News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Thu 9 Oct 2025· 79 articles
-
GitHub Copilot Chat Flaw Leaked Data From Private Repositories
According to Legit Security, a vulnerability in GitHub Copilot Chat allowed hidden comments to influence Copilot’s responses and leaked sensitive information and source code from private repositories. The researchers demonstrated a mix of a Content Security…
SecurityWeek -
Hackers Targeting WordPress Plugin Vulnerability to Seize Admin Access
Hackers are exploiting a critical authentication bypass in the Service Finder Bookings plugin, which is bundled with the Service Finder theme, enabling unauthenticated attackers to assume administrator privileges on thousands of WordPress sites. Exploitation…
gbhackers.com -
Chinese Hackers Breached Law Firm Williams & Connolly via Zero-Day
Williams & Connolly said state-sponsored hackers breached some of its systems and gained access to attorney email accounts via an unspecified zero-day vulnerability, affecting a small number of emails. The firm’s investigation, conducted with CrowdStrike,…
SecurityWeek -
Threat actors steal firewall configs, impacting all SonicWall Cloud Backup users
Threat actors stole firewall configuration backups from SonicWall’s MySonicWall cloud backup service, impacting all SonicWall Cloud Backup users. The breach occurred in early September, when SonicWall urged customers to reset credentials after backup files…
Security Affairs -
PoC Released for Linux Kernel ksmbd Filesystem Vulnerability
Security researchers have published a working proof-of-concept exploit for the ksmbd filesystem vulnerability CVE-2025-37947, with the PoC described as deterministic and able to trigger an out-of-bounds write. According to the report, the flaw resides in…
gbhackers.com -
From Phishing to Malware: AI Becomes Russia's New Cyber Weapon in War on Ukraine
According to the State Service for Special Communications and Information Protection (SSSCIP), Russian hackers’ use of artificial intelligence in cyber attacks against Ukraine reached a new level in the first half of 2025, with evidence that some malware…
The Hacker News -
One stolen iPhone uncovered a network smuggling thousands of devices to China
A Malwarebytes article explains that Find My can be used to track a stolen device, and that in a Christmas Eve incident a victim’s phone led police to a warehouse near Heathrow Airport containing almost 900 stolen phones destined for Hong Kong. The…
Malwarebytes -
Discord denies massive breach, confirms limited exposure of 70K ID photos
Discord denies a massive breach and says only about 70,000 government-ID photos were exposed, not 5.5 million users as claimed by attackers. The company emphasises that it was a third-party customer service provider, not Discord itself, that was compromised,…
Security Affairs -
OpenAI Orchestrates “AI Closed-Loop Economy”: Unprecedented $1 Trillion in Partnerships to Fund Computing Empire
OpenAI is depicted as orchestrating an “AI closed-loop economy” through a slate of high-profile partnerships with NVIDIA, Oracle and AMD, with the aim of transforming suppliers into mutual stakeholders. The article highlights a massive infrastructure drive,…
SecurityOnline -
Hackers Enhance ClickFix Attack Using Cache Smuggling to Stealthily Download Malicious Files
Cybersecurity researchers have uncovered a sophisticated evolution of the ClickFix technique that uses browser cache smuggling to covertly place malicious files on target systems without traditional file downloads. The campaign, identified on 9 October 2025,…
gbhackers.com -
All SonicWall Cloud Backup Users Had Firewall Configurations Stolen
All SonicWall Cloud Backup users were affected after hackers accessed the backup firewall preference files stored in the MySonicWall cloud backup service, with the incident occurring in early September and disclosed a couple of weeks later. In an October…
SecurityWeek -
Word for Windows Will Soon AutoSave Documents to OneDrive by Default, Pushing Cloud Adoption
On 9 October 2025, Word for Windows is set to begin saving documents to OneDrive by default, with AutoSave enabled automatically in the preview build. The AutoSave feature, a hallmark of Microsoft 365 applications, periodically saves new versions of a…
SecurityOnline -
Discord Says 70,000 Users Had IDs Exposed in Recent Data Breach
Discord says 70,000 users had government-ID photos exposed in its recent data breach, with the company noting that only individuals who interacted with its Customer Support or Trust & Safety teams were affected. The hackers claim to have obtained 1.5…
SecurityWeek -
GitLab Releases Security Update to Patch Multiple DoS-Enabling Vulnerabilities
