News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Tue 14 Oct 2025· 82 articles
-
Anatomy of an Attack: The "BlackSuit Blitz" at a Global Equipment Manufacturer
Unit 42 describes a major ransomware incident at a global equipment manufacturer, orchestrated by Ignoble Scorpius, the group behind BlackSuit ransomware. The attack began with a voice phishing call in which the attacker tricked an employee into providing…
unit42.paloaltonetworks.com -
Patch Tuesday, October 2025 ‘End of 10’ Edition
Microsoft released updates addressing 172 security holes across Windows operating systems in October 2025, including two flaws actively exploited, and the month also marks the final Patch Tuesday for Windows 10. The updates cover CVE-2025-24990, a zero-day…
Krebs on Security -
Microsoft Drops Terrifyingly Large October Patch Update
Microsoft’s October Patch Tuesday update was record-setting, weighing in with 175 CVEs, including two zero-days that attackers are already exploiting, and more than a dozen others the vendor regards as likely targets. It has pushed the year’s total of unique…
Dark Reading -
NATO boss mocks Russian navy, which is on the hunt for Red October “the nearest mechanic”
A Russian Kilo-class submarine recently surfaced off the coast of France amid rumours of a fuel leak and potential damage, according to The Maritime Executive. NATO Secretary General Mark Rutte described the Mediterranean task force as largely absent, noting…
Ars Technica -
China's Flax Typhoon Turns Geo-Mapping Server into a Backdoor
Chinese APT group Flax Typhoon compromised a public-facing ArcGIS server and turned a geospatial mapping component into a backdoor, gaining access for more than a year by modifying ArcGIS’ Java server object extension to create a Web shell. Researchers…
Dark ReadingFlax Typhoon -
Pixnapping Attack Lets Attackers Steal 2FA on Android
Pixnapping is an Android-focused proof-of-concept exploit that enables a malicious app to stealthily leak information displayed by other apps or websites, including two-factor authentication codes. Developed by researchers at UC Berkeley, the University of…
Dark Reading -
Unpacking Cloudflare Workers CPU Performance Benchmarks
On October 4, independent developer Theo Browne published benchmarks comparing Cloudflare Workers with Vercel, initially showing Cloudflare performing worse than Node[.]js on Vercel by as much as 3.5x on CPU-heavy tasks. Cloudflare’s team investigated and…
Cloudflare -
Microsoft Patch Tuesday October 2025 – 172 Vulnerabilities Fixed Along with 4 Zero-days
Microsoft’s October 2025 Patch Tuesday addressed 172 vulnerabilities across its ecosystem, with four zero-day flaws highlighted, two of which are reportedly being exploited in the wild. The update covers Windows, Microsoft Office, and Azure cloud services,…
gbhackers.com -
Researchers warn of widespread RDP attacks by 100K-node botnet
Researchers warn of widespread RDP attacks by a 100K-node botnet, with GreyNoise tracing a campaign that began on 8 October 2025 targeting Remote Desktop Protocol services in the United States. The botnet is stated to consist of more than 100,000 unique IP…
Security Affairs -
Discord blamed a vendor for its data breach — now the vendor says it was ‘not hacked’
Discord blamed a vendor for its data breach, but the vendor says it was not hacked. According to Discord, the incident affected a limited number of users who had interacted with its Customer Support or Trust & Safety teams, and of the accounts impacted…
DataBreaches -
Attorney General James Secures $14.2 Million from Car Insurance Companies Over Data Breaches
According to the NY Attorney General’s Office, eight car insurance companies have agreed to pay a total of $14.2 million after an investigation found they failed to protect the private information of more than 825,000 New Yorkers. The breaches occurred…
DataBreaches -
Chinese Hackers Exploit ArcGIS Server as Backdoor for Over a Year
Threat actors with ties to China have been attributed to a novel campaign that compromised an ArcGIS system and turned it into a backdoor for more than a year, according to ReliaQuest. The group, Flax Typhoon (also tracked as Ethereal Panda and RedJuliett),…
The Hacker News -
Microsoft raises the bar: A smarter way to measure AI for cybersecurity
Microsoft Security Blog announces ExCyTIn-Bench, Microsoft’s newest open-source benchmarking tool designed to evaluate how well AI systems perform real-world cybersecurity investigations. It helps business leaders assess language models by simulating…
Microsoft -
HyperBunker Raises Seed Funding to Launch Next-Generation Anti-Ransomware Device
