News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Wed 22 Oct 2025· 71 articles
-
Deep analysis of the flaw in BetterBank reward logic
From 26 to 27 August 2025, BetterBank, a DeFi protocol operating on the PulseChain network, suffered a sophisticated exploit centred on liquidity manipulation and reward minting, initially draining around $5 million in assets. The attack culminated in a…
securelist.com -
Jingle Thief: Inside a Cloud-Based Gift Card Fraud Campaign
According to Unit 42, the Jingle Thief campaign is led by financially motivated Morocco-based attackers who have operated since 2021 and focus on global retailers’ gift-card issuance systems. The activity is tracked as cluster CL‑CRI‑1032, with overlaps to…
unit42.paloaltonetworks.com -
Verizon: Mobile Blindspot Leads to Needless Data Breaches
Verizon: Mobile Blindspot Leads to Needless Data Breaches reports that enterprise mobile security risk is rising as employees rely more on personal devices for work, yet organisations are slow to adopt protections. According to Verizon Business' 2025 MSI,…
Dark Reading -
September 2025: Record DDoS Attacks, Salesforce Records Theft, $130M Fintech Fraud & Ransomware Disruption at JLR
September 2025 featured a string of record-breaking cyber incidents, including a Cloudflare-mitigated DDoS peak of 22.2 Tbps and a separate 1.5 billion PPS flood aimed at a European mitigation provider, both driven by botnets of IoT devices and MikroTik…
SOCRadar -
Why You Should Swap Passwords for Passphrases
The article argues that longer passphrases trump complex passwords, noting that a traditional 8-character complex password offers roughly 2^18 trillion combinations, which modern GPUs can test in months, and that increasing to 16 characters using only…
The Hacker News -
GitLab Patches High Runner Hijacking Flaw (CVE-2025-11702) and Multiple DoS Vulnerabilities
GitLab released updates for both Community Edition and Enterprise Edition—versions 18.5.1, 18.4.3, and 18.3.5—to fix multiple vulnerabilities, including a high-severity flaw that could let an authenticated user hijack project runners from other projects…
SecurityOnline -
Researchers Identify PassiveNeuron APT Using Neursite and NeuralExecutor Malware
According to Kaspersky, government, financial, and industrial organisations in Asia, Africa and Latin America are the targets of a campaign dubbed PassiveNeuron, using Neursite and NeuralExecutor implants. The activity was first flagged by Kaspersky in…
The Hacker News -
Vidar Stealer Exploits: Direct Memory Attacks Used to Capture Browser Credentials
On 6 October 2025, the cybercriminal developer known as Loadbaks announced the release of Vidar Stealer 2.0 on underground forums, introducing a sophisticated information-stealing malware that uses direct memory injection to bypass modern browser…
gbhackers.com -
Hackers Earn Over $520,000 on First Day of Pwn2Own Ireland 2025
On the first day of the Pwn2Own Ireland 2025 hacking contest, participants earned a total of $522,500 for exploits demonstrated against printers, NAS devices, routers and smart home products. A total of 34 previously unknown vulnerabilities were exploited.…
SecurityWeek -
TARmageddon Flaw in Async-Tar Rust Library Could Enable Remote Code Execution
Cybersecurity researchers have disclosed a high-severity flaw in the async-tar Rust library and its forks, including tokio-tar, that could allow remote code execution under certain conditions, tracked as CVE-2025-62518 (CVSS 8.1) and codenamed TARmageddon by…
The Hacker News -
Millions of Credentials Stolen Each Day by Stealer Malware
The article reports that the cybercrime ecosystem around stealer malware processes millions of stolen credentials daily through sophisticated distribution networks. It notes that Telegram emerged as the primary data driver within the stealer ecosystem,…
gbhackers.com -
New Rust Malware “ChaosBot” Hides Command-and-Control Inside Discord
A new Rust-based malware dubbed ChaosBot has been exposed for using Discord as its command-and-control channel, making detection harder for traditional security tools. According to GBHackers On Security, ChaosBot validates its credentials with the Discord…
gbhackers.com -
Callisto2 articles this day · SecurityOnline first
Russia-linked COLDRIVER speeds up malware evolution after LOSTKEYS exposure · COLDRIVER APT Bounces Back: Deploys ‘ROBOT’ Malware Family Days After LOSTKEYS Exposure
2 outlets-
Russia-linked COLDRIVER speeds up malware evolution after LOSTKEYS exposure
The article reports that the Russia-linked APT COLDRIVER has rapidly upgraded its malware since May 2025, following exposure of its LOSTKEYS variant. According to Google Threat Intelligence Group, the group has been rolling out frequent updates, refining…
Security Affairs -
COLDRIVER APT Bounces Back: Deploys ‘ROBOT’ Malware Family Days After LOSTKEYS Exposure
COLDRIVER APT, a Russian state‑sponsored group also tracked as UNC4057, Star Blizzard and Callisto, has reportedly bounces back with a new ROBOT malware family just days after LOSTKEYS exposure. Within five days of the public disclosure of LOSTKEYS in May…
SecurityOnline
-
-
New Salt Typhoon Attacks Leverage Zero-Days and DLL Sideloading
Salt Typhoon is described as one of the most persistent and sophisticated cyber threats targeting global critical infrastructure, with activity spanning telecommunications providers, energy networks and government systems, including across the United States.…
gbhackers.comGhostEmperor -
Hackers Exploit OAuth Apps to Keep Cloud Access Even After Password Resets
