News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Tue 21 Oct 2025· 70 articles
-
Electronic Warfare Puts Commercial GPS Users on Notice
Localized jamming and spoofing of GNSS continues to affect multiple sectors, with interference now seen as a broader risk beyond aviation and maritime transport. In 2025, there have been about 1,000 daily GPS interference incidents globally, up from around…
Dark Reading -
Japanese retailer Muji halted online sales after a ransomware attack on logistics partner
Muji said online sales were halted after a ransomware attack disrupted its logistics partner Askul, affecting deliveries and the retailer’s online store functions. The incident disrupted order processing and access to the Muji app services, with Askul…
Security Affairs -
Gravwell Closes $15.4M Funding Round to Expand Data Analytics and Security Platform
Gravwell, the enterprise data analytics and security platform provider, has closed a $15.4 million Series A funding round. The round was led by Two Bear Capital and included participation from Gula Tech Adventures, Next Frontier Capital, and others,…
SecurityWeek -
The new Microsoft Security Store unites partners and innovation
On 30 September 2025 Microsoft outlined a bold vision for security: a unified, AI‑powered platform that helps organisations defend against today’s sophisticated threats, materialising in the Microsoft Security Store, which brings together partners,…
Microsoft -
SBOM Pioneer Allan Friedman Joins NetRise to Advance Supply Chain Visibility
Dr. Allan Friedman, the SBOM pioneer often described as the Father of SBOMs, is joining NetRise as a strategic adviser, after leaving CISA where he served as a senior advisor and strategist. NetRise announced the appointment on 21 October 2025, noting that…
SecurityWeek -
Meta Rolls Out New Tools to Protect WhatsApp and Messenger Users from Scams
Meta has announced new protections for WhatsApp and Messenger to curb scams. WhatsApp will show warnings when a user tries to share their screen with an unknown contact during a video call, aiming to prevent disclosure of sensitive information such as bank…
The Hacker News -
Defakto Raises $30 Million for Non-Human IAM Platform
Defakto has announced a $30.75 million Series B that brings its total investment to roughly $50 million, according to SecurityWeek. The round was led by XYZ Venture Capital with participation from The General Partnership, Bloomberg Beta, WndrCo, Michael…
SecurityWeek -
Government, Industrial Servers Targeted in China-Linked ‘PassiveNeuron’ Campaign
SecurityWeek reports that a China-linked threat actor has been targeting high-profile government, finance, and industrial organisations across Asia, Africa and Latin America with multiple implants as part of the PassiveNeuron campaign, which has been active…
SecurityWeek -
U.S. CISA adds Oracle, Windows, Kentico, and Apple flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added Oracle, Windows, Kentico and Apple flaws to its Known Exploited Vulnerabilities (KEV) catalogue, with entries including CVE-2022-48503 for Apple, CVE-2025-2746 and CVE-2025-2747 for…
Security Affairs -
PolarEdge Targets Cisco, ASUS, QNAP, Synology Routers in Expanding Botnet Campaign
Cybersecurity researchers have outlined a growing botnet campaign by PolarEdge, first documented by Sekoia in February 2025, targeting routers from Cisco, ASUS, QNAP, and Synology to recruit devices into a network for an as-yet-undetermined purpose.…
The Hacker News -
Microsoft 365 Copilot Flaw Lets Hackers Steal Sensitive Data via Indirect Prompt Injection
A vulnerability in Microsoft 365 Copilot allowed attackers to trick the AI assistant into fetching and exfiltrating sensitive tenant data by hiding instructions in a document, with the data then being encoded into a malicious Mermaid diagram. The attack used…
gbhackers.com -
Streaming Fraud Campaigns Rely on AI Tools, Bots
Fraudsters are using generative AI to mass-produce royalty-eligible music and ghost artists to collect royalties, a development described in a Dark Reading feature on streaming fraud. The practice, termed streaming fraud, involves creating content at scale…
Dark Reading -
PassiveNeuron Targets High-Profile Servers to Deploy Malware
A cyberespionage campaign dubbed PassiveNeuron has re-emerged after months of dormancy, with security researchers detailing its renewed activity and attack methods. The campaign, first detected in June 2024, targets government, financial and industrial…
gbhackers.com -
Sendmarc appoints Dan Levinson as Customer Success Director in North America
