News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Fri 24 Oct 2025· 62 articles
-
Top 10 Best Breach And Attack Simulation (BAS) Vendors in 2025
GBHackers’ top 10 list for 2025 highlights Breach and Attack Simulation (BAS) platforms as essential for proactive security validation, noting that BAS enables continuous, automated testing across endpoints, networks, cloud environments and applications. The…
gbhackers.com -
Cloud Discovery With AzureHound
AzureHound is a data collection tool that's part of the BloodHound suite, designed for enumerating an Entra ID and Azure environment to map potential attack paths. The Unit 42 article notes that threat actors misuse AzureHound to automate discovery in cloud…
unit42.paloaltonetworks.com -
Top 10 Best Digital Forensics And Incident Response (DFIR) Firms in 2025
The article surveys the top players in digital forensics and incident response for 2025, highlighting a range of firms that cover cloud, OT/ICS, and traditional IT environments. It names ten notable DFIR firms: Secureworks, Unit 42 by Palo Alto Networks,…
gbhackers.com -
Microsoft Issues Emergency Patch for Critical Windows Server Bug
Microsoft has issued a second, out-of-band update to comprehensively address CVE-2025-59287, a remote code execution flaw in Windows Server Update Services (WSUS) that is under attack in the wild. The vulnerability, which carries a 9.8 CVSS score, allows…
Dark Reading -
Top 10 Best Cyber Threat Intelligence Companies in 2025
The article presents a Top 10 list of cyber threat intelligence companies for 2025, naming Recorded Future, Mandiant, ThreatConnect, Anomali ThreatStream, Palo Alto Networks (Unit 42), CrowdStrike Falcon, Cyble, Flashpoint, IBM X-Force Exchange and…
gbhackers.com -
U.S. CISA adds Microsoft WSUS, and Adobe Commerce and Magento Open Source flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft WSUS and Adobe Commerce and Magento Open Source flaws to its Known Exploited Vulnerabilities catalog. The two vulnerabilities named are CVE-2025-54236, an Adobe Commerce and Magento…
Security Affairs -
Smishing Triad Linked to 194,000 Malicious Domains in Global Phishing Operation
The Hacker News reports that the threat actors behind a large-scale smishing campaign have been attributed to more than 194,000 malicious domains since 1 January 2024, targeting services worldwide, according to Palo Alto Networks Unit 42. The campaigns are…
The Hacker NewsSmishing Triad -
Two U.K. teenagers appear in court over Transport of London cyber attack
Two U.K. teenagers have appeared in court facing computer hacking charges in connection with last year’s cyberattack on Transport for London (TfL). Thalha Jubair, 19, from east London, and Owen Flowers, 18, from Walsall in the West Midlands, were charged…
DataBreaches -
Top 10 Best Security Operations Center (SOC) as a Service Providers in 2025
In 2025, organisations are increasingly turning to Security Operations Center as a Service (SOCaaS) to gain around-the-clock monitoring, threat detection and incident response, without the overhead of an in-house SOC, according to GBHackers on Security. The…
gbhackers.com -
Microsoft Issues Emergency Patch for Actively Exploited Critical WSUS Vulnerability
Microsoft issued out-of-band security updates on 23 October 2025 to patch a critical WSUS vulnerability that now faces active exploitation, with a proof-of-concept exploit publicly available. The flaw, CVE-2025-59287, is a remote code execution weakness in…
The Hacker News -
Shutdown Sparks 85% Increase in US Government Cyberattacks
According to The Media Trust, the US government shutdown has coincided with a surge in cyberattacks, with researchers projecting more than 555 million attacks by the end of October, an 85% rise on September. The report notes that these are not cheap phishing…
Dark Reading -
Critical Windows Server WSUS Vulnerability Exploited in the Wild
According to Microsoft, out-of-band updates were released to patch a critical WSUS remote code execution vulnerability, with exploitation observed just hours after the fixes were made available. The flaw, CVE-2025-59287, affects the Windows Server Update…
SecurityWeek -
This browser claims “perfect privacies protection,” but it acts like malware
The Universe Browser is promoting itself as the “fastest browser” and a shield against privacy leaks, but researchers say it behaves like malware. According to Infoblox and the United Nations Office on Drugs and Crime (UNODC), the browser routes all Internet…
Ars Technica -
APT36 Targets Indian Government with Golang-Based DeskRAT Malware Campaign
APT36, a Pakistan-nexus threat actor also known as Transparent Tribe, has been observed targeting Indian government entities as part of spear-phishing campaigns delivering a Golang-based DeskRAT malware, according to The Hacker News. The activity, observed…
The Hacker NewsOperation C-Major -
Hackers Target Perplexity Comet Browser Users
Shortly after Perplexity launched its Comet AI browser, threat actors began luring users to fraudulent domains and fake applications, according to SecurityWeek. Launched in July, Comet is a Chromium-based browser that integrates Perplexity’s AI assistant,…
SecurityWeek -
Arsen Launches Smishing Simulation to Help Companies Defend Against Mobile Phishing Threats
Arsen has launched a Smishing Simulation module to help organisations defend against mobile phishing, unveiling the tool on 24 October 2025 in Paris, France, where the release is attributed to CyberNewsWire. The new feature lets security teams run realistic,…
gbhackers.com -
Is AI moving faster than its safety net?
