to record their phone calls and sells data to AI firms
Neon, described as the No. 2 social app on the Apple App Store, pays users to record their phone calls and sells the data to AI firms, according to DataBreaches[.]Net. The app’s pricing on Neon Mobile’s own site offers 30p per minute when you call other Neon…
DataBreaches -
North Korea’s Fake Recruiters Feed Stolen Data to IT Workers
North Korea’s threat actors behind the DeceptiveDevelopment campaign pose as recruiters to steal developers’ identities and hand them to fraudulent North Korean IT workers, according to ESET. The operation, which has been ongoing since at least 2023 and was…
SecurityWeek -
UK NCSC warns that attackers exploited Cisco firewall zero-days to deploy RayInitiator and LINE VIPER malware
UK NCSC warns that threat actors exploited recently disclosed Cisco firewall zero-days to deploy new malware families RayInitiator and LINE VIPER, expanding the capabilities of attacks against ASA devices. The report ties the activity to CVE-2025-20362 and…
Security Affairs -
CISA Emergency Directive 25-03: Identify and Mitigate Potential Compromise of Cisco Devices
According to CISA Emergency Directive 25-03, there is an ongoing exploitation campaign by an advanced threat actor targeting Cisco ASA devices, with attackers exploiting zero-day vulnerabilities to gain unauthenticated remote code execution and to manipulate…
DataBreaches -
Malware Gangs Enlist Covert North Korean IT Workers in Corporate Attacks
Malware operators aligned with North Korea have forged a sophisticated partnership with covert IT workers to target corporate organisations worldwide, according to a new white paper presented at Virus Bulletin 2025. The research links the…
gbhackers.com -
Crash Tests for Security: Why BAS Is Proof of Defense, Not Assumptions
Breach and Attack Simulation (BAS) is pitched as the crash test for enterprise security, proving which attacks your defenses can stop in practice rather than relying on theoretical blueprints or dashboards alone. The Blue Report 2025 provides crash test data…
The Hacker News -
No Patches for Vulnerabilities Allowing Cognex Industrial Camera Hacking
Cognex has announced that some of its industrial cameras are affected by vulnerabilities that, despite being potentially serious, will not receive patches. According to CISA, nine flaws affect In-Sight 2000, 7000, 8000, and 9000 vision systems and the…
SecurityWeek -
9/26/25, 11:01 AM
A private utility management company with a one-person security team adopted Darktrace to unify IT and OT defences, replacing a fragmented mix of tools that hampered threat detection and response. According to The Darktrace Community, the deployment used…
darktrace.com -
New Botnet ‘Loader-as-a-Service’ Turns Home Routers and IoT into Mirai Farms
According to CloudSEK, a sophisticated Loader-as-a-Service botnet campaign has emerged over the last six months, orchestrating attacks against SOHO routers, embedded Linux devices, and enterprise applications by exploiting exposed command-and-control logs.…
gbhackers.com
