News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Tue 14 Oct 2025· 82 articles
-
RMPocalypse: New Attack Breaks AMD Confidential Computing
Academic researchers from ETH Zurich have identified a vulnerability in the memory management of AMD processors that can undermine confidential computing integrity guarantees. Tracked as CVE-2025-0033 (CVSS 6.0), the issue arises from a race condition during…
SecurityWeek -
Hackers Mimic as OpenAI and Sora Services to Steal Login Credentials
Hackers have launched a sophisticated phishing campaign that impersonates OpenAI and the recently released Sora 2 AI service, using cloned landing pages to persuade users to submit login credentials for later harvesting. One site, gotosora2[.]com/pricing,…
gbhackers.com -
Gcore Mitigates Record-Breaking 6 Tbps DDoS Attack
Gcore says it mitigated one of the largest DDoS attacks on record, reaching a peak bandwidth of 6 Tbps and a packet rate of 5.3 Bpps, in a short-burst volumetric flood against a gaming-sector hosting provider. The attack lasted about 30-45 seconds and was…
gbhackers.com -
Signal in the noise: what hashtags reveal about hacktivism in 2025
A Securelist report, published on 14 October 2025, analyses more than 11,000 posts from over 120 hacktivist groups operating across the surface and dark web, with a particular focus on groups targeting the MENA region. It finds that hacktivists are motivated…
securelist.com -
Windows 10 Still on Over 40% of Devices as It Reaches End of Support
According to StatCounter, data for September 2025 showed Windows 10 still installed on just over 40% of devices, as Windows 11 neared half of desktop machines. The SecurityWeek piece notes that TeamViewer’s analysis of 250 million remote support connections…
SecurityWeek -
SimonMed Data Breach Exposes Sensitive Information of 1.2 Million Patients
SimonMed Imaging has confirmed that an external hacking incident compromised the personal data of 1,275,669 patients, making it one of the largest healthcare breaches of the year. The breach occurred on 21 January 2025 but was not discovered until 28…
gbhackers.com -
North Korean IT Workers Use VPNs and Laptop Farms to Evade Identity Verification
In a sprawling network of covert remote labour, more than 10,000 North Korean IT professionals have infiltrated global technology and freelance marketplaces by exploiting VPNs, VPS and laptop farms to conceal their origins, with state-backed cyber units…
gbhackers.com -
Unverified COTS hardware enables persistent attacks in small satellites via SpyChain
SpyChain demonstrates that unverified commercial off-the-shelf hardware in small satellites can enable persistent, multi-component supply chain attacks, using NASA’s NOS3 simulator to study the risk. The paper outlines five attack scenarios, ranging from…
Security Affairs -
PoC Released for Sudo chroot Flaw Allowing Local Privilege Escalation
On 14 October 2025, a PoC for a critical flaw in the sudo utility was published, enabling any local user to escape a chroot jail and gain root privileges. The vulnerability resides in sudo’s handling of directory paths when invoked with a modified root…
gbhackers.com -
SAP Patches Critical 10.0 Flaw in NetWeaver: Unauthenticated RCE Risk
According to SAP, its October 2025 Security Patch Day shipped fixes for 13 new security notes and three updates, including a critical vulnerability in SAP NetWeaver AS Java (CVE-2025-42944) that received a CVSS score of 10.0 and allows unauthenticated remote…
SecurityOnline -
The king is dead, long live the king! Windows 10 EOL and Windows 11 forensic artifacts
Windows 11 brings several new forensic artefacts and changes that security responders should note, with the piece emphasising Recall as a high-profile feature and the updated Windows Search structure. Recall, introduced in May 2024, stores screenshots of a…
securelist.com -
Threat Actors Exploit ScreenConnect to Gain Unauthorized Remote Access
Threat Actors Exploit ScreenConnect to Gain Unauthorized Remote Access reports that a surge in using remote management and monitoring tools for initial access has drawn renewed attention to ScreenConnect, with ConnectWise ScreenConnect described as a…
gbhackers.com -
Oracle issued an emergency security update to fix new E-Business Suite flaw CVE-2025-61884
Oracle issued an emergency security update to address a new E-Business Suite vulnerability tracked as CVE-2025-61884, which Oracle says is an information disclosure flaw affecting the Runtime UI component in E-Business Suite versions 12.2.3–12.2.14. The…
Security Affairs -
Gcore Mitigates Record-Breaking 6 Tbps DDoS Attack
Gcore has mitigated one of the largest DDoS attacks recorded to date, reaching a peak bandwidth of 6 Tbps and a packet rate of 5.3 Bpps, according to CyberNewsWire. The assault targeted a hosting provider in the gaming sector and was described as a…
