News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Tue 30 Sep 2025· 82 articles
-
CISA Issues Alert on Active Exploitation of Linux and Unix Sudo Flaw
According to CISA, the Cybersecurity and Infrastructure Security Agency, researchers have confirmed that attackers are actively exploiting a serious vulnerability in the sudo utility used on many Linux and Unix systems, tracked as CVE-2025-32463. The flaw…
gbhackers.com -
Apple Updates iOS and macOS to Prevent Malicious Font Attacks
Apple has released a new round of security updates for iOS and macOS to fix a single medium-severity vulnerability affecting both platforms. Tracked as CVE-2025-43400, the flaw is an out-of-bounds write in the FontParser component that could lead to a…
SecurityWeek -
260 romance scammers and sextortionists caught in huge Interpol sting
Interpol’s Operation Contender 3.0 resulted in the arrest of 260 people across Africa, linked to romance scams and extortion, with investigators reporting 1,235 electronic devices seized and 1,463 victims identified, and losses estimated at around $2.8…
Malwarebytes -
Researchers Publish Technical Analysis of Linux Sudo Privilege Escalation
A team of security researchers has released an in-depth technical report on CVE-2025-32463, a critical local privilege escalation flaw in the Linux sudo utility. The vulnerability affects sudo versions 1.9.14 through 1.9.17 and can allow a local attacker…
gbhackers.com -
Phantom Taurus: 新たな中華系Nexus APTとNET-STARマルウェア スイートの発見
Phantom Taurus is a previously undocumented nation-state APT whose activity aligns with PRC state interests, according to Unit 42 attribution framework. Over the past two and a half years, the group has targeted government and telecommunications…
unit42.paloaltonetworks.comCL-STA-0043 -
Cyberattack on Beer Giant Asahi Disrupts Production
Japanese brewing giant Asahi Group Holdings said its operations in Japan were disrupted by a cyberattack, causing system failures that affected orders and shipments across its subsidiaries and impacting call centres. Reuters reported that production at some…
SecurityWeek -
New Android Trojan “Datzbro” Tricking Elderly with AI-Generated Facebook Travel Events
ThreatFabric has flagged a previously undocumented Android banking trojan named Datzbro, discovered in August 2025 after reports of Facebook groups promoting “active senior trips” in Australia. The campaign targets the elderly, using AI-generated content to…
The Hacker News -
Threat Actors Exploiting MS-SQL Servers to Deploy XiebroC2 Framework
AhnLab Security Intelligence Center (ASEC) researchers have uncovered a surge in attacks targeting improperly managed MS-SQL servers, culminating in the deployment of the open‑source XiebroC2 command-and-control framework. The malware offers information…
gbhackers.com -
U.S. CISA adds Adminer, Cisco IOS, Fortra GoAnywhere MFT, Libraesva ESG, and Sudo flaws to its Known Exploited Vulnerabilities catalog
According to U.S. Cybersecurity and Infrastructure Security Agency (CISA), Adminer, Cisco IOS, Fortra GoAnywhere MFT, Libraesva ESG, and Sudo flaws have been added to the Known Exploited Vulnerabilities (KEV) catalog, with each entry linked to its CVE:…
Security Affairs -
Organizations Warned of Exploited Sudo Vulnerability
According to CISA, a recently patched local privilege escalation vulnerability in Sudo has been exploited in the wild. The flaw, tracked as CVE-2025-32463 with a CVSS score of 9.3, allows any user to run commands with root privileges on systems that support…
SecurityWeek -
Evolving Enterprise Defense to Secure the Modern AI Supply Chain
The Hacker News reports that AI adoption in enterprises is accelerating as SaaS vendors embed large language models into their platforms, prompting organisations to deploy AI-powered applications across multiple functions while balancing data protection and…
The Hacker News -
APT352 articles this day · SecurityOnline first
APT35 Hackers Targeting Government and Military to Steal Login Credentials · Ongoing APT35 Phishing Campaign Uncovered: Iranian Group Impersonates Video Conferencing Services
2 outlets-
APT35 Hackers Targeting Government and Military to Steal Login Credentials
Stormshield CTI researchers have identified two active phishing servers linked to APT35, revealing ongoing credential-stealing operations targeting government and military entities across the US, the Middle East, and Europe. In an active threat-hunting…
gbhackers.com -
Ongoing APT35 Phishing Campaign Uncovered: Iranian Group Impersonates Video Conferencing Services
