News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Fri 17 Oct 2025· 63 articles
-
Data BreachesProsper Data Breach Impacts 17.6 Million Accounts
More than 17 million individuals were likely impacted by a data breach at peer-to-peer lending marketplace Prosper, Have I Been Pwned warns. Prosper disclosed the incident last month, noting that hackers accessed its network and stole confidential,…
DataBreaches -
An arrested man’s lawyer claims his client can’t be ShinyHunters’ leader. His argument wasn’t persuasive.
An article by DataBreaches[.]Net summarises a press conference held on 14 October 2025 in which the lawyer for the man France claims is ShinyHunters’ head argued that his client cannot be the group’s leader, a claim the lawyer said was not persuasive.…
DataBreachesShinyHunters -
Microsoft Disrupts Ransomware Campaign Abusing Azure Certificates
Microsoft disrupted a Rhysida ransomware campaign that used fake Teams binaries signed with digital certificates, including many from Microsoft’s own service. According to Microsoft Threat Intelligence, the firm revoked more than 200 code-signing…
Dark Reading -
AI Agent Security: Whose Responsibility Is It?
AI agent security hinges on a shared responsibility model, with both vendors and customers needing robust guardrails as agentic AI deployments become indispensable for productivity. The piece notes that data is not stored directly in an AI agent but in…
Dark Reading -
Microsoft: Russia, China Increasingly Using AI to Escalate Cyberattacks on the US
According to Microsoft, Russia, China, Iran and North Korea have sharply increased their use of artificial intelligence to deceive people online and mount cyberattacks against the United States. The findings, published in Microsoft’s digital threats report,…
SecurityWeek -
AI Chat Data Is History’s Most Thorough Record of Enterprise Secrets, Secure it Wisely
AI chat data is being described as one of history’s most thorough records of personal and professional intent, with conversations that can reveal mindset, motive, and planning in real time. The piece notes that prosecutors unsealed arson and murder charges…
Dark Reading -
A critical WatchGuard Fireware flaw could allow unauthenticated code execution
A critical vulnerability in WatchGuard Fireware, tracked as CVE-2025-9242, could allow unauthenticated code execution, according to the report. The flaw is an out-of-bounds write in the iked process that affects Fireware OS versions 11.10.2–11.12.4_Update1,…
Security Affairs -
In Other News: CrowdStrike Vulnerabilities, CISA Layoffs, Mango Data Breach
SecurityWeek reports that CrowdStrike has patched two vulnerabilities in Falcon sensor for Windows. The flaws could allow an attacker who already had code execution on the host to delete arbitrary files. The issues have been assigned a medium severity…
SecurityWeek -
Attackers Exploit Zendesk Authentication Issue to Flood Targets’ Inboxes with Corporate Notifications
Attackers are exploiting a gap in Zendesk’s ticket submission process to flood targets’ inboxes with misleading corporate notifications, a tactic that can be triggered when anonymous requests are accepted. When configured to allow anonymous submissions, the…
gbhackers.com -
North Korean Hackers Combine BeaverTail and OtterCookie into Advanced JS Malware
According to Cisco Talos, a North Korean threat actor linked to the Contagious Interview campaign has merged some functions of BeaverTail and OtterCookie, indicating ongoing refinement of its toolset. The new evidence shows OtterCookie has gained a…
The Hacker News -
WatchGuard VPN Flaw Allows Remote Attackers to Execute Arbitrary Code
A critical security vulnerability has been discovered in WatchGuard Firebox appliances that could allow remote attackers to execute arbitrary code without authentication, identified as CVE-2025-9242 and affecting the IKEv2 VPN service with a CVSS 4.0 score…
gbhackers.com -
TikTok Videos Weaponized to Deliver Self-Compiling PowerShell Malware
TikTok videos are being weaponised to deliver self-compiling PowerShell malware, with attackers posing as providers of free software activators and urging viewers to run a PowerShell one-liner as an administrator. According to ISC SANS, victims are directed…
gbhackers.com -
ClickFake Interview Campaign Used by Threat Actors to Deliver OtterCandy Malware
A North Korean-linked group, WaterPlum’s Cluster B, has evolved its tactics by introducing OtterCandy—a Node[.]js–based RAT and information stealer—through the ClickFake Interview campaign, with significant enhancements observed in August 2025. The threat…
gbhackers.comWageMole -