Sendmarc has announced the appointment of Dan Levinson as Customer Success Director – North America, emphasising the company’s regional expansion and commitment to locally aligned support. The announcement, issued from Wilmington, Delaware on 21 October…
gbhackers.com -
Veeam to Acquire Data Security Firm Securiti AI for $1.7 Billion
Veeam Software has announced plans to acquire data security posture management specialist Securiti AI for 1.725 billion dollars in cash and stock, in a move to unite data resilience with DSPM, privacy, governance and AI trust across production and secondary…
SecurityWeek -
A deep dive into BPF LPM trie performance and optimization
A Cloudflare post from 21 October 2025 dives into the performance and optimisation of BPF LPM trie maps, highlighting how critical these structures are for IP and IP+Port matching in routing network traffic. In tests on AMD EPYC 9684X 96‑Core machines, a…
Cloudflare -
New Luma Infostealer Malware Steals Browser Data, Cryptocurrency, and Remote Access Accounts
Luma Infostealer, described as a malware-as-a-service (MaaS) offering, has emerged as a potent threat targeting high-value credentials such as web browser cookies, cryptocurrency wallets, and VPN/RDP account information. Beyond isolated theft, threat actors…
gbhackers.com -
CISA Warns of Exploited Apple, Kentico, Microsoft Vulnerabilities
The US agency CISA has warned that recently disclosed vulnerabilities in Windows SMB Client and Kentico Xperience CMS have been exploited in the wild, adding them to its Known Exploited Vulnerabilities (KEV) catalog. The Windows flaw, CVE-2025-33073, has a…
SecurityWeek -
Decoding Microsoft 365 Audit Logs Using Bitfield Mapping: An Investigation Report
A recent bitfield mapping technique decodes the opaque UserAuthenticationMethod values in Microsoft 365 audit logs, turning numeric codes such as 16, 272 and 33554432 into human-readable authentication details. Analysts have shown that these integers…
gbhackers.com -
KT Chief to Resign After Cybersecurity Breach Resolution
Kim Young-shub, KT’s representative, said regarding the unauthorized micro-payment incident, “I will take responsibility once the situation is resolved,” effectively signaling his intention to step down from his position. During a National Assembly Science,…
DataBreaches -
Cyber-Attack On Bectu’s Parent Union Sparks UK National Security Concerns
The cyber-attack on Prospect, the parent union of the film and TV group Bectu, has sparked fears that it could have compromised information pertaining to the UK’s national security, according to Deadline. The majority of Prospect’s 150,000 members were…
DataBreaches -
Apache Syncope Groovy Flaw Allows Remote Code Injection
Apache Syncope has disclosed a critical vulnerability, tracked as CVE-2025-57738, that allows authenticated administrators to execute arbitrary code on affected systems through Groovy code. The flaw affects all Apache Syncope versions 3.x before 3.0.14 and…
gbhackers.com -
Sendmarc appoints Dan Levinson as Customer Success Director in North America
Sendmarc has announced the appointment of Dan Levinson as Customer Success Director – North America, in a move that supports the company’s regional expansion. According to CyberNewsWire, Levinson will lead the development of customer success programmes…
SecurityOnline -
Dataminr to Acquire ThreatConnect for $290 Million
According to SecurityWeek, Dataminr is planning to acquire ThreatConnect for $290 million in cash and equity. Dataminr’s platform uses AI to process public data signals to detect critical events and threats across physical and cyber domains. ThreatConnect,…
SecurityWeek -
Attorney General James Announces Settlement with Wojeski & Company Accounting Firm
According to New York Attorney General Letitia James, Wojeski & Company Accounting Firm agreed to a settlement that strengthens its data security after two cybersecurity incidents exposed the private information of more than 4,700 New Yorkers. The firm…
DataBreaches -
Threat Actors Reportedly Marketing Monolock Ransomware on Dark Web Forums
October 21 2025 saw a surge of activity on dark web forums around Monolock Ransomware V1.0, with threat actors claiming a fully functional toolkit is for sale, including encryption modules, key exchange, and a custom-built administrative panel. According to…
gbhackers.com -
China-Linked Salt Typhoon breaches European Telecom via Citrix exploit
According to SecurityAffairs, Salt Typhoon, a China-linked APT group, hacked a European telecom in July 2025 by exploiting a Citrix NetScaler Gateway to gain initial access, then pivoting to Citrix Virtual Delivery Agent hosts in the client’s Machine…