The Stormshield Cyber Threat Intelligence team has uncovered new phishing infrastructure tied to APT35, also known as Mint Sandstorm, Charming Kitten, or Educated Manticore, with findings that extend a Check Point report and show the Iranian state‑linked…
SecurityOnline
-
-
Asahi halts ordering, shipping, and customer service after cyberattack
Asahi Group Holdings, Ltd., Japan’s largest brewing company, suspended ordering, shipping, and customer service after a cyberattack, with operations at its Japanese branch specifically halted while other branches were not affected. According to Asahi Group…
Security Affairs -
U.K. Police Just Seized £5.5 Billion in Bitcoin — The World’s Largest Crypto Bust
A Chinese national has been convicted for her role in a fraudulent cryptocurrency scheme after law enforcement authorities in the U.K. confiscated £5.5 billion (about $7.39 billion) during a raid of her home in London. The seizure, amounting to 61,000…
The Hacker News -
VMware Tools and Aria 0-Day Under Active Exploitation for Privilege Escalation
Organizations using VMware hypervisors are facing an urgent threat as a local privilege escalation zero-day, tracked as CVE-2025-41244, is under active exploitation in the wild. The flaw affects both VMware Tools and VMware Aria Operations’ Service Discovery…
gbhackers.com -
Malicious Code in Fake Postmark MCP Server Steals Thousands of Emails
A newly discovered attack on the npm ecosystem involved a malicious package impersonating Postmark, named postmark-mcp, which quietly siphoned off thousands of emails from unsuspecting developers and organisations. Over 15 incremental releases, the threat…
gbhackers.com -
Apple Font Parser Vulnerability Allowing Memory Corruption Attacks
On September 30, 2025, Apple released a security update for macOS Sequoia 15.7.1 to address a critical vulnerability in its font parser, identified as CVE-2025-43400. This flaw allows a maliciously crafted font file to cause out-of-bounds writes, potentially…
gbhackers.com -
Scattered Spider, ShinyHunters Restructure – New Attacks Underway
According to Resecurity, Scattered Spider, ShinyHunters and LAPSUS$ are forming a “Trinity of Chaos” alliance driving a global cybercrime wave, with coordinated hacks and extortion operations continuing against major enterprises and numerous incidents yet to…
Security AffairsScattered Spider -
Veeam RCE Exploit Allegedly Listed for Sale on Dark Web
A new dark web marketplace listing has sparked alarm in the cybersecurity community after a seller using the handle “SebastianPereiro” purportedly advertised a remote code execution exploit targeting Veeam Backup & Replication platforms. The alleged exploit,…
gbhackers.com -
AI-Powered Voice Cloning Raises Vishing Risks
AI-powered voice cloning is driving up vishing risks, with researchers noting that AI-generated clones can be created from as little as five minutes of recorded audio and used in real-time conversations to extract sensitive information. According to NCC…
Dark Reading -
VMware vCenter and NSX Flaws Allow Hackers to Enumerate Usernames
According to Broadcom, three key vulnerabilities affecting VMware vCenter Server and NSX products were addressed in the VMSA-2025-0016 advisory, including an SMTP header injection in vCenter (CVE-2025-41250) and two NSX username enumeration flaws…
gbhackers.com -
CISA Sounds Alarm on Critical Sudo Flaw Actively Exploited in Linux and Unix Systems
According to CISA, the U.S. Cybersecurity and Infrastructure Security Agency, the Known Exploited Vulnerabilities catalog has added a critical flaw in the Sudo command-line utility, CVE-2025-32463 (CVSS 9.3), affecting Sudo versions prior to 1.9.17p1. The…
The Hacker News -
New Harrods Data Breach Leaks Personal Information of 430,000 Customers
Harrods has confirmed a data breach in which hackers accessed personal information belonging to 430,000 customers. The data was obtained from a third-party provider and was limited to basic identifiers, including customer names and contact details where…
gbhackers.com -
Lunar Spider Infected Windows Machine in Single Click and Harvested Login Credentials
Lunar Spider is described as a sophisticated cybercriminal group that compromised a Windows machine with a single malicious click and then harvested credentials while maintaining persistent access for nearly two months. The intrusion began in May 2024, after…
gbhackers.comLUNAR SPIDER -
Hackers Distribute Malicious Microsoft Teams Build to Steal Remote Access
