News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Wed 15 Oct 2025· 75 articles
-
LevelBlue Announces Plans to Acquire XDR Provider Cybereason
LevelBlue has announced plans to acquire Cybereason, expanding its global managed services portfolio with extended detection and response (XDR), managed detection and response (MDR), and forensic capabilities. The deal, announced on 15 October 2025, builds…
Dark Reading -
MCPTotal Launches to Power Secure Enterprise MCP Workflows
MCPTotal has launched its flagship secure Model Context Protocol (MCP) platform to help organisations adopt and secure MCP servers, with MCP described as the standard interface for connecting AI models to enterprise systems, data sources, and third‑party…
gbhackers.com -
Mysterious Elephant2 articles this day · securelist.com first
'Mysterious Elephant' Moves Beyond Recycled Malware · Mysterious Elephant: a growing threat
2 outlets-
'Mysterious Elephant' Moves Beyond Recycled Malware
Kaspersky researchers, tracking the group as “Mysterious Elephant,” say a cyber-espionage operation that initially relied on code from other outfits has evolved into a sophisticated campaign using its own custom tools to target government and diplomatic…
Dark Reading -
Mysterious Elephant: a growing threat
Mysterious Elephant is described as a highly active advanced persistent threat (APT) group that Kaspersky GReAT has tracked since 2023, with a focus on government entities and foreign affairs sectors in the Asia-Pacific region and a notable interest in…
securelist.com
-
-
Breach of F5 requires “emergency action” from BIG-IP users, feds warn
Thousands of networks, including many run by the US government and Fortune 500 firms, face an imminent threat after F5 disclosed a breach of its BIG-IP ecosystem. F5 said a sophisticated threat group operating for an undisclosed nation-state government had…
Ars Technica -
Qilin Ransomware announced new victims
According to Resecurity’s new report, the Qilin RaaS operation relies on a network of bullet-proof hosting (BPH) infrastructures to support its extortion activities, a pattern the article notes as part of its broader capabilities. The piece states that Qilin…
Security Affairs -
BreachLock Named Representative Provider for Penetration Testing as a Service (PTaaS) in New Gartner® Report
BreachLock has been named a Representative Provider for Penetration Testing as a Service (PTaaS) in Gartner® Innovation Insight: Penetration Testing as a Service, according to the report. The article notes that PTaaS helps organisations by increasing testing…
gbhackers.com -
F5 BIG-IP Environment Breached by Nation-State Actor
F5 disclosed a data breach in which a nation-state threat actor gained persistent, long-term access to the company’s product development environment and engineering knowledge management platforms for its BIG-IP products, before exfiltrating data. According…
Dark Reading -
A sophisticated nation-state actor breached F5 systems, stealing BIG-IP source code and data on undisclosed flaw
F5 disclosed that a highly sophisticated nation-state actor breached its systems, stealing BIG-IP source code and information related to undisclosed vulnerabilities. The attackers accessed the BIG-IP development and engineering systems, and F5 says…
Security Affairs -
Chinese Threat Group 'Jewelbug' Quietly Infiltrated Russian IT Network for Months
According to Symantec, Jewelbug—a threat actor with ties to China—has been attributed to a five-month intrusion targeting a Russian IT service provider, spanning January to May 2025. The report notes that attackers had access to code repositories and…
The Hacker NewsREF7707 -
BreachLock Named Representative Provider for Penetration Testing as a Service (PTaaS) in New Gartner® Report
BreachLock has been recognised as a Representative Provider in the 2025 Innovation Insight: Penetration Testing as a Service report by Gartner, marking a further accolade for its PTaaS offering. The endorsement, stated in New York on 15 October 2025,…
SecurityOnline -
SecurityWeek to Host 2025 ICS Cybersecurity Conference October 27-30 in Atlanta
SecurityWeek will host the 2025 Industrial Control Systems (ICS) Cybersecurity Conference from 27–30 October 2025 at the InterContinental Atlanta Buckhead. The premier event features 75+ sessions over three days, with five optional ICS cybersecurity training…
SecurityWeek -
TikTok scam sells you access to your own fake money
A TikTok DM scam erodes trust by delivering a glossy, mobile-friendly dashboard that pretends you have a real balance after you log in with credentials from a TikTok DM. The message arrives from a brand-new account with a ready-made username and password for…