HyperBunker, a European startup focused on ransomware resilience, has raised €800,000 (about $925,000) in seed funding to increase production capacity for its next-generation anti-ransomware device, according to SecurityWeek. The round comes from Fil Rouge…
SecurityWeek -
Criminal IP to Showcase ASM and CTI Innovations at GovWare 2025 in Singapore
Criminal IP announced its participation in GovWare 2025, Asia’s largest cybersecurity conference, at Sands Expo Singapore from October 21 to 23, where it will showcase its flagship platform and its approach to Attack Surface Management (ASM) and Cyber Threat…
gbhackers.com -
Cybereason Acquired by MSSP Giant LevelBlue
According to SecurityWeek, LevelBlue, one of the world’s largest managed security service providers, announced the acquisition of Cybereason, described as an extended detection and response powerhouse. This is LevelBlue’s third acquisition this year,…
SecurityWeek -
Harvard hit in Oracle EBS cyberattack, 1.3 TB of data leaked by Cl0p group
Harvard University confirmed it was targeted in the Oracle E-Business Suite campaign after the Cl0p ransomware group listed it on its leak site, claiming to have leaked 1.3 TB of data. The university says there is no evidence of other systems being…
Security Affairs -
Criminal IP to Showcase ASM and CTI Innovations at GovWare 2025 in Singapore
According to CyberNewsWire, Criminal IP will showcase its ASM and CTI innovations at GovWare 2025, Asia’s largest cybersecurity conference, held at the Sands Expo in Singapore from 21 to 23 October 2025. The company describes its platform as combining…
SecurityOnline -
Sweet Security Named Cloud Security Leader and CADR Leader in Latio Cloud Security Report
Sweet Security has been named both a Cloud Security Leader and a Cloud Application Detection & Response (CADR) Leader in the 2025 Cloud Security Report by Latio Tech, with the announcement issued from Tel Aviv, Israel, on 14 October 2025. The recognition…
SecurityOnline -
SAP Patches Critical Vulnerabilities in NetWeaver, Print Service, SRM
SAP has released 16 new and updated patch notes as part of its October 2025 monthly rollout, including three fresh notes that address critical-severity vulnerabilities. One patch, dated 14 October 2025, fixes CVE-2025-42944, an insecure deserialization flaw…
SecurityWeek -
PolarEdge C2 Communication via Custom Binary Protocol with Custom TLS Server
In early 2025, security researchers identified a sophisticated botnet implant named PolarEdge that relies on a bespoke TLS server and a proprietary binary protocol to perform unauthenticated command-and-control operations. PolarEdge first emerged in January…
gbhackers.com -
Sweet Security Named Cloud Security Leader and CADR Leader in Latio Cloud Security Report
Sweet Security has been recognised as both a Cloud Security Leader and a Cloud Application Detection & Response (CADR) Leader in the 2025 Cloud Security Report by Latio Tech, with the announcement dated 14 October 2025. The report praises Sweet for its…
gbhackers.com -
Fraud Prevention Firm Resistant AI Raises $25 Million
Resistant AI has raised 25 million dollars in Series B funding, taking its total to more than 55 million dollars, according to SecurityWeek. The round was led by DTCP, with additional support from Experian, GV, and Notion Capital. Founded in 2019 in Prague,…
SecurityWeek -
Hackers Use Court-Themed Phishing to Deliver Info-Stealer Malware
A novel phishing campaign has emerged targeting Colombian users by abusing judicial notifications and weaponising Scalable Vector Graphics (SVG) files. The attack begins with a Spanish-language email impersonating the “17th Municipal Civil Court of the…
gbhackers.com -
Harvard Is First Confirmed Victim of Oracle EBS Zero-Day Hack
Harvard University is the first confirmed victim in a cybercrime campaign targeting Oracle’s E-Business Suite (EBS), with hackers posting over 1.3 TB of allegedly stolen Harvard data on the Cl0p data leak site. The university was added to the leak list on…
SecurityWeek -
AI-driven scams are preying on Gen Z’s digital lives
According to Malwarebytes Labs, AI-driven scams are increasingly targeting Gen Z and Millennials, who account for two in three extortion victims. The firm’s latest research finds that one in three mobile users has been targeted by an extortion scam, with…
Malwarebytes -
CVE-2025-61884: Oracle Issues Urgent Security Alert for New E-Business Suite Vulnerability
CVE-2025-61884 is a high-severity flaw affecting the Runtime UI component of the Oracle Configurator in Oracle E-Business Suite, which could be exploited remotely by attackers without credentials. According to Oracle’s official advisory, the vulnerability…
