News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Fri 17 Oct 2025· 63 articles
-
Gladinet Patches Exploited CentreStack Vulnerability
Gladinet has released patches for a CentreStack vulnerability that security researchers say has been exploited in the wild since at least late September. The issue, tracked as CVE-2025-11371, is an unauthenticated local file inclusion flaw that allows…
SecurityWeek -
Over 269,000 F5 Devices Found Exposed Online After Massive Breach
Over 269,000 F5 devices were found exposed online after a massive breach, according to Shadowserver’s findings reported in the article. Security researchers first detected unusual activity on F5’s management portal, prompting the company to issue an alert…
gbhackers.com -
Auction house Sotheby’s disclosed a July data breach
Sotheby’s disclosed a data breach discovered on 24 July 2025 that exposed customer information, including financial details. Investigators spent two months determining what data was stolen and who was affected, with the review completed around 24 September…
Security Affairs -
SEO spam and hidden links: how to protect your website and your reputation
SEO spam and hidden links describe invisible HTML blocks that include third‑party links to pornographic or gambling sites, used to manipulate search rankings. The article explains how hidden links can inflate a site’s PageRank, be detected by engines like…
securelist.com -
LinkPro: An eBPF-Based Rootkit Hiding Malicious Activity on GNU/Linux
Security researchers from Synacktiv CSIRT have disclosed LinkPro, an eBPF-based Linux rootkit designed to hide malicious activity while enabling persistent backdoor access. The infection chain began with a vulnerable Jenkins server exposed to the internet,…
gbhackers.com -
VMware Releases Workstation & Fusion 25H2 With Enhanced Features and OS Support
According to VMware, the latest releases of Workstation 25H2 and Fusion 25H2 bring a calendar-based versioning approach and a bundle of enhancements for automation, performance and OS support, with the news publicised on 17 October 2025. The new 25H2 format…
gbhackers.com -
Microsoft Revokes 200 Fraudulent Certificates Used in Rhysida Ransomware Campaign
Microsoft has disclosed that it revoked more than 200 certificates used by the threat actor it tracks as Vanilla Tempest to fraudulently sign malicious binaries in ransomware attacks, including those tied to Rhysida. The certificates were used in fake Teams…
The Hacker News -
Critical Cisco IOS and IOS XE Flaws Allow Remote Code Execution
Cisco has disclosed a serious vulnerability in its IOS and IOS XE Software that could allow attackers to execute remote code or crash affected devices, tracked as CVE-2025-20352 with a CVSS score of 7.7. The flaw arises from a stack overflow in the SNMP…
gbhackers.com -
F5 Issues Security Patches for Multiple Products After Recent Breach
F5 Networks has issued security patches for multiple products following a recent breach, with the company stating in its quarterly security notification on 15 October 2025 that numerous high‑severity vulnerabilities could expose enterprise networks. The…
gbhackers.com -
North Korean Hackers Exploit EtherHiding to Spread Malware and Steal Crypto Assets
According to Google Threat Intelligence Group (GTIG), North Korean threat actor UNC5342 is the first nation-state group observed using EtherHiding, a technique that embeds malware in smart contracts on public blockchains such as BNB Smart Chain and Ethereum…
gbhackers.com -
Massive Exposure: 40 Billion Records (13 TB) of Unencrypted Mail Logs Leaked by Netcore Cloud
Cybersecurity researcher Jeremiah Fowler has uncovered a massive data exposure involving Netcore Cloud Pvt. Ltd, a Mumbai-based marketing automation company that serves more than 6,500 brands in 40 countries. The unencrypted and non-password-protected…
SecurityOnline -
Sundar Pichai Admits ChatGPT Temporarily Surpassed Google, Recalls “Code Red” Moment at Dreamforce
At Salesforce’s Dreamforce conference, Google and Alphabet CEO Sundar Pichai acknowledged the moment when OpenAI launched ChatGPT, admitting—rarely for him—that the technology briefly appeared to surpass Google’s own advancements, though he stressed it did…
