News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Tue 28 Oct 2025· 76 articles
-
Bots, Bread and the Battle for the Web
Unit 42 outlines how malicious SEO is being accelerated by AI, turning what was once a niche problem into a multi‑million‑dollar shadow economy. The piece follows a baker named Sarah who faces spammy imitators like BestBreadsNow[.]info that use keyword…
unit42.paloaltonetworks.com -
From Chef to CISO: An Empathy-First Approach to Cybersecurity Leadership
According to Dark Reading, Myke Lyons is the chief information security officer (CISO) at Cribl, a company described as an IT and security data pipeline and telemetry solution. Lyons’ path into cybersecurity is unusual: he started in the culinary world and…
Dark Reading -
YouTube Ghost Network Utilizes Spooky Tactics to Target Users
YouTube Ghost Network uses compromised accounts and bot networks to distribute infostealers, with threat actors targeting users by promising game hacks and cheats. In a Check Point Research investigation, the network was found to promote malicious links…
Dark Reading -
Aisuru botnet is behind record 20Tb/sec DDoS attacks
In October 2025, a new Mirai-based IoT botnet dubbed Aisuru was used to launch multiple high-impact DDoS attacks exceeding 20Tb/sec and 4gpps, with Netscout reporting attacks primarily targeting online gaming. The botnet operates via residential proxies and…
Security Affairs -
Oracle EBS Attack Victims May Be More Numerous Than Expected
Oracle EBS victims may be more numerous than previously thought, with evidence suggesting Schneider Electric, Pan American Silver, and Cox Enterprises could be affected, alongside other organisations attacked via the Oracle EBS zero-day CVE-2025-61882.…
Dark Reading -
Some lower-tier ransomware gangs have formed a new RaaS alliance — or have they?
The piece reports that the Stormous group announced in its fifth edition (V5) a strategic alliance supposedly uniting six RaaS groups, along with their extended networks, affiliated personnel, malware toolkits and operational infrastructure, with aims to…
DataBreaches -
Safaricom-Backed M-TIBA Victim of a Possible Data Breach Affecting Millions of Kenyans
Safaricom-backed M-TIBA has been named by DataBreaches[.]Net as the victim of a possible data breach that could affect millions of Kenyans. According to DataBreaches[.]Net, the alleged breach involves over 2.15 terabytes of information and could expose…
DataBreaches -
New TEE.Fail Side-Channel Attack Extracts Secrets from Intel and AMD DDR5 Secure Enclaves
A group of academic researchers from Georgia Tech, Purdue University and Synkhronix have developed a side-channel attack named TEE[.]Fail that enables the extraction of secrets from the trusted execution environments in Intel and AMD processors, including…
The Hacker News -
Stragglers From Myanmar Scam Center Raided by Army Cross Into Thailand as Buildings are Blown Up
Witnesses on the Thai side of the border reported explosions and smoke from the KK Park centre, which Myanmar’s military government and its Border Guard Force allies have been connected with, over the past several nights. According to Associated Press, the…
SecurityWeek -
New Android Trojan 'Herodotus' Outsmarts Anti-Fraud Systems by Typing Like a Human
According to ThreatFabric, a new Android banking trojan named Herodotus is being used in active campaigns that target Italy and Brazil to conduct device takeover (DTO) attacks. The Dutch security company notes that Herodotus was first advertised in…
The Hacker News -
Lazarus Group2 articles this day · Dark Reading first
Researchers Expose GhostCall and GhostHire: BlueNoroff's New Malware Chains · North Korea's BlueNoroff Expands Scope of Crypto Heists
2 outlets-
Researchers Expose GhostCall and GhostHire: BlueNoroff's New Malware Chains
Researchers Expose GhostCall and GhostHire: BlueNoroff's New Malware Chains details two North Korea–linked campaigns, GhostCall and GhostHire, allegedly part of a broader SnatchCrypto operation. According to Kaspersky, the campaigns are attributed to a…
The Hacker News -
North Korea's BlueNoroff Expands Scope of Crypto Heists
North Korea’s Blue Noroff APT is expanding beyond its macOS focus into Windows and cross-platform campaigns aimed at crypto platforms, insiders say, as it uses social engineering and AI to speed up operations, according to Kaspersky. Two campaigns, GhostCall…
Dark Reading
-
-
Everest group claimed the hack of Sweden’s power grid operator Svenska kraftnät
Everest ransomware group claimed responsibility for the attack on Sweden’s state-owned power grid operator Svenska kraftnät, and added the organisation to its Tor data leak site, claiming 280 GB of data was exfiltrated. Svenska kraftnät disclosed that the…
