News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Wed 8 Oct 2025· 81 articles
-
Qilin ransomware claimed responsibility for the attack on the beer giant Asahi
Qilin ransomware claimed responsibility for the attack on the beer giant Asahi, with the incident disrupting operations in Japan. Asahi Group Holdings suspended operations at its Japanese branch at the end of September, after which other branches were not…
Security Affairs -
Vampire Bot Malware Sinks Fangs Into Job Hunters
A Vietnam-based threat group known as BatShadow is targeting job seekers and digital marketing professionals with phishing emails that deliver Vampire Bot malware designed for surveillance and data theft. According to Aryaka Threat Research Labs, the…
Dark Reading -
Red Hat Hackers Team Up With Scattered Lapsus$ Hunters
According to Dark Reading, Crimson Collective, which recently breached the GitLab instance of Red Hat Consulting, has joined the Scattered Lapsus$ Hunters cybercriminal collective. The group is said to have claimed a breach of 28,000 Red Hat repositories and…
Dark ReadingCrimson Collective -
Salesforce says it won’t pay extortion demand in 1 billion records breach
Salesforce says it will not engage with or pay an extortion demand from a crime group claiming to have stolen roughly 1 billion records from Salesforce customers. According to Mandiant, the threat group behind the campaign calls itself Scattered LAPSUS$…
Ars Technica -
3 Extortion Gangs Join Forces in Ransomware 'Cartel'
Three of the biggest names in ransomware and data extortion have announced a cartel-style collaboration, with LockBit, Qilin and DragonForce inviting others to join their coalition to share attack information and resources. The coordination is described as a…
Dark Reading -
DragonForce3 articles this day · The Hacker News first
DragonForce, LockBit, and Qilin, a new triad aims to dominate the ransomware landscape · DragonForce, LockBit, and Qilin, a new triad aims to dominate the ransomware landscape
3 outlets-
DragonForce, LockBit, and Qilin, a new triad aims to dominate the ransomware landscape
Ransomware groups DragonForce, LockBit, and Qilin have formed a strategic alliance to enhance their attack capabilities, with the aim of sharing tools and infrastructure to make attacks more effective, according to SecurityAffairs as reported by Pierluigi…
DataBreaches -
DragonForce, LockBit, and Qilin, a new triad aims to dominate the ransomware landscape
DragonForce, LockBit and Qilin have formed a ransomware alliance to boost attack effectiveness, sharing tools and infrastructure and signalling a major shift in the threat landscape, according to the article. The piece notes that the alliance could help…
Security Affairs -
LockBit, Qilin, and DragonForce Join Forces to Dominate the Ransomware Ecosystem
Three prominent ransomware groups—DragonForce, LockBit, and Qilin—have announced a strategic alliance, signalling a shift towards more coordinated and resource-rich attacks, according to ReliaQuest’s ransomware report for Q3 2025. The collaboration is…
The Hacker News
-
-
Top 10 Best Supply Chain Intelligence Security Companies in 2025
According to GBHackers, the 2025 Top 10 Best Supply Chain Intelligence Security Companies comprise Eclypsium, RunSafe Security, BlueVoyant, IBM, Oracle, Emerson, NXP Semiconductors, Authentix, Xeol, and The Cargo Security Company, as part of a definitive…
gbhackers.com -
Figma MCP Server Opens Orgs to Agentic AI Compromise
A high‑severity vulnerability in Figma’s MCP server could allow remote code execution by passing unvalidated input to shell commands, researchers say, via the figma-developer-mcp npm package bug CVE-2025-53967. According to the advisory posted on GitHub, the…
Dark Reading -
Miggo Security Named a Gartner® Cool Vendor in AI Security
Miggo Security has been named a Gartner Cool Vendor in AI Security, a designation announced from Tel Aviv, Israel on 8 October 2025 by CyberNewsWire. Miggo, a pioneer in Application Detection & Response and AI Runtime Defense, says the accolade underscores…
gbhackers.com -
Top 10 Best Fraud Prevention Companies in 2025
Top 10 Best Fraud Prevention Companies in 2025, published on 8 October 2025, reviews the leading players offering AI-driven, real-time fraud detection and multi‑layer security for banks, fintechs and digital-first businesses. The list comprises Experian,…
gbhackers.com -
Hackers Exploit WordPress Sites to Power Next-Gen ClickFix Phishing Attacks
Cybersecurity researchers have warned that attackers are abusing WordPress themes to drive Next-Gen ClickFix phishing campaigns. According to Sucuri, the campaign injects malicious content into a theme-related file (functions[.]php) to load code that…
The Hacker News -
AI Takes Center Stage at DataTribe’s Cyber Innovation Day
SecurityWeek reports that DataTribe’s Cyber Innovation Day this year is set for 4 November 2025, with the DataTribe Challenge spotlighting five finalists chosen to pitch to venture and private equity audiences. Each finalist receives a $5,000 award to cover…
SecurityWeek -
Will AI-SPM Become the Standard Security Layer for Safe AI Adoption?
