News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Thu 16 Oct 2025· 82 articles
-
Mango discloses data breach at third-party provider
Mango has disclosed a data breach at one of its external marketing service providers, with Mango stating that only personal contact information was exposed and its own systems were not affected. According to the breach notification, the stolen data were…
Malwarebytes -
Capita Fined £14 Million After Data Breach Exposes 6.6 Million Users
Capita was fined £14 million by the Information Commissioner’s Office after a cyber attack in March 2023 exposed the personal information of 6.6 million people. The penalty was split £8 million for Capita plc and £6 million for its subsidiary Capita Pension…
gbhackers.com -
Oracle silently fixes zero-day exploit leaked by ShinyHunters
Oracle silently fixed a zero-day vulnerability in Oracle E-Business Suite, CVE-2025-61884, that was actively exploited to breach servers, with a proof-of-concept exploit publicly leaked by the ShinyHunters extortion group. The patch was issued via an…
DataBreachesShinyHunters -
Mysterious Elephant APT Breach: Hackers Infiltrate Organization to Steal Sensitive Data
According to Kaspersky Lab’s Global Research and Analysis Team (GReAT), the Mysterious Elephant APT group has conducted a campaign of intrusions against government and foreign policy agencies across the Asia-Pacific region, active since early 2025. The…
gbhackers.comMysterious Elephant -
Roku accused of selling children’s data to advertisers and brokers
The article reports that the state of Florida has accused Roku, which powers many smart TVs and streaming devices, of selling children’s data to third parties without parental consent. According to the Florida Attorney General James Uthmeier, Roku collected…
Malwarebytes -
Critical Apache ActiveMQ Let Attackers Execute Arbitrary Code
A security flaw in Apache ActiveMQ’s .NET client library can allow remote code execution when the NMS AMQP Client connects to a malicious AMQP server, researchers say. The vulnerability, tracked as CVE-2025-54539, arises from insecure deserialization in the…
gbhackers.com -
New Phishing Technique Targets Users via Basic Auth URLs
On October 16, 2025, GBHackers reported a new phishing technique that targets users via Basic Authentication URLs, specifically focusing on GMO Aozora Bank in Japan. This method exploits a legacy web standard where attackers format URLs to visually…
gbhackers.com -
Windows BitLocker Flaws Allow Attackers to Bypass Encryption Protection
Two newly disclosed vulnerabilities in Microsoft’s BitLocker drive encryption could allow attackers to bypass encryption safeguards on Windows systems, tracked as CVE-2025-55333 and CVE-2025-55338. The flaws involve incomplete comparison logic and…
gbhackers.com -
Four-Year Prison Sentence for PowerSchool Hacker
A Massachusetts college student was sentenced to four years in prison for hacking and extorting two companies, including PowerSchool. Matthew D. Lane pleaded guilty in May to hacking into the networks of a telecommunications service provider and another…
SecurityWeek -
CISA Alerts on Adobe Experience Manager Flaw Exploited for Code Execution
According to The Cybersecurity and Infrastructure Security Agency (CISA), a critical Adobe Experience Manager Forms vulnerability, tracked as CVE-2025-54253, has been added to the Known Exploited Vulnerabilities (KEV) catalog and is being actively exploited…
gbhackers.com -
ThreatsDay Bulletin: $15B Crypto Bust, Satellite Spying, Billion-Dollar Smishing, Android RATs & More
ThreatsDay Bulletin this week surveys a string of high‑impact cyber incidents, from a $15 billion cryptocurrency seizure connected to Cambodia‑Myanmar‑Laos scam networks to a broader picture of global online fraud. According to The Hacker News, the DoJ…
The Hacker News -
Google Unveils Veo 3.1 AI Video Generator with Enhanced Image-to-Video and Synchronized Audio Generation
Google has announced Veo 3.1, the latest version of its AI video generation model, highlighting improved prompt adherence and image-to-video conversion when paired with textual descriptions. Veo 3.1 is now available for preview through the Google Gemini API…
SecurityOnline -
U.S. CISA adds SKYSEA Client View, Rapid7 Velociraptor, Microsoft Windows, and IGEL OS flaws to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added SKYSEA Client View, Rapid7 Velociraptor, Microsoft Windows, and IGEL OS flaws to its Known Exploited Vulnerabilities (KEV) catalog. According to Binding Operational Directive (BOD)…
Security Affairs -
F5 Hack: Attack Linked to China, BIG-IP Flaws Patched, Governments Issue Alerts
