News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Wed 29 Oct 2025· 88 articles
-
New TEE.fail Exploit Steals Secrets from Intel & AMD DDR5 Trusted Environments
Researchers have unveiled a new attack called “TEE[.]fail” that undermines the security guarantees of Intel and AMD Trusted Execution Environments (TEEs) by targeting DDR5 memory. According to GBHackers on Security, the attack uses a memory interposition…
gbhackers.com -
CyberRidge Emerges From Stealth With $26 Million for Photonic Encryption Solution
Israeli security startup CyberRidge has emerged from stealth with 26 million in funding for its photonic encryption solution, disclosed in SecurityWeek. The round comprises a 10 million seed and a 16 million extension led by Arkin Capital with participation…
SecurityWeek -
School’s AI system mistakes a bag of chips for a gun
The AI gun-detection system at Kenwood High School mistakenly flagged a crumpled bag of Doritos as a firearm, triggering a police response. The 16-year-old had finished eating a bag of Doritos and crumpled it in his pocket when he was done. Moments later,…
Malwarebytes -
LiteSpeed Cache Flaw (CVE-2025-12450): 7 Million WordPress Sites Exposed to XSS Attack
On 29 October 2025, a security flaw in the LiteSpeed Cache for WordPress (LSCWP) plugin, tracked as CVE-2025-12450, was disclosed, exposing about 7 million WordPress sites to a reflected XSS attack. The vulnerability is described as a Reflected XSS flaw that…
SecurityOnline -
XWiki Vulnerability Exploited in Cryptocurrency Mining Operation
A critical-severity vulnerability in the open source XWiki platform, tracked as CVE-2025-24893 with a CVSS score of 9.8, has been exploited in the wild as part of a low-end cryptocurrency mining operation, according to SecurityWeek. The flaw allows remote…
SecurityWeek -
Ad and PR Giant Dentsu Says Hackers Stole Merkle Data
According to Dentsu, Japan-based ad and PR giant, the Merkle data breach impacted its subsidiary Merkle’s systems and affected clients, suppliers and employees. The breach was discovered after abnormal activity on the Merkle network, and some systems have…
SecurityWeek -
Discover Practical AI Tactics for GRC — Join the Free Expert Webinar
According to The Hacker News, a free expert webinar titled The Future of AI in GRC: Opportunities, Risks, and Practical Insights will help attendees navigate the rapid shift of AI into Governance, Risk and Compliance. The piece notes that AI is already…
The Hacker News -
Docker Compose Flaw Lets Attackers Overwrite Arbitrary Files
A path traversal vulnerability in Docker Compose, tracked as CVE-2025-62725, was discovered in early October 2025 and carries a high CVSS score of 8.9. According to GBHackers, the flaw affects Docker Compose prior to v2.40.2, enabling attackers to write…
gbhackers.com -
Massive Tata Motors Data Leak Exposes 70+ TB of Sensitive Information
Tata Motors, India’s largest automaker, suffered a data exposure that reportedly revealed over 70 terabytes of sensitive information due to multiple security failures, discovered in 2023. The breaches involved plaintext AWS credentials on public-facing…
gbhackers.com -
Suspected Nation-State Threat Actor Uses New Airstalk Malware in a Supply Chain Attack
According to Unit 42, we have discovered a new Windows-based malware family named Airstalk, available in both PowerShell and .NET variants, and we assess with medium confidence that a possible nation-state threat actor used this malware in a likely supply…
unit42.paloaltonetworks.com -
CISA Issues Alert on Active Exploitation of Dassault Systèmes Security Flaws
According to The Cybersecurity and Infrastructure Security Agency (CISA), two critical vulnerabilities have been identified in Dassault Systèmes DELMIA Apriso, a manufacturing execution system. The flaws are CVE-2025-6204 (Code Injection, CWE-94) and…
gbhackers.com -
Chrome to Turn HTTPS on by Default for Public Sites
Chrome is set to make HTTPS the default for public sites, with Google stating that from October 2026, when Chrome 154 is projected to arrive, the Always Use Secure Connections setting will be on by default for all users and all public sites. If a user…
SecurityWeek -
10 NPM Packages That Automatically Run on Install and Steal Credentials
A sophisticated supply chain attack has been uncovered involving ten malicious npm packages that execute automatically on installation and harvest credentials. The packages abuse npm’s postinstall lifecycle hook to run code as soon as developers run npm…
gbhackers.com -
U.S. CISA adds Dassault Systèmes DELMIA Apriso flaws to its Known Exploited Vulnerabilities catalog
According to Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Dassault Systèmes DELMIA Apriso flaws to its Known Exploited…
Security Affairs -
