News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Tue 21 Oct 2025· 70 articles
-
CISA Confirms Exploitation of Latest Oracle EBS Vulnerability
CISA has added CVE-2025-61884 to its Known Exploited Vulnerabilities (KEV) catalog, confirming that the Oracle E-Business Suite vulnerability has been exploited in the wild. Dozens of Oracle customers were targeted in a campaign that involved data theft from…
SecurityWeek -
Figma CEO: AI Won’t Steal Jobs, It Will Unlock Higher-Value Work
Figma CEO Dylan Field has publicly stated that artificial intelligence does not pose a threat to human employment but rather opens new avenues for industrial growth, a view rooted in a September company survey. According to Figma’s survey of 1,199…
SecurityOnline -
OpenAI Launches “ChatGPT Login” to Shift API Costs to Users
OpenAI is introducing a service called “ChatGPT Login,” allowing users to sign in to third‑party websites with their ChatGPT credentials, a move described as creating an AI‑centred subscription ecosystem around OpenAI. Under this framework, when users log…
SecurityOnline -
PassiveNeuron: a sophisticated campaign targeting servers of high-profile organizations
According to Securelist, PassiveNeuron is a sophisticated cyberespionage campaign that has targeted Windows Server machines, deploying three implants across its operations: Neursite, a custom C++ backdoor; NeuralExecutor, a .NET loader; and the Cobalt Strike…
securelist.com -
Cavalry Werewolf APT Targets Multiple Sectors Using FoalShell and StallionRAT
Cavalry Werewolf, an advanced persistent threat group also tracked as YoroTrooper and Silent Lynx, conducted a campaign between May and August 2025 targeting Russia’s public sector and critical industries including energy, mining and manufacturing. The…
gbhackers.comYoroTrooper -
Callisto2 articles this day · gbhackers.com first
Google Identifies Three New Russian Malware Families Created by COLDRIVER Hackers · New LOSTKEYS Malware Tied to Russian State-Sponsored Hacker Group COLDRIVER
2 outlets-
Google Identifies Three New Russian Malware Families Created by COLDRIVER Hackers
Google Threat Intelligence Group (GTIG) has attributed new COLDRIVER operations to three malware families—NOROBOT, YESROBOT, and MAYBEROBOT—developed since May 2025, with an apparent rise in the threat actor’s tempo. GTIG notes the families form a delivery…
The Hacker News -
New LOSTKEYS Malware Tied to Russian State-Sponsored Hacker Group COLDRIVER
According to GTIG researchers and supporting analysis from Zscaler, a Russian state-sponsored threat actor COLDRIVER, long known for targeting NGOs, policy advisors and dissidents, has been linked to a rapidly evolving malware campaign following the public…
gbhackers.com
-
-
Hackers Used Snappybee Malware and Citrix Flaw to Breach European Telecom Network
A European telecommunications organisation has reportedly been targeted by Salt Typhoon, a China-nexus cyber espionage group also known as Earth Estries, FamousSparrow, GhostEmperor and UNC5807, according to The Hacker News and Darktrace. The intrusion…
The Hacker News -
Home Depot Halloween phish gives users a fright, not a freebie
Home Depot Halloween phish gives users a fright, not a freebie reports a timely phishing email that claimed recipients had won a Gorilla Carts dump cart, delivering the offer via a single-click image that hid multiple traps. The sender domain yula[.]org is…
Malwarebytes -
AdaptixC2 Emerges in npm Supply-Chain Exploit Against Developers
According to Kaspersky, AdaptixC2 is a post‑exploitation framework unveiled through a supply‑chain attack in the npm ecosystem, distributed via a malicious package masquerading as a proxy utility. The package, named https-proxy-utils, was crafted to deceive…
gbhackers.com -
CISA Warns of Oracle E-Business Suite SSRF Vulnerability Actively Exploited in Attacks
According to CISA, a critical Oracle E-Business Suite vulnerability has been added to its Known Exploited Vulnerabilities catalog after active exploitation was detected in the wild. The flaw, CVE-2025-61884, targets the Runtime component of Oracle…
gbhackers.com -
Pakistani Cyber Actors Impersonating ‘NIC eEmail Services’ to Target Indian Government
Pakistan-based advanced persistent threat group APT36, also known as TransparentTribe, is actively targeting Indian government entities with a sophisticated spear-phishing campaign dressed as NIC eEmail Services. The operation relies on lookalike domains and…
gbhackers.comOperation C-Major -
CISA Warns of Actively Exploited Windows SMB Vulnerability
According to CISA’s advisory, the Cybersecurity and Infrastructure Security Agency has added a critical Microsoft Windows Server Message Block (SMB) vulnerability to its Known Exploited Vulnerabilities catalog, with threat actors actively exploiting the flaw…
gbhackers.com -
Over 71,000 WatchGuard Devices Exposed to Remote Code Execution Attacks
Security researchers have warned that over 71,000 WatchGuard Fireware OS devices were exposed to remote code execution attacks, with the vulnerability tracked as CVE-2025-9242 and described as an Out-of-Bounds Write in the IKEv2 ISAKMP component. According…
gbhackers.com -
Microsoft Windows Cloud Minifilter Flaw Enables Privilege Escalation