Security AffairsGhostEmperor -
Supply Chain Attack Targets VS Code Extensions With ‘GlassWorm’ Malware
According to Koi Security, Visual Studio Code users were targeted in a self-propagating worm campaign named GlassWorm that spread via the OpenVSX marketplace by compromising extensions and packages. The malware hides its code using invisible Unicode…
SecurityWeek -
Windows update breaks USB support in recovery mode
Microsoft’s October security update has disabled USB mice and keyboards in the Windows Recovery Environment (WinRE), a change documented in the KB50 66835 October 2025 updates as Microsoft revealed: “After installing the Windows security update released on…
Malwarebytes -
New GlassWorm Threat Uses Stealthy Code to Target OpenVSX Extensions
According to GBHackers on Security, GlassWorm is the world’s first self-propagating worm targeting OpenVSX extensions, with its discovery traced to 17 October 2025. The threat hijacks developer machines by embedding malicious JavaScript in VS Code extension…
gbhackers.com -
Securing AI to Benefit from AI
Securing AI to benefit from AI argues that artificial intelligence can greatly amplify cyber defence, but only if the systems underpinning it are secured with clear governance, strong identity controls, and visibility into decision-making. The piece…
The Hacker News -
Romanian prisoner hacks prison IT system in plot made for a Netflix movie
According to Risky Biz News, Catalin Cimpanu has a great write-up about how a Romanian prisoner hacked the country’s prison management platform. The incident took place in August and continued through October, and it appears to have originated in the city of…
DataBreaches -
JFL Lost Up to $800,000 Weekly After Cyberattack, CEO Says No Patient or Staff Data Was Compromised
According to Virgin Islands Consortium, JFL Hospital lost between $750,000 and $800,000 a week after a cyberattack that struck the Juan F. Luis Hospital in April, forcing the facility offline for nearly five months and triggering a complete rebuild of its…
DataBreaches -
You can poison AI with just 250 dodgy documents
Researchers have shown how you can corrupt an AI and make it talk gibberish by tampering with just 250 documents. The attack involves poisoning the data that an AI trains on and was demonstrated in collaboration with Anthropic, the UK’s AI Security Institute…
Malwarebytes -
Over 73,000 WatchGuard Firebox Devices Impacted by Recent Critical Flaw
More than 73,000 WatchGuard Firebox devices remain unpatched against a recent critical-severity vulnerability, according to The Shadowserver Foundation. The flaw, tracked as CVE-2025-9242 with a CVSS score of 9.3, affects Fireware OS versions including…
SecurityWeek -
The evolving landscape of email phishing attacks: how threat actors are reusing and refining established techniques
The Securelist piece dated 21 Oct 2025 examines how email phishing attacks are evolving, with threat actors reusing and refining established techniques while adding new twists. It highlights that PDFs are increasingly used in phishing, not only with links…
securelist.com -
Myanmar Military Shuts Down Major Cybercrime Center and Detains Over 2,000 People
According to Myanma Alinn, the Myanmar military has shut down KK Park, a major online scam operation near the border with Thailand, detaining 2,198 people and seizing 30 sets of Starlink satellite internet terminals as part of operations that began in early…
SecurityWeek -
LANSCOPE Endpoint Manager Flaw Allows Remote Code Execution
A critical security flaw has been found in the on-premise edition of LANSCOPE Endpoint Manager that could let attackers run malicious code on vulnerable machines. The vulnerability, tracked as CVE-2025-61932, involves a remote code execution issue in two…
gbhackers.com -
AWS Resolves Major Outage After Nearly 24 Hours of Service Disruption
Amazon Web Services resolved a major outage in its US-EAST-1 region that lasted nearly 24 hours and affected over 140 services, with ongoing backlogs for some components after the primary restoration. The disruption began late on 19 October 2025 and was…
gbhackers.com -
Pro-Russia Information Operations Leverage Russian Drone Incursions into Polish Airspace
Written by: Alden Wahlstrom, David Mainor Introduction Google Threat Intelligence Group (GTIG) observed multiple instances of pro-Russia information operations (IO) actors promoting narratives related to the reported incursion of Russian drones into Polish…
Google Cloud