Security Affairs -
QNAP NetBak PC Agent Affected by Recent ASP.NET Core Vulnerability
QNAP Systems says its NetBak PC Agent is potentially affected by a recently disclosed ASP[.]NET Core vulnerability that has the highest ever CVSS score for the framework. Tracked as CVE-2025-55315, the flaw carries a CVSS score of 9.9 and is an HTTP request…
SecurityWeek -
SimSpace Raises $39 Million for Cyber Range Platform
SimSpace has announced that it has raised 39 million for its cyber range platform, enabling organisations to test and validate their defenses in realistic cyberattack simulations. The latest funding, described as a mix of debt and equity, comes from BTG…
SecurityWeek -
Around 70 countries sign new UN Cybercrime Convention—but not everyone’s on board
Around 70 countries have signed the United Nations Convention against Cybercrime, described as the first global treaty to combat cybercrime through unified international rules and cooperation. The treaty needs at least 40 UN member states to ratify it before…
Malwarebytes -
Keys to the Kingdom: A Defender's Guide to Privileged Account Monitoring
Written by: Bhavesh Dhake, Will Silverstone, Matthew Hitchcock, Aaron Fletcher The Criticality of Privileged Access in Today's Threat Landscape Privileged access stands as the most critical pathway for adversaries seeking to compromise sensitive systems and…
Google Cloud -
TurboMirai-Class ‘Aisuru’ Botnet Blamed for 20+ Tbps DDoS Attacks
TurboMirai-class ‘Aisuru’ is a newly observed Mirai-style DDoS botnet whose attacks have reportedly exceeded 20 terabits per second, forming part of a broader class described by Netscout as TurboMirai. The research notes that, unlike some IoT threats, Aisuru…
SecurityWeek -
Brida Introduces New Release Offering Complete Support for Latest Frida Integration
Brida has released version 0.6, offering full compatibility with the latest Frida dynamic instrumentation framework and marking a major step for security researchers and penetration testers using Burp Suite. The update follows Frida’s major architectural…
gbhackers.com -
Herodotus: New Android Malware Mimics Human Behavior to Bypass Biometric Security
Herodotus is a sophisticated new Android banking Trojan that mimics human typing patterns to evade behavioural biometrics detection. Discovered by ThreatFabric’s Mobile Threat Intelligence team, it uses randomized delays between keystrokes, ranging from 300…
gbhackers.com -
Sublime Security Raises $150 Million for Email Security Platform
According to SecurityWeek, Sublime Security announced on 28 October 2025 that it has raised $150 million in a Series C funding round, bringing the total raised by the company to more than $240 million. The Series C round was led by Georgian, with…
SecurityWeek -
New Phishing Attack Using Invisible Characters Hidden in Subject Line Using MIME Encoding
Security researchers have uncovered a phishing technique that hides invisible Unicode characters in email subject lines by abusing MIME encoding. The subject line uses RFC 2047 MIME encoded-word formatting, with two encoded-word segments carrying UTF-8 data…
gbhackers.com -
A framework for measuring Internet resilience
Cloudflare’s blog post outlines a data-driven framework for measuring Internet resilience that moves beyond uptime to capture a network’s ability to withstand, adapt to, and recover from disruptions. The framework relies on public data sources to quantify…
Cloudflare -
State of the post-quantum Internet in 2025
Cloudflare reports that in the last week of October 2025 the majority of human-initiated Internet traffic is protected by post-quantum encryption, mitigating harvest-now/decrypt-later threats. The post-quantum migration is described as consisting of two…
Cloudflare -
Keeping the Internet fast and secure: introducing Merkle Tree Certificates
Cloudflare’s post argues that Merkle Tree Certificates (MTCs) are a proposed next generation of the WebPKI designed to reduce the number of signatures and public keys in the TLS handshake, while retaining security properties. It explains that current TLS…
Cloudflare -
MuddyWater’s Phoenix Backdoor Infects More Than 100 Government Organizations
According to Group-IB Threat Intelligence, MuddyWater’s Phoenix backdoor campaign targeted over 100 government entities across the Middle East, North Africa, and international organisations. The operation began with a phishing drive using a compromised…
gbhackers.comMuddyWater -
Critical ASP.NET flaw hits QNAP NetBak PC Agent