AI security posture management (AI-SPM) is pitched as a new security layer to help organisations adopt AI safely by continuously identifying, evaluating, and remediating risks across an organisation’s AI footprint. It aims to make opaque AI interactions…
SecurityWeek -
Qantas says ‘legal protections in place’ as ScatteredLAPSUS$Hunters group threatens to release personal data
Qantas says it is continuing to support customers impacted by its significant cyber breach, with a 24/7 support line and specialist identity protection advice, as a hacking group known as Scattered Lapsus$ Hunters threatens to release personal data.…
DataBreaches -
Modeling scams see mature models as attractive new prospects
According to the BBC, modeling scams have shifted to target older models, with Malwarebytes noting that dating online outreach and ads now recruit “nonstandard” models including people well past their twenties. The article explains that scammers use…
Malwarebytes -
Top 10 Best Digital Footprint Monitoring Tools for Organizations in 2025
GBHackers’ 2025 round-up highlights a suite of digital footprint monitoring tools designed to help organisations map, monitor and mitigate external attack surfaces across modern networks. The list features FireCompass, UpGuard, Detectify, Rapid7, Palo Alto…
gbhackers.com -
Virtual Event Today: Zero Trust & Identity Strategies Summit
SecurityWeek’s Zero Trust & Identity Strategies Summit 2025 is taking place today as a fully immersive virtual event, with sessions running from 11:00 AM to 2:00 PM ET and the expo hall remaining open until 4:00 PM ET. The event focuses on digital identity…
SecurityWeek -
China-Nexus Actors Weaponize 'Nezha' Open Source Tool
A Dark Reading report details how a China-nexus threat actor is weaponising Nezha, an open source server operations and maintenance tool, to compromise organisations across Southeast Asia. Nezha, described as a lightweight program that can monitor and manage…
Dark Reading -
How we found a bug in Go's arm64 compiler
Cloudflare’s post details how a scale-driven bug hunt uncovered a race in Go’s arm64 compiler that affects stack unwinding. The team observed sporadic panics and fatal errors on arm64 machines, with crashes linked to unwinding the goroutine stack during…
Cloudflare -
Chinese Hackers Weaponize Open-Source Nezha Tool in New Attack Wave
According to Huntress in a report shared with The Hacker News, threat actors with suspected ties to China have weaponised the legitimate open-source monitoring tool Nezha to deliver Gh0st RAT to targets. The activity, observed in August 2025, uses an unusual…
The Hacker News -
Calling All Influencers: Spear-Phishers Dangle Tesla, Red Bull Jobs
Cyberattackers are targeting job seekers through spear-phishing campaigns, impersonating well-known brands like Tesla and Red Bull to steal personal information. The Cofense Phishing Defense Center reports that these campaigns are aimed at social media and…
Dark Reading -
DraftKings thwarts credential stuffing attack, but urges password reset and MFA
DraftKings says a credential stuffing campaign targeted its platform, with unauthorized access to a limited number of user accounts detected on 2 September 2025. The company investigated and contained the incident quickly, with no evidence that its systems…
Security Affairs -
Google DeepMind’s New AI Agent Finds and Fixes Vulnerabilities
Google DeepMind’s latest AI agent, CodeMender, is designed to autonomously find and patch security vulnerabilities in code, building on earlier work such as its Big Sleep agent that reportedly discovered a critical SQLite vulnerability and thwarted…
SecurityWeek -
New Phishing Kit Automates ClickFix Attacks to Evade Security Defenses
A new phishing kit called the IUAM ClickFix Generator automates ClickFix attacks, enabling information stealers and remote access trojans to be deployed with relative ease, according to the report. It was first observed on 18 July 2025 and is hosted on an…
gbhackers.com -
Google Unveils CodeMender – An AI Agent That Automatically Fixes Vulnerable Code
Google has introduced CodeMender, an AI-powered agent designed to automatically detect and patch security flaws in software, announced on 6 October 2025 by Raluca Ada Popa and Four Flynn. It builds on Google’s prior vulnerability research such as Big Sleep…
gbhackers.com -
