News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Mon 13 Oct 2025· 70 articles
-
Researchers break OpenAI guardrails
According to Malwarebytes, researchers broke OpenAI’s guardrails after the firm released a toolkit at its DevDay on 6 October for building AI agents using its ChatGPT technology, including a tool called AgentKit. The Guardrails aim to stop agents from…
Malwarebytes -
Phishing Scams Exploit New York’s Inflation Refund Program
Phishing scams are preying on New Yorkers by exploiting the state’s inflation refund initiative, with warnings that scammers are calling, mailing, and texting taxpayers about refunds. According to New York State Department of Taxation and Finance warning,…
Malwarebytes -
No fix yet for attack that lets hackers pluck 2FA codes from Android phones
Ars Technica reports that researchers have unveiled Pixnapping, an Android vulnerability that can covertly steal 2FA codes, location timelines, and other data in under 30 seconds, starting from a malicious app that requires no system permissions. The attack…
Ars Technica -
Months After Being Notified, a Software Vendor is Still Exposing Confidential and Sealed Court Records
According to DataBreaches[.]Net, a software vendor, Software Unlimited Corp of Tupelo, Mississippi, was found to be exposing confidential and sealed court records across multiple shares despite months of alerts. The chronology highlights that by July 16,…
DataBreaches -
Customer payment data stolen in Unity Technologies’s SpeedTree website compromise
Unity Technologies has confirmed that malicious code on its SpeedTree checkout page skimmed sensitive data from hundreds of customers, with the site compromised from March 13, 2025 and discovered on August 26, 2025. The incident potentially exposed…
Security Affairs -
JPMorgan to Invest up to $10 Billion in US Companies with Crucial Ties to National Security
According to Associated Press, JPMorgan Chase will directly invest up to $10 billion in U.S. companies with crucial ties to national security. The investment plan will focus on four areas: supply chain and advanced manufacturing in critical minerals,…
SecurityWeek -
Why Signal’s post-quantum makeover is an amazing engineering achievement
Signal’s post-quantum makeover is described as a major engineering achievement, adding a third quantum-safe ratchet called SPQR to the existing double ratchet while preserving forward secrecy and post‑compromise security. The update introduces ML-KEM 768, a…
Ars Technica -
Building a lasting security culture at Microsoft
Building a lasting security culture at Microsoft is framed as a company-wide movement, not just a technical endeavour, with security being a top priority for every employee. According to Microsoft Security Blog, security begins and ends with people, and the…
Microsoft -
Fighting the Cyber Forever War: Born Defense Blends Investment Strategy with Just War Principles
According to SecurityWeek, Born Defense is emerging from stealth to support organisations engaged in the cyber ‘Forever War’, but within the constraints of the Just War Doctrine. Born Defense is an investment issuer whose mission is to improve national…
SecurityWeek -
Financial, Other Industries Urged to Prepare for Quantum Computers
Financial firms, government agencies, and other sectors with sensitive data are urged to prepare for quantum computers today, even though a cryptographically relevant quantum computer may be decades away. In late September, FS-ISAC warned that…
Dark Reading -
Malicious Code on Unity Website Skims Information From Hundreds of Customers
Hundreds of Unity Technologies customers were affected by a malicious script placed on the company’s SpeedTree checkout page. The incident, which Unity says occurred on the SpeedTree website, involved code active between 13 March and 26 August 2025 that…
SecurityWeek -
SimonMed Imaging discloses a data breach impacting over 1.2 million people
SimonMed Imaging disclosed a major healthcare data breach after the Medusa ransomware group claimed responsibility for stealing 200 GB of data and exposing information relating to more than 1.2 million individuals. According to the Maine Attorney General’s…
Security Affairs -
Critical infrastructure CISOs Can't Ignore 'Back-Office Clutter' Data
Critical infrastructure CISOs can no longer overlook the data sprawl generated by collaboration platforms such as SharePoint, Google Drive, Exchange, Gmail, Teams, Slack and Box, which the article argues is now the enterprise’s largest unmonitored surface.…
Dark Reading -
Russian Cybercrime Marketplace Shifting from RDP Access to Malware Stealer Log Exploits
