News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Mon 6 Oct 2025· 68 articles
-
Zimbra users targeted in zero-day exploit using iCalendar attachments
Zimbra users were targeted in a zero-day exploit that weaponised malicious iCalendar (.ICS) attachments to deliver attacks, with StrikeReady researchers identifying the CVE-2025-27915 flaw in Zimbra Collaboration Suite (versions 9.0–10.1) used in these…
Security Affairs -
Ransomware Gangs Exploit Remote Access Tools to Stay Hidden and Maintain Control
Ransomware operators have evolved into multi-stage campaigns that exploit legitimate Remote Access Tools to stay hidden, maintain control, and systematically dismantle organisational defences. The piece highlights tools such as AnyDesk, UltraViewer, RustDesk…
gbhackers.com -
A week in security (September 29 – October 5)
A week in security (September 29 – October 5) was published on 6 October 2025 by Malwarebytes Labs. The piece points readers to a series of posts from the previous week, including From threats to apology, hackers pull child data offline after public backlash…
Malwarebytes -
Reading the ENISA Threat Landscape 2025 report
Reading the ENISA Threat Landscape 2025 report, published on 6 October 2025, portrays a convergent and persistent EU cyber threat landscape driven by ransomware, AI-enabled phishing, and state-backed espionage. The report analyses events from July 2024 to…
Security Affairs -
Redis Server Use-After-Free Vulnerability Allows Remote Code Execution
A critical security vulnerability has been discovered in Redis Server that could allow authenticated attackers to achieve remote code execution through a use-after-free flaw in the Lua scripting engine. According to Wiz, including Benny Isaacs, Nir Brakha,…
gbhackers.com -
Asgard Malware Protector Reversed: Researchers Expose Its Antivirus Bypass Methods
SpyCloud Labs analysts have reverse‑engineered Asgard Protector, a sophisticated crypter tool that cybercriminals use to hide malicious payloads from antivirus detection systems, with LummaC2 operators cited as a primary user. The service is advertised on…
gbhackers.com -
QNAP NetBak Replicator Vulnerability Allow Malicious Code Execution
According to GMO Cybersecurity by IERAE, Inc., security researchers Kazuma Matsumoto discovered and reported a critical vulnerability in QNAP NetBak Replicator that could enable local attackers to execute malicious code. The flaw, tracked as CVE-2025-57714,…
gbhackers.com -
Hackers Turn AWS X-Ray into Command-and-Control Platform
Red team researchers have unveiled XRayC2, a sophisticated command-and-control framework that weaponises Amazon Web Services’ X-Ray distributed application tracing service to establish covert communication channels, according to reporte. The toolkit…
gbhackers.com -
Zimbra Zero-Day Exploited to Target Brazilian Military via Malicious ICS Files
A security vulnerability in Zimbra Collaboration, tracked as CVE-2025-27915 with a CVSS of 5.4, was exploited as a zero-day earlier this year in attacks against the Brazilian military, via a stored cross-site scripting flaw in the Classic Web Client that…
The Hacker News -
WARMCOOKIE Malware Operators Introduce Advanced Capabilities
WARMCOOKIE backdoor operators have expanded their capabilities, with four new command handlers added since summer 2024 to provide PE file, DLL, PowerShell script, and DLL execution with Start export functionality, according to Elastic Security Labs. The…
gbhackers.com -
PoC Released for Remotely Exploitable Oracle E-Business Suite 0-Day
The article reports a PoC for a critical remote code execution zero-day in Oracle E-Business Suite, tracked as CVE-2025-61882, with Oracle warning that it can be exploited remotely over a network without authentication. It affects Oracle E-Business Suite…
gbhackers.com -
PoC Published for Sudo Flaw Lets Attackers Escalate to Root
A PoC exploit has been released for CVE-2025-32463, a critical local privilege escalation vulnerability in the Sudo binary that could allow attackers to gain root access on Linux systems. The flaw was discovered by security researcher Rich Mirch and has…
gbhackers.com -
Oracle Rushes Patch for CVE-2025-61882 After Cl0p Exploited It in Data Theft Attacks
Oracle has issued an emergency update for its E-Business Suite to mitigate CVE-2025-61882, a vulnerability that Oracle says was exploited in the recent Cl0p data theft attacks. The flaw, tracked as CVE-2025-61882 with a CVSS score of 9.8, could allow an…
The Hacker News -
Unity Flaw CVE-2025-59489 Allows Local Code Execution in Millions of Games
A vulnerability in the Unity Runtime, tracked as CVE-2025-59489 with a CVSS of 8.4, could allow local file inclusion and code execution in millions of Android and cross‑platform games built with Unity, according to Unity’s advisory. The flaw arises from the…
