News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Wed 1 Oct 2025· 65 articles
-
That annoying SMS phish you just got may have come from a box like this
Scammers are abusing unsecured industrial cellular routers to blast SMS-based phishing messages, a campaign that has been ongoing since 2023, according to Sekoia. The devices, UR35 routers made by Milesight IoT Co., Ltd., are rugged IoT gear used to connect…
Ars Technica -
Google Sheds Light on ShinyHunters' Salesforce Tactics
Google is highlighting UNC6040’s social‑engineering tactics against Salesforce users, with Mandiant detailing how attackers use vishing to lure staff into compromising Salesforce environments. According to Mandiant, the threat actors target employees by…
Dark ReadingUNC6040 -
Shutdown Threatens US Intel Sharing, Cyber Defense
A prolonged US federal government shutdown could disrupt cyber threat intelligence sharing between the private sector and government, with a lapse in funding occurring on 1 October 2025 at 00:01. The timing coincides with the sunset of the Cybersecurity…
Dark Reading -
OpenSSL patches 3 vulnerabilities, urging immediate updates
OpenSSL has released security updates addressing three vulnerabilities, tracked as CVE-2025-9230, CVE-2025-9231, and CVE-2025-9232, with patched OpenSSL library versions including 3.5.4, 3.4.3, 3.3.5, 3.2.6, 3.0.18, 1.0.2zm and 1.1.1zd. CVE-2025-9230 is a…
Security Affairs -
New WireTap Attack Extracts Intel SGX ECDSA Key via DDR4 Memory-Bus Interposer
Researchers from Georgia Institute of Technology and Purdue University have demonstrated that SGX protections can be bypassed on DDR4 systems by a memory-bus interposer, showing how an attacker could passively decrypt data and extract an ECDSA signing key.…
The Hacker News -
Cybersecurity Awareness Month: Security starts with you
At Microsoft, security is central to everything, and Cybersecurity Awareness Month is framed as educating people as much as organisations, according to Microsoft Security Blog. As part of the Secure Future Initiative, which has mobilised more than 34,000…
Microsoft -
A $50 'Battering RAM' Can Bust Confidential Computing
Researchers have demonstrated an attack dubbed Battering RAM that can bypass confidential computing protections on Intel SGX and AMD SEV-SNP, effectively breaking encryption designed to protect data in memory. The team, from KU Leuven and the University of…
Dark Reading -
Top 10 Best Vulnerability Management Software in 2025
According to CISO Advisory, GBHackers’ Top 10 Best Vulnerability Management Software in 2025 surveys a slate of offerings designed to cover cloud, on‑premises and hybrid environments, from SMB‑friendly tools to enterprise platforms. The lineup includes…
gbhackers.com -
OpenSSL Vulnerabilities Allow Private Key Recovery, Code Execution, DoS Attacks
Three vulnerabilities in OpenSSL have been patched in the latest updates, with several versions released to fix them, including 3.5.4, 3.4.3, 3.3.5, 3.2.6, 3.0.18, 1.0.2zm and 1.1.1zd. Two of the flaws are rated moderate, one of which is CVE-2025-9231 and…
SecurityWeek -
Undead Operating Systems Haunt Enterprise Security Networks
According to runZero, it is a practical reality that enterprises have systems with older operating system versions running in their networks, with 8.56% of assets on end-of-life OS and 5% of all observed assets already beyond security support as of Sept. 30.…
Dark Reading -
Ukraine Warns of Weaponized XLL Files Delivering CABINETRAT Malware via Zip Archives
CERT-UA has issued an urgent warning that a new malware campaign is weaponising Excel add-in (XLL) files to deploy the CABINETRAT backdoor, with activity observed throughout September 2025. The XLLs masquerade as benign documents such as “Звернення УБД.xll”…
gbhackers.com -
Gemini AI flaws could have exposed your data
Gemini AI flaws could have exposed your data, with security researchers uncovering three vulnerabilities in Google’s Gemini AI assistant, according to Tenable. The flaws affect three Gemini components: Gemini Cloud Assist, Gemini Search Personalization…
Malwarebytes -
OneLogin Bug Let Attackers Use API Keys to Steal OIDC Secrets and Impersonate Apps
A high-severity vulnerability has been disclosed in the One Identity OneLogin Identity and Access Management (IAM) solution, which could expose OpenID Connect application client secrets under certain circumstances. The flaw, tracked as CVE-2025-59363 and…
The Hacker News -
Chinese State-Sponsored Hackers Exploiting Network Edge Devices to Harvest Sensitive Data