Is AI moving faster than its safety net? 24 October 2025 by Pieter Arntz argues that artificial intelligence is becoming embedded everywhere, but security and privacy struggles are growing alongside it as safeguards lag behind. The piece notes that the speed…
Malwarebytes -
Amazon Reveals Technical Fault Behind Widescale AWS Service Outage
Amazon Web Services experienced a major outage that affected millions of customers and Amazon’s own operations on 19 and 20 October 2025, with the company later confirming a DNS resolution issue at regional DynamoDB endpoints as the root cause. According to…
gbhackers.com -
LockBit 5.0 Targets Windows, Linux, and ESXi Systems in Ongoing Attacks
LockBit 5.0 now targets Windows, Linux and ESXi environments, expanding the threat landscape to hybrid and virtualised infrastructures, with researchers noting a high activity level in September 2025. In that month, a dozen organisations were identified as…
gbhackers.com -
North Korean Hackers Aim at European Drone Companies
North Korean state-sponsored group Lazarus, also tracked as Diamond Sleet, Hidden Cobra, and Zinc, is aiming at European companies tied to the unmanned aerial vehicle sector in new attacks under Operation Dream Job, according to ESET. The campaigns rely on…
SecurityWeek -
Telegram Messenger Abused by Android Malware to Seize Full Device Control
According to Doctor Web, security researchers uncovered a sophisticated Android backdoor disguised as Telegram X that grants cybercriminals full control over victims’ accounts and devices. Identified as Android.Backdoor.Baohuo.1[.]origin, the malware has…
gbhackers.com -
Arsen Launches Smishing Simulation to Help Companies Defend Against Mobile Phishing Threats
According to CyberNewsWire, Arsen has launched its Smishing Simulation module to help organisations defend against mobile phishing threats, unveiling the feature in Paris, France on 24 October 2025. The tool is designed to let companies run realistic,…
SecurityOnline -
Securing agentic commerce: helping AI Agents transact with Visa and Mastercard
The article, published on 24 October 2025, explains that Cloudflare is partnering with Visa and Mastercard to secure automated commerce as AI agents search, compare, and purchase on behalf of consumers. According to Visa and Mastercard, Visa developed the…
Cloudflare -
ModMed revealed they were victims of a cyberattack in July. Then some data showed up for sale.
