News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Mon 6 Oct 2025· 68 articles
-
Inside Microsoft Threat Intelligence: Calm in the chaos
Inside Microsoft Threat Intelligence: Calm in the chaos explores how Microsoft’s Incident Response team pivots from disruption to recovery, turning high-pressure incidents into learning for the wider ecosystem. Adrian Hill, the lead investigator for…
Microsoft -
Discord discloses third-party breach affecting customer support data
Discord disclosed a third-party breach at a customer service provider that exposed data from users who contacted its Support or Trust & Safety teams, with notifications launched about the incident. According to Security Affairs, the breach occurred on 20…
Security Affairs -
Cyberattackers Exploit Zimbra Zero-Day Via ICS
An unknown threat actor masquerading as the Libyan Navy’s Office of Protocol targeted the Brazilian military earlier this year using a malicious calendar (ICS) file to deliver an exploit for a then zero-day vulnerability in Zimbra’s Collaboration Suite. The…
Dark Reading -
Clop Ransomware Hits Oracle Customers Via Zero-Day Flaw
Clop ransomware is targeting Oracle E-Business Suite customers via a newly disclosed zero-day, CVE-2025-61882, described as a critical flaw that enables an attacker with no authentication to remotely take control of Oracle Concurrent Processing. According to…
Dark Reading -
Paris, France, October 6th, 2025, CyberNewsWire
Reemo has unveiled Bastion+, described as a next-generation bastion solution deployable without limits, aimed at global privileged access management. Bastion+ is designed to unify visibility, supervision of privileged access, and consolidate logs and session…
gbhackers.com -
Phishers target 1Password users with convincing fake breach alert
Malwarebytes reports a targeted phishing campaign aimed at 1Password users, including a Malwarebytes employee, to harvest 1Password credentials. The phishing email claimed a breach and urged immediate action, but several red flags were noted: the sender…
Malwarebytes -
Investigating active exploitation of CVE-2025-10035 GoAnywhere Managed File Transfer vulnerability
On 18 September 2025, Fortra published a security advisory about a critical deserialization vulnerability in GoAnywhere MFT’s License Servlet, tracked as CVE-2025-10035 with a CVSS of 10.0. According to Microsoft Threat Intelligence, the flaw could allow a…
MicrosoftStorm-1175 -
Reemo Unveils Bastion+: A Scalable Solution for Global Privileged Access Management
Reemo has unveiled Bastion+, a next‑generation bastion solution described as deployable without limits and designed to unify global privileged access management. Paris, France, 6 October 2025, CyberNewsWire reports that Bastion+ combines a global vision with…
SecurityOnline -
I called American Income Life Insurance to alert them to a data breach involving 150,000 customers. Here’s why they didn’t find out.
American Income Life Insurance (AILife), based in Waco, Texas, is cited as having a data leak affecting 150,000 customers, former customers, or applicants, with a table that includes names, addresses, phone numbers, emails, dates of birth, policy details and…
DataBreaches -
What’s there to save about social media? (Lock and Code S06E20)
According to Malwarebytes Labs, the Lock and Code S06E20 episode, posted on 6 October 2025, revisits the promise of connectivity and asks what remains worth saving about social media. The discussion foregrounds the platforms Facebook, Twitter, Instagram,…
Malwarebytes -
Discord Says User Information Stolen in Third-Party Data Breach
Discord says hackers accessed personal data held by a third‑party customer service provider, not its own systems, and the incident affected only users who contacted Discord’s Customer Support and/or Trust & Safety teams. The compromised information includes…
SecurityWeek -
Chinese Gov't Fronts Trick the West to Obtain Cyber Tech
Western organisations may have been unwittingly supporting Chinese hackers for years, by collaborating with and selling technology to a research institution tied to state security. According to Recorded Future, Beijing Institute of Electronics Technology and…
Dark Reading -
New Report Links Research Firms BIETA and CIII to China’s MSS Cyber Operations
According to The Hacker News, a Chinese company named the Beijing Institute of Electronics Technology and Application (BIETA) has been assessed as likely led by the Ministry of State Security (MSS), with evidence linking at least four BIETA personnel to MSS…
The Hacker News -
Oracle patches critical E-Business Suite flaw exploited by Cl0p hackers