Malwarebytes -
F5 Breach Exposes BIG-IP Source Code — Nation-State Hackers Behind Massive Intrusion
F5 has disclosed that unidentified threat actors breached its systems and stole files containing some of BIG-IP’s source code and information related to undisclosed vulnerabilities in the product. According to the company, the activity was attributed to a…
The Hacker News -
The importance of hardening customer support tools against cyberattacks
The Microsoft Security Blog argues that customer support tooling must be hardened because the agents’ powerful access can become a vector for attackers if not properly isolated. At Microsoft, dedicated customer support identities are curated and secured…
Microsoft -
Hackers Breach F5 and Stole BIG-IP Source Code and Undisclosed Vulnerability Data
F5 Networks confirmed that a sophisticated nation-state threat actor infiltrated its systems, exfiltrating proprietary BIG-IP source code and confidential vulnerability information. The incident, which began in August 2025, targeted F5’s product development…
gbhackers.com -
Scammers are still sending us their fake Robinhood security alerts
Scammers are still sending fake Robinhood security alerts, with a text claiming that an automated security check detected anomalies and requiring users to follow a link to log in and review their account. The message carries red flags such as a foreign…
Malwarebytes -
Harvard University Breached in Oracle Zero-Day Attack
Harvard University has confirmed it was hit by an attack that exploited a recently disclosed zero-day vulnerability in Oracle’s E-Business Suite (EBS) system, tracked as CVE-2025-61882, which allows an attacker to remotely access EBS instances without…
Dark Reading -
F5 Blames Nation-State Hackers for Theft of Source Code and Vulnerability Data
F5 has not disclosed many details about the threat actor, but the attack profile suggests a nation-state intrusion, with the company stating in an SEC filing that the hackers maintained long-term, persistent access to some systems, including those linked to…
SecurityWeek -
Webinar Today: Fact vs. Fiction – The Truth About API Security
Webinar Today: Fact vs. Fiction – The Truth About API Security explains that APIs drive today’s digital business, powering mobile apps and connecting critical systems, but they are also prime targets. The session on 15 October 2025 at 1PM ET will debunk…
SecurityWeek -
200,000 Linux systems from Framework are shipped with signed UEFI components vulnerable to Secure Boot bypass
Firmware security company Eclypsium warns that about 200,000 Linux systems from Framework are shipped with signed UEFI shells vulnerable to a Secure Boot bypass, enabling bootkit installation and persistence. The article explains that signed UEFI shells are…
Security Affairs -
Over 100 VS Code Extensions Exposed Developers to Hidden Supply Chain Risks
New research from Wiz has revealed that publishers of over 100 Visual Studio Code extensions leaked access tokens that could let attackers push malicious extension updates, creating a serious software supply chain risk. The Wiz report found more than 550…
The Hacker News -
BlackSuit Ransomware Breaches Corporate Network Using Single Compromised VPN Credential
A major manufacturing company fell victim to a swift and devastating ransomware attack after threat actors gained access using just one set of stolen VPN credentials, with the incident attributed to the cybercrime group Ignoble Scorpius. According to Unit42,…
gbhackers.com -
Customer Service Firm 5CA Denies Responsibility for Discord Data Breach
Customer service firm 5CA has denied being responsible for the Discord data breach after the platform named it in its disclosure of the incident, according to SecurityWeek. Discord said on October 3 that some users’ information may have been compromised as a…
SecurityWeek -
Capita hit with £14m fine for personal data breach in 2023 cyber attack
The Information Commissioner’s Office has fined Capita plc and Capita Pension Solutions Ltd a combined £14m after a 2023 cyber attack that saw hackers gain access to over 6m people’s data. The breach, described as occurring in March 2023, included…
DataBreaches -
Maverick: a new banking Trojan abusing WhatsApp in a mass-scale distribution
Maverick is a new banking Trojan detected in Brazil that spreads via WhatsApp by delivering a malicious ZIP containing an LNK file. Once activated, the infection chain is fully fileless, loading a .NET payload in memory and using Donut to decrypt and run…
securelist.com -
MCPTotal Launches to Power Secure Enterprise MCP Workflows
