News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Thu 2 Oct 2025· 61 articles
-
The Identity Theft Resource Center Remains Open to Victims Amid Government Shutdown
According to Identity Theft Resource Center®, the organisation is available to assist victims during the Federal Government shutdown, providing free, no-cost help through its contact centre and other resources. The piece notes that the ITRC runs a no-cost…
DataBreaches -
Clop extortion emails claim theft of Oracle E-Business Suite data
DataBreaches[.]Net reports that executives at multiple companies received extortion emails claiming that sensitive data was stolen from Oracle E-Business Suite systems. According to Genevieve Stark, Head of Cybercrime and Information Operations Intelligence…
DataBreaches -
Legal Practice Board of Western Australia begins notifying data breach victims
According to CyberDaily, the Legal Practice Board of Western Australia (LPBWA) has begun notifying individuals whose data was affected by a cyber incident in May carried out by the Dire Wolf ransomware gang. A board spokesperson said that after a…
DataBreaches -
When it rains, it pours? Kido had a second incident to address
On 2 October 2025, DataBreaches[.]Net reported that Kido faced a second incident after a previous breach involving children’s information. The new leak involved more than 600 resumes/cvs, containing the personal information normally found in a CV, with many…
DataBreaches -
Hackers say they have deleted children’s pictures and data after nursery attack backlash
Posted on 2 October 2025, hackers who extorted a nursery chain by posting stolen images and data about children say they have removed the posts and deleted the information, according to BBC. The criminals began posting profiles of the children on their…
DataBreaches -
Judge throws out lawsuit against Columbus over data breach
On 2 October 2025 a Franklin County judge dismissed a lawsuit against the city of Columbus over a data breach, according to Fox28. The case was brought after the ransomware group Rhysida claimed it stole over 6 terabytes of city data and posted it for sale,…
DataBreaches -
Leak of patient records feared as Israeli hospital hit by cyberattack demanding ransom
According to The Times of Israel, the Assaf Harofeh Medical Center in Beer Yaakov was targeted by a cyberattack over Yom Kippur, with authorities investigating the possibility of a data leak. A Russian-speaking cybercrime organisation threatened to publish…
DataBreaches -
Red Hat confirms security incident after hackers breach GitLab instance
Red Hat confirms a security incident after hackers breached a GitLab instance, according to DataBreaches[.]Net. The extortion group calling itself the Crimson Collective claims to have stolen nearly 570GB of compressed data across 28,000 internal development…
DataBreaches -
CERT-UA warns UAC-0245 targets Ukraine with CABINETRAT backdoor
CERT-UA warns UAC-0245 targets Ukraine with CABINETRAT backdoor, describing a campaign spotted in September 2025 that uses malicious Excel XLL add-ins masquerading as tools such as “UBD Request[.]xll” and “recept_ruslana_nekitenko.xll” to load a PE…
Security AffairsUAC-0245 -
Your Meta AI conversations may come back as ads in your feed
Meta has announced that conversations with its AI assistant will be used for targeted advertising across its apps, meaning questions asked or topics discussed could later trigger related ads in feeds. Meta AI sits within Facebook, Instagram, WhatsApp,…
Malwarebytes -
There Are More CVEs, But Cyber Insurers Aren't Altering Policies
There are more CVEs than ever, with MITRE listing roughly 33,000 by mid-September this year and an expected approach to 47,000 for 2025, according to MITRE. The article notes that many vulnerabilities are never assigned a CVE and that a backlog also awaits…
Dark Reading -
Microsoft named a Leader in the IDC MarketScape for XDR
Microsoft has been named a Leader in the IDC MarketScape: Worldwide Extended Detection and Response Software 2025 vendor assessment, according to IDC MarketScape (doc #US52997325, September 2025). The company highlights that Microsoft Defender XDR provides…
Microsoft -
For One NFL Team, Tackling Cyber Threats Is Basic Defense
The Dark Reading piece explains that the Cleveland Browns’ cyber defence rests with three people, including vice-president of IT Brandon Covert, who oversee everything from scoreboard integrity to biometric systems. The NFL’s expanding international…
Dark Reading -
