News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Fri 24 Oct 2025· 62 articles
-
Phishing Campaign Uses Unique UUIDs to Evade Secure Email Gateways
A sophisticated new phishing campaign discovered in early February 2025 is bypassing Secure Email Gateways and perimeter defenses through a mix of random domain selection, dynamic UUID generation, and browser session manipulation, according to Cofense…
gbhackers.com -
Ransomware Actors Targeting Global Public Sectors and Critical Infrastructure
According to Trustwave’s SpiderLabs research team, nearly 200 public sector organisations have been struck with ransomware in 2025, with Babuk and Qilin emerging as the most prolific threat groups driving attacks on critical infrastructure and government…
gbhackers.com -
China-linked hackers exploit patched ToolShell flaw to breach Middle East telecom
China-based threat actors exploited the ToolShell SharePoint flaw CVE-2025-53770 soon after Microsoft patched it in July 2025 to breach a Middle East telecoms organisation, according to Broadcom’s Symantec Threat Hunter Team. The attackers, linked to…
Security Affairs -
Microsoft Releases Urgent Fix for Windows Server Update Services RCE FLaw
Microsoft has released a critical security patch to address a severe remote code execution vulnerability affecting Windows Server Update Services (WSUS). The flaw is tracked as CVE-2025-59287 and is described as a network-based vulnerability that can be…
gbhackers.com -
Pwn2Own WhatsApp Hacker Says Exploit Privately Reported to Meta
According to SecurityWeek, at Pwn2Own Ireland 2025 the highest WoC reward was for a WhatsApp entry that would have demonstrated a $1 million zero-click remote code execution exploit, but the demonstration was withdrawn. A total of $1,024,750 was paid out…
SecurityWeek -
Toys “R” Us Canada Data Breach Exposes Customer Personal Information
Toys “R” Us Canada has alerted its customers to a data breach that may have exposed personal information, and the company says it notified affected customers on Thursday morning. According to the notification, the breach was discovered after learning on July…
gbhackers.com -
Malicious NuGet Packages Pose as Nethereum, Steal Crypto Wallet Keys
A recent GBHackers on Security report reveals a sophisticated supply-chain attack against the NuGet registry, where malicious packages impersonate the Nethereum library through a homoglyph typosquat named Netherеum[.]All. The package, first published on 16…
gbhackers.com -
Microsoft Boosts Windows Security by Disabling File Previews for Downloads
Microsoft has enhanced Windows security by disabling the preview pane for downloaded files in File Explorer, effective from October 14, 2025. This update addresses a vulnerability that allowed attackers to exploit HTML elements in files to harvest NTLM…
gbhackers.com -
Self-Spreading 'GlassWorm' Infects VS Code Extensions in Widespread Supply Chain Attack
A self-propagating worm, codenamed GlassWorm, is spreading via Visual Studio Code extensions on the Open VSX Registry and the Microsoft Extension Marketplace, researchers report. The campaign uses the Solana blockchain for command-and-control and a Google…
The Hacker News -
YouTube Ghost Malware Campaign: Over 3,000 Infected Videos Target Users
Check Point Research has uncovered a massive malware distribution operation called the YouTube Ghost Network, featuring over 3,000 malicious videos designed to infect users with information-stealing malware. The network has been operating since at least…
gbhackers.com -
Hackers Exploit Galaxy S25 0-Day to Turn On Camera and Track Users
A critical zero-day vulnerability in Samsung’s Galaxy S25 was exploited at Pwn2Own Ireland 2025, allowing attackers to silently turn on the device’s camera and track a user’s real-time location via GPS data, according to Zero Day Initiative. Security…
gbhackers.com -
Hackers Steal Microsoft Teams Chats & Emails by Grabbing Access Tokens
According to GBHackers On Security, security researchers have uncovered a sophisticated method enabling attackers to steal authentication tokens from Microsoft Teams, potentially granting access to chats, emails, and SharePoint documents. The tokens act as…
gbhackers.com -
New Phishing Wave Uses OAuth Prompts to Take Over Microsoft Accounts
A new phishing campaign is targeting Microsoft account holders by using a clever twist on OAuth authentication prompts. Instead of asking users to hand over their passwords directly, attackers are tricking people into granting permission to malicious…
gbhackers.com -
Linux RATs on Windows: Ransomware Actors Target VMware Deployments
The article discusses a sophisticated ransomware attack by the Agenda group, which targets VMware deployments by deploying Linux ransomware variants on Windows systems. The attack utilizes WinSCP for file transfer and Splashtop Remote management software to…
gbhackers.com -
AI Sidebar Spoofing Attack: SquareX Uncovers Malicious Extensions that Impersonate AI Browser Sidebars
SquareX has released research detailing a new class of attack called the AI Sidebar Spoofing attack, which uses malicious browser extensions to impersonate trusted AI sidebar interfaces. The findings, published on 24 October 2025, describe how attackers…
gbhackers.com -
US Crypto Bust Offers Hope in Battle Against Cybercrime Syndicates
A massive US seizure of cryptocurrency linked to a Southeast Asia cybercrime syndicate has been described as a meaningful signal in the fight against cyber-enabled fraud and human trafficking. On 14 October, the US Department of Justice, with the Drug…
Dark Reading -
Jingle Thief Cybercrime Gang Steals Hundreds of Thousands in Gift Card Fraud via Microsoft 365 Identity Abuse
The article, authored by Ddos on 24 October 2025, headlines the Jingle Thief cybercrime gang and its alleged scheme. It states that the group stole hundreds of thousands in gift card fraud, carried out through Microsoft 365 identity abuse. The piece…
SecurityOnline -
Warlock Ransomware Hits US Firms Exploiting SharePoint Zero-Day, Linked to China’s CamoFei APT
Researchers from Symantec and Carbon Black have published a detailed analysis of Warlock ransomware, describing it as a newly emerging threat that debuted in June 2025 and was used to exploit the ToolShell zero-day vulnerability in Microsoft SharePoint…
SecurityOnlineStorm-2603 -
PhantomCaptcha Spyware Targets Ukraine NGOs with Fake Cloudflare Lure to Deploy WebSocket RAT
Researchers from SentinelLABS and Ukraine's Digital Security Lab uncovered a spearphishing campaign named "PhantomCaptcha" targeting humanitarian organizations in Ukraine, including the International Red Cross and UNICEF. The campaign utilized fake Cloudflare…
SecurityOnline -
Pakistan-Linked TransparentTribe APT Deploys AI-Assisted DeskRAT Malware Against India’s BOSS Linux Systems
According to Sekoia, the Pakistan-linked TransparentTribe APT has shifted its Linux targeting to Bharat Operating System Solutions (BOSS) distributions used by Indian government interests, with activity happening between August and September 2025. The…
SecurityOnline -
GM Bets on AI: Gemini to Replace CarPlay/Android Auto in All Cars by 2026
At its recent “GM Forward” media event, General Motors announced a major shift in its software strategy, revealing plans to deeply integrate Google’s Gemini platform into its cars, trucks and SUVs from 2026. According to GM, the Gemini-powered assistant will…
SecurityOnline -
Curbing the Scroll: YouTube Shorts Adds Timer to Fight Digital Addiction
YouTube has introduced a timer feature for Shorts, enabling users to set daily viewing limits and curb mindless scrolling, with a reminder pop-up appearing once the limit is reached. According to TechCrunch, the feature has begun rolling out to all users…
SecurityOnline