Salt Typhoon, a Chinese state-sponsored cyber threat group aligned with the MSS, has been targeting global telecommunications infrastructure since at least 2019, using exploits on network edge devices to harvest vast quantities of sensitive data. Their…
gbhackers.com -
Senior Travel Scams Used by Threat Actors to Distribute Datzbro Malware
In August 2025, Australian authorities issued multiple scam alerts after users reported suspicious Facebook groups promoting “active senior trips.” The campaign, which initially appeared as harmless community gatherings, was a sophisticated mobile malware…
gbhackers.com -
How Leading Security Teams Blend AI + Human Workflows (Free Webinar)
According to The Hacker News, AI is changing automation—but not always for the better. The site promotes a free webinar, “Workflow Clarity: Where AI Fits in Modern Automation,” with Thomas Kinsella, Co-founder & Chief Customer Officer at Tines, to explore…
The Hacker News -
Red Hat OpenShift AI Flaw Exposes Hybrid Cloud Infrastructure to Full Takeover
A severe security flaw has been disclosed in Red Hat OpenShift AI that could allow attackers to escalate privileges and take full control of the infrastructure under certain conditions, according to Red Hat. The vulnerability is tracked as CVE-2025-10725 and…
The Hacker News -
Top 100 World’s Best Cybersecurity Companies in 2025
Top 100 World’s Best Cybersecurity Companies in 2025 is compiled by Balaji and published by gbhackers, listing a wide range of vendors from Palo Alto Networks to Google Cloud Security, Microsoft Security to IBM Security, and many others across cloud,…
gbhackers.com -
Malicious PyPI Package Mimics as SOCKS5 Proxy Tool Attacking Windows Platforms
According to JFrog’s security research team, a malicious PyPI package named SoopSocks masquerades as a SOCKS5 proxy tool but implants a backdoor on Windows systems. The threat uses automated installation and persistence techniques, including a Windows…
gbhackers.com -
Chinese APT ‘Phantom Taurus’ Targeting Organizations With Net-Star Malware
A Chinese state-sponsored hacking group tracked as Phantom Taurus has been targeting government and telecommunications organisations for espionage for more than two years, according to SecurityWeek’s coverage of Palo Alto Networks’ findings. Initially…
SecurityWeekCL-STA-0043 -
WestJet Confirms Data Breach Exposing Customer Personal Information
WestJet Airlines has confirmed that a recent cybersecurity incident exposed certain personal information belonging to its customers, according to gbhackers. The breach took place in mid-June and was discovered on 13 June 2025, with WestJet stating that the…
gbhackers.com -
Multiple NVIDIA Flaws Allow Attackers to Escalate Privileges on Systems
NVIDIA has issued a critical security bulletin revealing multiple vulnerabilities in its NVIDIA App software that can enable attackers to escalate privileges on Windows systems, tracked as CVE-2025-23297 with a base score of 7.8 (High) and potential impact…
gbhackers.com -
Canadian Airline WestJet Says Hackers Stole Customer Data
WestJet has disclosed that personal information provided by travellers for reservations or travel was stolen in a June 2025 cyberattack, with the breach detailed as having unauthorised access to several internal systems. The company said names, contact…
SecurityWeek -
NIST Publishes Guide for Protecting ICS Against USB-Borne Threats
According to SecurityWeek, NIST has published a new guide designed to help organisations reduce cybersecurity risks associated with the use of removable media devices in operational technology environments. The guide, NIST Special Publication 1334, was…
SecurityWeek -
Hackers Exploit Milesight Routers to Send Phishing SMS to European Users
Unknown threat actors have abused Milesight industrial cellular routers to send phishing SMS messages as part of a smishing campaign targeting European users since at least February 2022, with SEKOIA stating that the attackers are exploiting the router’s API…
The Hacker News -
2025 Cybersecurity Reality Check: Breaches Hidden, Attack Surfaces Growing, and AI Misperceptions Rising
According to Bitdefender's 2025 Cybersecurity Assessment, the study combines input from more than 1,200 IT and security professionals across six countries with an analysis of 700,000 cyber incidents by Bitdefender Labs. The findings highlight a troubling…
The Hacker News -
New FlipSwitch Hooking Method Overcomes Linux Kernel Defenses