Red Hat Investigates Widespread Breach of Private GitLab Repositories
Red Hat has confirmed a security incident affecting its GitLab instance, after a threat actor claimed to have breached tens of thousands of private repositories. According to The Centre for Cybersecurity Belgium (CCB) an advisory, Crimson Collective claimed…
Dark Reading -
Confucius Hackers Hit Pakistan With New WooperStealer and Anondoor Malware
The Hacker News reports that the threat actor Confucius has been attributed to a new phishing-focused campaign targeting Pakistan, deploying malware families such as WooperStealer and Anondoor. Fortinet FortiGuard Labs researcher Cara Lin said that Confucius…
The Hacker News -
Allianz Life data breach impacted 1.5 Million people
Allianz Life disclosed that a data breach exposed data from a cloud CRM, with the total number of affected individuals reaching 1,497,036, and the incident impacting its North America branch. The breach exposed personal details such as names, addresses,…
Security Affairs -
18% of Attacks Aimed at EU Targeted OT, Says Cybersecurity Agency
According to ENISA, the EU’s cybersecurity agency, its 2025 Threat Landscape report analyses nearly 4,900 incidents from July 2024 to June 2025 and finds that 18.2% of observed threats targeted operational technology (OT) systems, following 42% for mobile…
SecurityWeek -
Phishing Is Moving From Email to Mobile. Is Your Security?
Email security may no longer be enough, as phishing moves beyond the inbox and expands across mobile and other channels. Recent data from TechMagic shows that 41% of phishing incidents now employ multichannel tactics, including SMS (smishing), voice calls…
Dark Reading -
Japan is running out of its favorite beer after ransomware attack
Japan is on the brink of shortages of its favourite beer, Asahi Super Dry, as a cyber attack has halted production across most of Asahi Group’s 30 domestic factories and crippled ordering and delivery systems. The outage has left retailers expecting empty…
Ars Technica -
Scam Facebook groups send malicious Android malware to seniors
Malwarebytes reports that scam Facebook groups aimed at “active seniors” are distributing Android malware by inviting users to download an app after joining groups that promote travel and community activities. According to ThreatFabric, several groups were…
Malwarebytes -
Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown
The Hacker News reports a malicious PyPI package named soopsocks that offered a SOCKS5 proxy service while delivering backdoor-like functionality to drop additional payloads on Windows systems, and it had attracted 2,653 downloads before being taken down. It…
The Hacker News -
'Confucius' Cyberspy Evolves From Stealers to Backdoors in Pakistan
A long-running South Asian advanced persistent threat group known as Confucius has shifted its cyber-espionage tactics in Pakistan, moving from deploying infostealers to more advanced Python-based backdoors against Windows targets, researchers warn.…
Dark Reading -
1.2 Million Impacted by WestJet Data Breach
According to SecurityWeek, Canadian airline WestJet notified roughly 1.2 million people that their personal information was stolen in a June 2025 cyberattack. The company said it was hit on 13 June, with the incident affecting the availability of its…
SecurityWeek -
Automating Pentest Delivery: 7 Key Workflows for Maximum Impact
The Hacker News outlines seven high‑value workflows to automate pentest delivery and accelerate remediation in today’s fast‑moving threat landscape. It emphasises moving findings from discovery to remediation in real time, rather than relying on static PDFs…
The Hacker News -
766,000 Impacted by Data Breach at Dealership Software Provider Motility
SecurityWeek reports that Motility Software Solutions, a dealership software provider, is notifying over 766,000 people that their personal information was compromised in a ransomware attack discovered on 19 August. The attackers deployed file-encrypting…
SecurityWeek -
ThreatsDay Bulletin: CarPlay Exploit, BYOVD Tactics, SQL C2 Attacks, iCloud Backdoor Demand & More
ThreatsDay this week highlights how quickly attackers pivot from cars to cloud services, noting that back in April 2025 AirPlay flaws could chain to CarPlay remote code execution via CVE-2025-24132, with patches published on 29 April 2025 but, as of the…
The Hacker News -
Google Mandiant Probes New Oracle Extortion Wave Possibly Linked to Cl0p Ransomware
