News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Sat 4 Oct 2025· 10 articles
-
StepSecurity Is Sponsoring GitHub Universe 2025
StepSecurity is sponsoring GitHub Universe 2025 as a Bronze Sponsor, marking their first booth at a major conference. The event will run on 28–29 October 2025 at the Fort Mason Center in San Francisco, with Booth #102 hosted by the StepSecurity team.…
StepSecurity -
Just days before its data might be leaked, Qantas Airways obtained a permanent injunction
Qantas Airways secured a permanent injunction to stop publication of data stolen in a cyberattack, just days before the information might be leaked. The leak site listing by Scattered LAPSUS$ Hunters claimed 153 GB of Qantas data, comprising over 5 million…
DataBreaches -
GreyNoise detects 500% surge in scans targeting Palo Alto Networks portals
GreyNoise detected a 500% surge in scans targeting Palo Alto Networks login portals on 3 October 2025, marking the highest activity in three months. The firm reported that over 1,285 IPs scanned the Palo Alto portals that day, up from a typical 200, with 93%…
Security Affairs -
U.S. CISA adds Smartbedded Meteobridge, Samsung, Juniper ScreenOS, Jenkins, and GNU Bash flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA has added five flaws to its Known Exploited Vulnerabilities (KEV) catalog, spanning Smartbedded Meteobridge, Samsung, Juniper ScreenOS, Jenkins, and GNU Bash. The catalog now includes CVE-2014-6278 (GNU Bash OS Command Injection Vulnerability),…
Security Affairs -
CometJacking: One Click Can Turn Perplexity’s Comet AI Browser Into a Data Thief
04 October 2025, according to LayerX, cybersecurity researchers have disclosed CometJacking, a prompt-injection attack that targets Perplexity’s agentic AI browser, Comet, by embedding malicious prompts in a seemingly innocuous link to siphon data from…
The Hacker News -
ICE wants to build a 24/7 social media surveillance team
According to WIRED[.]com, United States immigration authorities are planning a 24/7 social media surveillance programme funded by private contractors, with nearly 30 analysts to sift through posts, photos, and messages for potential enforcement actions. The…
Ars Technica -
PowerSchool hit by by Salesloft Drift campaign, but hackers claim that there is no risk of harm or ransom
PowerSchool was among the victims of the Salesloft Drift/Salesforce campaign attributed to Scattered LAPSUS$ Hunters, with the organisation noting in a post in a closed users group that, on 23 August, it was affected by a security incident involving the…
DataBreaches -
Scanning Activity on Palo Alto Networks Portals Jump 500% in One Day
Threat intelligence firm GreyNoise disclosed that there was a near 500% surge in IP addresses scanning Palo Alto Networks login portals on 3 October 2025, the highest level in the last three months. The company said as many as 1,300 unique IP addresses took…
The Hacker News -
Ransomware Gangs Weaponize AnyDesk, Splashtop, and Other Legitimate RATs to Bypass Security
Ransomware groups are increasingly turning to legitimate Remote Access Tools such as AnyDesk, UltraViewer, RustDesk, Splashtop and TightVNC to gain persistence, spread laterally, and evade defenses, according to Seqrite Threat Intelligence. The report…
SecurityOnline -
XWorm V6.0 Resurfaces: Modular RAT Returns with Ransomware Plugin and Advanced Evasion
According to Trellix ARC, XWorm has resurfaced as XWorm V6.0, a modular RAT now featuring a ransomware plugin and advanced evasion techniques. The analysis notes the malware’s expanded plugin capabilities, persistence methods, and a linkage to ransomware…
SecurityOnline