CVE-2025-54253: Critical Adobe Experience Manager Vulnerability Actively Exploited
CVE-2025-54253 is a critical vulnerability in Adobe Experience Manager that has been actively exploited in the wild, with the flaw stemming from a misconfiguration in AEM’s Struts2 DevMode involving the exposed /adminui/debug servlet. According to SOCRadar,…
SOCRadar -
Prosper disclosed a data breach impacting 17.6 million accounts
Prosper disclosed a data breach impacting 17.6 million accounts. According to Have I Been Pwned, stolen data includes names, addresses, dates of birth, email addresses, Social Security numbers, government IDs, and other information. In September 2025 Prosper…
Security Affairs -
Over $3 Million in Prizes Offered at Pwn2Own Automotive 2026
SecurityWeek reports that the new Pwn2Own Automotive 2026 will offer a total prize pool exceeding $3 million and will take place in January 2026 at Automotive World in Tokyo, with six categories including Tesla, infotainment systems, EV chargers, and…
SecurityWeek -
Email Bombs Exploit Lax Authentication in Zendesk
Cybercriminals are abusing a widespread lack of authentication in Zendesk to flood targeted inboxes with thousands of ticket creation notifications that appear to come from hundreds of Zendesk customers. The messages can bear any subject line and are sent…
Krebs on Security -
Hackers Steal Sensitive Data From Auction House Sotheby’s
According to SecurityWeek, Sotheby’s disclosed a data breach in which hackers stole highly sensitive personal information from its systems, with an intrusion discovered on 24 July. The investigation found that files containing name, SSN and financial account…
SecurityWeek -
Identity Security: Your First and Last Line of Defense
Identity security is framed as the new security perimeter, with the article arguing that the central question for CISOs is who or what has access to critical systems and whether that access can be secured and proven. It cites the 2025–2026 SailPoint Horizons…
The Hacker News -
‘Highest Ever’ Severity Score Assigned by Microsoft to ASP.NET Core Vulnerability
SecurityWeek reports that Microsoft’s October Patch Tuesday addressed a critical-severity vulnerability in the ASP[.]NET Core open source framework, tracked as CVE-2025-55315, which has a CVSS score of 9.9 and has been described by Barry Dorrans as the…
SecurityWeek -
New Tech Support Scam Exploits Microsoft Logo to Steal User Credentials
According to Cofense Phishing Defense Center, a new tech support scam has hijacked Microsoft's branding to harvest user credentials and push victims to contact fraudulent support lines for remote access. The campaign starts with an innocuous email that…
gbhackers.com -
MCP Servers for SOC Teams: 10 Threat Intelligence Use Cases
SOC teams can now run structured, natural-language queries against a single interface to investigate threats, surface incidents, and retrieve IOCs, powered by SOCRadar MCP Server. The article outlines 10 threat intelligence use cases, plus a bonus track of…
SOCRadar -
Prosper data breach puts 17 million people at risk of identity theft
Prosper detected unauthorised activity on their systems on 2 September 2025, and later that month published an FAQ addressing the incident. The attacker is said to have stolen personal information, including Social Security numbers, from Prosper customers…
Malwarebytes -
Post-exploitation framework now also delivered via npm
In October 2025, Securelist reported that the npm ecosystem contained a malicious package named https-proxy-utils, which was crafted to deliver the AdaptixC2 post-exploitation framework and had been taken down by then. According to the post, the package…
securelist.com -
Windows GDI Vulnerability in Rust Kernel Module Enables Remote Attacks
A newly discovered flaw in Microsoft’s Rust-based Graphics Device Interface (GDI) kernel component allows unprivileged attackers to crash or take control of Windows systems, according to GBHackers. Check Point Research uncovered the issue in January 2025 and…
gbhackers.com -
Microsoft revokes 200+ certificates abused by Vanilla Tempest in fake Teams campaign
Microsoft revoked more than 200 certificates used by the Vanilla Tempest group to sign fake Teams installers that delivered the Oyster backdoor and Rhysida ransomware. The activity, active since July 2022, targeted organisations across education, healthcare,…
Security AffairsVanilla Tempest -
Researchers Uncover WatchGuard VPN Bug That Could Let Attackers Take Over Devices