Google Mandiant and Google Threat Intelligence Group (GTIG) say they are tracking a new cluster of activity possibly linked to a financially motivated threat actor known as Cl0p. The activity involves sending extortion emails to executives at various…
The Hacker News -
WireTap Attack Breaks Intel SGX Security
Georgian Tech and Purdue University researchers have demonstrated a passive DIMM interposer technique, named WireTap, that can be used to break Intel SGX’s DCAP attestation mechanism. The attack requires physical access to a server using SGX and relies on an…
SecurityWeek -
How to Close Threat Detection Gaps: Your SOC's Action Plan
Running a SOC often feels like drowning in alerts, but the article outlines a three‑step action plan to close threat detection gaps by building a continuous detection workflow. Step 1 expands threat coverage early with Threat Intelligence Feeds, giving…
The Hacker News -
14 Real-World Threat Intelligence Use Cases for the Aviation Industry
The SOCRadar overview highlights how the aviation sector faces a broad, evolving threat landscape, with ransomware, credential theft, supply chain attacks, and hacktivist campaigns driving disruption across airports, airlines, and suppliers. It notes that…
SOCRadar -
Cybercrime group claims to have breached Red Hat ‘s private GitHub repositories
The Crimson Collective, a cybercrime group, claims it stole 570GB from Red Hat’s private GitHub repositories, including 28,000 projects and around 800 Customer Engagement Reports containing sensitive network data. Red Hat confirmed the data breach but did…
Security AffairsCrimson Collective -
Cybercriminals Claim Theft of Data From Oracle E-Business Suite Customers
Cybercriminals are claiming to have stolen sensitive information from Oracle E-Business Suite customers, with extortion emails sent to executives at numerous organisations. The attackers say they are affiliated with the Cl0p ransomware group, and researchers…
SecurityWeek -
Zania Raises $18 Million for AI-Powered GRC Platform
Zania has disclosed an $18 million Series A funding round, bringing its total raised to $20 million, in a move that will fund expanding its engineering and go-to-market teams. According to NEA (New Enterprise Associates), the investment will back Zania’s…
SecurityWeek -
Warning: Beware of Android Spyware Disguised as Signal Encryption Plugin and ToTok Pro
Cybersecurity researchers have uncovered two Android spyware campaigns, ProSpy and ToSpy, that impersonate Signal and ToTok to target users in the United Arab Emirates. Slovak company ESET said the malicious apps are distributed via fake websites and social…
The Hacker News -
Android Spyware in the UAE Masquerades as ... Spyware
Hackers are spreading two families of mobile spyware around the UAE by masking them as the ToTok app, a messaging and VoIP service developed by G42, an Abu Dhabi government project supported by Microsoft. The campaigns, named ToSpy and ProSpy (the latter…
Dark Reading -
Sendit tricked kids, harvested their data, and faked messages, FTC claims
The Federal Trade Commission (FTC) has sued Sendit’s parent company, Iconic Hearts Holdings Inc, and its CEO Hunter Rice, alleging that children under 13 were signed up, and their personal data were collected without parental consent in breach of COPPA.…
Malwarebytes -
10/2/25, 8:49 AM
Darktrace has joined the Microsoft Security Store Partner Ecosystem, marking a significant step in its collaboration with Microsoft and its push to deliver integrated, intelligent protection for security teams. On 30 September 2025, the Darktrace ActiveAI…
darktrace.com -
TOTOLINK X6000R Routers Hit by Three Vulnerabilities Allowing Remote Code Execution
Three critical vulnerabilities were discovered in firmware version V9.4.0cu.1360_B20241207 of the TOTOLINK X6000R router, which was released on 28 March 2025. The flaws span argument injection (CVE-2025-52905), unauthenticated command injection enabling…
gbhackers.com -
Termix Docker Image Leaking SSH Credentials (CVE-2025-59951)
Termix’s official Docker image has a critical vulnerability (CVE-2025-59951) that exposes SSH credentials stored by the service. The flaw lets anyone with network access call the /ssh/db/host/internal endpoint and retrieve SSH host details, including…
gbhackers.com -
1.5 Million Impacted by Allianz Life Data Breach
In July, Allianz Life Insurance Company of North America told SecurityWeek that roughly 1.5 million people had personal information stolen in a data breach. The incident occurred on 16 July 2025 and involved a third‑party cloud‑based customer relationship…
SecurityWeek