A critical security vulnerability in Microsoft Windows Cloud Minifilter has been patched, addressing a race condition that allowed attackers to escalate privileges and create files anywhere on the system. The vulnerability, tracked as CVE-2025-55680, was…
gbhackers.com -
Urgent Patch: Critical Lanscope Endpoint Manager RCE (CVE-2025-61932, CVSS 9.8) Under Active Exploitation
According to JPCERT/CC, Lanscope Endpoint Manager (On-Premises) provided by MOTEX Inc. contains a vulnerability that leads to arbitrary code execution due to improper verification of source of a communication channel (CWE-940). The flaw, tracked as…
SecurityOnline -
Critical TP-Link Omada Gateway Flaw (CVE-2025-6542, CVSS 9.3) Allows Unauthenticated Remote Command Execution
TP-Link has issued a firmware update to address four high- and critical-severity vulnerabilities in its Omada gateway line, including CVE-2025-6542 (CVSS 9.3) which enables remote unauthenticated attackers to execute arbitrary OS commands. According to…
SecurityOnline -
Finally: Apple Allows You to Disable the Annoying Camera Swipe Gesture
On 21 October 2025, Daily CyberSecurity reports that Apple is introducing a toggle to disable the long-standing swipe-to-open Camera gesture on iPhone, addressing users who dislike accidental activations. In iOS 26.1 Beta 4, the new option appears in…
SecurityOnline -
CVE-2025-55315: Critical 9.9/10 Flaw in ASP.NET Core Enables Unauthenticated Attack
CVE-2025-55315 is described as a critical 9.9/10 flaw in ASP[.]NET Core that enables unauthenticated attackers to smuggle secondary HTTP requests within the original one, primarily affecting the Kestrel web server. The article notes that exploitation could…
SecurityOnline -
Emergency Fix: Microsoft Rushes Patch for Critical Windows Recovery Bug
On 21 October 2025, it was reported that the cumulative update KB5066835 for Windows 11 versions 24H2 and 25H2 introduced a bug that affected keyboards and mice in the Windows Recovery Environment (WinRE), leaving users unable to access recovery options.…
SecurityOnline -
7-Zip Flaw (CVE-2025-11001) with Public Exploit Code Threatens Unpatched Systems
According to Daily CyberSecurity, researchers disclosed a path-traversal vulnerability in 7-Zip (CVE-2025-11001) that can be triggered when a vulnerable 7-Zip client opens malicious archives, potentially enabling remote code execution. The defect was…
SecurityOnline -
Light Switch: New PowerToys Feature Causes Chaos in Windows 11
In the latest PowerToys release, Microsoft’s open‑source utility suite, a new feature called Light Switch allows users to automatically toggle between Windows 11’s light and dark themes, such as enabling dark mode at a user-defined time. The feature fills a…
SecurityOnline -
Critical Fix: Microsoft Rushes Patch for Windows 11 Localhost Bug
Last week, Microsoft’s latest Windows 11 cumulative update inadvertently broke localhost authentication, hindering developers from debugging via localhost or 127.0.0[.]1. The issue affected Windows 11 versions 24H2 and 25H2, and the emergency update released…
SecurityOnline -
Warning: Xubuntu Website Compromised to Deliver Malware
The official Xubuntu website appears to have been compromised, with the site’s official torrent download replaced by a ZIP archive containing a malicious Windows executable (EXE) designed to lure users into running it. A VirusTotal scan revealed that the…
SecurityOnline -
Tor Browser Ditches AI: Why Privacy Trumps Convenience
Tor Browser v15.0a4 has been released, with the most significant change the removal of Mozilla Firefox’s built-in artificial intelligence and machine learning components. Built on Mozilla Firefox’s open‑source foundation, the Tor Browser has long undergone…
SecurityOnline -
Critical Windows Update KB5066835 Breaks Keyboards in Recovery Mode
Critical Windows Update KB5066835 for Windows 11 version 25H2 has been shown to disable input in Windows Recovery Environment (WinRE), leaving users unable to use USB keyboards or mice to navigate recovery options. According to Microsoft’s Health Dashboard…
SecurityOnline -
The BitLocker Trap: How Automatic Encryption Can Cause Catastrophic Data Loss
The BitLocker Trap reports that the Microsoft BitLocker disk encryption mechanism uses a mix of software and hardware-level protection, with automatic encryption sometimes kicking in and risking catastrophic data loss if recovery keys become inaccessible.…
SecurityOnline -
The Great Blackout: AWS Outage Cripples Half the Internet
The Great Blackout: AWS Outage Cripples Half the Internet reports that AWS suffered a major outage on Monday morning, 20 October 2025 (Eastern Time), with the disruption concentrated in US-EAST-1 (Northern Virginia) and described as leaving “half the…
SecurityOnline -
X (Twitter) Fights Link Frustration with a Feature Designed to Boost Engagement
X—formerly known as Twitter—has announced an experimental feature that changes how links open within posts, rolling out first to iOS users. According to Nikita Bier, Head of Product at X, the design lets the web page open while the original post remains…
SecurityOnline -
The Siri Crisis: Internal Testing Reveals Disappointing Performance for Apple’s Next AI
According to Bloomberg journalist Mark Gurman in his Power On newsletter, Apple’s internal engineers have voiced concerns over the performance of the forthcoming next-generation Siri, slated to debut alongside iOS 26.4 in early 2026. With roughly six months…
SecurityOnline