Oracle has released an emergency patch for a critical flaw in its E-Business Suite, tracked as CVE-2025-61882 with a CVSS score of 9.8, affecting Oracle E-Business Suite 12.2.3–12.2.14 (BI Publisher Integration). According to Oracle Security Alert Advisory –…
Security Affairs -
LinkedIn sues ProAPIs for $15K/Month LinkedIn data scraping scheme
LinkedIn has filed a lawsuit against ProAPIs and its CEO Rahmat Alam, accusing them of running millions of fake LinkedIn accounts to scrape and sell user data, and charging up to $15,000 per month for scraping services. The defendants are alleged to offer…
Security Affairs -
New ‘Fully Undetectable’ Android RAT Discovered on GitHub
A new Android Remote Access Trojan dubbed the “Most Powerful (FUD Android RAT) 2025” has appeared at the repository Huckel789/Android-RAT on GitHub, marketed as a fully undetectable (FUD) RAT designed to evade antivirus permanently. Hosted at that…
gbhackers.com -
Microsoft and Steam Take Action as Unity Vulnerability Puts Games at Risk
A high-severity vulnerability in the Unity editor can allow attackers to load arbitrary libraries and achieve code execution, tracked as CVE-2025-59489 with a CVSS score of 8.4. According to Unity, the issue resides in command-line arguments used to load and…
SecurityWeek -
Hackers Allegedly Breach Huawei Technologies, Leak Source Code and Internal Tools
Cybersecurity researchers are reporting an alleged breach involving Huawei Technologies, with hackers claiming to have accessed and leaked sensitive source code and internal development tools. The incident surfaced through social media channels and is…
gbhackers.com -
NSW gov contractor uploaded Excel spreadsheet of flood victims’ data to ChatGPT
A NSW government contractor uploaded an Excel spreadsheet containing flood victims’ data to ChatGPT, exposing individuals who had applied to the Northern Rivers Resilient Homes Program. The victims’ data were linked to a program set up after the devastating…
DataBreaches -
TamperedChef Malware Disguised as PDF Editor Hijacks Browser Credentials and Opens Backdoors
A campaign dubbed TamperedChef has compromised European organisations by masquerading as a legitimate PDF editor application, according to WithSecure’s Strategic Threat Intelligence & Research Group (STINGR). It spread via a Microsoft Installer (MSI) package…
gbhackers.com -
5 Critical Questions For Adopting an AI Security Solution
The article outlines five critical questions to ask when selecting an AI security solution, starting with whether the tool provides comprehensive visibility and control over AI models, datasets, and infrastructure to manage compliance and data exposure. It…
The Hacker News -
⚡ Weekly Recap: Oracle 0-Day, BitLocker Bypass, VMScape, WhatsApp Worm & More
The weekly recap highlights a cluster of high‑risk stories, including Oracle 0‑Day exploitation in the Oracle E‑Business Suite tracked as CVE‑2025‑61882 (CVSS 9.8), with threat actors tied to Cl0p exploiting vulnerabilities to steal data, and a note from…
The Hacker News -
Zabbix Agent/Agent2 for Windows Vulnerability Could Allow Privilege Escalation
A security flaw in Zabbix Agent and Agent2 for Windows could allow a local attacker to gain higher system privileges, with the issue tracked as CVE-2025-27237. The vulnerability stems from the way the OpenSSL configuration file is loaded, and affected…
gbhackers.com -
Chinese Cybercrime Group Runs Global SEO Fraud Ring Using Compromised IIS Servers
Cybersecurity researchers have linked a Chinese-speaking group codenamed UAT-8099 to SEO fraud and theft of high-value credentials, configuration files and certificate data, with attacks focused on Microsoft Internet Information Services (IIS) servers. The…
The Hacker News -
Hackers Extorting Salesforce After Stealing Data From Dozens of Customers
SecurityWeek reports that a threat actor group calling itself Scattered LAPSUS$ Hunters has claimed the theft of large volumes of data from dozens of Salesforce customers, listing 39 organisations on a new Tor-based leak site and threatening to leak the data…
SecurityWeekScattered Lapsus Hunters -
Fake Microsoft Teams Installers Deliver Oyster Backdoor
SOCRadar® Cyber Intelligence Inc. reports a campaign in which attackers promote fake Microsoft Teams installers to deploy the Oyster backdoor (also known as Broomstick). The attack chain relies on malvertising and search result poisoning, with victims…
SOCRadar -
Integrate Gemini CLI into Your Kali Terminal to Speed Up Pentesting Tasks