GitLab has issued a security update to patch four DoS-enabling vulnerabilities affecting both Community Edition and Enterprise Edition, with self-managed installations urged to upgrade to versions 18.4.2, 18.3.4, or 18.2.8. GitLab[.]com has already deployed…
gbhackers.com -
Polymorphic Python Malware That Mutates Every Time It Runs
A newly spotted Python remote access trojan (RAT) on VirusTotal employs advanced polymorphic and self-modifying techniques, allowing it to alter its code signature on every execution and evade detection, according to VirusTotal submissions. Security…
gbhackers.com -
Critical Exploit Lets Hackers Bypass Authentication in WordPress Service Finder Theme
A critical vulnerability in the WordPress Service Finder theme’s plugin, Service Finder Bookings, could allow an unauthenticated attacker to gain access to any account, including administrators, by bypassing authentication. Tracked as CVE-2025-5947 with a…
The Hacker News -
Discord Data Breach Exposes 1.5 TB of Data and 2 Million Government ID Photos
The GBHackers article reports that threat actors claim to have exfiltrated 1.5 terabytes of sensitive data, including over 2.1 million government-issued identification photos, in a breach affecting Discord’s third-party customer service provider. Discord,…
gbhackers.com -
Data-Leak Sites Surge to Record Levels Amid Scattered Spider RaaS and LockBit 5.0 Rise
Ransomware threats are driving data-leak sites to record levels, with the number of active platforms reaching 81 in Q3 2025. The report notes a sharp shift as English-speaking Scattered Spider teased its first RaaS, ShinySp1d3r RaaS, while LockBit returned…
gbhackers.comScattered Spider -
APT Hackers Abuse ChatGPT to Develop Advanced Malware and Phishing Campaigns
Security researchers at Volexity have uncovered that China-aligned threat actors, tracked as UTA0388, have been using AI platforms such as ChatGPT to bolster their spear-phishing and malware development campaigns since June 2025. The group has crafted…
gbhackers.com -
The Evolution of Chaos: Ransomware’s New Era of Speed and Intelligence
In 2025, Chaos ransomware has evolved into Chaos-C++, a sophisticated variant that marks a departure from its .NET roots and introduces destructive extortion and cryptocurrency theft capabilities, described as the most dangerous iteration to date. According…
gbhackers.com -
Chinese Hackers Weaponize Nezha Tool to Run Commands on Web Servers
Security researchers have uncovered a campaign in which Chinese threat actors exploited web applications using a log poisoning technique to deploy web shells and subsequently weaponise Nezha, a legitimate server monitoring tool, for malicious command…
gbhackers.com -
CrowdStrike Falcon Windows Sensor Flaw Could Let Attackers Execute Code and Delete Files
According to CrowdStrike, two critical vulnerabilities in its Falcon Sensor for Windows could allow attackers with prior code execution to delete arbitrary files and potentially disrupt system stability. CVE-2025-42701 is a race condition (TOCTOU) with a…
gbhackers.com -
GitHub Adds Sign in with Apple for Seamless Login and Anonymous Email Protection
October 9, 2025. The article notes that GitHub recently introduced Google account sign-in and has now added support for Apple ID login, according to GitHub now supports social login with Apple, enhancing convenience within the Apple ecosystem. On iOS and…
SecurityOnline -
Critical CVSS 10.0 SQL Injection Vulnerability Patched in Esri ArcGIS Server
The article titled Critical CVSS 10.0 SQL Injection Vulnerability Patched in Esri ArcGIS Server reports that a critical CVSS 10.0 SQL injection vulnerability in Esri ArcGIS Server has been patched. According to Ddos, the post was published on 9 October 2025.…
SecurityOnline -
1Password Launches Secure Agentic Autofill with Human-in-the-Loop to Protect Credentials from AI Agents
1Password has announced a Secure Agentic Autofill system designed to protect credentials from AI agents by inserting a human-in-the-loop into the autofill process. The approach requires explicit human approval before any credentials are transmitted, with the…
SecurityOnline -
Critical Flowise RCE Flaw: CVE-2025-61913 (CVSS 10.0) Allows Arbitrary File Write
The Flowise platform has a critical RCE flaw, CVE-2025-61913, with a CVSS of 10.0, that allows an authenticated attacker to write arbitrary files on the server because the WriteFileTool does not restrict the target file path. According to the security…
SecurityOnline -
IBM Partners with Anthropic to Embed Claude AI in New Development Tools, Reporting 45% Productivity Boost
