News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Sat 27 Sep 2025· 19 articles
-
Ohio’s Union County suffers ransomware attack impacting 45,000 people
A ransomware attack hit Union County, Ohio, resulting in the theft of Social Security and financial data, with officials notifying 45,487 residents and staff about the breach. The incident, which occurred between 6 May 2025 and 18 May 2025, prompted Union…
Security Affairs -
ForcedLeak flaw in Salesforce Agentforce exposes CRM data via Prompt Injection
Researchers have disclosed a critical vulnerability named ForcedLeak in Salesforce Agentforce that enables indirect prompt injection and could lead to CRM data exposure. The flaw, rated CVSS 9.4, affects organisations using Salesforce Agentforce with…
Security Affairs -
Fake Microsoft Teams installers push Oyster malware via malvertising
Hackers have been spotted using SEO poisoning and search engine advertisements to promote fake Microsoft Teams installers that infect Windows devices with the Oyster backdoor, providing initial access to corporate networks. The Oyster malware, also known as…
BleepingComputer -
Dutch teens arrested for trying to spy on Europol for Russia
Two Dutch teenage boys aged 17 have been arrested after reportedly using hacking devices to spy for Russia, according to De Telegraaf. They allegedly used a WiFi sniffer near Europol and Eurojust offices, as well as the Canadian embassy in The Hague.…
BleepingComputer -
Company that sells software for monitoring sex offenders, terrorists, and hackers was hacked
A company that sells spyware for monitoring individuals on parole and probation was hacked, with data leaked to a cybercrime forum this week. The breach involved RemoteCOM, which describes its service as the premier computer, smartphone and tablet monitoring…
DataBreaches -
China-Linked PlugX and Bookworm Malware Attacks Target Asian Telecom and ASEAN Networks
According to Cisco Talos researchers Joey Chen and Takahiro Takeda, a China-linked campaign is distributing a new variant of PlugX (aka Korplug or SOGU) targeting telecommunications and manufacturing sectors across Central and South Asia, with evidence it…
The Hacker News -
London nurseries hit by hackers, data on 8,000 children stolen
London nurseries run by childcare provider Kido International were hacked, with data on over 8,000 children reportedly stolen, according to Reuters. The claim was made by cybercriminals on their dark web portal, who said they had access to Kido’s networks…
DataBreaches -
Harrods warns customers their personal data could have been stolen by hackers in new cyber-attack
Harrods has warned some customers that their personal data could have been taken in an IT systems breach linked to a new cyber-attack on a major UK retailer. The luxury department store, based in London’s Knightsbridge, said information such as names and…
DataBreaches -
Cyber threat-sharing law set to shut down, along with US government
Barring a last-minute deal, the US federal government would shut down on Wednesday, October 1, and the 2015 Cybersecurity Information Sharing Act would lapse at the same time, threatening what many consider a critical plank of US cybersecurity policy. The…
DataBreaches -
CVE-2025-59934: Critical Flaw in Formbricks Allows Unauthorized Password Resets via Forged JWT Tokens
CVE-2025-59934 is a critical authentication flaw in Formbricks that allows attackers to bypass JWT verification and reset user passwords without authorization. The vulnerability arises from a token validation routine that only decodes JWTs (jwt[.]decode)…
SecurityOnline -
Apple’s Secret Weapon: The ChatGPT-Like “Veritas” Tool That’s Helping Build a Next-Gen Siri
According to Bloomberg, Apple is internally developing a tool codenamed “Veritas” to test the performance of the latest version of Siri, a ChatGPT-like system intended solely for internal use. The tool functions as a platform for employees to simulate…
SecurityOnline -
Meta is Building an “Android of Robotics” to Power the Next Generation of Humanoid AI
Meta is shifting its development focus toward robotics, with chief technology officer Andrew Bosworth stating that beyond building its prototype robot, Metabot, the bigger move is licensing a robotics software platform reminiscent of Android’s dominance in…
SecurityOnline -
Finally! YouTube Adds ‘Hide’ Button for End-Screen Pop-Ups to Improve Viewer Experience
YouTube has introduced a new Hide button to dismiss end-screen overlays, a feature that aims to improve the viewer experience by letting users focus on the content. The option is gradually rolling out across both web and mobile interfaces and is per-video,…
SecurityOnline -
Meta Unveils ‘Meta Lab’ Pop-Up Stores for New Ray-Ban Smart Glasses
Meta has unveiled “Meta Lab” pop-up stores for its Ray-Ban Display smart glasses, with pop-ups launching in Las Vegas on 16 October, Los Angeles on 24 October, and New York on 13 November, and the Burlingame, California Meta Store rebranded as Meta Lab for…
SecurityOnline -
Google Appeals to Supreme Court to Halt Injunction from Epic Games Lawsuit
Google has again petitioned the U.S. Supreme Court to suspend the injunction that Epic Games won last October, which would require the Google Play Store to open to third‑party app stores and is scheduled to take effect in mid-October. According to documents…
SecurityOnline -
TikTok’s Fate Sealed: Trump Signs Order to Shift Control to U.S. Investors While China Keeps the Algorithm
According to CNBC, President Donald Trump signed an executive order on 25 September 2025 confirming that TikTok’s American business will be led by U.S. investors, with ByteDance retaining a minority stake alongside its most critical asset—the recommendation…
SecurityOnline -
ChatGPT Pulse Arrives: The Proactive AI Assistant That Reshapes Your Morning Routine
OpenAI has introduced a new feature within ChatGPT called “ChatGPT Pulse,” a service designed to deliver personalised daily summaries at the start of users’ day, according to OpenAI’s official announcement. Unlike the traditional model, Pulse uses…
SecurityOnline -
LockBit 5.0 Ransomware: Cross-Platform Evolution Targets Windows, Linux, and ESXi
Trend Research has released an in-depth analysis showing that LockBit 5.0 is not limited to Windows, continuing a cross‑platform strategy that targets Windows, Linux and ESXi to attack entire enterprise networks, including virtualised environments. The…
SecurityOnline -
Salt Typhoon: China’s State-Sponsored Espionage Group Infiltrates Global Telecoms for Long-Term Cyber Warfare
Salt Typhoon is described as a Chinese state-sponsored cyber threat group aligned with the Ministry of State Security (MSS) and active since at least 2019, specialising in long-term espionage against global telecommunications providers and embedding itself…
SecurityOnlineGhostEmperor