QNAP has warned of a critical ASP[.]NET Core vulnerability, tracked as CVE-2025-55315, in NetBak PC Agent for Windows, with a CVSS of 9.9, that could allow low-privilege attackers to hijack credentials or bypass front-end security via HTTP smuggling.…
Security Affairs -
IPFire 2.29 Released with Enhanced Intrusion Prevention System Reporting
The IPFire project has released version 2.29, Core Update 198, marking a significant milestone in the open-source firewall’s evolution. According to IPFire, the update brings transformative improvements to the Intrusion Prevention System and enhanced…
gbhackers.com -
Industrial Giants Schneider Electric and Emerson Named as Victims of Oracle Hack
Industrial giants Schneider Electric and Emerson have been named by cybercriminals as victims of the Oracle E-Business Suite hack, with data allegedly stolen and publicly linked to them on the Cl0p ransomware leak site. The Cl0p leak contains links to 2.7 TB…
SecurityWeek -
Anivia Stealer Peddled on Dark Web with UAC Bypass
A newly advertised information-stealing malware called Anivia Stealer has surfaced on the dark web, with threat actor ZeroTrace aggressively promoting the C++17-based infostealer as a commercial malware-as-a-service offering. The malware implements privilege…
gbhackers.com -
Online outages: Q3 2025 Internet disruption summary
In Q3 2025, Cloudflare Radar observed a wide range of Internet disruptions caused by government actions, physical damage, accidents and technical faults, with several outages tied to explicit shutdowns in Sudan, Syria, Iraq and Venezuela. The quarter also…
Cloudflare -
Announcing Workers automatic tracing, now in open beta
Cloudflare announces Workers automatic tracing, now in open beta, enabling OpenTelemetry-compliant traces with no code changes or manual setup. The feature automatically instruments all I/O operations in Workers through workerd, and traces can be viewed in…
Cloudflare -
Why Early Threat Detection Is a Must for Long-Term Business Growth
In The Hacker News piece on early threat detection, speed is framed as a multiplier: learning about emerging threats quickly lets organisations adapt their defenses, protect revenue, and sustain growth. The article argues that early threat detection is about…
The Hacker News -
Active Directory at Risk Due to Domain-Join Account Misconfigurations
Active Directory domain join accounts are flagged as a systemic risk due to misconfigurations that grant excessive default privileges, enabling attackers to escalate from internal networks to full domain control. The article notes that these accounts operate…
gbhackers.com -
NSFW ChatGPT? OpenAI plans “grown-up mode” for verified adults
OpenAI plans a “grown-up mode” for verified adults, with Sam Altman signalling that ChatGPT will soon engage in far less highbrow conversations of a sexual kind. By December, age-gating is expected to expand to allow erotica for verified adults, after Altman…
Malwarebytes -
FileFix + Cache Smuggling: A New Evasion Combo
Cybersecurity researchers have uncovered FileFix combined with cache smuggling as a new evasion technique in phishing campaigns, designed to bypass security controls that monitor untrusted code’s internet access. The approach avoids typical network requests…
gbhackers.com -
US declines to join more than 70 countries in signing UN cybercrime treaty
The United States declined to join more than 70 countries in signing the UN Cybercrime Convention, a move reported by DataBreaches[.]Net on 28 October 2025. More than 70 countries signed the landmark treaty in Hanoi over the weekend, with the U.K. and…
DataBreaches -
Cybercriminals Trade 183 Million Stolen Credentials on Telegram, Dark Forums
SecurityWeek reports that researchers from cybersecurity firm Synthient have compiled a database of 183 million unique email addresses leaked across Telegram channels, dark forums and other online platforms, with most credentials linked to…
SecurityWeek -
Zero-Click Exploit Targets MCP and Linked AI Agents to Stealthily Steal Data
Operant AI’s security team has identified a zero-click attack called Shadow Escape that exploits the Model Context Protocol to steal data through AI assistants. The attack works with widely used platforms such as ChatGPT, Claude, Gemini, and other…
gbhackers.com -
Is Your Google Workspace as Secure as You Think it is?
Google Workspace can provide a solid security foundation, but the article stresses that most organisations start with collaboration in mind rather than resilience, leaving blind spots that attackers can exploit. It urges locking down the basics with MFA for…
The Hacker News
