CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 10–13 on weekend days.

  • On CISA KEV CVEs
  • Other coverage
Show as table
Articles published per day
DayArticles published
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Sun 25 Oct13
Today, Mon 26 Oct0 so far
Exploited only
13 articles

Sat 18 Oct 2025· 13 articles

  1. Winos 4.0 hackers expand to Japan and Malaysia with new malware

    Winos 4.0 attackers have expanded from China and Taiwan to Japan and Malaysia, using PDFs masquerading as documents from the Finance Ministry to deliver the HoldingHands RAT (aka Gh0stBins). The campaign relies on phishing emails with PDFs containing…

    Security Affairs
  2. From Airport chaos to cyber intrigue: Everest Gang takes credit for Collins Aerospace breach

    According to Security Affairs, the Everest ransomware gang has claimed responsibility for a breach at Collins Aerospace, with their leak site going offline almost immediately afterward, displaying a “Fatal error” message and prompting takedown speculation.…

    Security Affairs
  3. No Kings. Not Today. Not Ever.

    Posted on 18 October 2025, No Kings. Not Today. Not Ever. is a personal statement published on DataBreaches[.]Net in which the author describes a national protest against what they term an authoritarian regime and a narcissist in the White House. The piece…

    DataBreaches
  4. Authorities Shut Down Cybercrime-as-a-Service, Seize 40,000 SIM Cards

    Law enforcement across Europe dismantled a cybercrime-as-a-service operation codenamed SIMCARTEL, arresting seven individuals and seizing more than 40,000 active SIM cards. The operation, conducted on 10 October 2025 in Latvia, also resulted in the…

    gbhackers.com
  5. New .NET CAPI Backdoor Targets Russian Auto and E-Commerce Firms via Phishing ZIPs

    Cybersecurity researchers have revealed a campaign distributing a new .NET malware called CAPI Backdoor, which targets the Russian automobile and e-commerce sectors via phishing emails that deliver a ZIP archive. According to Seqrite Labs, the ZIP artifact…

    The Hacker News
  6. Critical Zimbra SSRF Flaw Exposes Sensitive Data

    GBHackers reports a critical Zimbra SSRF flaw in the chat proxy configuration that could allow attackers to access sensitive data. Zimbra released an emergency patch, delivering version 10.1.12 on 16 October 2025 to address the vulnerability, which affects…

    gbhackers.com
  7. SIMCARTEL operation: Europol takes down SIM-Box ring linked to 3,200 scams

    Europol’s SIMCARTEL operation shut down a SIM-box network linked to over 3,200 fraud cases and €4.5 million in losses, which used 1,200 SIM-box devices and 40,000 SIM cards to supply phone numbers for phishing, impersonation, extortion and related scams. On…

    Security Affairs
  8. Microsoft Windows 11 October Update Disrupts Localhost (127.0.0.1) Connectivity

    Microsoft’s October 2025 Windows 11 update, KB5066835, released on 14 October 2025 for OS Builds 26200.6899 and 26100.6899, disrupted localhost connections by blocking access to services on 127.0.0[.]1. The patch, which aimed to fix security vulnerabilities…

    gbhackers.com
  9. Cyber Academy Founder Champions Digital Safety for All

    Aliyu Ibrahim Usman honed his hacking skills at age 14, concealing them from family and friends despite acting ethically, and later decided cybersecurity could be a career when he founded the Cyber Cadet Academy at 19. He describes the academy as a training…

    Dark Reading
  10. Silver Fox Expands Winos 4.0 Attacks to Japan and Malaysia via HoldingHands RAT

    The Hacker News reports that the threat actors behind Winos 4.0 (also known as ValleyRAT) have expanded their attacks from China and Taiwan to Japan and Malaysia, via a new HoldingHands RAT campaign. Fortinet's FortiGuard Labs notes that the phishing-heavy…

    The Hacker NewsVoid Arachne
  11. Massachusetts hospitals Heywood, Athol say outage was a cybersecurity incident

    Heywood Hospital in Gardner and Athol Hospital in Athol, Massachusetts, said a recent network outage was caused by a cybersecurity incident, with affected systems taken offline and a third-party cybersecurity firm engaged to assist, according to…

    DataBreaches
  12. Privilege Escalation Flaw Discovered in MinIO Service Accounts — CVE-2025-62506

    MinIO has disclosed a high-severity privilege escalation vulnerability, CVE-2025-62506, with CVSS 8.1, that could allow attackers to bypass session policy restrictions and gain elevated permissions via service accounts and security tokens. According to MinIO…

    SecurityOnline

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device