News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Mon 29 Sep 2025· 72 articles
-
Apple Responds to iPhone 17 ‘Scratchgate’: New In-Store Cleaning and MagSafe Stand Adjustments
Apple has responded to concerns over scratches on iPhone 17 Pro display units by clarifying that most marks were impressions from MagSafe charging stands and by introducing adjustments across its retail outlets. According to a report by 9to5Mac, stores have…
SecurityOnline -
Elon Musk Says Tesla’s Optimus Robot Could Be Worth 80% of the Company’s Value
Elon Musk has reiterated the strategic importance of Tesla’s humanoid robot, Optimus, declaring that it may not only become Tesla’s most valuable product but could account for as much as 80% of the company’s overall worth. The article notes that Optimus was…
SecurityOnline -
Despite Russian influence, Moldova votes Pro-EU, highlighting future election risks
Moldova’s deputy prime minister Doina Nistor blamed Russia for a cyberattack on the country’s Central Electoral Commission ahead of the forthcoming parliamentary election, describing it as part of a wider hybrid campaign to destabilise democracy. Officials…
Security Affairs -
SUSE Rancher Flaws Allow Attackers to Lock Out Admin Accounts
A security flaw in SUSE Rancher Manager has been disclosed as CVE-2024-58260, carrying a high severity rating with a CVSS score of 7.1. According to GBHackers, the issue arises from missing server-side validation on the username field, enabling users with…
gbhackers.com -
New ModStealer Evades Antivirus, Targets macOS Users to Steal Sensitive Data
A new macOS-focused threat, dubbed ModStealer, has emerged and is said to bypass traditional antivirus solutions while targeting developers and cryptocurrency holders, according to Mosyle. The cross‑platform malware is described as capable of compromising…
gbhackers.com -
A week in security (September 22 – September 28)
A week in security (September 22 – September 28) summarises last week’s cybersecurity news, published on 29 September 2025 by Malwarebytes Labs. According to Malwarebytes Labs, the week’s highlights include several high‑profile cases and warnings: on 26…
Malwarebytes -
Two Dutch Teenagers Arrested for Wi-Fi Sniffing Activities
Two Dutch authorities arrested two 17-year-old boys on suspicion of “state interference” in a cybersecurity case with alleged connections to Russian espionage operations, according to Dutch media reports. The teenagers appeared in court on Thursday, with one…
gbhackers.com -
SVG Files Abused to Deploy PureMiner Malware and Exfiltrate Data
According to FortiGuard Labs, cybercriminals are using SVG files as an initial attack vector in a multi-stage phishing campaign aimed at Ukrainian government agencies, deploying both cryptocurrency mining malware and information stealers. The operation…
gbhackers.com -
ThreatBook Launches Best-of-Breed Advanced Threat Intelligence Solution
ThreatBook today announced the worldwide launch of ThreatBook Advanced Threat Intelligence (ThreatBook ATI), a global solution aimed at threat intelligence platforms, SOCs and cybersecurity analysts. Analyzing over 14 billion cyber-attack records daily,…
SecurityOnline -
Threat Actors Exploiting Dynamic DNS Providers for Malicious Activity
Cybersecurity researchers warn that threat actors are increasingly exploiting Dynamic DNS providers to host malicious infrastructure, a trend highlighted in Silent Push’s latest research. The study notes that over 70,000 domains are currently renting…
gbhackers.com -
Dutch teens arrested for spying on behalf of pro-Russian hackers
Dutch police arrested two 17-year-olds suspected of spying for pro-Russian hackers, with one remaining in custody and the other released on home bail. The arrests followed a tip from Dutch intelligence (AIVD) on Monday, according to NL times. Prosecutors say…
Security Affairs -
Notepad++ DLL Hijack Flaw Lets Attackers Run Malicious Code
Security researchers have identified a critical DLL hijacking vulnerability in Notepad++ version 8.8.3, tracked as CVE-2025-56383. The flaw allows attackers to execute arbitrary code by replacing legitimate DLLs in the application’s plugin directory with…
gbhackers.com -
Google Project Zero Discloses Apple Vulnerability Allowing ASLR Bypass
Google Project Zero has disclosed a vulnerability in Apple’s macOS and iOS systems that could allow an ASLR bypass through pointer leaks in the NSKeyedArchiver serialization framework. According to gbhackers, the flaw exploits pointer-keyed data structures…
gbhackers.com -
-
Microsoft May Finally Let Windows Search Results Open in Your Default Browser
Microsoft may finally let Windows search results open in your default browser rather than being forced to use Microsoft Edge, a change that could come from experimental flags found in the Edge Canary build. According to Windows Latest, these flags hint at…
SecurityOnline -
Apple Nears Mass Production of M5 MacBook Pro, New Studio Display; Launch Expected Early 2026
According to Bloomberg journalist Mark Gurman, Apple is preparing to begin mass production of its new MacBook lineup powered by the M5 processor, which will include refreshed MacBook Pro and MacBook Air models. These devices could be unveiled as early as the…
SecurityOnline -
Microsoft Photos App Gets On-Device AI to Automatically Sort Your Digital Clutter