The GBHackers piece tracks a shift in the Russian Market cybercrime marketplace from selling RDP access to trading information-stealing logs, with breaches tied to credentials bought on the platform driving credential-based intrusions. At its inception in…
gbhackers.com -
Generation AI: Why Today's Tech Graduates Are At a Disadvantage
Generation AI: Why Today's Tech Graduates Are At a Disadvantage reports that entry-level workers aged 22–25 may be finding themselves recently unemployed as artificial intelligence continues to dominate industries worldwide, a trend supported by a Stanford…
Dark Reading -
⚡ Weekly Recap: WhatsApp Worm, Critical CVEs, Oracle 0-Day, Ransomware Cartel & More
According to Google Threat Intelligence Group (GTIG) and Mandiant, dozens of organisations may have been impacted by the exploitation of Oracle E-Business Suite in a zero-day campaign since 9 August 2025, with activity bearing hallmarks of the Cl0p…
The Hacker News -
Microsoft revamps Internet Explorer Mode in Edge after August attacks
Microsoft updated Edge’s Internet Explorer mode after reports in August 2025 that threat actors exploited the feature to gain unauthorised access to users’ devices. Edge’s IE mode lets organisations run legacy Internet Explorer 11 sites and apps within a…
Security Affairs -
Hackers Target macOS Users with Fake Homebrew Websites to Deliver Malicious Payloads
According to Kandji’s security researchers, in September 2025 attackers deployed multiple spoofed Homebrew installer sites that perfectly mimic the official brew[.]sh page, targeting macOS users with a hidden malicious payload. In just one week, four…
gbhackers.com -
SonicWall SSL VPN Accounts in Attacker Crosshairs
Threat actors have rapidly compromised more than 100 SonicWall SSL VPN accounts across 16 environments, in what SecurityWeek describes as a widespread campaign. Most activity occurred on 4 October, with further clusters over the following days; by 10 October…
SecurityWeek -
Pro-Russian Hacktivist Targets OT/ICS Systems to Harvest Credentials
In September, a nascent pro-Russian hacktivist group known as TwoNet staged its first OT/ICS intrusion against a water treatment utility honeypot, exploiting default HMI credentials and using the HMI’s sql[.]shtm interface to run two rounds of SQL…
gbhackers.com -
SimonMed Imaging Data Breach Impacts 1.2 Million
SimonMed Imaging has revealed that a data breach resulting from a ransomware attack has impacted more than 1.2 million individuals, according to the SecurityWeek article. The Medusa ransomware group took credit for the attack on 10 February, claiming to have…
SecurityWeek -
Axis Communications Vulnerability Exposes Azure Storage Credentials
Axis Communications disclosed a critical vulnerability in its Autodesk Revit plugin that exposed Azure Storage Account credentials within signed DLLs, allowing attackers to read, write and modify stored resources. Discovered in July 2024 by Trend Micro’s…
gbhackers.com -
Why Unmonitored JavaScript Is Your Biggest Holiday Security Risk
Think your WAF has you covered? Think again, because unmonitored JavaScript in the browser can allow attackers to steal payment data during the holiday season, with visibility gaps leaving WAFs and intrusion systems blind to the threat. The article cites…
The Hacker News -
NPM Infrastructure Abused in Phishing Campaign Aimed at Industrial and Electronics Firms
According to Socket, threat actors are abusing the legitimate NPM infrastructure in a phishing campaign dubbed Beamglea that breaks from typical supply‑chain patterns. The operation has produced over 175 malicious NPM packages, targeting more than 135…
SecurityWeek -
EDR-Freeze: Technical Mechanics and Forensic Artifacts Exposed
EDR-Freeze is a proof-of-concept tool that forces endpoint detection and response (EDR) or antivirus processes into a temporary “coma.” It does this not by installing a driver, but by leveraging Windows Error Reporting components, specifically…
gbhackers.com -
Hackers Exploit Microsoft Edge’s Internet Explorer Mode to Compromise User Devices
News site brief: Hackers exploited Microsoft Edge’s Internet Explorer mode to target users, with attacks that began by luring victims to a spoofed site and prompting them to reload in IE mode, effectively handing control to Chakra, Microsoft’s JavaScript…
gbhackers.com -
Oracle Patches EBS Vulnerability Allowing Access to Sensitive Data
Oracle has released a patch for a severe E-Business Suite vulnerability that could allow access to sensitive data, tracked as CVE-2025-61884 and rated high severity, affecting the Runtime UI component of Oracle Configurator and exploitable remotely without…
