News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Thu 2 Oct 2025· 61 articles
-
China-linked APT Phantom Taurus uses Net-Star malware in espionage campaigns against key sectors
China-linked APT Phantom Taurus has targeted government and telecom organisations for espionage, using a previously undetected .NET malware suite called NET‑STAR to carry out in‑memory operations against internet‑facing IIS servers. The group, described as a…
Security AffairsCL-STA-0043 -
Chrome Security Update Addressing 21 Vulnerabilities
The Chrome team has released Chrome 141.0.7390.54/55 to the stable channel for Windows, Mac, and Linux, with the rollout expected over the coming days and weeks. The update delivers critical security fixes, addressing 21 distinct vulnerabilities across high,…
gbhackers.com -
Microsoft Outlook Bug on Windows Devices Results in Repeated Email Crashes
Microsoft is investigating a bug affecting classic Outlook for Windows that prevents users from accessing their email accounts, with the issue manifesting as a persistent error message: “Cannot start Microsoft Outlook. Cannot open the Outlook window. The set…
gbhackers.com -
Splunk Enterprise Flaws Allow Attackers to Run Unauthorized JavaScript Code
Splunk released security advisories addressing multiple vulnerabilities affecting various versions of Splunk Enterprise and Splunk Cloud Platform, ranging from cross-site scripting to access control bypasses with CVSS scores from 4.6 to 7.5. The disclosures…
gbhackers.com -
Google Drive Desktop Gets AI-Powered Ransomware Detection to Block Cyberattacks
Google Drive desktop now includes an AI-powered ransomware detection system that automatically halts file synchronization when malicious encryption attempts are detected, aiming to prevent widespread data corruption across enterprise networks. The feature…
gbhackers.com -
-
Samsung and OpenAI Announce Strategic Alliance to Build Next-Generation Global AI Infrastructure
Samsung and OpenAI have announced a strategic partnership to jointly advance the development of global AI infrastructure, as reported on 2 October 2025. According to Samsung, OpenAI’s demand for memory is rising at an unprecedented pace, with monthly…
SecurityOnline -
Xbox Game Pass Ultimate Price Jumps to $29.99 with Ubisoft+ and Fortnite Crew Added
Microsoft has restructured Xbox Game Pass, with the Ultimate tier now priced at 29.99 per month and enhanced by Ubisoft+ Classics in partnership with Ubisoft and the Fortnite Crew subscription through Epic Games, alongside access to over 400 games and more…
SecurityOnline -
Privacy Alert: Meta to Use User-AI Conversations to Target Ads Across Facebook and Instagram
Meta has announced that it will begin collecting user–AI conversation data to refine its advertising and content recommendation systems across Facebook and Instagram. The policy will take effect on 16 December 2025, with users being notified via in‑app…
SecurityOnline -
Google Replaces Assistant with Gemini for Home AI and Unveils New Speakers & Nest Cams
Google has formally replaced Google Assistant with Gemini for Home, unveiling a redesigned Google Home app alongside a new generation of smart speakers and an upgraded Nest camera and doorbell lineup. Gemini for Home enables contextual understanding, with…
SecurityOnline -
Qualcomm Wins “Complete Victory” Over Arm in Major Chip Licensing Lawsuit
Qualcomm has secured what the article describes as a “complete victory” over Arm in a major chip licensing dispute, with a U.S. District Court on 1 October formally dismissing Arm’s last remaining lawsuit against Qualcomm. The case began in 2022 after…
SecurityOnline -
Critical Flaw in Termix Docker Image (CVE-2025-59951) Leaks SSH Credentials Without Authentication
The Termix project has disclosed a critical authentication bypass in its official Docker image, exposing sensitive SSH configuration data without requiring user login, tracked as CVE-2025-59951 with a CVSS v4 score of 9.2. Termix is an open-source,…
SecurityOnline -
Chrome 141 Stable Channel Update Patches High-Severity Vulnerabilities (CVE-2025-11205 & CVE-2025-11206)
The Chrome 141 Stable Channel update has been released for Windows, Mac and Linux, bringing version 141.0.7390.54 for Linux and 141.0.7390.54/55 for Windows and Mac, and delivering 21 security fixes, including patches for two high-severity vulnerabilities…
SecurityOnline -
Critical Flaw CVE-2025-52906 (CVSS 9.3) Allows Unauthenticated RCE on TOTOLINK X6000R Routers
According to Unit 42, Palo Alto Networks’ threat intelligence team, three flaws were disclosed in the TOTOLINK X6000R router firmware, with CVE-2025-52906 described as the most severe and rated Critical (CVSS 9.3). The vulnerability lies in the…
SecurityOnline -
Splunk Fixes Six Flaws, Including Unauthenticated SSRF and XSS Vulnerabilities in Enterprise Platform
Splunk has issued advisories for six vulnerabilities in its Enterprise and Cloud platforms, spanning improper access control, several XSS flaws, XXE injection, and DoS risks through LDAP misuse, with the most severe being an unauthenticated blind SSRF. The…
SecurityOnline -
Django Security Alert: High-Severity SQL Injection Flaw (CVE-2025-59681) Fixed in Latest Updates
The Django team has issued security releases addressing two vulnerabilities, including a high-severity SQL injection in CVE-2025-59681, with patched versions Django 5.2.7, Django 5.1.13, and Django 4.2.25 (fixes also applied to the framework’s main and 6.0…
SecurityOnline -
Rhadamanthys Stealer v0.9.2 Drops: New PNG Payloads and Anti-Analysis Tricks Make Malware Deadlier
Rhadamanthys Stealer has released v0.9.2, introducing refreshed anti-analysis tricks, including a message box asking “Do you want to run a malware?” when executed in unpacked form. The update also uses PNG payload delivery, embedding next‑stage modules in…
SecurityOnline -
DoS Flaws in Argo CD: Unauthenticated Attackers Can Crash Kubernetes Server with Single Request
The Argo CD project has released patches for several denial-of-service vulnerabilities that could crash the argocd-server process with a single unauthenticated HTTP request, affecting webhook integrations with Azure DevOps, Bitbucket Server and Gogs, plus a…
SecurityOnline -
Detour Dog: Stealthy DNS Malware Uses TXT Records for Command and Control
According to Infoblox, the Infoblox Threat Intelligence team released an in‑depth report on a global malware campaign that used DNS TXT records as a novel command-and-control mechanism, with the threat actor behind it tracked as Detour Dog infecting tens of…
SecurityOnline -
Russian-Speaking Lunar Spider Group Launches New Ransomware Wave with Latrodectus V2 Loader
On 2 October 2025, NVISO’s CSIRT released findings on Lunar Spider, a Russian-speaking group known for IcedID activity, which has shifted to distributing Latrodectus V2 to pave the way for ransomware operations. According to NVISO, Lunar Spider has expanded…
SecurityOnlineLUNAR SPIDER -
CISA Warns of Critical RCE Flaw (CVE-2025-10659, CVSS 9.8) in Megasys Telenium Online Web Application
According to CISA, the U.S. Cybersecurity and Infrastructure Security Agency, a security advisory warns of a critical remote code execution vulnerability in the Megasys Telenium Online Web Application, tracked as CVE-2025-10659 with a CVSS v3.1 base score of…
SecurityOnline