According to Windows Insider Preview Program, Microsoft is testing a new version of its Photos app that adds on-device AI to automatically identify and categorise photos for users, though this functionality is limited to supported Copilot+ PCs. The system…
SecurityOnline -
Heads Up, Domain Owners: Price Hikes for Over 200 Extensions Start October 6
According to NameCheap, beginning October 6, 2025, the registration, transfer and renewal prices for approximately 231 domain extensions will increase. All of these domains fall under the registry Identity Digital, with the steepest increases affecting…
SecurityOnline -
SUSE Rancher Security Team Patches Three Vulnerabilities in Rancher Manager
The SUSE Rancher Security Team has issued fixes for three vulnerabilities affecting Rancher Manager, with severities ranging from Medium to High and potential impacts including denial of service, information leakage, and phishing-enabled token theft.…
SecurityOnline -
Meta Launches ‘Vibes’: A New AI-Generated Short-Video Platform to Rival TikTok
Meta has unveiled Vibes, a new AI-generated short-video platform described as a “pure AI” creative ecosystem. Debuting first in North America, Australia, New Zealand, the United Kingdom, and select European markets, the service aims to carve out a dedicated…
SecurityOnline -
New Google Mandate: All Android Apps Must Support 16KB Page Size by November 1, 2025
Google has announced that from 1 November 2025, all applications targeting Android 15 and above must support a 16KB memory page size. The change, aimed at improving performance on higher-memory devices, follows the wider adoption of 64-bit processors and…
SecurityOnline -
TamperedChef Malware Rises: Deceptive Apps Use Signed Binaries and SEO Poisoning to Hijack Browsers
Field Effect’s Threat Intelligence team has uncovered a new TamperedChef malware wave that uses digitally signed binaries, deceptive packaging, and browser hijackers to deliver malware disguised as ordinary productivity tools. The campaign centres on two…
SecurityOnline -
New Phishing Campaign Impersonates Ukrainian Police to Deliver Amatera Stealer and PureMiner
A new phishing campaign, observed by FortiGuard Labs, impersonates the National Police of Ukraine in an SVG-based lure designed to deliver Amatera Stealer and PureMiner. The attack starts with forged emails claiming to be a notice from Ukrainian police,…
SecurityOnline -
DarkCloud Stealer Evolves: New VB6 Obfuscation and Crypto Wallet Theft Make Malware More Dangerous Than Ever
DarkCloud Stealer has evolved with a full VB6 rewrite, introducing a VB6-driven Caesar cipher for string encryption and requiring researchers to reverse‑engineer VB6’s RNG to decrypt stored strings, according to TRU. The malware targets credentials and…
SecurityOnline -
Trinity of Chaos: How LAPSUS$, Scattered Spider, and ShinyHunters Forged a Cybercrime Alliance
SecurityOnlineScattered Spider -
Akira Ransomware Exploits SonicWall VPN Accounts With Lightning-Fast Intrusions
Arctic Wolf has observed a major uptick in Akira ransomware activity since late July 2025, with attackers aggressively targeting SonicWall SSL VPN accounts and fresh infrastructure observed as recently as 20 September 2025. Affiliates are exploiting stolen…
SecurityOnlineStorm-1567 -
RedNovember: Chinese APT Expands Global Espionage to U.S. Defense, Aerospace, and Tech Firms
A new report from Recorded Future’s Insikt Group says the Chinese state‑sponsored threat group RedNovember has broadened its operations to strike government, defence, aerospace and technology sectors worldwide. According to Insikt Group, RedNovember now…
SecurityOnlineStorm-2077 -
From Infostealer to Full RAT: Huntress Uncovers a Multi-Stage Malware Attack Deploying PureRAT
According to Huntress, a recent intrusion campaign began as a Python-based infostealer but escalated into the deployment of PureRAT, a commercially available remote access trojan. The attack starts with a phishing email containing a ZIP archive disguised as…
SecurityOnline -
XCSSET macOS Malware Evolves: New Variant Targets Firefox, Hijacks Clipboard for Crypto Theft
Microsoft Threat Intelligence has identified a new variant of XCSSET, the macOS malware long targeting software developers through malicious Xcode project infections, with expanded functionality and persistence upgrades. The latest variant adds modules for…
SecurityOnline -
Morte Botnet Unveiled: A Rapidly Growing Loader-as-a-Service Campaign Exploiting Routers and Enterprise Apps
Researchers at CloudSEK Threat Intelligence (TRIAD) have exposed a Loader-as-a-Service campaign, Morte Botnet, that systematically compromises SOHO routers, IoT devices and enterprise applications through web-based command injection. According to CloudSEK,…
SecurityOnline -
DLL Hijacking Flaw (CVE-2025-56383) Found in Notepad++, Allowing Arbitrary Code Execution, PoC Available
A newly disclosed vulnerability in Notepad++ v8.8.3 has been assigned CVE-2025-56383 and is rated CVSS 6.5, allowing attackers to hijack Notepad++’s DLL loading process and potentially execute arbitrary code. According to the disclosure, Notepad++ v8.8.3 has…
SecurityOnline -
Russia-Linked COLDRIVER Group Expands Toolset, Using New Malware in ClickFix Espionage Campaign
The article reports that Zscaler ThreatLabz uncovered a new multi-stage ClickFix espionage campaign attributed with moderate confidence to the Russia-linked APT group COLDRIVER, also tracked as Star Blizzard, Callisto, and UNC4057. The campaign expands…
SecurityOnlineCallisto
