News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Fri 3 Oct 2025· 59 articles
-
Red Hat Confirms GitLab Instance Hack, Data Theft
Red Hat on Thursday confirmed that one of its GitLab instances was hacked after a threat actor claimed to have stolen sensitive data belonging to the company and its customers, according to SecurityWeek. The hackers, calling themselves Crimson Collective,…
SecurityWeek -
Signal Introduces Hybrid Post-Quantum Ratchet to Strengthen Security
Signal has announced a major cryptographic upgrade, introducing the Sparse Post Quantum Ratchet (SPQR) which combines its existing Double Ratchet with SPQR to form a Triple Ratchet system. According to Signal, the hybrid protocol aims to protect user…
gbhackers.com -
Hundreds of Free VPN Apps Expose Android and iOS Users’ Personal Data
Hundreds of free VPN apps for Android and iOS have been found to expose users’ personal data, according to Zimperium zLabs, which analysed 800 such apps. The research uncovers widespread security flaws, including the continued use of outdated third‑party…
gbhackers.com -
Microsoft Defender Bug Sparks Numerous False BIOS Security Alerts
Microsoft Defender for Endpoint users, particularly those with Dell devices, are experiencing a widespread issue with false BIOS security alerts caused by a critical software bug, which surfaced on 2 October 2025. The problem has prompted Microsoft to issue…
gbhackers.com -
PoC Released for VMware Workstation Guest-to-Host Escape Vulnerability
PoC Released for VMware Workstation Guest-to-Host Escape Vulnerability reports a proof-of-concept path that allows a compromised guest VM to escape to the host by exploiting a logic flaw in VMware’s backdoor/RPC handling, enabling memory corruption and code…
gbhackers.com -
Confucius Hacker Group Weaponizes Documents to Infect Windows Systems with AnonDoor Malware
The Confucius hacking group has significantly evolved its attack methodologies over the past year, moving from document stealers like WooperStealer to a Python-based backdoor called AnonDoor. According to FortiGuard Labs, the December 2024 campaign sharpened…
gbhackers.com -
Google warns of Cl0p extortion campaign against Oracle E-Business users
Google has warned of a Cl0p extortion campaign targeting Oracle E-Business Suite users, with emails sent to executives claiming data from Oracle systems has been stolen. According to Bloomberg, the group demanded ransoms up to $50 million, and at least one…
Security Affairs -
New Obex Tools Blocks Runtime Loading of EDR Dynamic Libraries
Obex is a newly released proof-of-concept utility by security researcher dis0rder0x00 that demonstrates a simple but effective user-mode method to stop unwanted security and monitoring modules from loading into Windows processes. The tool launches a target…
gbhackers.com -
Dutch Court Orders Meta to Fix Algorithmic Feed, Citing DSA Violation
According to Reuters report, a Dutch court ruled that Meta must revise the design of the Facebook and Instagram news feeds, finding that the current algorithmic recommendations violate the Digital Services Act (DSA) and limit users’ freedom to choose how…
SecurityOnline -
Google Announces $4 Billion Arkansas Investment for New AI Data Center and 600 MW Solar Project
Google has revealed plans to invest up to $4 billion in Arkansas by 2027, focusing on infrastructure, energy transition, and workforce development, with the construction of Google’s first data centre in West Memphis intended to bolster cloud and AI…
SecurityOnline -
Actively Exploited: Critical Flaw CVE-2025-6388 (CVSS 9.8) Allows Authentication Bypass in WordPress Plugin
Actively Exploited: Critical Flaw CVE-2025-6388 (CVSS 9.8) in the Spirit Framework WordPress plugin has put thousands of websites at immediate risk of compromise, according to the report. The vulnerability lies in improper identity validation within the…
SecurityOnline -
Yoast SEO Premium Flaw: Stored XSS Bug (CVE-2025-11241) Exposes Millions of WordPress Sites
Yoast SEO Premium has a stored XSS flaw, CVE-2025-11241, that potentially exposes millions of WordPress sites, with the vulnerability affecting versions 25.7 through 25.9 and rated CVSS 6.4 (Medium). The flaw stems from a flawed regular expression used to…
SecurityOnline -
GreyNoise Detects Coordinated Surge Exploiting Grafana Path Traversal Flaw (CVE-2021-43798)
GreyNoise detected a sudden, highly coordinated surge of exploitation attempts against Grafana CVE-2021-43798, a path traversal flaw that allows arbitrary file reads. The activity, captured by GreyNoise’s Global Observation Grid (GOG), involved 110 unique…
SecurityOnline -
Cavalry Werewolf APT Targets Russian Agencies with FoalShell and Telegram C2
3 October 2025, Cavalry Werewolf APT has been observed increasing activity between May and August 2025, targeting Russian state agencies as well as energy, mining, and manufacturing enterprises across the region, according to BI[.]ZONE Threat Intelligence.…
SecurityOnlineYoroTrooper -
Confucius APT Evolves: Espionage Group Shifts from WooperStealer to Advanced Python Backdoor AnonDoor
The Confucius group, a long-running cyber-espionage actor first identified in 2013, has resurfaced with a new wave of operations across South Asia, with Fortinet noting that the group targets governments, military organisations, defence contractors and…
SecurityOnline -
UAT-8099: Chinese Group Uses BadIIS Malware on Compromised Servers for SEO Fraud and Credential Theft
Cisco Talos researchers describe UAT-8099, a Chinese-speaking cybercrime group that uses compromised Microsoft IIS servers to carry out SEO fraud and to steal high-value credentials, configuration files and certificate data. According to Cisco Talos, the…
SecurityOnlineUAT-8099 -
Flagstar Agrees to $31.5 Million Deal in Accellion-Breach Suit
Flagstar Bank NA has agreed to pay $31.5 million to settle allegations that it failed to protect the personal information of nearly 2.2 million people in data breaches linked to Accellion Inc.’s file-transfer software. Class members would be eligible for up…
DataBreaches -
WARMCOOKIE Resurfaces After Takedown: New Variant Adds Stealth Handlers, Uses Expired C2 Certificates
WARMCOOKIE has resurfaced with a new variant that adds stealth handlers and uses expired C2 certificates, according to Elastic Security Labs. The analysis notes the malware is still being deployed through malvertising and spam campaigns, despite Europol’s…
SecurityOnline -
Researcher Details Zero-Day Linux/Android Kernel Flaw (CVE-2025-38352)
SecurityOnline[.]info reports a TOCTOU race condition in the Linux/Android kernel’s POSIX CPU Timer subsystem, CVE-2025-38352, arising from improper synchronization in kernel/time/posix-cpu-timers.c. According to Android Security Bulletin, the flaw was…
SecurityOnline
