News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Mon 3 Nov 2025· 59 articles
-
High-Severity Bug: AMD Zen 5 RDSEED Flaw Risks Randomness Integrity; Microcode Fix Coming
In mid-October 2025, engineers identified an architectural flaw in the AMD Zen 5 series processors related to the RDSEED instruction, with a Linux kernel patch soon disabling RDSEED functionality. AMD issued an official statement acknowledging the issue and…
SecurityOnline -
The Fix is Coming: Microsoft Acknowledges and Mitigates Widespread Driver Error 0x80070103
3 November 2025. Many users encounter the 0x80070103 error code when downloading and installing driver updates through Windows Update, a problem that has been frequently reported in the Feedback Hub, and Microsoft has officially acknowledged it, stating that…
SecurityOnline -
Dual Audio: Windows 11 Finally Gets Bluetooth Audio Sharing, But Only for Copilot+ PCs
Dual Audio: Windows 11’s long-awaited Bluetooth audio sharing has begun rolling out to the stable version, but with notable limitations. According to Microsoft, beginning with Windows 11 Build 26220.7051, users can share a single audio stream between two…
SecurityOnline -
iOS Update Timeline: Apple Preps 26.1 Release, Eyes Passport & RCS Encryption for 26.2
According to Mark Gurman, Apple is expected to release the official iOS 26.1 update as early as 3 November 2025, with the first beta of iOS 26.2 made available to developers the very next day, alongside beta builds for watchOS, tvOS and other Apple…
SecurityOnline -
Windows 11 Bug: Task Manager Refuses to Close, Multiplying Processes and Hitting Performance
Windows 11 users on version 24H2 or 25H2 may notice several Task Manager processes running at once, each consuming around 20 MB of memory and a small slice of CPU. The issue stems from a bug introduced by a recent non-security preview update, which prevents…
SecurityOnline -
Space Race: SpaceX Lands $2 Billion Contract for Trump’s “Golden Dome” Missile Defense
SpaceX is reported to be on track to secure a $2 billion contract from the U.S. government to develop satellites for President Donald Trump’s proposed “Golden Dome” missile defence initiative. The deal would see SpaceX tasked with creating up to 600…
SecurityOnline -
The 2026 Surge: Apple’s 15-Product Roadmap Includes Foldable iPhone & AI Smart Home
According to Bloomberg journalist Mark Gurman, Apple may deliver a busy 2026, with a 50th‑anniversary surge and a roadmap that spans AI, new silicon and entirely new hardware categories, including a foldable iPhone. The piece notes an early‑2026 line‑up…
SecurityOnline -
Operation SkyCloak Targets Russian/Belarusian Military With LNK Exploit and OpenSSH Over Tor Backdoor
According to SEQRITE, the stealthy campaign dubbed “Operation SkyCloak” targets military personnel in Russia and Belarus, including the 83rd Separate Guards Airborne Assault Brigade in Ussuriysk and the 5th Separate Spetsnaz Brigade in Maryina Horka. It uses…
SecurityOnline -
Cloud Abuse: TruffleNet BEC Campaign Hijacks AWS SES and Portainer to Orchestrate 800+ Malicious Hosts
Fortinet’s FortiGuard Labs has identified a widespread cloud abuse campaign dubbed “TruffleNet” that uses stolen AWS credentials to abuse Amazon SES for large-scale BEC and email fraud, orchestrated from more than 800 unique hosts across 57 distinct…
SecurityOnline -
Tap-and-Steal: Over 760 Android Apps Exploit NFC/HCE for Payment Card Theft in Global Financial Scam
Researchers from Zimperium zLabs have revealed a rapid rise in Android apps abusing NFC and Host Card Emulation to steal payment card data and enable fraudulent “tap-to-pay” transactions, with over 760 malicious apps now observed in the wild. The campaign…
SecurityOnline -
Chinese APT UNC6384 Pivots to Europe, Exploits Windows LNK Flaw to Deploy PlugX via Canon DLL Sideloading
According to Arctic Wolf, UNC6384, a Chinese-affiliated threat actor, has expanded its operations from Southeast Asia to Europe, targeting Hungarian and Belgian diplomats and other EU government entities during September–October 2025. The campaign blends…
SecurityOnlineMUSTANG PANDA -
Android AI Scam Defense Blocks 10 Billion Monthly Threats; Users 58% More Likely to Avoid Scam Texts Than iOS
According to Google, Android’s multi-layered protections now block over 10 billion suspected malicious calls and messages every month, preventing scams before they reach users. The platform’s RCS safety checks alone “blocked over 100 million suspicious…
SecurityOnline -
North Korean APTs Upgrade Arsenal: Kimsuky Uses Stealthy HttpTroy, Lazarus Deploys New BLINDINGCAN RAT
Researchers at Gen Threat Labs have identified two new toolsets in active use by North Korean state-sponsored groups, underscoring continued investment in cyber-espionage. The Kimsuky operation is deploying a stealthy new backdoor dubbed “HttpTroy,” while…
SecurityOnlineLazarus Group -
Kinsing Cryptominer Exploits Apache ActiveMQ RCE (CVE-2023-46604), Adds Sharpire Backdoor for Multi-Stage Intrusion
According to AhnLab’s analysts, the Kinsing threat actor — also known as H2Miner — continues to actively exploit CVE-2023-46604 in Apache ActiveMQ to distribute cryptocurrency miners and remote-access tools across Linux and Windows systems. The campaign has…
SecurityOnlineKinsing -
Open-Source AdaptixC2 Hacking Framework Adopted by Russian Cybercriminals and Akira Ransomware
According to Silent Push, AdaptixC2, a legitimate open‑source post‑exploitation framework, is being repurposed by cybercriminals, with activity centred on threat actors linked to Russia. The tool, originally designed for red‑team operations and written in…
SecurityOnlineStorm-1567 -
Next-Gen Android Banking Trojan Hides in Digital ID App, Automates Crypto Wallet Theft and Evades Emulators
Cyfirma’s latest malware analysis uncovers Android/BankBot-YNRK, a next‑gen Android banking trojan actively targeting users across Southeast Asia via counterfeit clones of Indonesia’s official Identitas Kependudukan Digital app. The three APK samples share…
SecurityOnline -
Tangerine Turkey Cryptomining Worm Spreads Via USB Drives, Hides Payloads with VBScript and LOLBins
Tangerine Turkey is a stealthy, financially motivated cryptomining campaign identified by Cybereason, which spreads via VBScript-based worms that travel through removable USB drives and deploy unauthorized cryptocurrency miners across compromised networks.…
SecurityOnline -
Copyright Pivot: Getty Images Partners with Perplexity AI to Tackle Content Attribution
Perplexity AI has announced a multi-year licensing partnership with Getty Images, granting Perplexity API access to Getty Images’ extensive visual archives and planned integration of the library into its AI search and discovery tools. At the heart of the…
SecurityOnline -
Elastic Patches High-Severity Privilege Escalation Flaw in Elastic Cloud Enterprise (CVE-2025-37736)
Elastic has issued a security advisory for a high-severity vulnerability (CVE-2025-37736, CVSS 8.8) in Elastic Cloud Enterprise (ECE) that could let a readonly user perform unauthorised operations and escalate privileges across managed Elastic environments,…
SecurityOnline