Cloud account takeover attacks are now leveraging malicious OAuth applications to retain access even after password resets, bypassing MFA and other traditional controls, according to Proofpoint researchers. The attackers register and configure internal,…
gbhackers.com -
TP-Link Patches Four Omada Gateway Flaws, Two Allow Remote Code Execution
According to The Hacker News, TP-Link has released security updates for four Omada gateway flaws, two of which could allow remote code execution. The disclosed vulnerabilities include CVE-2025-6541 (CVSS 8.6), CVE-2025-6542 (CVSS 9.3), CVE-2025-7850 (CVSS…
The Hacker News -
Spy vs. Spy: Mercenary Spyware Targets the Developers Who Build It
Developers of Mercenary spyware say they were targeted themselves, with developer Jay Gibson recounting how Apple notified him his iPhone had been the target of a state‑sponsored spyware operation. Gibson, who specialises in discovering zero‑day…
SecurityOnline -
Google & Samsung Launch Galaxy XR: The $1,800 AI Headset to Battle Vision Pro
Google has officially confirmed the Galaxy XR, an Android extended reality headset developed with Samsung and Qualcomm under the codename Project Moohan, and it is now available in the United States and South Korea for $1,800 USD. The device is powered by a…
SecurityOnline -
X (Twitter) Ditches Fixed Fees for a New Pay-Per-Tweet API Model
X has announced a move away from fixed-fee API plans towards a pay-per-tweet model, with usage-based charges calculated by the number of tweets read, tweets posted and other API actions. The previous pricing saw a Basic API at $100 per month (later $200) and…
SecurityOnline -
Critical Windows Update Bug Breaks Kerberos and NTLM Authentication
According to a support bulletin released by Microsoft, updates to Windows 11 24H2/25H2 and Windows Server 2025 issued after 29 August 2025 may disrupt the operating system’s authentication mechanisms, specifically Kerberos and NTLM. The article explains that…
SecurityOnline -
The Browser War Heats Up: OpenAI Unveils AI-Powered ChatGPT Atlas
OpenAI has unveiled its AI-powered web browser, ChatGPT Atlas, in a move aimed at challenging Google’s reign as the primary gateway to online information. According to OpenAI’s roadmap, ChatGPT Atlas will debut first on macOS, with rapid expansion planned…
SecurityOnline -
Chrome Update: New High-Severity Flaw in V8 Engine (CVE-2025-12036) Requires Immediate Patch
Chrome Update: New High-Severity Flaw in V8 Engine (CVE-2025-12036) Requires Immediate Patch reports that Google has released a Stable Channel update (version 141.0.7390.122/.123) for Windows, Mac and Linux to address a high-severity vulnerability in the V8…
SecurityOnline -
Google Exposes Russian Disinformation Blitz Over Poland Airspace Incursion Using Portal Kombat Network
Google’s Threat Intelligence Group (GTIG) has uncovered multiple coordinated pro-Russia information operations exploiting the September 9–10, 2025 drone incursion into Polish airspace, according to Google. These campaigns—run by networks such as Portal…
SecurityOnline -
Critical Sauter AG Flaw (CVE-2025-41723, CVSS 9.8) Allows Unauthenticated File Upload via SOAP Interface
Swiss building automation manufacturer Sauter AG disclosed six vulnerabilities in the embedded firmware of its modulo 6 devices, with CVE-2025-41723 (CVSS 9.8) described as critical and allowing unauthenticated file uploads via the importFile SOAP method.…
SecurityOnline -
PassiveNeuron Cyberespionage Resurfaces: APT Abuses MS SQL Servers to Deploy Stealthy Neursite Backdoor
Kaspersky researchers have uncovered new details about PassiveNeuron, a long-running cyberespionage campaign targeting government, financial, and industrial organisations across Asia, Africa, and Latin America, which has re-emerged after a six-month dormancy…
SecurityOnline -
Scattered LAPSUS$ Hunters Pivot to EaaS, Launch Insider Recruitment Campaign After Salesforce Extortion
Researchers at Palo Alto Networks’ Unit 42 have observed a surge in activity from Scattered LAPSUS$ Hunters, a cybercrime group linked to the Bling Libra syndicate, signalling a strategic pivot toward extortion-as-a-service operations and renewed insider…
SecurityOnlineScattered Lapsus Hunters -
Critical ABB Flaw (CVE-2025-9574, CVSS 9.9) Exposes EoL Load Controllers to Unauthenticated Admin Access
ABB has disclosed a critical vulnerability, CVE-2025-9574, with a CVSS of 9.9, affecting its ALS-mini-S4/S8 IP intelligent load controllers used in energy management and load optimisation systems. The flaw allows unauthenticated remote attackers to access…
SecurityOnline -
Bitter APT Attacks China/Pakistan with WinRAR Zero-Day and New C# Backdoor via Office Macro
China-based cybersecurity firm Qianxin Threat Intelligence Center has uncovered a new wave of Bitter APT operations (APT-Q-37), targeting government, military, and electric power entities in China and Pakistan, among others, with a WinRAR zero-day and a new…
SecurityOnlineHAZY TIGER -
Researcher Demonstrates Local Privilege Escalation in Legacy Windows Modem Driver Exploited in the Wild
A researcher has demonstrated a local privilege escalation in a legacy Windows modem driver, highlighted by the article title as being exploited in the wild. The vulnerability concerns the Agere Modem Driver and is associated with CVE-2025-24990, described…
SecurityOnline -
WSO2 Fixes Two Critical Access Control Vulnerabilities (CVE-2025-9804, CVE-2025-10611) Affecting API Manager and Identity Server
WSO2 has released security advisories for two critical access control flaws, CVE-2025-9804 and CVE-2025-10611, that affect multiple enterprise products, including API Manager and Identity Server. CVE-2025-9804 has a CVSS score of 9.6 (Critical) and stems…
SecurityOnline