10 npm Packages Caught Stealing Developer Credentials on Windows, macOS, and Linux
Cybersecurity researchers have identified a set of 10 malicious npm packages designed to deliver an information stealer across Windows, Linux and macOS. The packages—deezcord[.]js, dezcord[.]js, dizcordjs, etherdjs, ethesjs, ethetsjs, nodemonjs,…
The Hacker News -
CISA Warns of Exploited DELMIA Factory Software Vulnerabilities
According to SecurityWeek, the US Cybersecurity and Infrastructure Security Agency (CISA) has warned that two recent vulnerabilities in DELMIA Apriso factory software have been exploited in attacks. The flaws, CVE-2025-6204 and CVE-2025-6205, affect DELMIA…
SecurityWeek -
Beast Ransomware Targets Active SMB Connections to Infect Entire Networks
Beast Ransomware has emerged as a sophisticated operation that targets active SMB connections to propagate across enterprise networks and encrypt files. The malware uses aggressive SMB port scanning to identify shared folders and resources for lateral…
gbhackers.com -
Herodotus Android malware mimics human typing to evade detection
Threat Fabric researchers have uncovered a new Android banking Trojan, named Herodotus, that mimics human typing by introducing random delays to evade detection, with campaigns detected in Italy and Brazil. Described as a malware-as-a-service (MaaS)…
Security Affairs -
XWiki Remote Code Execution Flaw Actively Weaponized for Coinmining
The article reports a critical XWiki vulnerability, CVE-2025-24893, that is actively weaponised to deploy cryptocurrency mining malware on unpatched XWiki installations. According to the article, the attacks originate from Vietnam-based threat actors, using…
gbhackers.com -
New Attack Targets DDR5 Memory to Steal Keys From Intel and AMD TEEs
A team of academic researchers has disclosed details of a new attack method that can break CPU-based security technologies from Intel and AMD by targeting DDR5 memory. The attack, named TEE[.]fail, was discovered by researchers from Purdue University and…
SecurityWeek -
Active Exploits Hit Dassault and XWiki — CISA Confirms Critical Flaws Under Attack
Threat actors are actively exploiting multiple flaws behind Dassault Systèmes DELMIA Apriso and XWiki, according to alerts issued by the U.S. Cybersecurity and Infrastructure Security Agency and VulnCheck. The vulnerabilities include CVE-2025-6204 (CVSS 8.0)…
The Hacker News -
Gunra Ransomware Targets Windows and Linux with Dual Encryption
Gunra Ransomware targets Windows and Linux with dual encryption, delivering two distinct variants for each platform: an EXE file for Windows and an ELF binary for Linux. The Linux variant uses ChaCha20 for encryption, while the Windows variant employs…
gbhackers.com -
Cybersecurity Firms See Surge in AI-Powered Attacks Across Africa
Cybersecurity firms report a rapid rise in AI-powered attacks across Africa, with phishing, impersonation and deepfake-enabled fraud targeting governments and enterprises. Deepfake-related fraud has nearly tripled in the past year, and AI-driven phishing…
Dark Reading -
Mozilla Enforces Transparency Rules for Data Collection in New Firefox Extensions
Mozilla has announced a major transparency push for its Firefox ecosystem, requiring all newly submitted extensions to declare their data collection and transmission practices within their code. From 3 November 2025, developers must specify these data…
gbhackers.com -
Microsoft Issues Alert on ASP.NET Flaw Allowing HTTP Request Smuggling Attacks
Microsoft has released a critical security update addressing a vulnerability in ASP[.]NET Core's Kestrel web server that could allow HTTP request smuggling attacks. On 14 October 2025, patches were issued for CVE-2025-55315, described as a security feature…
gbhackers.com -
New Atroposia RAT Uses Hidden Remote Desktop, Vulnerability Scanning and Advanced Persistence
Atroposia is described as a sophisticated new remote access trojan that offers hidden remote desktop access, credential theft, and network manipulation, with its affordability noted at around $200 per month, $500 for three months, or $900 for six months.…
gbhackers.com -
Ethical Prompt Injection: Fighting Shadow AI with Its Own Weapon
Ethical Prompt Injection: Fighting Shadow AI with Its Own Weapon explores how Shadow AI—the uncontrolled use of unapproved AI tools on personal devices—poses real risks to confidential data, source code, and customer details. According to Eye Security,…
gbhackers.com -
Critical strongSwan Heap Overflow in EAP-MSCHAPv2 Plugin Allows Remote Code Execution
The article titled Critical strongSwan Heap Overflow in EAP-MSCHAPv2 Plugin Allows Remote Code Execution reports a critical heap overflow in the EAP-MSCHAPv2 plugin of strongSwan that could enable remote code execution. It is dated 29 October 2025.