SecurityOnline -
Qualcomm Antitrust Trial Begins: UK Consumer Group Seeks £480 Million for Inflated Smartphone Prices
Which? has formally filed a lawsuit in London’s Competition Appeal Tribunal, according to BBC News, accusing Qualcomm of imposing unfair licensing terms that forced Apple and Samsung to pay excessive royalties and thereby inflated smartphone prices. If the…
SecurityOnline -
-
OpenAI Acquires AI Investment App Roi, Signaling ChatGPT’s Pivot to Personalized Financial Advice
OpenAI has acquired Roi, an AI-driven personal investment application, with terms undisclosed, and Roi’s co-founder and CEO Sujith Vishwajith set to be the sole new member joining OpenAI’s team. Roi markets itself as an all-in-one financial management…
SecurityOnline -
TamperedChef Malware: Fake PDF Editor Stole Credentials After Two Months of Covert Operation
According to WithSecure, researchers uncover a highly sophisticated malware campaign named “TamperedChef” that masquerades as a legitimate PDF editor and infiltrates corporate networks across Europe using malvertising and a decoy AppSuite PDF Editor. The…
SecurityOnline -
CVE-2025-27237: Zabbix Agent Flaw Allows Local Privilege Escalation via OpenSSL DLL Injection
CVE-2025-27237 is a newly disclosed vulnerability in Zabbix Agent and Agent 2 for Windows that could enable local attackers to gain elevated privileges by exploiting a DLL injection flaw in the OpenSSL configuration handling. According to Zabbix’s advisory,…
SecurityOnline -
Trinity of Chaos: New Alliance of Hackers Extorts 39 Firms, Leaking Data Stolen from Cisco, Google, and Global Airlines
According to Resecurity’s HUNTER team, a cybercriminal alliance calling itself “Trinity of Chaos” extorts 39 firms and leaks data stolen from Cisco, Google and various global airlines via a Data Leak Site on the TOR network. The group, which Resecurity says…
SecurityOnlineTrinity of Chaos -
RCE Flaw CVE-2025-10547 in DrayTek Vigor Routers Allows Unauthenticated Root Access
A newly disclosed vulnerability in DrayTek’s Vigor routers, tracked as CVE-2025-10547, could allow remote attackers to execute arbitrary code and gain full control of affected devices. The flaw, rated CVSS 8.8 (High), affects multiple Vigor router models and…
SecurityOnline -
CVE-2025-61882 (CVSS 9.8): Critical RCE Flaw in Oracle E-Business Suite
CVE-2025-61882 (CVSS 9.8) is described by Oracle as a critical remote code execution flaw in Oracle E-Business Suite that can be exploited remotely without authentication to run arbitrary commands on the server. According to the advisory, the vulnerability…
SecurityOnline -
WhatsApp Worm: New SORVEPOTEL Malware Hijacks Sessions to Spread Aggressively Across Brazil
According to Trend Micro, the campaign, dubbed “Water Saci,” weaponises WhatsApp to launch one of the most aggressive self-propagating malware outbreaks seen in recent months, with the newly identified SORVEPOTEL designed to spread rapidly across Windows…
SecurityOnlineWater Saci -
QNAP Fixes High-Severity Flaws: NetBak Replicator RCE and SQL Injection in Qsync Central
QNAP has issued a security advisory addressing multiple flaws in NetBak Replicator and Qsync Central, including the highest-risk CVE-2025-57714, a code-execution risk in NetBak Replicator that could let a local attacker run unauthorized code by exploiting…
SecurityOnline -
Apple’s Indian Supply Chain Expands: 350,000 Jobs Created and Full iPhone 17 Assembly Planned
Apple’s Indian supply chain has deepened considerably, with the expansion translating into around 350,000 jobs created across the region and partnerships with nearly 45 local enterprises, of which about 120,000 are direct hires, according to recent…
SecurityOnline -
Sora Reverses Copyright Policy: OpenAI to Share Revenue and Allow Opt-In Controls for Character IP
OpenAI’s recently launched short-video platform “Sora” has risen to the top of the App Store charts, and its appeal includes AI-generated videos that allow users to upload biometric data, enabling them to see their own “digital doubles” within the generated…
SecurityOnline -
Critical Flaw CVE-2025-49844 (CVSS 10.0) Allows Remote Code Execution in Redis
A critical vulnerability in Redis, CVE-2025-49844, has a CVSS score of 10.0 and can enable remote code execution through the Lua scripting engine. The flaw is one of four Lua-related vulnerabilities (CVE-2025-46817, CVE-2025-46818, CVE-2025-46819, and…
SecurityOnline -
Cloudflare Unveils New Policy to Let Creators Control How AI Bots Use Their Content
Cloudflare has unveiled a Content Signals Policy that lets creators specify how AI systems may access and use their content, including whether it can be used for training. The policy, which aims to be machine-readable via updated robots[.]txt instructions,…
SecurityOnline
