News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Mon 27 Oct 2025· 75 articles
-
'Jingle Thief' Highlights Retail Cyber Threats
A Morocco-based gift card fraud campaign called “Jingle Thief” highlights the kind of threats retailers may face this holiday season, researchers say, with the operation primarily targeting global retailers and consumer services that rely on cloud…
Dark Reading -
Memento Labs, the ghost of Hacking Team, has returned — or maybe it was never gone at all.
Memento Labs, the group framed as the ghost of Hacking Team, is described as returning, or perhaps never having gone away, with connections drawn to its commercial spyware “Dante” and its attribution to former Hacking Team tooling. According to Kaspersky,…
Security AffairsMemento Labs -
Another plastic surgery practice fell prey to a cyberattack that acquired patient photos and info
On 23 October 2025, Michael R. Schwartz, MD, FACS, notified the California Attorney General’s Office that, on 25 August, they became aware of remote, unauthorized access to one of their computers. Investigators found that an unauthorized party had accessed…
DataBreaches -
Memento Spyware Tied to Chrome Zero-Day Attacks
A zero-day vulnerability in Google’s Chrome browser, CVE-2025-2783, was exploited earlier this year using commercial spyware from Memento Labs, the successor to Hacking Team. Google patched the flaw after researchers at Kaspersky Lab reported it, and the…
Dark Reading -
Microsoft WSUS Remote Code Execution (CVE-2025-59287) Actively Exploited in the Wild
According to Unit 42, Microsoft’s Windows Server Update Services (WSUS) suffered a critical Remote Code Execution vulnerability, CVE-2025-59287, with a CVSS of 9.8. On 14 October 2025, the flaw was identified as unauthenticated and remotely exploitable, and…
unit42.paloaltonetworks.com -
CISOs Finally Get a Seat at the Board's Table — But There's a Catch
According to Diana Kelley, CISO, Noma Security, CISOs are now gaining a seat at the board table as AI’s explosive growth lifts cybersecurity to become a top board agenda item, with scrutiny extending from CEOs to junior product managers about AI risk. The…
Dark Reading -
nsKnox Launches Adaptive Payment Security™, Revolutionizing B2B Fraud Prevention by Solving the ‘Impossible Triangle’ of Speed, Certainty, and Effor
nsKnox has launched Adaptive Payment Security, an enhancement to its PaymentKnox platform aimed at eliminating B2B payment fraud by delivering the fastest possible bank account validation with the option to achieve irrefutable certainty on demand, according…
gbhackers.com -
X Warns Users With Security Keys to Re-Enroll Before November 10 to Avoid Lockouts
X has urged users who have enrolled for two-factor authentication with passkeys or hardware security keys, such as Yubikeys, to re-enrol their key by 10 November 2025 to avoid lockouts. After that date, the company says, if you haven’t re-enrolled a security…
The Hacker News -
Qilin Targets Windows Hosts With Linux-Based Ransomware
The Qilin ransomware group has launched attacks on Windows hosts using a Linux-based binary, employing a cross-platform strategy that evades traditional Windows security measures. Identified by Trend Micro, Qilin utilizes legitimate remote management tools…
Dark Reading -
Chainguard Raises $280 Million in Growth Funding
Chainguard announced last week that it has raised $280 million in a growth funding round from General Catalyst’s Customer Value Fund (CVF), according to SecurityWeek. The Kirkland, Washington-based company provides secure-by-default container images and…
SecurityWeek -
How to set up two factor authentication (2FA) on your Instagram account
According to Malwarebytes, two-factor authentication (2FA) is a strong extra layer of defence for Instagram accounts, with options including text message (SMS), an authentication app (recommended), or a security key. The guide explains how to enable 2FA…
Malwarebytes -
1inch partners with Innerworks to strengthen DeFi security through AI-Powered threat detection
According to CyberNewsWire, London, United Kingdom, on 27 October 2025, 1inch has adopted Innerworks’ advanced device intelligence and RedTeam ethical hacking platform to strengthen DeFi security. The collaboration taps into Innerworks’ predictive AI…
gbhackers.com -
Crafted URLs can trick OpenAI Atlas into running dangerous commands
OpenAI Atlas, a browser with built‑in ChatGPT, was launched last week to help users summarise pages, edit text inline, and perform agentic tasks, but researchers warn that Atlas’s omnibox can be manipulated by prompt injection through crafted URL‑like…
Security Affairs -