SecurityOnline -
npm, PyPI, and RubyGems Packages Found Sending Developer Data to Discord Channels
Cybersecurity researchers have uncovered malicious packages across npm, PyPI and RubyGems that use Discord webhooks as a command-and-control channel to exfiltrate data from affected developers’ machines. The findings name npm packages such as…
The Hacker News -
Ivanti Patches 13 Endpoint Manager Flaws Allowing Remote Code Execution
Ivanti has disclosed 13 vulnerabilities in Ivanti Endpoint Manager (EPM), including two high-severity issues that could enable privilege escalation and remote code execution, and eleven medium-severity SQL injection flaws. The two most critical flaws are…
gbhackers.com -
TA585 Deploys Novel Web-Injection to Deliver MonsterV2 Malware on Windows
According to GBHackers, the article discusses TA585, described as a recently emerged threat group that deploys a novel web-injection to deliver MonsterV2 malware on Windows. MonsterV2 is characterised as a remote access trojan, loader and info-stealer with…
gbhackers.com -
Elastic Cloud Enterprise Flaw Lets Attackers Run Malicious Commands
Elastic Cloud Enterprise (ECE) suffers a template engine injection flaw, tracked as CVE-2025-37729, which could allow attackers with admin privileges to execute arbitrary commands and exfiltrate sensitive data, with CVSS 9.1. The issue affects ECE versions…
gbhackers.com -
178,000+ Invoices Expose Customer Data from Invoicely Platform
A significant data exposure incident has affected the cloud-based invoicing platform Invoicely, exposing customer data worldwide. The exposed database contained 178,519 files in formats such as Excel, CSV, PDFs and images, and the system was not…
gbhackers.com -
Researchers Expose TA585’s MonsterV2 Malware Capabilities and Attack Chain
Cybersecurity researchers have spotlighted an undocumented threat actor named TA585, observed delivering MonsterV2, an off-the-shelf malware, through phishing campaigns. According to Proofpoint Threat Research Team, TA585 operates its own attack chain with…
The Hacker News -
Simple Prompt Injection Lets Hackers Bypass OpenAI Guardrails Framework
Security researchers have flagged a fundamental vulnerability in OpenAI’s Guardrails framework, which can be exploited using basic prompt injection techniques. The flaw enables attackers to bypass the system’s safety mechanisms and generate malicious content…
gbhackers.com -
Clevo UEFI Leak Allows Signing of Malicious Firmware with BootGuard Keys
Clevo’s UEFI update package exposed private signing keys tied to Intel Boot Guard, enabling attackers to sign malicious firmware that would be trusted in the earliest boot stages. The issue is tracked as Vulnerability Note VU#538470 and was published on 13…
gbhackers.com -
Google Search Redesign Hides Option to Dismiss Ads, Forcing Users to Scroll Past ‘Sponsored Results’ Blocks
Google has redesigned its search ads display to consolidate all text-based ads into a single “Sponsored Results” section at the top of the results page, with a similar block appearing at the bottom. The company states that each block will display no more…
SecurityOnline -
Microsoft Unveils MAI-Image-1: New In-House AI Image Generator to Rival OpenAI and Deepen Self-Reliance
MAI-Image-1 is Microsoft’s first in-house AI image generation model, announced as a move to reduce reliance on OpenAI and push for greater self-reliance in artificial intelligence. According to Microsoft, MAI-Image-1 focuses on producing highly realistic…
SecurityOnline -
Apple Hit with Second Lawsuit Alleging AI Training Used Pirated Books from “Shadow Libraries”
Apple is facing a second class-action lawsuit alleging that its AI training used pirated books via “shadow libraries” and web-crawling software, with Susana Martinez-Conde and Stephen Macknik, neuroscience professors at the State University of New York…
SecurityOnline -
OneDrive’s AI Facial Recognition Can Only Be Disabled Three Times Per Year for Preview Users
OneDrive’s AI-powered facial recognition feature is currently in limited preview, with access not yet universal among users, and early testers have found that it can be disabled only up to three times per year. According to Slashdot, enabling or disabling…
SecurityOnline -
Ivanti Endpoint Manager Discloses 13 Flaws: High-Severity RCE and 11 SQL Injection Vulnerabilities
Ivanti Endpoint Manager Discloses 13 Flaws: High-Severity RCE and 11 SQL Injection Vulnerabilities is featured in Daily CyberSecurity’s Vulnerability Report section, dated 14 October 2025. The post, attributed to Ddos, highlights a disclosure of thirteen…
SecurityOnline -
