News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Tue 7 Oct 2025· 66 articles
-
Storm-11752 articles this day · SecurityOnline first
Microsoft Links Storm-1175 to GoAnywhere Exploit Deploying Medusa Ransomware · Critical RCE (CVE-2025-10035) in GoAnywhere MFT Used by Medusa Ransomware Group
2 outlets-
Microsoft Links Storm-1175 to GoAnywhere Exploit Deploying Medusa Ransomware
Microsoft says it has linked the Storm-1175 threat actor to the exploitation of a critical deserialization flaw in Fortra GoAnywhere software that enables command injection and potentially remote code execution, using it to deploy Medusa ransomware.…
The Hacker News -
Critical RCE (CVE-2025-10035) in GoAnywhere MFT Used by Medusa Ransomware Group
Microsoft Threat Intelligence has issued a warning following the discovery of active exploitation of a newly disclosed critical vulnerability in GoAnywhere Managed File Transfer (MFT) software by the cybercriminal group Storm-1175, known for deploying Medusa…
SecurityOnline
-
-
CISA Issues Alert on Active Exploitation of Microsoft Windows Privilege Escalation Flaw
CISA issued an alert about active exploitation of a critical privilege escalation vulnerability in Microsoft Windows, CVE-2021-43226, which resides in the Common Log File System driver. According to CISA, attackers who gain local access can bypass security…
gbhackers.com -
U.S. CISA adds Oracle, Mozilla, Microsoft Windows, Linux Kernel, and Microsoft IE flaws to its Known Exploited Vulnerabilities catalog
According to the U.S. Cybersecurity and Infrastructure Security Agency (CISA), Oracle, Linux Kernel, Mozilla, Microsoft Windows, and Microsoft Internet Explorer flaws have been added to the Known Exploited Vulnerabilities (KEV) catalog. The seven entries…
Security Affairs -
Hackers Launch Leak Portal to Publish Data Stolen from Salesforce Instances
The article reports that a hacker collective styling itself “Scattered Lapsus$ Hunters” has launched an extortionware portal aimed at pressuring victims to delist and delete stolen data, with the leverage centred on Salesforce datasets after months of…
gbhackers.comScattered Lapsus Hunters -
GoAnywhere 0-Day RCE Actively Exploited to Deliver Medusa Ransomware
According to Fortra, a critical zero-day vulnerability in GoAnywhere MFT’s License Servlet—CVE-2025-10035—was disclosed on 18 September 2025, with a perfect CVSS score of 10.0, and threat actors tracked as Storm-1175 have abused the flaw to gain remote code…
gbhackers.com -
Cl0p Ransomware Actively Exploiting Oracle E-Business Suite 0-Day
Cl0p Ransomware is actively exploiting Oracle E-Business Suite 0-Day CVE-2025-61882, a severe remote code execution flaw in the BI Publisher Integration component of Oracle EBS. The vulnerability carries a maximum CVSS score of 9.8, marking it as critical…
gbhackers.com -
Mustang Panda Adopts New DLL Side-Loading Method to Deploy Malware
The article reports that the China-linked threat actor Mustang Panda has refined its cyber espionage toolkit with a new DLL side-loading technique, first identified by IBM’s X-Force in June 2025 and linked to a Tibetan-focused campaign. The infection chain…
gbhackers.comMUSTANG PANDA -
NCSC Issues Alert on Active Exploitation of Oracle E-Business Suite 0-Day Vulnerability
The UK National Cyber Security Centre (NCSC) has issued a security alert following confirmation of active exploitation of a critical 0-day vulnerability tracked as CVE-2025-61882 in Oracle E-Business Suite (EBS), with Oracle’s advisory noting the risk to…
gbhackers.com -
13-Year-Old Redis RCE Flaw Lets Attackers Seize Complete Host Control
A remote code execution vulnerability in Redis, designated CVE-2025-49844 and nicknamed RediShell, has been described as a modern security crisis by Wiz Research, which uncovered a Use-After-Free memory corruption bug present in Redis for about 13 years.…
gbhackers.com -
Oracle EBS Under Fire as Cl0p Exploits CVE-2025-61882 in Real-World Attacks
CrowdStrike, according to CrowdStrike, attributes the exploitation of CVE-2025-61882 in Oracle E-Business Suite to a threat actor it tracks as Graceful Spider (aka Cl0p) with moderate confidence, noting that the first known exploitation occurred on 9 August…
The Hacker News -
OpenAI Turns ChatGPT Into a “Super App” with the New Apps SDK Integration
At OpenAI’s DevDay, the company unveiled its Apps SDK, a developer toolkit that lets third‑party applications integrate directly into ChatGPT, transforming the chat assistant into a platform capable of operating across a wide range of services. The first…
SecurityOnline -
OpenAI Partners with AMD, Adopting Instinct MI450 GPUs for a 6 GW AI Computing Infrastructure
