News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Wed 8 Oct 2025· 81 articles
-
North Korean Hackers Have Stolen $2 Billion in Cryptocurrency in 2025
North Korean threat actors are estimated to have stolen more than $2 billion in cryptocurrency during the first nine months of 2025, according to Elliptic. This year’s total is a record, with the cumulative value of stolen assets surpassing $6 billion to…
SecurityWeek -
Severe Figma MCP Vulnerability Lets Hackers Execute Code Remotely — Patch Now
Cybersecurity researchers disclosed a now-patched vulnerability in the figma-developer-mcp Model Context Protocol (MCP) server that could allow attackers to achieve remote code execution, tracked as CVE-2025-53967 with a CVSS score of 7.5. The flaw stems…
The Hacker News -
ASCII Smuggling Attack in Gemini Tricks AI Agents into Revealing Smuggled Data
Enterprise AI assistants face a hidden menace when invisible Unicode control characters are used to smuggle malicious instructions into prompts. In September 2025, FireTail researcher Viktor Markopoulos tested several large language models for susceptibility…
gbhackers.com -
Shuyal Stealer Malware Exploits 19 Browsers to Steal Logins
Shuyal Stealer is described as a recently uncovered infostealer that expands beyond the usual Chrome and Edge targets by compromising 19 browsers, including Chrome, Edge, Tor, Brave, Opera, Opera GX, Yandex, Vivaldi, Chromium, Waterfox, Epic, Comodo,…
gbhackers.com -
77% of Employees Share Company Secrets on ChatGPT Compromising Enterprise Policies
A GBHackers article reports that 77% of employees admitted pasting company information into ChatGPT or similar platforms, highlighting a clear risk to enterprise data. The piece cites LayerX’s Enterprise AI SaaS Data Security Report 2025, derived from real…
gbhackers.com -
Radiflow Unveils New OT Security Platform
Radiflow has unveiled a new platform for mid-sized enterprises, named Radiflow360, designed to improve OT security through enhanced visibility, risk management and incident response capabilities. The platform uses AI to provide comprehensive visibility and…
SecurityWeek -
The ClickFix Factory: First Exposure of IUAM ClickFix Generator
Unit 42’s analysis reveals a first exposure of the IUAM ClickFix Generator, a phishing-kit builder that enables threat actors to produce highly customisable pages that mimic browser verification challenges. The publicly exposed generator was first observed…
unit42.paloaltonetworks.com -
APT35: Inside the Structure, Toolset, and Espionage Operations of an IRGC-Linked Group
According to CloudSEK’s TRIAD unit, Charming Kitten (APT35) is revealed as an IRGC-linked operation with a defined hierarchy: a Management cell at the top, a Sarrafi contractor handling cryptocurrency transactions and document forgery, and separate…
gbhackers.comCharming Kitten -
“Can you test my game?” Fake itch.io pages spread hidden malware to gamers
Fake itch[.]io pages are being used to spread hidden malware to gamers, withlookalike pages that mimic legitimate indie game layouts and a download button presented as a test game. According to Stefan Dasic, the lure often arrives via a DM from a friend or…
Malwarebytes -
Ransomware Group Claims Attack on Beer Giant Asahi
According to SecurityWeek, the Qilin ransomware group has claimed responsibility for the attack that disrupted Asahi’s operations in Japan. The hackers say they stole 27 gigabytes of data, including contracts, employee information, and financial documents,…
SecurityWeek -
Redis patches 13-Year-Old Lua flaw enabling Remote Code Execution
Redis has disclosed a critical remote code execution flaw in Lua scripting, tracked as CVE-2025-49844 and nicknamed “RediShell,” with a CVSS score of 10.0, arising from a use-after-free in the Lua garbage collector that can be exploited by an authenticated…
Security Affairs -
DraftKings Warns Users of Credential Stuffing Attacks
DraftKings has told users about a credential stuffing campaign that targeted their online accounts, with hackers reported to have accessed names, addresses, phone numbers, email addresses, and other information. The attacks were discovered on 2 September and…
SecurityWeek -
Hackers Exploit CSS Properties to Conceal Malicious Code in Hidden Text Salting Attacks
Hackers are exploiting Cascading Style Sheets to embed hidden “salt”—irrelevant content that confuses detection systems—deep within HTML emails, a technique Cisco Talos tracks as hidden text salting. According to Cisco Talos, a year-long monitoring period…
gbhackers.com -
Massive Attacks Targeting Palo Alto PAN-OS GlobalProtect Portals from 2,200 IPs