Hackers Target 81% of Routers with Default Admin Passwords
According to Broadband Genie router security survey, 81% of respondents never change their router’s default credentials, a marginal 5% improvement from 2024. The same study finds that 84% have never updated their router firmware, continuing a six-year trend…
gbhackers.com -
New ChatGPT Atlas Browser Exploit Lets Attackers Plant Persistent Hidden Commands
The Hacker News reports a new vulnerability in OpenAI’s ChatGPT Atlas browser that could allow attackers to inject malicious instructions into the AI’s memory and execute arbitrary code. The flaw hinges on a cross-site request forgery (CSRF) vulnerability…
The Hacker News -
Phishing scam uses fake death notices to trick LastPass users
LastPass has alerted users about a new phishing attack that claims the recipient has died, with the message saying a family member submitted a death certificate to gain access to the recipient’s password vault. A link in the phishing email leads to a fake…
Malwarebytes -
1inch partners with Innerworks to strengthen DeFi security through AI-Powered threat detection
According to CyberNewsWire, 1inch has adopted Innerworks’ advanced device intelligence and RedTeam ethical hacking platform to strengthen security for its DeFi ecosystem. London, United Kingdom, 27 October 2025. By tapping into Innerworks’ predictive AI…
SecurityOnline -
Critical Chrome 0-Day Under Attack: Mem3nt0 Mori Hackers Actively Exploiting Vulnerability
In March 2025, security researchers at Kaspersky detected a sophisticated campaign, dubbed Operation ForumTroll, exploiting a previously unknown Chrome vulnerability to deliver advanced spyware to high-profile targets. A single click on a malicious link…
gbhackers.com -
Massive China-Linked Smishing Campaign Leveraged 194,000 Domains
Massive China-Linked Smishing Campaign Leveraged 194,000 Domains, security researchers reveal, with the campaign described as ongoing since April 2024. According to Palo Alto Networks, the operation uses over 194,000 malicious domains since 1 January 2024…
SecurityWeek -
iOS 26 Overwrites ‘shutdown.log’ on Reboot, Erasing Forensic Evidence of Pegasus and Predator Spyware
iOS 26 now overwrites the shutdown[.]log file on every reboot, erasing forensic evidence of Pegasus and Predator spyware infections, a change described as a key forensic challenge for investigators. The article notes that shutdown[.]log, stored within the…
gbhackers.com -
New EDR-Redir Tool Bypasses EDRs by Exploiting Bind Filter and Cloud Filter Driver
Cybersecurity researchers have developed a tool called EDR-Redir that can bypass Endpoint Detection and Response (EDR) systems by exploiting Windows’ Bind Filter and Cloud Filter drivers, a method that operates in user mode without kernel privileges. The…
gbhackers.com -
The tricky science of Internet measurement
Measurement is presented as a scientific practice in this Cloudflare blog, outlining a lifecycle that moves from data curation to modelling and then validation, with the aim of producing predictive insights about Internet performance and resilience. The…
Cloudflare -
⚡ Weekly Recap: WSUS Exploited, LockBit 5.0 Returns, Telegram Backdoor, F5 Breach Widens
The Hacker News’ weekly recap highlights a busy week in which Microsoft released out-of-band patches for CVE-2025-59287, a critical WSUS flaw now under active exploitation that drops a .NET executable and Base64 PowerShell payload on infected hosts. It also…
The Hacker News -
How a hacking gang held Italy’s political elites to ransom
A team of computer engineers in Milan developed a platform called Beyond, which compiled extensive private information on Italy's political elite from state databases, including financial and criminal records. The operation aimed to manipulate these figures,…
DataBreaches -
Uncovering Qilin attack methods exposed through multiple cases
In the second half of 2025, the ransomware group Qilin has been highly active, publishing over 40 victim cases monthly, primarily affecting the manufacturing sector. Some scripts used by the attackers suggest a possible Eastern European or Russian origin.…
DataBreaches -
Predatory Sparrow Strikes: Coordinated Cyberattacks Seek to Cripple Iran’s Critical Infrastructure
Predatory Sparrow is a sophisticated cyber-sabotage group targeting Iranian critical infrastructure, known for executing disruptive campaigns aimed at crippling essential services and destroying sensitive data. Unlike traditional cybercriminals, their…
DataBreachesPredatory Sparrow -
Ex-CISA head thinks AI might fix code so fast we won’t need security teams