IBM has announced a strategic partnership with Anthropic to deeply embed Claude’s generative AI models into its software products and development platforms, aiming to create an AI-centric software development ecosystem that enhances productivity, security…
SecurityOnline -
iPhone 17 Pro Max Users Report Distorted Audio and Static Noise During USB-C Charging
Several iPhone 17 Pro Max owners have reported audio issues, with unwanted noises during playback and automatic reductions in normal volume when using USB-C charging, while such problems do not occur during wireless charging. The complaints have appeared on…
SecurityOnline -
Apple Announces Texas Age Verification Plan, Requiring Parental Approval for All App Downloads Starting 2026
Beginning in 2026, the state of Texas will officially enforce a new age verification law targeting app stores, requiring platforms to confirm users are at least 18 years old before allowing any app downloads. According to Apple, starting 1 January 2026, all…
SecurityOnline -
Elon Musk Reaches Settlement with Former Twitter Executives Over $128M Severance Lawsuit
Elon Musk has reached a settlement in the $128 million lawsuit filed by former Twitter executives over unpaid severance, according to newly released documents from the U.S. District Court for the Northern District of California. The parties have agreed to…
SecurityOnline -
APT Meets GPT: China-Aligned UTA0388 Used ChatGPT for Automated, Multilingual Spear-Phishing
Volexity has uncovered a China-aligned operation, tracked as UTA0388, that weaponised ChatGPT to automate multilingual spear-phishing and assist in malware development. Starting in June 2025, the group conducted campaigns targeting customers and users across…
SecurityOnlineUTA0388 -
GitLab Patches Two High-Severity Flaws in GraphQL API Affecting Both CE and EE Editions
GitLab has patched two high-severity flaws in its GraphQL API that affect both Community Edition (CE) and Enterprise Edition (EE) releases, with fixes in versions up to 18.4.2, 18.3.4, or 18.2.8. The first vulnerability, CVE-2025-11340, affects EE and…
SecurityOnline -
Chaos Ransomware Evolves to C++, Uses Destructive Extortion to Delete Large Files and Hijack Bitcoin Clipboard
Chaos-C++, the latest Chaos ransomware variant identified by FortiGuard Labs and released publicly on 9 October 2025, marks the first Chaos version written outside the .NET framework and combines encryption, destructive extortion and cryptocurrency theft in…
SecurityOnline -
CrowdStrike Releases Fixes for Two Falcon Sensor for Windows Vulnerabilities (CVE-2025-42701 & CVE-2025-42706)
CrowdStrike has released security updates to fix two Falcon Sensor for Windows vulnerabilities, CVE-2025-42701 and CVE-2025-42706, which could enable deletion of arbitrary files after prior local code execution. According to CrowdStrike, the flaws arise from…
SecurityOnline -
Policyholder Plot Twist: Cyber Insurer Sues Policyholder’s Cyber Pros
Ace American Insurance Company filed a subrogation action against its insured’s cybersecurity and technology vendors, Congruity 360 and Trustwave Holdings, seeking to recover $500,000 in damages it paid to its insured, CoWorx, under the cyber policy. The…
DataBreaches -
High-Severity Deno Flaw CVE-2025-61787 Allows Command Injection on Windows
The Deno project has issued a security advisory warning of a high-severity command-injection vulnerability on Windows, tracked as CVE-2025-61787 and rated CVSS 8.1; the flaw affects Deno versions up to 2.5.1 and could allow attackers to execute arbitrary…
SecurityOnline -
Microsoft Warns: Threat Actors Turn Microsoft Teams into a Weapon for Ransomware, Espionage, and Social Engineering
Microsoft Threat Intelligence has released a report detailing how threat actors are weaponising Microsoft Teams to enable ransomware, espionage, and social engineering across enterprise environments. The findings show adversaries abusing Teams’ core…
SecurityOnline -
Crimson Collective APT Uses Leaked IAM Keys to Hijack AWS Accounts for Data Theft
SecurityOnline[.]info reports that Rapid7 researchers identified a new threat group named Crimson Collective, which has been attacking AWS environments to exfiltrate data and extort victims. The attackers begin by abusing leaked long-term AWS access keys…
SecurityOnlineCrimson Collective -
Critical Akka.NET Flaw CVE-2025-61778 (CVSS 9.3) Allows Untrusted Nodes to Join Secure Clusters
The Akka[.]NET team has issued a critical advisory for a vulnerability in its Akka[.]Remote module, CVE-2025-61778, rated CVSSv4 9.3 (Critical). The flaw could allow untrusted systems to join or communicate with trusted clusters without proper certificate…
SecurityOnline