US law firm with major political clients hacked in spying spree linked to China
According to CNN, on 8 October 2025 suspected Chinese government-backed hackers breached the computer systems of U.S. law firm Williams & Connolly, which has represented several of America’s most powerful politicians, as part of a broader spying campaign…
DataBreaches -
ClamAV 1.5.0 Released with Enhanced MS Office and PDF File Verification
ClamAV 1.5.0 is now available with features aimed at strengthening malware detection in Microsoft Office and PDF documents, and it emphasises better handling of encrypted files and embedded links. The release adds improved checks for encrypted OLE2-based…
gbhackers.com -
AI Chatbot Exploited as a Backdoor to Access Sensitive Data and Infrastructure
Generative AI chatbots are being weaponised as backdoors that could grant attackers direct access to sensitive data and infrastructure, the article explains using a fictional mid-sized financial services firm, FinOptiCorp, and its FinBot chatbot as an…
gbhackers.com -
OpenAI Blocks ChatGPT Accounts Linked to Chinese Hackers Developing Malware
OpenAI has blocked ChatGPT accounts linked to a group of Chinese hackers developing malware, in a move aimed at preventing abuse of its models. According to GBHackers’ report, this action comes after OpenAI identified a cell in China using ChatGPT to write…
gbhackers.com -
Is your computer mouse eavesdropping on you?
Researchers at the University of California have described a side-channel attack dubbed Mic-E-Mouse, which turns a computer mouse into a potential listening device. The method relies on high-performance optical sensors in optical mice, coupled with…
Malwarebytes -
Google Offers Up to $20,000 in New AI Bug Bounty Program
Google has unveiled a refreshed AI Vulnerability Reward Program (VRP), expanding its scope and merging rewards for abuse and security issues into one table, with the highest payouts reaching $20,000 for attacks that modify a victim’s account or data in…
SecurityWeek -
Nagios Vulnerability Allows Users to Retrieve Cleartext Administrative API Keys
Security researchers flagged two critical vulnerabilities in Nagios Log Server, tracked as CVE-2025-44823 and CVE-2025-44824, affecting versions prior to 2024R1.3.2. CVE-2025-44823 carries a 9.9 CVSS score and allows any authenticated user to retrieve…
gbhackers.com -
Salesforce Tells Clients It Won’t Pay Hackers for Extortion
Salesforce Inc. has told clients that it will not pay a ransom demand from hackers claiming to have stolen data, according to an email seen by Bloomberg News. The company said in a security notification that it had received “credible threat intelligence”…
DataBreaches -
Trinity of Chaos Leaks Data from 39 Companies — Google, Cisco Among Targets
A new ransomware collective calling itself the Trinity of Chaos has published a data leak site on the TOR network exposing the stolen records of 39 prominent corporations, including Google Adsense and Cisco. The alliance, which comprises threat actors from…
gbhackers.com -
Miggo Security Named a Gartner® Cool Vendor in AI Security
Miggo Security has been recognised as a Gartner Cool Vendor in AI Security, announced from Tel Aviv, Israel, on 8 October 2025 by CyberNewsWire. According to Gartner, through 2029, over 50% of successful cybersecurity attacks against AI agents will exploit…
SecurityOnline -
Step Into the Password Graveyard… If You Dare (and Join the Live Session)
According to The Hacker News, this Halloween The Hacker News and Specops Software are inviting IT leaders to a live webinar titled “Cybersecurity Nightmares: Tales from the Password Graveyard.” The session will explore real-world password breaches, why…
The Hacker News -
AWS Client VPN for macOS Hit by Critical Privilege Escalation Vulnerability
Amazon Web Services (AWS) released bulletin AWS-2025-020 detailing a serious flaw in the macOS version of its Client VPN software, tracked as CVE-2025-11462. The vulnerability arises when the VPN client fails to validate the log destination directory during…
gbhackers.com -
PoC Exploit Released for Critical Vulnerabilities in Lua Engine
A PoC exploit has been released for three critical vulnerabilities in the Lua engine used by Redis 7.4.5, with attackers able to trigger remote code execution and privilege escalation by abusing flaws in the Lua parser, the unpack() function, and protection…
gbhackers.com