A new rootkit hooking method named FlipSwitch has emerged, aimed at overcoming Linux kernel defenses by targeting the compiled dispatcher rather than the deprecated sys_call_table. According to GBHackers, FlipSwitch restores syscall hooking by patching the…
gbhackers.com -
Descope Raises $35 Million in Seed Round Extension
Descope has announced a $35 million seed funding extension, bringing its total funding to $88 million. The round sees continued backing from existing investors including Cerca Partners, Dell Technologies Capital, Lightspeed Venture Partners, Notable Capital,…
SecurityWeek -
Apple urges users to update iPhone and Mac to patch font bug
Apple released iOS and macOS updates to fix a medium-severity flaw in font processing that could trigger a denial-of-service condition or memory corruption, tracked as CVE-2025-43400. The vulnerability is an out-of-bounds write in the FontParser component,…
Security Affairs -
Cybersecurity Awareness Month 2025:Prioritizing Identity to Safeguard Critical Infrastructure
Cybersecurity Awareness Month 2025 builds on a focus on identity as the key to safeguarding critical infrastructure, emphasising government entities and small and medium-sized businesses that keep communities running. This October marks the 22nd anniversary…
SecurityWeek -
New DNS Malware ‘Detour Dog’ Uses TXT Records to Deliver Strela Stealer
Detour Dog, a stealthy website malware campaign tracked since February 2020, has evolved into a DNS-based command-and-control distribution system that delivers the Strela Stealer via DNS TXT records. Tens of thousands of compromised websites generate…
gbhackers.com -
AI-driven medical benefits servicer hit with data breach
Healthcare Interactive, which develops AI-based medical insurance benefit enrolment and billing solutions, confirmed last week that a data breach involved personal data being moved offsite by hackers. The exact number of affected individuals was not…
DataBreaches -
Forensic journey: hunting evil within AmCache
AmCache, formally known as Application Activity Cache, is a Windows forensic artefact that helps identify the execution of both benign and malicious software on a machine. It stores metadata for executables in Amcache[.]hve, which sits under…
securelist.com -
TOTOLINK X6000R: Three New Vulnerabilities Uncovered
Palo Alto Networks Unit 42 has disclosed three vulnerabilities in the TOTOLINK X6000R router firmware, version V9.4.0cu.1360_B20241207, released on 28 March 2025. The flaws comprise CVE-2025-52905, an argument injection that can cause a DoS, CVE-2025-52906,…
unit42.paloaltonetworks.com -
Broadcom Fails to Disclose Zero-Day Exploitation of VMware Vulnerability
According to SecurityWeek, Broadcom rolled out patches for a newly disclosed high-severity VMware vulnerability that has been exploited as a zero-day since October 2024, tracked as CVE-2025-41244 (CVSS 7.8) and affecting VMware Aria Operations and VMware…
SecurityWeek -
New Android Banking Trojan “Klopatra” Uses Hidden VNC to Control Infected Smartphones
A newly documented Android banking trojan named Klopatra has compromised over 3,000 devices, with a majority of infections reported in Spain and Italy. It leverages Hidden Virtual Network Computing (VNC) for remote control and uses dynamic overlays to…
The Hacker News -
Hackers Abuse EV Certificates to Sign Completely Undetectable DMG Malware
Security researchers have uncovered a macOS malware campaign in which threat actors abuse Extended Validation (EV) code-signing certificates to sign DMG payloads that appear completely legitimate to macOS security checks. A fresh DMG sample was identified…
gbhackers.com -
Battering RAM Attack Breaks Intel and AMD Security Tech With $50 Device
Researchers have disclosed a new hardware attack, Battering RAM, demonstrated against Intel and AMD systems. The technique, developed by KU Leuven in Belgium together with the University of Birmingham and Durham University in the UK, requires physical access…
SecurityWeek -
Rhadamanthys 0.9.x – walk through the updates
Rhadamanthys 0.9.x introduces a range of sizeable updates, with 0.9.2 already gaining traction and affecting defenders’ tooling. The XS1 and XS2 custom formats received changes: XS1_B adds a new imp_key byte and XS2_B extends the import structure so the DLL…
Check Point -
Red Hat OpenShift AI Vulnerability Lets Attackers Seize Infrastructure Control
Red Hat OpenShift AI vulnerability, identified as CVE-2025-10725, allows attackers with minimal access to escalate privileges and seize control of entire clusters. The flaw arises from an overly permissive ClusterRoleBinding that links the built-in…
gbhackers.com