According to CyberNewsWire, MCPTotal, a comprehensive secure Model Context Protocol (MCP) platform, today announced its flagship platform to help businesses adopt and secure MCP servers, addressing risks from uncontrolled adoption such as supply chain…
SecurityOnline -
CISA Alerts on Rapid7 Velociraptor Flaw Exploited in Ransomware Campaigns
According to CISA, the Cybersecurity and Infrastructure Security Agency, a critical vulnerability in Rapid7 Velociraptor has been added to its Known Exploited Vulnerabilities catalogue, with active exploitation in ransomware campaigns. Tracked as…
gbhackers.com -
Obsession with cyber breach notification fuelling costly mistakes
Regulators’ push on breach notification rules has fed an obsession with a 72-hour window, with the article citing GDPR and Apra’s CPS 230 standard as drivers, according to Shannon Murphy, global security and risk strategist at Trend Micro. The piece argues…
DataBreaches -
Windows Agere Modem Driver 0-Day Exploited in Active Privilege Escalation Attacks
A newly discovered zero-day vulnerability in the Windows Agere Modem driver has been actively exploited by threat actors to elevate privileges on affected systems, tracked as CVE-2025-24052 and CVE-2025-24990. The first flaw is a stack-based buffer overflow…
gbhackers.com -
Satellites leak voice calls, text messages and more
Scientists from several US universities intercepted unencrypted broadcast traffic from geostationary satellites using off‑the‑shelf equipment on a university rooftop. Geostationary satellites orbit at about 22,000 miles (36,000 kilometres) above the Earth to…
Malwarebytes -
How Attackers Bypass Synced Passkeys
The Hacker News explains that synced passkeys carry the same risks as the cloud accounts and recovery processes that protect them, creating material enterprise exposure. It highlights three operational risk areas: cloud account takeover or recovery abuse,…
The Hacker News -
ICS Patch Tuesday: Fixes Announced by Siemens, Schneider, Rockwell, ABB, Phoenix Contact
The October 2025 Patch Tuesday saw advisories from Siemens, Schneider Electric, Rockwell Automation, ABB, Phoenix Contact, and Moxa, with over 20 advisories published by these industrial giants. Siemens published six new advisories, including two critical…
SecurityWeek -
Microsoft IIS Exploit Allows Unauthenticated Attackers to Run Arbitrary Code
A serious security flaw has been discovered in Microsoft’s Internet Information Services (IIS) that lets attackers run arbitrary code without logging in. The vulnerability affects the IIS Inbox COM Objects and stems from improper handling of shared memory…
gbhackers.com -
Critical Veeam Backup RCE Flaws Allow Remote Execution of Malicious Code
Veeam has released an urgent security patch to address multiple critical remote code execution vulnerabilities in Veeam Backup & Replication version 12. Two of the most severe flaws affect domain-joined installations, with CVE-2025-48983 enabling an…
gbhackers.com -
Chrome Use-After-Free Flaw Lets Attackers Execute Arbitrary Code
Google has released a fix for a critical use-after-free vulnerability in Chrome’s Safe Browsing feature, tracked as CVE-2025-11756, which could allow attackers to execute arbitrary code on a victim’s computer. The flaw was discovered in Safe Browsing and…
gbhackers.com -
SAP fixed maximum-severity bug in NetWeaver
According to SAP, the vendor fixed 13 new vulnerabilities, including a maximum-severity issue tracked as CVE-2025-42944 (CVSS 10.0) in SAP NetWeaver. The flaw stems from insecure deserialization that could allow an unauthenticated attacker to achieve…
Security Affairs -
10/15/25, 10:00 AM
A UK-based civil engineering company that maintains much of the country’s highway infrastructure reduced MTTR across network, email and cloud by deploying Darktrace’s ActiveAI Security Platform. Darktrace / EMAIL cut the discovery, alerting and response…
darktrace.com -
PhantomVAI Loader Delivers a Range of Infostealers
Unit 42 researchers describe PhantomVAI Loader as the evolved delivery mechanism behind a multi-stage phishing campaign that initially used Katz Stealer Loader and now distributes several infostealers including AsyncRAT, XWorm, FormBook and DCRat. The…
unit42.paloaltonetworks.com -
FortiPAM & FortiSwitch Manager Flaw Allows Attackers to Bypass Authentication
Fortinet has disclosed a critical security vulnerability affecting FortiPAM and FortiSwitch Manager that could allow attackers to bypass authentication through brute-force attacks. The flaw, tracked as CVE-2025-49201, was discovered by Gwendal Guégniaud of…
gbhackers.com