SecurityWeek -
North Korean Hackers Target Developers with 338 Malicious Software Packages
North Korean threat actors are escalating a Contagious Interview campaign thatdeploys 338 malicious npm packages with over 50,000 downloads to target cryptocurrency and blockchain developers. The operation uses more than 180 fake personas and a dozen command…
gbhackers.com -
Stansberry Data Sale, Oracle 0-Day, and Salesforce Leaks Highlight Dark Web Activity
SOCRadar’s Dark Web Team observed a surge of underground activity this week, including a claim that a Stansberry Research database contains around 1.5 million records offered for $4,000, and discussions of an exploit for CVE-2025-10035 tied to GoAnywhere MFT…
SOCRadar -
Researchers Warn RondoDox Botnet is Weaponizing Over 50 Flaws Across 30+ Vendors
RondoDox malware campaigns have broadened to weaponise more than 50 vulnerabilities across over 30 vendors, extending their reach to internet‑exposed routers, DVRs, NVRs, CCTV systems, web servers and other networked devices, according to Trend Micro. The…
The Hacker News -
Astaroth Trojan abuses GitHub to host configs and evade takedowns
McAfee discovered a new Astaroth campaign that uses GitHub repositories to host malware configurations, allowing attackers to evade takedowns by pulling fresh settings from the platform and staying operational even if C2 servers are shut down. Astaroth…
Security Affairs -
Microsoft Locks Down IE Mode After Hackers Turned Legacy Feature Into Backdoor
Microsoft has revamped Edge’s Internet Explorer mode after credible reports in August 2025 that unknown threat actors were abusing the feature to access victim devices. According to Microsoft Browser Vulnerability Research team, threat actors were leveraging…
The Hacker News -
Spanish Authorities Dismantle ‘GXC Team’ Crime-as-a-Service Operation
Spanish authorities have announced the arrest of a 25-year-old Brazilian national, alleged to be the mastermind behind the GXC Team crime-as-a-service operation distributing phishing kits and Android malware. The individual, known as GoogleXcoder, allegedly…
SecurityWeek -
Microsoft Finally Resolves Persistent Windows 11 ‘Update and Shut Down’ Glitch
Microsoft has announced that it has fixed the long-standing Windows 11 “update and shut down” glitch in its latest preview builds, addressing a problem that caused updates to install and reboot rather than power the machine down. According to Windows Insider…
gbhackers.com -
Extortion Group Leaks Millions of Records From Salesforce Hacks
The Scattered LAPSUS$ Hunters extortion group, described as an offshoot of Lapsus$, has leaked millions of records allegedly stolen in a Salesforce-targeting campaign, with data purportedly covering Albertsons, Engie Resources, Fujifilm, GAP, Qantas and…
SecurityWeek -
Happy DOM Flaw Allows Remote Code Execution Affecting 2.7 Million Users
A critical security vulnerability has been discovered in Happy DOM, a JavaScript library used for server-side rendering and testing frameworks, tracked as CVE-2025-61927. According to Mas0nShi, attackers can escape the VM context by abusing the Function…
gbhackers.com -
Google, Mandiant expose malware and zero-day behind Oracle EBS extortion
Google Threat Intelligence and Mandiant link Oracle EBS extortion emails to known July-patched flaws and a likely zero-day, CVE-2025-61882. They tracked activity in early October and observed extortion notes to executives, with the attackers potentially tied…
Security Affairs -
Apple Expected to Unveil M5 iPad Pro, Vision Pro, and MacBook Pro This Week
According to Bloomberg News, Apple is expected to unveil two to three new products this week, including a new iPad Pro, an updated Vision Pro, and an entry-level 14-inch MacBook Pro, all featuring the next-generation M5 processor. The report says Apple will…
SecurityOnline -
Next-Gen AirPods: Apple Developing H3 Chip and Camera-Equipped Pro Model for Vision Pro Integration
On 13 October 2025, reports say Apple is shifting its internal development toward a next-generation H3 chip and a camera-equipped Pro model for Vision Pro integration, following the launch of AirPods Pro 3 last month which retained the H2 chip. According to…
SecurityOnline -
OpenAI Wins Reprieve: Court Vacates Order Forcing Indefinite Preservation of All ChatGPT Output Data
A U.S. federal court has issued a ruling in The New York Times’ copyright infringement lawsuit against OpenAI, vacating the directive that required OpenAI to indefinitely preserve and isolate all ChatGPT output data. According to The New York Times’…
SecurityOnline
