News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Wed 1 Oct 2025· 65 articles
-
Google Publishes Security Hardening Guide to Counter UNC6040 Threats
According to Google’s Threat Intelligence Group (GTIG), the security hardening guidance targets UNC6040 threats, which have relied on social engineering and malicious use of legitimate SaaS features rather than Salesforce code flaws. The guide focuses on…
gbhackers.comUNC6040 -
Battering RAM Exploit Bypasses Modern Protections in Intel, AMD Cloud Processors
Cloud providers rely on hardware-based memory encryption to keep user data safe, shielding sensitive information from hackers and insiders. A new attack called Battering RAM shows these safeguards can be defeated with a tiny hardware add-on costing less than…
gbhackers.com -
Ukraine Warns of CABINETRAT Backdoor + XLL Add-ins Spread via Signal ZIPs
According to CERT-UA, Ukraine’s Computer Emergency Response Team, a new targeted campaign has been observed in September 2025 using a backdoor named CABINETRAT, attributed to a threat cluster it tracks as UAC-0245. The attackers have been distributing XLL…
The Hacker News -
Cisco IOS/IOS XE SNMP Vulnerabilities Exploited in Ongoing Attacks, Warns CISA
The Cybersecurity and Infrastructure Security Agency has issued a warning about critical vulnerabilities in Cisco’s IOS and IOS XE Software SNMP subsystem that are actively being exploited by threat actors, with CVE-2025-20352 added to CISA’s KEV catalog.…
gbhackers.com -
48+ Cisco Firewalls Hit by Actively Exploited 0-Day Vulnerability
Cisco says two serious vulnerabilities affecting its Adaptive Security Appliance (ASA) and Firepower Threat Defence (FTD) firewalls are being actively exploited, tracked as CVE-2025-20333 and CVE-2025-20362, with exploits already in the wild. According to…
gbhackers.com -
WestJet confirms cyberattack exposed IDs, passports in June incident
WestJet has confirmed a June cyberattack that disrupted some internal systems and its mobile app, and which exposed customer passports and IDs. The incident, described by the airline as a security breach, led to ongoing assessment of its scope with initial…
Security Affairs -
Microsoft Sentinel Launches AI-Driven Agentic SIEM Platform for Enterprise Security
Microsoft Sentinel now offers a general‑availability agentic SIEM platform that unifies security data, context and intelligent agents to help teams detect, investigate, and respond at AI speed. The system centres a unified security data lake, with…
gbhackers.com -
Top 10 Best Autonomous Endpoint Management Software In 2025
GBHackers On Security rolls out a ranked roundup of the Top 10 Best Autonomous Endpoint Management Software In 2025, published on 1 October 2025. The piece highlights how autonomous endpoint management (AEM) tools offer AI-driven automation, cross‑platform…
gbhackers.com -
MatrixPDF Campaign Evades Gmail Filters to Deliver Malicious Payloads
MatrixPDF Campaign Evades Gmail Filters to Deliver Malicious Payloads describes a growing social engineering campaign that splits malicious activity across multiple platforms to evade detection. The toolkit hijacks ordinary PDF files, adding fake security…
gbhackers.com -
Google Gemini Vulnerabilities Let Hackers Steal Saved Data and Live Location
Research has identified three significant vulnerabilities in Google’s Gemini AI assistant suite, dubbed the “Gemini Trifecta,” which could have allowed cybercriminals to steal saved data and live location information, according to Tenable. The flaws affected…
gbhackers.com -
CVE-2025-10725 (CVSS 9.9): Red Hat OpenShift AI Privilege Escalation Flaw Could Lead to Full Cluster Compromise
CVE-2025-10725 (CVSS 9.9) concerns Red Hat OpenShift AI, a platform for building, deploying and managing ML models across hybrid clouds, with a flaw that could let a low-privileged, authenticated user escalate to a full cluster administrator and compromise…
SecurityOnline -
NVIDIA Patches Multi Flaws in Delegated License Service, Allows Unauthenticated Access and DoS
NVIDIA has issued a security bulletin addressing multiple vulnerabilities across the NVIDIA App for Windows and the Delegated License Service (DLS) within the NVIDIA License System, with flaws ranging from privilege escalation to information disclosure,…
SecurityOnline -
Alexa+ Unveiled: Amazon’s AI Assistant Redefines Smart Living
Alexa+ is unveiled alongside new hardware at a New York event, with the latest version of Alexa+ powering the Echo smart speakers and Fire TV devices. Panos Panay, Amazon’s Senior Vice President of Devices and Services, said Alexa+ has evolved from simply…