Cybersecurity researchers have uncovered a campaign in which threat actors use malicious advertisements and search engine optimisation poisoning to distribute fake Microsoft Teams installers containing the Oyster backdoor. The fake installers, masquerading…
gbhackers.com -
‘Vibe Working’ Is Here: Microsoft Introduces AI Agent Mode for Word and Excel
Microsoft is pushing a concept called “Vibe Working” by extending its AI tools into Word, Excel, and PowerPoint with a feature called Agent Mode, aimed at a new generation of collaborative workflows that reduce repetitive tasks. According to Microsoft, users…
SecurityOnline -
Major Blunder: FCC Accidentally Leaks Confidential iPhone 16e Schematics
The U.S. Federal Communications Commission (FCC) inadvertently released a 163-page PDF in its public database containing the complete circuit design diagrams, antenna configurations, and other technical details of the iPhone 16e, materials that Apple had…
SecurityOnline -
Google Refreshes its “G” Logo with a Gradient, Signaling a New Era Focused on AI
On 30 September 2025, Google announced that it would update its four-colour “G” logo into a brighter, gradient-enhanced version, officially defining it as the unified symbol of the entire Google brand and company. This move signals a broader shift as Google…
SecurityOnline -
Meta Updates AI Chatbot Guidelines to Block Harmful Interactions with Children
Meta has updated its safeguarding guidelines for its AI chatbot to block harmful interactions with children, outlining clear boundaries on what is acceptable and unacceptable. The policy explicitly bans engaging in, encouraging, or supporting content…
SecurityOnline -
-
CVE-2025-30247: Critical Command Injection Flaw in Western Digital My Cloud NAS Devices
CVE-2025-30247 is a critical command injection flaw in Western Digital My Cloud NAS devices that WD has patched, with a CVSS score of 9.4. According to WD’s advisory, the vulnerability exists in the My Cloud firmware prior to 5.31.108 and allows remote…
SecurityOnline -
Broadcom Fixes Multiple VMware vCenter and NSX Vulnerabilities
On 30 September 2025, Broadcom released patches for three vulnerabilities affecting VMware vCenter Server and VMware NSX, rated Important. The flaws, CVE-2025-41250, CVE-2025-41251, and CVE-2025-41252, could allow a malicious actor to manipulate system…
SecurityOnline -
Critical RCE Flaw in Apache Fory’s Python Module (CVE-2025-61622)
A critical remote code execution vulnerability has been disclosed in Apache Fory’s Python module pyfory (CVE-2025-61622), affecting Apache Fory versions 0.5.0 to 0.12.2. According to the advisory, deserialization of untrusted data in python in pyfory…
SecurityOnline -
CVE-2025-58384 (CVSS 10): Critical RCE Flaw Found in Watchdoc Print Management Software
Doxense has issued an urgent security advisory addressing a critical remote code execution (RCE) vulnerability in its Watchdoc print management solution, tracked as CVE-2025-58384 with a CVSS score of 10. The advisory warns that Watchdoc versions lower than…
SecurityOnline -
Broadcom Patches VMware Flaws: Privilege Escalation and Info Disclosure Vulnerabilities Affect VMware Tools and Aria Operations
Broadcom has released patches addressing three vulnerabilities in VMware Aria Operations and VMware Tools, with severities ranging from Moderate to Important, affecting a broad range of VMware products including VMware Cloud Foundation, VMware Telco Cloud…
SecurityOnline -
The Cybersecurity Information Sharing Act Faces Expiration
The Cybersecurity Information Sharing Act (CISA) is set to expire on 30 September 2025 unless reauthorized by the US Congress, and at the time of writing it has not been reauthorized. The article notes that a sunset clause means the law will lapse unless…
SecurityWeek -
-
NCSC Exposes Advanced Bootkit: RayInitiator and LINE VIPER Malware Found on Cisco ASA Devices
On 30 September 2025, the UK’s National Cyber Security Centre released a malware analysis report exposing RayInitiator and LINE VIPER, two sophisticated tools targeting Cisco ASA devices. The NCSC describes RayInitiator as a persistent multi-stage bootkit…
SecurityOnline -
Rent-a-Domain: Report Details How APTs and Cybercriminals Abuse DDNS Services for Malicious Infrastructure
A new analysis from Silent Push Threat Analysts highlights the growing misuse of publicly rentable subdomain providers, also known as Dynamic DNS services, by cybercriminals and advanced persistent threat groups. These services, marketed as flexible hosting…
SecurityOnline