Cybersecurity researchers have spotted a dramatic upswing in malicious scanning targeting Palo Alto Networks PAN-OS GlobalProtect login portals, with attacks now originating from over 2,200 unique IP addresses as of 7 October 2025. This marks a sharp rise…
gbhackers.com -
Top 10 Best Account Takeover Protection Tools in 2025
In 2025, account takeover (ATO) remains a top cybersecurity concern as attackers deploy credential stuffing, phishing and brute-force methods to compromise user accounts across e-commerce, banking, SaaS and healthcare. The GBHackers article highlights…
gbhackers.com -
Top 10 Best Brand Protection Solutions for Enterprises in 2025
The article lists the Top 10 Best Brand Protection Solutions for Enterprises in 2025, highlighting a range of approaches from AI-driven monitoring to hybrid physical-digital protection. Red Points is described as a fully automated SaaS platform with…
gbhackers.com -
Exploitation of Oracle EBS Zero-Day Started 2 Months Before Patching
According to SecurityWeek, the Oracle E-Business Suite zero-day CVE-2025-61882 was exploited in the wild well before patching, with CrowdStrike noting that attacks began at least as early as August and continuing after Oracle’s patch in July and the…
SecurityWeek -
OpenAI Disrupts Russian, North Korean, and Chinese Hackers Misusing ChatGPT for Cyberattacks
OpenAI said it disrupted three activity clusters exploiting its ChatGPT tool to assist malware development, including a Russian-language threat actor that used the chatbot to help develop and refine a remote access trojan and a credential stealer, also using…
The Hacker News -
FreePBX SQL Injection Vulnerability Leads to Database Tampering
A critical SQL injection vulnerability in FreePBX, designated as CVE-2025-57819, has been actively exploited to modify the database and achieve arbitrary code execution on vulnerable systems. The flaw resides in the endpoint module’s AJAX handler at the…
gbhackers.com -
Crimson Collective Exploits AWS Services to Steal Sensitive Data
A newly identified threat group called Crimson Collective has emerged as a significant security concern for organisations using Amazon Web Services (AWS), pursuing data theft and extortion through the cloud. The group reportedly begins by compromising…
gbhackers.comCrimson Collective -
Multiple Google Chrome Flaws Allow Attackers to Execute Arbitrary Code
According to Google’s vulnerability disclosure program, Google rolled out Chrome version 141.0.7390.65/.66 for Windows and Mac, with 141.0.7390.65 for Linux, addressing three critical memory-handling flaws that could allow an attacker to execute arbitrary…
gbhackers.com -
CISA Alerts on Zimbra Collaboration Suite Zero-Day XSS Flaw Exploited in Ongoing Attacks
CISA alerts on a new zero-day cross-site scripting flaw in Zimbra Collaboration Suite (ZCS), which is already being used by attackers to hijack user sessions, steal data, and push malicious filters. The vulnerability stems from insufficient sanitisation of…
gbhackers.com -
BK Technologies Data Breach, IT Systems Compromised, Data Stolen
BK Technologies Corporation, a Florida-based communications equipment manufacturer, disclosed a cybersecurity incident that compromised its IT systems and potentially exposed employee data. The company filed an SEC Form 8-K on 6 October 2025, revealing that…
gbhackers.com -
“Mic-E-Mouse” Attack Lets Hackers Steal Sensitive Data via Mouse Sensors
A new cybersecurity vulnerability called the “Mic-E-Mouse” attack turns high-performance optical sensors in consumer mice into covert eavesdropping devices, secretly capturing confidential conversations through acoustic vibrations on work surfaces. According…
gbhackers.com -
Microsoft Alerts Users as Hackers Exploit Teams Features to Spread Malware
Microsoft is urging organisations to harden Microsoft Teams as threat actors increasingly abuse its built‑in collaboration features—chat, meetings, voice/video, screen sharing and app integrations—to gain initial access, persist, move laterally and…
gbhackers.com -
Microsoft Ends Local Account Bypass: Windows 11 OOBE Now Requires Microsoft Account Login
Microsoft has confirmed that in the consumer editions of Windows 11, including Home and Pro, users will no longer be able to bypass the sign-in process during the Out-of-Box Experience (OOBE) setup phase, with all users required to create and log in with a…
SecurityOnline -
Google Unveils Gemini 2.5 Computer Use: The Next-Gen AI Model That Takes Action on Web Interfaces
Google has unveiled a preview of its next-generation AI model, Gemini 2.5 Computer Use, a system that can interact with web interfaces as well as understand text and images. Through actions such as clicking, scrolling, typing and dragging, the AI can…
SecurityOnline -