SecurityWeek reports that the F5 attack is linked to China, with government alerts issued after patches were released for a large batch of BIG-IP vulnerabilities. The company said the attackers, whose presence was discovered on August 9, accessed and…
SecurityWeek -
Spanish fashion retailer MANGO disclosed a data breach
Spanish fashion retailer MANGO disclosed a data breach that arose after its marketing vendor was compromised, exposing customer personal data used in marketing campaigns. According to the Spanish Data Protection Agency (AEPD), the exposed information is…
Security Affairs -
PhantomVAI Loader Launches Global Campaign to Distribute AsyncRAT, XWorm, FormBook, and DCRat
PhantomVAI Loader, a newly renamed multi-stage .NET loader tracked by Unit 42, is being used in widespread phishing campaigns to deliver AsyncRAT, XWorm, FormBook and DCRat payloads. It was initially identified as Katz Stealer Loader for deploying the Katz…
gbhackers.com -
Malicious Ivanti VPN Client Sites in Google Search Deliver Malware — Users Warned
Cybersecurity researchers have uncovered a sophisticated malware campaign that uses search engine optimisation poisoning to push a trojanised Ivanti Pulse Secure VPN client. According to Zscaler, threat actors have poisoned search results to direct users to…
gbhackers.com -
Cisco SNMP Vulnerability Actively Exploited to Install Linux Rootkits
Trend Micro researchers have found an active attack campaign, dubbed “Operation Zero Disco,” that targets Cisco devices with a critical SNMP vulnerability. The flaw, tracked as CVE-2025-20352, allows remote code execution and the deployment of Linux rootkits…
gbhackers.com -
NightMARE: A Python Library for Advanced Malware Analysis and Threat Intelligence Extraction
NightMARE is a Python library released by Elastic Security Labs, with version 0.16 described as a comprehensive toolkit to streamline malware analysis and reverse engineering workflows. According to Elastic Security Labs, the open‑source project consolidates…
gbhackers.com -
Microsoft’s October 2025 Patches Disrupt Active Directory Sync on Server 2025 Systems
Microsoft has confirmed a critical issue affecting Windows Server 2025 systems after installing October 2025 security updates, disrupting Active Directory directory synchronization for large security groups with more than 10,000 members. The problem affects…
gbhackers.com -
Microsoft Halts Vanilla Tempest Cyberattack by Revoking Malicious Teams Installer Certificates
Microsoft has halted the Vanilla Tempest cyberattack by revoking over 200 fraudulent certificates that the threat group had used to sign fake Microsoft Teams installation files, which were designed to deliver the Oyster backdoor and deploy Rhysida ransomware…
gbhackers.comVanilla Tempest -
New Banking Malware Exploits WhatsApp to Hijack Your Computer Remotely
Cybersecurity researchers have uncovered a sophisticated malware campaign targeting Brazilian users through WhatsApp, delivering a banking Trojan dubbed “Maverick.” The campaign has blocked over 62,000 infection attempts in Brazil during the first 10 days of…
gbhackers.com -
CISA Flags Adobe AEM Flaw with Perfect 10.0 Score — Already Under Active Attack
CISA has added the vulnerability CVE-2025-54253 to the Known Exploited Vulnerabilities catalog, with a CVSS score of 10.0, based on evidence of active exploitation. The flaw affects Adobe Experience Manager (AEM) Forms on JEE versions 6.5.23[.]0 and earlier…
The Hacker News -
Apple Planning $350 Smart Display (2026) and Robotic Desktop Device (2027), Manufactured in Vietnam
According to a report by Bloomberg News, Apple is planning a smart display with a 7-inch LCD screen and a built-in FaceTime camera for release in 2026, followed by a desktop robotic device in 2027 manufactured in Vietnam. The display is described as the…
SecurityOnline -
Japan Warns OpenAI Over Sora 2 Copyright Infringement of “Irreplaceable” Anime and Manga
The Japanese government has formally requested that OpenAI refrain from infringing on the nation’s anime and manga works, described as Japan’s “irreplaceable treasures.” According to ITMedia, Minister for AI and Intellectual Property Minoru Kōno said at a…
SecurityOnline -
Apple Unveils Upgraded Vision Pro with M5 Chip, Dual Knit Band for Enhanced Comfort and Performance
Apple has unveiled an upgraded Vision Pro powered by the M5 chip, promising a 10% boost in rendering performance, sharper visuals and text, and a display refresh rate raised to 120Hz. The device debuts a new dual‑loop woven headband designed for greater…
SecurityOnline -
Apple Unveils M5 iPad Pro: 3.5X Faster AI, Wi-Fi 7, and New C1X Cellular Modem
Apple has officially unveiled the iPad Pro powered by the M5 chip, with claims of up to a 3.5× performance increase in AI-driven workflows and up to 5.6× greater computational performance versus the M1-powered model. According to Apple, the device also…