SecurityOnline -
Microsoft Launches “Hey, Copilot” Voice Trigger and Visual AI Context to Transform Windows 11 Assistant
Microsoft has begun rolling out a major upgrade to Copilot in Windows 11, enabling a voice trigger says “Hey, Copilot” and allowing questions based on what is shown on the screen. The update lets Copilot “see” the user’s screen, enabling tasks such as…
SecurityOnline -
Spring Patches Two Flaws: SpEL Injection (CVE-2025-41253) Leaks Secrets, STOMP CSRF Bypasses WebSocket Security
VMware Tanzu’s Spring team released fixes for two vulnerabilities affecting Spring Cloud Gateway and the Spring Framework. The first, CVE-2025-41253, arises from misused SpEL in application routes and could allow reading environment variables, system…
SecurityOnline -
Critical ConnectWise Automate Flaw (CVE-2025-11492, CVSS 9.6) Allows RMM Agent Man-in-the-Middle Attack
ConnectWise has issued a critical patch for its Automate remote monitoring and management platform addressing two high-severity flaws, CVE-2025-11492 (CVSS 9.6) and CVE-2025-11493 (CVSS 8.8), affecting Automate versions prior to 2025.9. The first flaw stems…
SecurityOnline -
North Korea’s Famous Chollima APT Uses Trojanized Node.js App to Deploy OtterCookie RAT for Crypto Theft
A Cisco Talos report links North Korea’s Famous Chollima APT with the Lazarus-aligned threat actor to a campaign that uses fake job offers and trojanized open‑source tools to infect developers with BeaverTail and OtterCookie, a cross‑platform malware suite…
SecurityOnlineWageMole -
Cisco Patches High-Severity CVE-2025-20350 DoS Flaw in Desk and IP Phones
Cisco has released security updates to patch two vulnerabilities affecting multiple Cisco Desk Phone and IP Phone models, including the 9800, 7800, 8800, and 8875 series, which could allow unauthenticated remote attackers to cause a denial-of-service or, in…
SecurityOnline -
Operation Silk Lure: Chinese Espionage Targets FinTech with Malicious Resume LNK to Implant ValleyRAT
Researchers at Seqrite Labs have uncovered Operation Silk Lure, a targeted cyber-espionage campaign aiming at Chinese FinTech and cryptocurrency firms with malicious resume LNKs that deploy a multi-stage payload. According to Seqrite Labs, the operation uses…
SecurityOnline -
Qilin Ransomware’s Resilience Exposed: Bulletproof Hosting Network Underpins Asahi Group Holdings Attack
According to Resecurity, Qilin Ransomware’s resilience hinges on a sprawling bulletproof hosting (BPH) ecosystem that underpins its ransomware-as-a-service operations and enables the group to target global enterprises. The report ties Qilin’s infrastructure…
SecurityOnline -
Maverick Fileless Trojan Turns Infected Phones into WhatsApp Worms to Steal Banking and UPI Credentials
On 17 October 2025, researchers from Kaspersky’s Global Research and Analysis Team (GReAT) detailed a massive fileless malware campaign targeting users in Brazil, distributing a banking Trojan named Maverick via WhatsApp messages. According to Kaspersky, the…
SecurityOnline -
Google Cloud Launches Gemini Enterprise: Unifying AI Agents and No-Code Workbench for Business Transformation
According to Google Cloud, Gemini Enterprise is a next‑generation enterprise AI platform that unifies AI agents and a no‑code workbench to boost productivity, customer engagement and innovation, centred on the Gemini chat interface. The platform rests on six…
SecurityOnline -
Zero-Click NTLM Leak Returns: New LNK Bypass (PoC Available) Bypasses Patch, Exposing Credentials
The article titled Zero-Click NTLM Leak Returns: New LNK Bypass (PoC Available) Bypasses Patch, Exposing Credentials was published on 17 October 2025. It highlights a zero-click NTLM credential leak described as a new LNK bypass, with a PoC available that…
SecurityOnline -
Meta to Invest $1.5 Billion in Massive 1-Gigawatt Texas Data Center for Next-Gen AI Infrastructure
Meta has announced plans to invest over $1.5 billion in the construction of a 1-gigawatt data centre in El Paso, Texas, to power its next-generation AI infrastructure and is slated to become operational in 2028. The project is described as a significant step…
SecurityOnline
