News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 13 so far |
Sat 1 Nov 2025· 19 articles
-
Veradigm’s Breach Claims Under Scrutiny After Dark Web Leak
Veradigm’s breach claims are under renewed scrutiny after a Sunflower Medical Group (SMG) data tranche appeared on Rhysida’s dark web leak site, suggesting data from multiple Veradigm clients may have been mixed with SMG’s. DataBreaches[.]Net notes that SMG…
DataBreaches -
BadCandy Webshell threatens unpatched Cisco IOS XE devices, warns Australian government
The Australian Signals Directorate (ASD) warns of ongoing attacks on unpatched Cisco IOS XE devices that abuse CVE-2023-20198 to install a Lua-based webshell named BADCANDY and seize administrative control. According to ASD, the vulnerability allows a…
Security Affairs -
China-linked UNC6384 exploits Windows zero-day to spy on European diplomats
China-linked UNC6384 exploits a Windows zero-day to spy on European diplomats, according to Security Affairs, with activity attributed to a China-nexus APT group that began in September and remains active. Arctic Wolf Labs researchers outline a three-stage…
Security AffairsMUSTANG PANDA -
ASD Warns of Ongoing BADCANDY Attacks Exploiting Cisco IOS XE Vulnerability
According to The Australian Signals Directorate, the ASD has issued a bulletin about ongoing BADCANDY attacks targeting unpatched Cisco IOS XE devices in Australia, exploiting CVE-2023-20198 (CVSS 10.0). Variations of BADCANDY have been detected since…
The Hacker News -
Sandworm APT Attacks Belarus Military With LNK Exploit and OpenSSH Over Tor obfs4 Backdoor
According to CRIL, researchers identified a sophisticated malware campaign that uses weaponised ZIP archives disguised as military training documents to infiltrate Belarusian Special Operations Command personnel involved in UAV and drone operations. The…
SecurityOnlineSandworm -
Russian Police Bust Suspected Meduza Infostealer Developers
Russian police arrested three young IT specialists in or around Moscow who are suspected of developing and selling the Meduza credential-harvesting malware, according to Bank Info Security. Authorities from the Ministry of Internal Affairs of Russia,…
DataBreaches -
Massive Great Firewall Leak Exposes 500GB of Censorship Data
Massive Great Firewall Leak Exposes 500GB of Censorship Data documents that, in September 2025, leaked from Chinese infrastructure firms associated with the Great Firewall. According to DataBreaches[.]Net, researchers now estimate the full dump is closer to…
DataBreaches -
UK: Woman charged after NHS patients’ records accessed in data breach
A UK report notes that a woman has been charged after Scots patients had their private NHS records accessed during an NHS data breach, with around 100 patients in NHS Lothian potentially affected. The health board said its routine monitoring suggested some…
DataBreaches -
New Email Security Technique Prevents Phishing Attacks Behind NPM Breach
The discovery of a large-scale NPM ecosystem compromise in September 2025 saw threat actors target developers with a sophisticated phishing campaign, impersonating NPM Support and sending a message titled “Two-Factor Authentication Update Required” to Josh…
gbhackers.com -
Akira Ransomware Strikes Apache OpenOffice, Allegedly Exfiltrates 23GB of Data
The Akira ransomware gang announced on 29 October 2025 that it had breached the systems of Apache OpenOffice and allegedly exfiltrated 23GB of sensitive corporate data. The group posted details on its dark web leak site and threatened to publish the stolen…
gbhackers.comStorm-1567 -
Pinterest Launches AI Assistant: Transforming Search to Personalized Visual Discovery
Pinterest recently announced the introduction of a new AI-powered search and recommendation tool called “Pinterest Assistant.” By analysing users’ past activities, such as saved Pins, created Boards, and browsing behaviour, the assistant delivers highly…
SecurityOnline -
Meta Quest 3 Gets Windows 11 Virtual Desktop—Bringing Mixed Reality to the Masses
Microsoft recently announced the official rollout of its “Mixed Reality Link” feature for Windows 11, now generally available to all Meta Quest 3 and Quest 3S users following the latest update to Meta Horizon OS. According to Microsoft, the feature enables…
SecurityOnline -
iPhone 17 Surge: Apple Hits Record $102B Revenue While Teasing AI Siri 2026 Debut
Apple has announced its financial results for the fourth quarter of fiscal year 2025, ending on 27 September, with total revenue reaching $102.47 billion, a 7.94% rise from the year-ago period. The iPhone line remains central to the business, delivering…
SecurityOnline -
Critical WordPress Theme Flaw (CVE-2025-5397, CVSS 9.8) Under Active Exploitation Allows Unauthenticated Admin Takeover
A critical vulnerability in the Jobmonster – Job Board WordPress Theme has been tracked as CVE-2025-5397 with a CVSS score of 9.8, and it is already under active exploitation, according to Wordfence. The flaw enables any unauthenticated attacker to bypass…
SecurityOnline -
Critical WordPress Plugin Flaw (CVE-2025-8489, CVSS 9.8) Allows Unauthenticated Admin Takeover
The Daily CyberSecurity reports a critical vulnerability in the King Addons for Elementor plugin (CVE-2025-8489, CVSS 9.8), described as an unauthenticated privilege escalation that allows takeover of an affected site. According to Wordfence, the flaw stems…
SecurityOnline -
CVE-2025-11833 (CVSS 9.8): Critical Flaw Exposes 400,000 WordPress Sites to Unauthenticated Account Takeover
CVE-2025-11833 (CVSS 9.8) is a critical Missing Authorization flaw found in the Post SMTP plugin, which is used by over 400,000 WordPress sites to ensure reliable email delivery. The vulnerability allows unauthenticated attackers to read sensitive emails…
SecurityOnline -
Hackers Hide SSH–Tor Backdoor Inside Weaponized Military Documents
In October 2025 Cyble Research and Intelligence Labs (CRIL) uncovered a sophisticated malware campaign that distributes weaponised ZIP archives disguised as military documents, with Belarusian military personnel being the primary target. The attackers use…
gbhackers.com -
CISA Alerts on Linux Kernel Vulnerability Exploited in Ransomware Attacks
According to CISA, the U.S. Cybersecurity and Infrastructure Security Agency, a critical Linux kernel vulnerability is being exploited in ransomware campaigns against organisations worldwide. The flaw, tracked as CVE-2024-1086, affects the netfilter:…
gbhackers.com -
Cisco IOS XE Vulnerability Being Abused in the Wild to Plant BADCANDY
Cybersecurity authorities are raising urgent alarms over a Cisco IOS XE vulnerability being exploited in the wild to plant a non-persistent implant known as BADCANDY across networks worldwide. According to the Australian Signals Directorate, over 150 devices…
gbhackers.com