SecurityOnline -
Apple Unveils M5 MacBook Pro: 3.5X Faster AI Performance and 24-Hour Battery Life
Apple has officially unveiled the new 14-inch MacBook Pro powered by the M5 chip, according to Apple Newsroom, promising up to 3.5× faster AI-driven performance and an impressive 24-hour battery life. The device runs alongside the latest macOS 26 Tahoe and…
SecurityOnline -
Broadcom Shifts VMware Workstation/Fusion to Year-Based Versioning with New 25H2 Release
Broadcom has announced a shift in the versioning approach for VMware Workstation Pro and Fusion Pro, moving away from traditional numeric identifiers such as 17.6.x to a year-based scheme similar to Microsoft. The newly released version is labelled 25H2,…
SecurityOnline -
Apple Unveils M5 Chip: 4X Faster GPU AI Performance, Powering New MacBook Pro, iPad Pro, and Vision Pro
Apple has officially unveiled its next-generation M5 processor, promising a significant leap in artificial intelligence performance and stating it will power the upcoming 14-inch MacBook Pro, iPad Pro, and Apple Vision Pro. Built on TSMC’s third-generation…
SecurityOnline -
ChatGPT Introduces Automatic Memory Management to Prevent “Memory Full” Errors for Paid Subscribers
ChatGPT has introduced an automatic memory management feature for paid subscribers to prevent memory full errors, allowing users to define preferences and have the AI reference pre-defined background information when responding. If users save too many…
SecurityOnline -
CISA Emergency Alert: Critical Adobe AEM Flaw (CVE-2025-54253, CVSS 10.0) Under Active Exploitation
CISA has added a critical Adobe Experience Manager (AEM) vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog after confirming active exploitation in the wild. The flaw, tracked as CVE-2025-54253 with a CVSS score of 10.0, allows…
SecurityOnline -
F5 Networks Breached by Nation-State Actor, BIG-IP Source Code and Undisclosed Vulnerabilities Stolen
F5 Networks has disclosed that a highly sophisticated nation-state threat actor infiltrated its internal systems, exfiltrating files from its BIG-IP product development environment and engineering knowledge management platforms, including portions of source…
SecurityOnline -
(no title)
Daily CyberSecurity rounds up a busy slate of October 2025 security news, including details of several critical vulnerability disclosures and high‑profile breaches. Notable items include Operation Zero Disco describing a critical Cisco SNMP flaw…
SecurityOnline -
Operation Zero Disco: Critical Cisco SNMP Flaw (CVE-2025-20352) Used to Implant Linux Rootkits on Switches
Operation Zero Disco is a campaign in which attackers exploit Cisco SNMP vulnerability CVE-2025-20352 to implant Linux rootkits on vulnerable Cisco switches, enabling remote code execution, persistent access and stealthy manipulation of network…
SecurityOnline -
Critical Samba RCE Flaw CVE-2025-10230 (CVSS 10.0) Allows Unauthenticated Command Injection on AD DCs
According to the Samba Team, a critical command injection flaw has been disclosed in CVE-2025-10230 (CVSS 10.0) that could allow unauthenticated remote code execution on Samba Active Directory Domain Controllers (AD DCs). The issue stems from insufficient…
SecurityOnline -
Stealth Stealer: PhantomVAI Loader Uses Steganography in Images to Inject Katz Stealer and Evade Sandboxes
Researchers from Palo Alto Networks’ Unit 42 have uncovered a multi‑stage phishing campaign delivering a stealthy loader called PhantomVAI Loader, which deploys a range of information-stealing malware including Katz Stealer, AsyncRAT, XWorm, FormBook and…
SecurityOnline -
China’s Jewelbug APT Breaches Russian IT Provider for 5 Months, Using Yandex Cloud and Graph API C2
according to Symantec’s Threat Hunter Team, the Chinese APT group Jewelbug (also tracked as REF7707, CL-STA-0049, and Earth Alux) conducted a global espionage campaign that included an unprecedented intrusion into a Russian IT service provider. The attackers…
SecurityOnlineREF7707 -
Critical RCE Flaw CVE-2025-54539 in Apache ActiveMQ NMS AMQP Client Allows Server-Side Code Execution
The article, published on 16 October 2025, reports a critical deserialization vulnerability in Apache ActiveMQ’s NMS AMQP Client, tracked as CVE-2025-54539, that could allow remote code execution on systems connecting to untrusted AMQP servers. According to…
SecurityOnline -
Global Interruption: YouTube, X, Steam, and Cloudflare Experience Simultaneous Outages Due to Datacenter Route Failure
Around 8:00 AM on 16 October 2025, multiple major online services—including YouTube, Netflix, X/Twitter, Steam, AWS, and Cloudflare—experienced short-term outages, with the disruption broadly pointing to a problem at the data centre or network operator…
SecurityOnline
