News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Sat 11 Oct 2025· 16 articles
-
CVE-2025-11371: Unpatched zero-day in Gladinet CentreStack, Triofox under attack
Threat actors are exploiting a local file inclusion flaw tracked as CVE-2025-11371 in Gladinet CentreStack and Triofox, an unpatched zero-day that could let a local user access system files without authentication. The vulnerability enables remote code…
Security Affairs -
In a few days, the PowerSchool hacker will learn his sentence, and his life as he has known it will end.
Matthew Lane, the 19-year-old described as a sophisticated cyber attacker by DataBreaches, pleaded guilty on 6 June to one count each of cyber extortion conspiracy, cyber extortion, unauthorized access to protected computers, and aggravated identity theft in…
DataBreaches -
Cybercrime ring GXC Team dismantled in Spain, 25-year-old leader detained
Spain’s Guardia Civil says its Cybercrime Department, via the Central Operational Unit (UCO), tracked and arrested “GoogleXcoder,” the 25-year-old Brazilian behind phishing kits that cloned banks and government sites for fraud. The operation culminated in…
Security Affairs -
They were victims of a massive data breach in 2009. Interior Health denied it for a decade.
They were victims of a massive data breach in 2009, and Interior Health denied it for a decade. The investigation cited by DataBreaches[.]Net shows the breach affected 28,000 health-care workers, with a 2014 discovery that multiple nurses in the maternity…
DataBreaches -
Attackers exploit valid logins in SonicWall SSL VPN compromise
Huntress warned of a widespread compromise of SonicWall SSL VPNs, with threat actors using valid credentials to access multiple customer accounts rapidly. Since 4 October, over 100 SonicWall SSL VPN accounts across 16 customers were compromised using valid…
Security Affairs -
Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts
According to Huntress, there was a widespread compromise of SonicWall SSL VPN devices, with threat actors authenticating into multiple accounts across compromised devices. The activity appears to have begun on 4 October 2025, and more than 100 SonicWall SSL…
The Hacker News -
Hackers Turn Velociraptor DFIR Tool Into Weapon in LockBit Ransomware Attacks
Threat actors are abusing Velociraptor, an open-source DFIR tool, in LockBit ransomware attacks that researchers link to Storm-2603 (aka CL-CRI-1040 or Gold Salem), a group already known for deploying Warlock and LockBit ransomware. The weaponisation…
The Hacker News -
Apple ups the reward for finding major exploits to $2 million
Apple has raised its bug bounty to a maximum of $2 million for a chain of software exploits that could be abused for spyware, announced at the Hexacon offensive security conference in Paris by Ivan Krstić, Apple’s vice president of security engineering and…
Ars Technica -
Two 7-Zip Flaws Allow Code Execution via Malicious ZIP Files (CVE-2025-11001 & CVE-2025-11002)
Two critical vulnerabilities in 7-Zip, CVE-2025-11001 and CVE-2025-11002, could allow attackers to execute arbitrary code by tricking users into opening specially crafted ZIP files, with patches issued in version 25.00. The flaws arise from improper handling…
SecurityOnline -
New Stealit Malware Exploits Node.js Extensions to Target Windows Systems
Security researchers have identified an active Stealit malware campaign that uses an experimental Node[.]js feature to infect Windows systems, according to FortiGuard Labs. The operators are leveraging Node[.]js’s Single Executable Application functionality…
gbhackers.com -
North Korean APT “Contagious Interview” Floods npm Registry with 338 Malicious Packages to Steal Crypto
On 11 October 2025, the Socket Threat Research Team warned of a wave of malicious npm activity linked to North Korean threat actors under the Contagious Interview operation. Since July 2025, researchers have identified and analysed more than 338 malicious…
SecurityOnlineContagious Interview -
China Launches Antitrust Probe into Qualcomm Over Autotalks Acquisition Failure to File Declaration
China’s State Administration for Market Regulation has announced the launch of an antitrust investigation into Qualcomm over its acquisition of Autotalks, after the company allegedly failed to file a mandatory operator concentration declaration ahead of the…
SecurityOnline -
OpenAI’s Sora AI Video App Hits 1 Million Downloads in Under Five Days, Outpacing ChatGPT
OpenAI’s newly launched short-video platform “Sora” has surpassed one million downloads in less than five days, outpacing ChatGPT’s initial growth rate, according to Bill Peebles, the product lead for Sora. The app is currently available only in North…
SecurityOnline -
Microsoft Finally Fixes Windows 11 Bug Causing PCs to Auto-Restart Instead of ‘Update and Shut Down’
Windows 11 users have long faced a restart instead of a proper shutdown when selecting “Update and shut down” after updates. The article notes that, since at least 2023, this feature has not functioned as intended, with devices rebooting rather than powering…
SecurityOnline -
Pegasus Spyware Creator NSO Group Acquired by US Firm for “Tens of Millions”
The NSO Group, the Israeli developer behind Pegasus spyware, has confirmed it has been acquired by a U.S.-based investment firm, in a deal described as worth “tens of millions of dollars.” According to Calcalistech, the acquisition is being led by a…
SecurityOnline -
Beamglea Campaign: Hackers Abuse 175 npm Packages and unpkg CDN for Large-Scale Phishing
Socket’s Threat Research Team has uncovered a large-scale supply-chain abuse campaign, dubbed Beamglea, that uses 175 malicious npm packages and the unpkg CDN to run phishing operations, with more than 26,000 downloads and targeting over 135 organisations…
SecurityOnline