With the release of Kali Linux 2025.3, penetration testers and security professionals gain access to the Gemini Command-Line Interface (CLI), an open-source package that brings Google’s Gemini AI directly into the terminal for natural language–driven…
gbhackers.com -
Technical Details and Exploit Released for Chrome Remote Code Execution Flaw
A remote code execution vulnerability affecting Google Chrome’s WebAssembly engine has been publicly disclosed, along with a fully functional exploit, according to gbhackers. The flaw, identified during TyphoonPWN 2025, stems from a regression in the…
gbhackers.com -
Data Breach at Doctors Imaging Group Impacts 171,000 People
Doctors Imaging Group, a radiology practice with locations in Palatka and Gainesville, Florida, is informing customers about a data breach that occurred nearly a year ago. According to a data breach notice posted on its website, hackers had access to its…
SecurityWeek -
How to set up two-factor authentication (2FA) on your Facebook account
Posted on 6 October 2025, Malwarebytes explains that two-factor authentication (2FA) adds an extra login step and dramatically boosts security, even though it isn’t completely fool-proof. The guide outlines how to enable 2FA on Facebook across Android, iOS…
Malwarebytes -
Update on the emerging CL0P extortion campaign targeting Oracle E-Business Suite
According to Oracle Security Alert for CVE-2025-61882, CL0P extortionists are targeting Oracle E-Business Suite and likely exploited a zero-day vulnerability to exfiltrate data. The campaign was active in August 2025, with the actor reportedly stealing large…
DataBreaches -
Yurei Ransomware leverages SMB shares and removable drives to Encrypt Files
Yurei Ransomware targets Windows systems and propagates by exploiting SMB shares and removable media, rapidly encrypting data on all accessible local, network, and removable drives using per-file ChaCha20 keys wrapped with an attacker’s ECIES public key.…
gbhackers.com -
$4.5 Million Offered in New Cloud Hacking Competition
Wiz has teamed up with Microsoft, Google and AWS to launch Zeroday[.]Cloud, a cloud security hacking competition offering a total of $4.5 million in bug bounties. Security researchers must submit entries by 1 December and will demonstrate their exploits live…
SecurityWeek -
Hackers Exploit WordPress Sites by Silently Injecting Malicious PHP Code
Cybercriminals have ramped up attacks on WordPress websites by stealthily modifying theme files to serve unauthorized third-party scripts, with the campaign using subtle PHP injections in the active theme’s functions[.]php to fetch external code. A single…
gbhackers.com -
How we trained an ML model to detect DLL hijacking
Kaspersky’s Securelist reports on building a machine-learning model to detect DLL hijacking, detailing how three generations of models were developed and progressively refined for practical use. The project used internal dynamic library load data and…
securelist.com -
Detecting DLL hijacking with machine learning: real-world cases
Detecting DLL hijacking with machine learning: real-world cases explains how a machine‑learning model embedded in Kaspersky SIEM identifies DLL‑hijacking attacks and is integrated into the platform’s MDR workflows. According to Securelist, the model can run…
securelist.com -
StreetViewAI: Google’s Multimodal AI Brings Conversational Street View Navigation to the Visually Impaired
According to Google Research and DeepMind, StreetViewAI is a multimodal AI system designed to overcome street view maps’ visual dependency for visually impaired users. The system enables access to Google Street View’s repository of over 220 billion images…
SecurityOnline -
Beer Giant Asahi Says Data Stolen in Ransomware Attack
Asahi Group Holdings says a ransomware attack caused a week-long outage at its domestic subsidiaries, with production suspended at some Japanese factories and a shift to manual order processing. The incident, which was confirmed on 3 October 2025, was…
SecurityWeek -
OpenAI and Jony Ive’s AI Device Launch Delayed Over Compute, Privacy, and “Personality” Challenges
According to the Financial Times, the first AI-powered device developed by OpenAI with former Apple design chief Jony Ive may face delays, with its planned 2026 launch potentially postponed due to unresolved technical and privacy concerns. The project is…
SecurityOnline -
Oracle E-Business Suite Zero-Day Exploited in Cl0p Attacks
Oracle has patched a critical remote code execution vulnerability in Oracle E-Business Suite tracked as CVE-2025-61882, which the company says was exploited in a Cl0p-driven extortion campaign affecting EBS customers. The zero-day vulnerability, with a CVSS…
SecurityWeek