Epic Games Victory: Supreme Court Denies Google’s Appeal, Forcing Play Store Policy Overhaul by Oct 22
The US Supreme Court has formally denied Google’s appeal, meaning that Google must revise its Play Store policies by 22 October. Under the court order, developers will be allowed to use their own or third‑party payment systems without platform fees and to…
SecurityOnline -
Qualcomm Acquires Arduino to Drive Edge AI and Unveils UNO Q Dual-Brain Development Board
Qualcomm has announced its acquisition of Arduino, the open‑source hardware and software platform, a move designed to deepen its edge computing and AI ambitions. With Arduino’s community of over 33 million developers, the integration will give the ecosystem…
SecurityOnline -
Microsoft Signs 100 MW Solar PPA with Shizen Energy to Power AI in Japan
Microsoft has confirmed the signing of three new solar PPAs with Shizen Energy, totaling 100 MW of generation capacity across facilities in Kyushu and Chugoku, marking another step in its renewable energy push in Japan. According to Shizen Energy, one Kyushu…
SecurityOnline -
Meta Unveils “Candle” Submarine Cable: The Largest 570 Tbps Data Network for Asia-Pacific AI
Meta has unveiled Candle, a submarine cable system intended to interconnect Taiwan, Japan, the Philippines, Indonesia, Malaysia, and Singapore, forming the largest data transmission network in the Asia-Pacific region, according to Meta’s official plan. The…
SecurityOnline -
Evernote Relaunches as AI-First Note App with Semantic Search and OpenAI Assistant
Evernote has relaunched as an AI-first note app, introducing semantic search and an OpenAI-assisted capability as part of Evernote v11, the most significant update since its 2020 overhaul. Under the stewardship of Italian developer Bending Spoons, the update…
SecurityOnline -
Critical AWS VPN Client Flaw CVE-2025-11462 (CVSS 9.3) Allows Root Privilege Escalation on macOS
Amazon Web Services (AWS) has issued a security bulletin warning that the macOS client of the AWS Client VPN contains a critical local privilege escalation vulnerability, tracked as CVE-2025-11462 and rated CVSS v4 9.3. According to AWS, the flaw arises from…
SecurityOnline -
Critical Nagios Flaw CVE-2025-44823 (CVSS 9.9) Leaks Plaintext Admin API Keys, PoC Available
Security researchers have identified two critical Nagios Log Server vulnerabilities, CVE-2025-44823 and CVE-2025-44824, rated 9.9 and 8.5 respectively, that could allow authenticated users to abuse API endpoints and disrupt monitoring. CVE-2025-44823 resides…
SecurityOnline -
Zimbra XSS Zero-Day (CVE-2025-27915) Actively Exploited; CISA Adds to KEV Catalog
Zimbra XSS Zero-Day (CVE-2025-27915) Actively Exploited; CISA Adds to KEV Catalog has been confirmed as actively exploited in the wild, with specially crafted ICS (iCalendar) attachments used to smuggle executable JavaScript into Zimbra Webmail. StrikeReady…
SecurityOnline -
OpenSSH Flaw (CVE-2025-61984) Allows Remote Code Execution via Usernames
OpenSSH CVE-2025-61984 is a vulnerability affecting OpenSSH before version 10.1, where control characters in usernames originating from untrusted sources could be mishandled by the ProxyCommand directive, potentially enabling command injection or remote code…
SecurityOnline -
Chrome 141 Stable Fixes Two High-Severity Flaws: Heap Overflow in Sync and UAF in Storage
Google has released a Stable Channel update for Chrome 141.0.7390.65/66 on Windows and macOS and 141.0.7390.65 for Linux, addressing three high-severity vulnerabilities that could allow memory-related exploits or data exposure. The first, CVE-2025-11458, is…
SecurityOnline -
Mustang Panda APT Uses Hidden DLL and EnumFontsW to Launch Stealthy Tibet-Themed Campaign
A new phishing campaign analysed by malware researcher 0x0d4y reveals Mustang Panda’s evolving tactics, including a stealthy DLL side-loading chain disguised as a humanitarian decoy called “Voice for the Voiceless Photos[.]exe” and a hidden libjyy[.]dll. The…
SecurityOnlineMUSTANG PANDA -
New Shuyal Stealer Malware Targets 19 Browsers, Disables Windows Task Manager for Stealth
New Shuyal Stealer Malware Targets 19 Browsers, Disables Windows Task Manager for Stealth reports that security researchers at Point Wild uncovered a new information-stealing malware, Shuyal Stealer, which expands beyond a few browsers to target 19 different…
SecurityOnline -
Actively Exploited: Critical Flaw CVE-2025-5947 (CVSS 9.8) Allows Unauthenticated Admin Takeover in WordPress Plugin
Actively exploited CVE-2025-5947, which carries a CVSS score of 9.8, allows an unauthenticated attacker to takeover administrator accounts in the Service Finder Bookings plugin, a component bundled with the Service Finder WordPress theme used by around 6,000…
SecurityOnline