ModMed revealed they were victims of a cyberattack in July, with the incident traced to July 29 when unauthorized activity was detected on some of its computer servers. The data on those servers, drawn from podiatry clients, were accessed and exfiltrated…
DataBreaches -
In Other News: iOS 26 Deletes Spyware Evidence, Shadow Escape Attack, Cyber Exec Sold Secrets to Russia
According to iVerify, Apple’s iOS 26 is overwriting the shutdown[.]log file on every device reboot, removing potential evidence of Pegasus and Predator spyware infections. The security note also highlights Shadow Escape, a stealthy zero-click attack that…
SecurityWeek -
Vault Viper Exploits Online Gambling Websites Using Custom Browser to Install Malicious Program
Vault Viper has been found exploiting online gambling websites to install a malicious custom browser, the Universe Browser, which is distributed as a privacy-friendly tool but contains background programs enabling remote access and surveillance. The threat…
gbhackers.com -
Toys “R” Us Canada customers notified of breach of personal information
Toys “R” Us Canada has notified customers of a data breach it says may have compromised their personal information, in an email sent to shoppers on Thursday morning. The retailer says it learned on 30 July that someone had posted information it claimed to…
DataBreaches -
Gatineau gymnastics centre warns members of possible data breach
According to CBC, thousands of members of a Gatineau gymnastics centre may have had their personal and financial data stolen after a possible computer breach. Some 21,000 members of Unigym Gatineau learned about the Oct‑6 breach in an email from the club on…
DataBreaches -
Data breach in 42 Latvian municipalities: DVI imposes 300,000 euro fine on ZZ Dats
According to LETA, the Data State Inspectorate (DVI) has imposed a 300,000 euro fine on SIA “ZZ Dats” in connection with last year’s municipal data breach, affecting 42 Latvian municipalities; the company has appealed the decision in court. The inspectorate…
DataBreaches -
Confidence in ransomware recovery is high but actual success rates remain low
A new study from OpenText of nearly 1,800 global IT and security leaders shows a false sense of confidence in ransomware readiness, with 95 percent saying they’re confident in their ransomware recovery, yet only 15 percent of those attacked have fully…
DataBreaches -
Google Warns of Cybercriminals Using Fake Job Postings to Spread Malware and Steal Credentials
According to Google’s Threat Intelligence Group (GTIG), a sophisticated social engineering campaign is being run by financially motivated threat actors based in Vietnam, aimed at compromising corporate advertising accounts and stealing credentials for resale…
gbhackers.com -
Summoning Team won Master of Pwn as Pwn2Own Ireland Rewards $1,024,750
The Pwn2Own Ireland 2025 event wrapped up with the Summoning Team taking home the Master of Pwn title and a total prize of $1,024,750 for 73 unique zero-days. The contest highlighted exploits across eight categories, including flagship devices such as the…
Security Affairs -
New PDF Tool Detects Malicious Files Using PDF Object Hashing
A new open-source tool called PDF Object Hashing, released by Proofpoint, helps security teams detect and track malicious files distributed as PDFs. The tool is now available on GitHub and represents a significant advance in identifying suspicious documents…
gbhackers.com -
New RedTiger Tool Targets Gamers and Discord Accounts in the Wild
A dangerous infostealer called RedTiger is circulating in the wild, designed to steal Discord credentials, gaming accounts and sensitive financial information from players worldwide. The malware has multiple variants and researchers say attackers are…
gbhackers.com -
Toys ‘R’ Us Canada Customer Information Leaked Online
Toys “R” Us Canada this week notified customers that a threat actor stole their personal information and leaked it on the dark web, after the incident was discovered on July 30 when the data appeared on the unindexed internet. The compromised records include…
SecurityWeek -
IIS Servers Hijacked via Exposed ASP.NET Machine Keys — Malicious Modules Injected in the Wild
Security researchers have uncovered a cyberattack campaign that exploited publicly exposed ASP[.]NET machine keys to compromise hundreds of Internet Information Services (IIS) servers worldwide. The operation, detected in late August and early September…
gbhackers.com -
The Cybersecurity Perception Gap: Why Executives and Practitioners See Risk Differently
The Cybersecurity Perception Gap article discusses how executives and practitioners often see cyber risk differently, creating a notable perception gap that can influence how organisations prioritise resources. Findings from Bitdefender’s 2025 Cybersecurity…
The Hacker News -
3,000 YouTube Videos Exposed as Malware Traps in Massive Ghost Network Operation
A cyber campaign described as the YouTube Ghost Network, named by Check Point, has published more than 3,000 malicious videos on YouTube since 2021, with the volume tripling since the start of the year. The network uses hacked YouTube accounts to replace…
The Hacker News -
Microsoft Disables Downloaded File Previews to Block NTLM Hash Leaks
Microsoft has announced that the preview feature in Windows File Explorer for files downloaded from the internet is now disabled as an additional protection against NTLM hash leaks, a change rolled out with the October 2025 Patch Tuesday security updates.…
SecurityWeek -
North Korean Hackers Target UAV Industry to Steal Confidential Data
ESET researchers have uncovered a sophisticated cyberespionage campaign targeting European defence companies specialising in unmanned aerial vehicle technology. The attacks, attributed to the North Korea-aligned Lazarus group operating under Operation…
gbhackers.com