OpenAI has partnered with AMD to adopt Instinct MI450 GPUs in order to build an AI computing infrastructure described as up to 6 gigawatts (GW) of capacity. The deal positions AMD as OpenAI’s “core strategic computing partner” and anticipates the first batch…
SecurityOnline -
ChatGPT Reaches 800 Million Weekly Users, Cementing Dominance in Generative AI Adoption
According to OpenAI, ChatGPT’s weekly active users have officially surpassed 800 million, setting a new global record for generative AI adoption announced by OpenAI CEO Sam Altman at the annual DevDay conference in San Francisco. Altman noted that in 2023…
SecurityOnline -
Qt Fixes Dual Critical Vulnerabilities (CVE-2025-10728 & CVE-2025-10729) in SVG Module
The Qt Group has released a security advisory about two critical vulnerabilities in the Qt SVG module, tracked as CVE-2025-10728 and CVE-2025-10729, with a CVSS base score of 9.4. The issues affect Qt versions 6.7.0 through 6.8.4 and 6.9.0 through 6.9.2; the…
SecurityOnline -
Elastic Fixes Multiple High-Severity Vulnerabilities in Kibana and Elasticsearch
Elastic has issued five security advisories addressing vulnerabilities in its Kibana and Elasticsearch components, including three critical XSS flaws and two information-disclosure issues. The most severe flaw, CVE-2025-25009, is a stored XSS via Kibana’s…
SecurityOnline -
Oracle EBS Zero-Day (CVE-2025-61882) Under Active RCE Exploitation by GRACEFUL SPIDER
According to CrowdStrike, Oracle EBS CVE-2025-61882 is a remote code execution vulnerability that is being exploited in a mass campaign against Oracle E-Business Suite applications to exfiltrate data. The campaign began around 9 August 2025, with…
SecurityOnlineTA505 -
Critical Flaw CVE-2025-59159 (CVSS 9.7) in SillyTavern Allows Full Remote Control of Local AI Instances
A critical flaw, CVE-2025-59159, with a CVSS of 9.7, has been disclosed in SillyTavern, a locally hosted interface for large language models and AI tools, potentially allowing remote attackers full control of SillyTavern instances. The vulnerability arises…
SecurityOnline -
Critical Flaw CVE-2025-36356 (CVSS 9.3) in IBM Security Verify Access Allows Root Privilege Escalation
IBM has released fixes for three vulnerabilities affecting its Security Verify Access and Verify Identity Access products, warning that the issues could lead to privilege escalation, arbitrary command execution, and script injection. The second…
SecurityOnline -
Developing: Salesforce data leak site being seized? Looks like it.
According to DataBreaches[.]Net, developing reports suggest that the breach forums leak site for ScatteredLAPSUS$Hunters is in the process of being seized. A whois lookup now shows the name servers changed to hans.ns.cloudflare[.]com and…
DataBreaches -
Rapid7 Details Cisco ASA Zero-Day Exploit Chain (CVE-2025-20362 & CVE-2025-20333)
Rapid7 has published a detailed technical analysis showing how two zero-day flaws in Cisco Secure Firewall ASA and FTD—CVE-2025-20362 and CVE-2025-20333—form an exploit chain that enables unauthenticated remote code execution in affected devices, with WebVPN…
SecurityOnline -
PoC Released for Linux Kernel Escalates Privileges Flaw
SecurityOnline -
Chinese APT Launches Spearphishing Campaign, Using Fake Cloudflare Lure to Deliver PlugX Malware
A new StrikeReady Labs report describes a sophisticated spearphishing campaign that targets European governmental and aviation sectors, with links to Chinese state-sponsored threat actors using PlugX (also known as Sogu or Korplug) malware. According to…
SecurityOnline -
New Yurei Ransomware Emerges: Go-Based Variant Uses Advanced Anti-Forensics for Irreversible Double Extortion
A new ransomware variant known as Yurei Ransomware has emerged, described by CYFIRMA researchers as a polished double-extortion operation developed in Go with advanced encryption, anti-forensic, and propagation techniques. The first sample was identified on…
SecurityOnline -
SideWinder APT Launches Operation SouthNet, Weaponizing Netlify and Pages.dev for Espionage
A new report from Hunt Intelligence reveals that APT SideWinder — one of South Asia’s most active and persistent state-sponsored threat actors — has launched an extensive cyber-espionage campaign dubbed “Operation SouthNet.” The operation focuses on…
SecurityOnlineRAZOR TIGER -
Snipe-IT Flaw Chained: XSS (CVE-2025-59712) to RCE (CVE-2025-59713) Achieves Full Server Compromise, PoC Released
Cybersecurity researchers at Synacktiv have disclosed two critical vulnerabilities in Snipe-IT that can be chained to achieve remote code execution on affected servers, affecting all versions prior to 8.1.18. The flaws, CVE-2025-59712 and CVE-2025-59713,…
SecurityOnline