SecurityOnline -
CISA KEV Alert: Critical DELMIA Apriso Flaws Under Active Exploitation Allow RCE and Privileged Access
The Cybersecurity and Infrastructure Security Agency (CISA) has added two critical DELMIA Apriso vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog after confirmed evidence of active exploitation in the wild. The flaws, CVE-2025-6204 and…
SecurityOnline -
Critical IBM Maximo Flaw (CVE-2025-36386, CVSS 9.8) Allows Unauthenticated Bypass to Cognos Analytics
IBM has issued a critical security notice for Maximo Manage in the Maximo Application Suite, warning of a high-severity vulnerability (CVE-2025-36386, CVSS 9.8) that could allow an unauthenticated remote attacker to bypass authentication and access Cognos…
SecurityOnline -
Shop in Chat: PayPal Partners with OpenAI to Bring E-commerce to ChatGPT
PayPal, the U.S.-based payments giant, has announced a strategic partnership with OpenAI, adopting the company’s newly introduced Agentic Commerce Protocol (ACP). The collaboration will enable merchants using PayPal’s Instant Checkout feature to integrate…
SecurityOnline -
All-Day Learning: MediaTek Kompanio 540 Promises 35% Better Chromebook Battery Life
MediaTek has announced the Kompanio 540, a processor designed for the education market, with the first devices expected to hit the market in January 2026. The chip features an octa-core architecture with two Arm Cortex-A78 high-performance cores, a dual-core…
SecurityOnline -
Windows 11 26H1 Update to Launch as Copilot+ PC Exclusive
The Windows 11 26H1 update is set to launch as a Copilot+ PC exclusive, with reports suggesting it will debut in spring or summer 2026. Like 24H2 before it, the release will be restricted to Microsoft Copilot+ PCs powered by Qualcomm Snapdragon X2…
SecurityOnline -
Adobe Premieres Mobile Video Editor Directly in YouTube Shorts
At Adobe Max 2025, Adobe announced a landmark partnership with Google to integrate the core capabilities of Adobe Premiere Mobile directly into the YouTube Shorts editing workflow. According to Adobe, YouTube creators will soon find a new option within the…
SecurityOnline -
OpenAI’s $500B Pivot: Completes Restructuring as Public Benefit Corp
On 29 October 2025, OpenAI announced the completion of its restructuring into a Public Benefit Corporation, with its former nonprofit becoming the OpenAI Foundation that will retain control over the for‑profit division and hold an estimated $130 billion in…
SecurityOnline -
Coming Soon: US Passports Are Coming to Apple Wallet as Digital ID
At the Money20/20 conference in Las Vegas, Jennifer Bailey, Vice President of Apple Pay and Wallet, revealed that iPhone users in the United States will soon be able to scan their physical U.S. passports and add them to the Apple Wallet, turning them into…
SecurityOnline -
Full Studio AI: Adobe Firefly Expands to Video Editor, Soundtracks, and Voice
Adobe has expanded Firefly beyond image creation to include a private-beta Firefly Video Editor, a browser-based, multi-track timeline editor with tools for voiceovers, soundtracks and titles, and the ability to import existing assets or generate new…
SecurityOnline -
Aisuru Botnet Shifts from DDoS to Residential Proxies
Aisuru, the botnet once known for record-breaking DDoS, has been overhauled to rent hundreds of thousands of infected IoT devices to residential proxy providers, enabling cybercriminals to anonymise their traffic. According to Netscout, in an executive…
Krebs on Security -
AhnLab Uncovers Gunra Ransomware: Dual-Platform Threat with Weak Linux Encryption
According to ASEC, the AhnLab Security Intelligence Center, Gunra ransomware began operations in April 2025 and has conducted attacks across industries worldwide, including South Korea. The threat targets both Windows and Linux environments, delivering a…
SecurityOnline -
Next-Gen Android Trojan Herodotus Mimics Human Typing to Bypass Behavioral Biometrics Anti-Fraud Systems
Cybersecurity researchers at ThreatFabric have identified a new Android banking Trojan dubbed Herodotus, a hybrid that blends features from Brokewell and Hook while adding the ability to mimic human typing to evade behavioural biometric anti-fraud systems.…
SecurityOnline