SOCRadar -
Pixel-stealing “Pixnapping” attack targets Android devices
Researchers at US universities have demonstrated a malicious Android app technique that tricks the system into leaking pixel data, a concept they describe as the Pixnapping attack. The team from UC Berkeley and San Diego, the University of Washington, and…
Malwarebytes -
Discord Weaponized as C2 Server Across Popular Open-Source Package Repositories
According to Socket’s Threat Research Team, malicious packages on popular registries are increasingly weaponizing Discord webhooks as command-and-control endpoints, allowing attackers to exfiltrate files and host telemetry while blending into legitimate…
gbhackers.com -
Beyond the Black Box: Building Trust and Governance in the Age of AI
The SecurityWeek piece titled Beyond the Black Box: Building Trust and Governance in the Age of AI argues that as AI becomes more autonomous and embedded in high‑stakes decisions, organisations must implement an agile governance model that prioritises…
SecurityWeek -
Moving Beyond Awareness: How Threat Hunting Builds Readiness
In an October 2025 piece for The Hacker News, the author argues that Security Awareness Month demonstrates awareness’s value but cannot by itself prevent breaches, which often stem from misconfigurations and exposed credentials. The article contends that…
The Hacker News -
Pixnapping Attack Steals Data From Google, Samsung Android Phones
A team of researchers at Carnegie Mellon University has identified a new attack method, named Pixnapping, that can allow malicious applications to steal sensitive data from Android devices, with demonstrations against Google and Samsung phones. According to…
SecurityWeek -
RMPocalypse: Single 8-Byte Write Shatters AMD’s SEV-SNP Confidential Computing
AMD has released fixes for RMPocalypse, a vulnerability that could undermine SEV-SNP confidential computing by allowing a single memory write to the Reverse Map Paging (RMP) table. According to ETH Zürich researchers Benedict Schlüter and Shweta Shinde, the…
The Hacker News -
$19M in Settlements Underscore Cybersecurity Risks for TPAs and Insurers
In two related actions, third party administrators (TPAs) and their insurance business partners agreed to substantial settlements over alleged failures to safeguard sensitive data from cyberattacks, according to data from DataBreaches[.]Net. In the first…
DataBreaches -
UK NCSC Reports 429 cyberattacks in a year, with nationally significant cases more than doubling
The UK’s National Cyber Security Centre (NCSC) reports a record 429 cyberattacks were handled between September 2024 and August 2025, with 204 of them deemed nationally significant, more than double the 89 incidents recorded in the previous year. Of these…
Security Affairs -
New Pixnapping Android Flaw Lets Rogue Apps Steal 2FA Codes Without Permissions
Pixnapping, a side-channel attack named by researchers from UC Berkeley, UW, UC San Diego and CMU, targets Google and Samsung Android devices and can steal 2FA codes and other sensitive data pixel-by-pixel without requiring extra permissions. The attack…
The Hacker News -
SAP NetWeaver Memory Corruption Flaw Lets Attackers Send Corrupted Logon Tickets
A newly disclosed vulnerability in SAP NetWeaver AS ABAP and ABAP Platform (CVE-2025-42902) allows unauthenticated attackers to crash server processes by sending malformed SAP Logon or SAP Assertion Tickets. Rated Medium severity with a 5.3 CVSS 3.1 score,…
gbhackers.com -
CISO Conversations: Are Microsoft’s Deputy CISOs a Signpost to the Future?
According to SecurityWeek, Microsoft’s Deputy CISO (dCISO) strategy was unveiled in 2024 as part of its broader Secure Future Initiative, with 14 dCISOs handling risk across the company and reporting to corporate CISO Igor Tsyganskiy. The programme assigns…
SecurityWeek -
What AI Reveals About Web Applications— and Why It Matters
AI is significantly accelerating reconnaissance in web applications, with attackers mapping environments by examining login flows, JavaScript files, error messages, API documentation, and even GitHub repos. It’s not yet taking over offensive operations end…
The Hacker News -
Malicious NPM Packages Used in Sophisticated Developer Cyberattack
In October 2025, security researchers uncovered a phishing campaign that weaponises the npm ecosystem not by infecting package installations but by using the unpkg[.]com CDN as disposable hosting for malicious JavaScript. By seeding over 175 throwaway npm…
gbhackers.com