Google Integrates Nano Banana AI Editor into Search, NotebookLM, and Photos to Deepen Ecosystem AI
According to Google, the Nano Banana AI image editor is being integrated across its ecosystem, with native availability planned for Search, NotebookLM, and Photos so users can access AI-driven image editing without leaving their apps. In NotebookLM, the…
SecurityOnline -
Microsoft Patches Edge IE Mode After Hackers Exploited Chakra Zero-Day for Device Takeover
Microsoft has patched Edge IE Mode after hackers exploited a Chakra zero‑day to seize control of devices. The Chakra JavaScript engine flaw in IE9, IE10 and IE11 was used in phishing-driven workflows that pushed users to enable IE Mode within Edge, enabling…
SecurityOnline -
OpenAI and Broadcom Partner to Develop Custom AI Accelerator Chips for 10 GW of Infrastructure
OpenAI has announced a collaboration with Broadcom to develop its own custom AI accelerator chips and systems, aimed at powering 10 gigawatts of infrastructure. The partnership, which follows earlier deals with NVIDIA, AMD, and Oracle, is expected to begin…
SecurityOnline -
Chrome Will Now Auto-Revoke Notification Permissions for Inactive Websites to Reduce Spam
Chrome is tightening its website notification permissions to curb spam by revoking permissions on inactive sites, a move disclosed in an update published on 14 October 2025. Under the change, only active websites will retain the ability to send…
SecurityOnline -
Apple Upgrades Spyware Defense: iOS 26.1 Adds Native Threat Notifications for Pegasus Attacks
Apple has rolled out native threat notifications in iOS 26.1 Beta 3 to alert users when they may be targeted by mercenary spyware such as Pegasus, replacing the previous email, message and web-based alerts. The alerts appear directly through the iOS…
SecurityOnline -
Critical Supply Chain Flaw: Clevo UEFI Firmware Leaked Intel Boot Guard Private Keys (CVE-2025-11577)
The article reports a critical supply chain vulnerability, CVE-2025-11577, after researchers found Clevo’s UEFI firmware update packages exposed Intel Boot Guard private keys. According to CERT/CC, Clevo’s UEFI firmware update packages included sensitive…
SecurityOnline -
Critical Elastic Cloud Flaw: CVE-2025-37729 (CVSS 9.1) Allows RCE via Jinjava Template Injection
Elastic has issued urgent updates for Elastic Cloud Enterprise (ECE) to patch a critical vulnerability, CVE-2025-37729, which has a CVSS score of 9.1 and could allow an attacker with administrative access to exfiltrate data or execute arbitrary commands…
SecurityOnline -
RMPocalypse Flaw (CVE-2025-0033) Bypasses AMD SEV-SNP to Fully Compromise Encrypted VMs
A team from ETH Zurich disclosed CVE-2025-0033, a flaw dubbed RMPocalypse that undermines AMD SEV-SNP across Zen 3, Zen 4 and Zen 5 processors, allowing attackers to fully compromise encrypted VMs and void confidentiality and integrity guarantees. The…
SecurityOnline -
SVG Smuggling: Fake Colombian Judicial Lure Deploys AsyncRAT via Malicious HTA File
On 14 October 2025, Seqrite Threat Research Labs uncovered a targeted Spanish-language phishing campaign aimed at Colombian users, using malicious SVG attachments to deploy AsyncRAT, a remote access Trojan capable of espionage and data theft. The campaign…
SecurityOnline -
Stealth C2: Hackers Abuse Discord Webhooks for Covert Data Exfiltration in npm, PyPI, and RubyGems Supply Chain Attacks
The Socket Threat Research Team has identified a growing trend among malicious package developers to use Discord webhooks as command-and-control endpoints for covert data exfiltration in npm, PyPI and RubyGems supply chains. According to the researchers,…
SecurityOnline -
Hacker Alliance Demands Ransom: Scattered LAPSUS$ Hunters Claim 1 Billion Records Stolen from Salesforce
A newly formed cybercrime consortium called Scattered Lapsus$ Hunters (SLSH) claims to have stolen over 1 billion Salesforce records across 39 organisations in a global extortion campaign targeting Salesforce tenants. According to Palo Alto Networks’ Unit…
SecurityOnlineBling Libra -
Astaroth Malware Uses Steganography in GitHub Images for Covert C2 Backup and Brazilian Bank Theft
The McAfee Threat Research team has uncovered a new Astaroth malware campaign that uses GitHub repositories as backup command-and-control servers, allowing the information-stealing malware to stay operational even when its main infrastructure is disrupted.…
SecurityOnline -
iPhone Fold Hinge Costs Drop to $70-$80, Boosting Viability for Mass Production in 2026
The long‑rumoured foldable iPhone, tentatively called the iPhone Fold, could see hinge costs drop to between $70 and $80 at the mass‑production stage, potentially easing production barriers for a 2026 timetable, according to Ming-Chi Kuo. The analyst notes…
SecurityOnline