Cybersecurity researchers have disclosed details of a critical WatchGuard Fireware vulnerability, CVE-2025-9242, described as an out-of-bounds write that could allow a remote unauthenticated attacker to execute arbitrary code. The flaw affects Fireware OS…
The Hacker News -
Microsoft Report Warns of AI-Powered Automation in Cyberattacks and Malware Creation
Cybercriminals are weaponising artificial intelligence to accelerate malware development, speed vulnerability discovery, and craft more sophisticated phishing campaigns, according to Microsoft’s latest Digital Defense Report. The document notes a 2025…
gbhackers.com -
ConnectWise Flaws Let Attackers Deliver Malicious Software Updates
According to GBHackers On Security, ConnectWise has issued a critical security update for its Automate platform after uncovering vulnerabilities that could allow attackers to intercept and tamper with software updates. ConnectWise Automate 2025.9, released…
gbhackers.com -
Google DeepMind Partners with CFS to Use AI for Optimizing SPARC Fusion Reactor Efficiency
Google DeepMind has announced a partnership with Commonwealth Fusion Systems (CFS) to use AI technologies to optimise the operational efficiency of SPARC, the fusion reactor being developed by CFS. The Massachusetts-based company recently secured an $863…
SecurityOnline -
PowerSchool hacker got four years in prison
According to Security Affairs, Matthew D. Lane, a Massachusetts student, was sentenced to four years in prison for hacking and extorting about $3 million from two companies, including PowerSchool. He pleaded guilty in May to hacking two U.S. companies, and…
Security Affairs -
Cisco Desk, IP, and Video Phones Vulnerable to Remote DoS and XSS Attacks
Multiple Cisco desk, IP, and video phones are vulnerable to remote DoS and XSS attacks through flaws in their SIP software, according to Cisco. The weaknesses affect Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 when registered…
gbhackers.com -
Zimbra Issues Emergency Patch for Critical SSRF Vulnerability in Chat Proxy Configuration
Zimbra has issued an emergency security patch (version 10.1.12) to fix a critical Server-Side Request Forgery (SSRF) in the chat proxy configuration. The patch, released on 16 October 2025, also includes stability and synchronization improvements and is…
SecurityOnline -
APT28 Deploys BeardShell and Covenant Modules via Weaponized Office Documents
Security researchers have detailed a campaign attributed to APT28 that targets Ukrainian military personnel with weaponized Office documents delivering BeardShell and Covenant modules, marking a significant evolution in the group’s techniques. The infection…
gbhackers.comAPT28 -
Prosper Data Breach Impacts 17.6 Million Accounts
SecurityWeek reports that Prosper suffered a data breach likely affecting 17.6 million accounts, with attackers querying Prosper’s database to exfiltrate confidential, proprietary, and personal information, though there is no evidence of unauthorized access…
SecurityWeek -
Record $40 Billion Deal: NVIDIA, Microsoft, BlackRock Consortium Acquires Aligned Data Centers
The AI Infrastructure Partnership (AIP) has announced a record $40 billion acquisition of Aligned Data Centers, evolving into the largest data centre transaction in history. The deal is being led by Macquarie Asset Management, with the buyer consortium also…
SecurityOnline -
Apple Planning Touchscreen OLED MacBook Pro with M6 Chip for Late 2026 Debut
According to Bloomberg journalist Mark Gurman, Apple is poised to add touchscreen functionality to its MacBook Pro lineup, a move that would mark a major shift for the company. The models, codenamed K114 and K116, are expected to debut between late 2026 and…
SecurityOnline -
Meta Retiring Messenger Desktop App on Dec 15, Redirecting Users to Web Version
Meta has announced the discontinuation of its Messenger desktop application for macOS and Windows, redirecting users to the web-based version instead. The desktop app will cease functioning on 15 December, after which those wishing to access Messenger on…
SecurityOnline -
Vulnerabilities Allow Disruption of Phoenix Contact UPS Devices
Phoenix Contact has released patches for several vulnerabilities in its QUINT4 uninterruptible power supply (UPS) devices, addressing flaws that could enable remote, unauthenticated attackers to perform denial-of-service (DoS) attacks or steal login…
SecurityWeek -
Under the engineering hood: Why Malwarebytes chose WordPress as its CMS
Malwarebytes explains why it chose WordPress as the backbone of its digital content operations, emphasising modern WordPress’ openness, transparency and ecosystem, alongside a discipline around governance and a mature core security model. In its…
Malwarebytes