SecurityOnline -
OpenAI Launches Sora: New AI-Powered Short-Video Platform to Rival TikTok
OpenAI has announced Sora, a new AI-powered short-form video platform built on its Sora 2 model, pitched as a rival to TikTok. The service enables users to generate video and audio content directly, with the feed dominated by AI-generated content and clips…
SecurityOnline -
OpenAI Launches Instant Checkout in ChatGPT, Teaming with Stripe to Reshape E-commerce
OpenAI has announced Instant Checkout, a feature that integrates transactions directly into ChatGPT, allowing users to complete purchases within the conversation interface without being redirected to external websites, according to CNBC. The innovation is…
SecurityOnline -
Apache Kylin Flaw: Authentication Bypass and SSRF Vulnerabilities Found in Big Data Platform
On 1 October 2025, the Apache Software Foundation disclosed three vulnerabilities in Apache Kylin, a high-concurrency OLAP engine used for big data analytics, which affect versions 4.0.0 through 5.0.2 and have been patched in 5.0.3. The most critical issue,…
SecurityOnline -
Backdoor Disguised as SOCKS5 Proxy: Malicious PyPI Package SoopSocks Grants Root Access
Security researchers from JFrog uncovered a malicious PyPI package named SoopSocks (XRAY-725599) that masqueraded as a SOCKS5 proxy tool but operated as a backdoor with persistence and reconnaissance features. The package, which evolved from a basic proxy to…
SecurityOnline -
CVE-2025-7493: Critical Flaw in FreeIPA Allows Host Users to Escalate to Domain Administrator
CVE-2025-7493 is described by the FreeIPA Team as a critical privilege escalation flaw that could allow attackers to elevate privileges from a host-level account to a domain administrator. The vulnerability carries a CVSS score of 9.1, underscoring the…
SecurityOnline -
Phantom Taurus: New Chinese APT Emerges with Fileless NET-STAR Backdoor Targeting Global Governments and Telecoms
According to Unit 42, Phantom Taurus is a previously undocumented Chinese state-aligned threat actor whose espionage operations have been active for more than two years and target government and telecommunications organisations across Africa, the Middle East…
SecurityOnlineCL-STA-0043 -
Patchwork APT Resurfaces: Stealthy Espionage Campaign Exploits DLL Sideloading and Layered Obfuscation
Patchwork APT, also known as Dropping Elephant, Monsoon, and Hangover Group, has resurfaced with a campaign aimed at South and Southeast Asia, according to K7 Security Labs. The researchers note that Patchwork has been active since at least 2015 and focuses…
SecurityOnlineQUILTED TIGER -
OpenSSL Patches Three Flaws: Timing Side-Channel RCE Risk and Memory Corruption Affect All Versions
OpenSSL has patched three vulnerabilities affecting multiple versions, including risks from denial-of-service to potential remote code execution and private key recovery, according to the advisory. The most critical, CVE-2025-9230, is an out-of-bounds read…
SecurityOnline -
Klopatra: New Android RAT Uses Hidden VNC and Commercial Obfuscation to Hijack European Banking Accounts
Klopatra, a new Android Remote Access Trojan, has been uncovered with hidden VNC capabilities and commercial obfuscation that aims to hijack European banking accounts. According to Cleafy, the threat uses native libraries and Virbox to complicate detection…
SecurityOnline -
Datzbro Trojan: Spyware-Banking Malware Hijacks Seniors’ Devices with Fake Facebook Lures
ThreatFabric researchers have uncovered a sophisticated scam campaign that uses social engineering and mobile malware to target seniors, introducing a newly discovered Android Trojan named Datzbro, described as a hybrid spyware and banking threat with…
SecurityOnline -
Hackers Hijack Industrial Cellular Routers to Launch Widespread Smishing Campaigns Across Europe
A new report from Sekoia[.]io’s Threat Detection & Research (TDR) team reveals that attackers are weaponising industrial cellular routers to launch widespread smishing campaigns across Europe, with Belgium a primary target. On 22 July 2025, Sekoia[.]io…
SecurityOnline -
China Imposes One-Hour Reporting Rule for Major Cyber Incidents
China has introduced a sweeping set of cybersecurity rules requiring rapid reporting of major incidents, with infrastructure operators given a tight 60-minute window to alert authorities from 1 November. The measures, published in a notice by the Cyberspace…
Dark Reading