Ex-CISA head Jen Easterly warns that AI could significantly impact the cybersecurity industry by quickly identifying vulnerabilities in software that cybercriminals exploit. Speaking at AuditBoard’s conference, she highlighted the evolving threat landscape…
DataBreaches -
On Reports of an Alleged Data Breach Involving G-Xchange, Inc. (GCash)
On October 27, 2025, the National Privacy Commission (NPC) of the Philippines urged the public to be vigilant following reports of a data leak involving G-Xchange, Inc., operator of GCash. A dark web post claimed to sell user information, including merchant…
DataBreaches -
NY: Gloversville hit by ransomware attack, paid ransom
The city of Gloversville experienced a ransomware attack that compromised personal information of current and former employees, including payroll records and account numbers. Discovered in March, the attack was reported to the FBI and other agencies. The…
DataBreaches -
Critical HashiCorp Vault Vulnerabilities Allow Authentication Bypass and DoS Attacks
HashiCorp has disclosed two critical vulnerabilities in Vault and Vault Enterprise that could enable authentication bypass and denial-of-service attacks against infrastructure. According to HashiCorp, the first issue, Bulletin HCSEC-2025-31, stems from a…
gbhackers.com -
How does Cloudflare’s Speed Test really work?
Cloudflare’s Speed Test runs on Cloudflare’s own global network, with the test results generated by the Network Quality API and routed to the nearest data centre using anycast, according to Cloudflare. Instead of saturating a connection, the test sends…
Cloudflare -
Internet measurement, resilience, and transparency: a week of stories from Cloudflare Research and friends
The Cloudflare Research team is wrapping a week of stories around Internet measurement, resilience, and transparency, sharing how they test ideas in real time, collaborate with academia and standards bodies, and publish openly to help improve the Internet.…
Cloudflare -
From .com to .anything: introducing Top-Level Domain (TLD) insights on Cloudflare Radar
Cloudflare Radar has launched a dedicated Top-Level Domain (TLD) insights page, extending its TLD data from scattered datasets to a unified view that highlights popularity, activity, and security for delegated TLDs across its services. The page uses a DNS…
Cloudflare -
Data at Cloudflare scale: some insights on measurement for 1,111 interns
Cloudflare recently announced its goal to hire 1,111 interns in 2026, a figure that equates to about 25% of its full-time workforce and promises opportunities to develop and ship code into production. The piece explains why measuring data at such scale is…
Cloudflare -
Making the Internet observable: the evolution of Cloudflare Radar
Making Cloudflare Radar more visible, the five-year evolution has seen the Radar API, launched in 2022, enable developers to access data and build their own tools, while the platform has added capabilities around AI, routing, and security. According to…
Cloudflare -
Italian Credit Cards, Jazeera Passenger Database, and New Decentralized Botnet Loader
SOCRadar’s Dark Web Team highlighted several underground listings this week, including auctions for Italian credit cards, a Jazeera Airways passenger dump, and a Vidal Health dataset, along with a decentralized botnet loader offering.
SOCRadar -
Dell Storage Manager Vulnerabilities Allow Full System Compromise
Dell Technologies has disclosed three critical vulnerabilities in Dell Storage Manager that could allow unauthenticated remote attackers to fully compromise storage systems. The vulnerabilities affect versions prior to 2020 R1.21, with the most severe,…
gbhackers.com -
New Firefox Extensions Required to Disclose Data Collection Practices
Starting next week, all new Firefox extensions will be required to declare their personal data collection and transmission practices in the manifest file using a specific key, Mozilla announced, to give users greater visibility during installation. The…
SecurityWeek -
ChatGPT’s Atlas Browser Jailbroken to Hide Malicious Prompts Inside URLs
Security researchers have revealed a critical flaw in OpenAI’s Atlas browser that could let attackers bypass safety measures by disguising malicious prompts as innocent-looking URLs. The vulnerability hinges on Atlas’s omnibox, which combines URL entry with…
gbhackers.com -
Year-Old WordPress Plugin Flaws Exploited to Hack Websites
According to Defiant, three critical-severity vulnerabilities in the GutenKit and Hunk Companion WordPress plugins have been exploited in a new campaign. The flaws include CVE-2024-9234 in GutenKit versions prior to 2.1.1, and two issues in Hunk Companion…
SecurityWeek
