News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Tue 4 Nov 2025· 70 articles
-
“Louvre” as a password, outdated software, impossible updates… Ten years of IT security breaches at the world’s leading museum
The piece summarises a decade of IT security breaches at the Louvre, describing the museum as the world’s leading institution troubled by outdated software and failed updates, with a long history of vulnerabilities that had been warned about but not fully…
DataBreaches -
Pro-Russian Hackers Use Linux VMs to Hide in Windows
A threat actor known as Curly COMrades is using Linux-based virtual machines to remain undetected in Windows environments while pursuing Russia-aligned activities, according to Bitdefender. The research, conducted in collaboration with Georgian CERT,…
Dark Reading -
Europe Sees Increase in Ransomware, Extortion Attacks
European organisations are facing an escalating cyber threat, with attacks on ransomware and extortion rising as groups operate faster than before. The latest CrowdStrike study found that Europe accounts for nearly 22% of global ransomware and extortion…
Dark Reading -
Google fixed a critical remote code execution in Android
Google’s November 2025 Android security updates address two vulnerabilities in the System component, including a critical remote code execution issue, fixed at the 2025-11-01 patch level. According to bulletin, the most severe flaw could lead to remote code…
Security Affairs -
A Cybercrime Merger Like No Other — Scattered Spider, LAPSUS$, and ShinyHunters Join Forces
A new federated cybercrime entity has emerged, uniting Scattered Spider, LAPSUS$, and ShinyHunters under the banner SLH, with at least 16 Telegram channels created since 8 August 2025. Trustwave SpiderLabs, in a report shared with The Hacker News, noted that…
The Hacker NewsScattered Spider -
SesameOp: New backdoor exploits OpenAI API for covert C2
SesameOp is a newly identified backdoor that Microsoft says abuses the OpenAI Assistants API for covert command-and-control within hacked systems. According to Microsoft Incident Response – Detection and Response Team (DART) researchers, the backdoor was…
Security Affairs -
Learn what generative AI can do for your security operations center
Generative AI is being positioned as a transformative support for security operations, helping teams cope with alert fatigue, clutter, and fragmented tools by enhancing triage, investigations, and reporting. Microsoft Security Copilot, powered by generative…
Microsoft -
11/4/25, 4:45 PM
The article page is a 404 error, stating that the page you’re looking for cannot be found or doesn’t exist. It invites you to return to the home page or try browsing resources. The header and footer show a range of site navigation options, including a direct…
darktrace.com -
Critical Flaw in Popular React Native NPM Package Exposes Developers to Attacks
SecurityWeek reports a critical flaw in the popular React Native NPM package (@react-native-community/cli) tracked as CVE-2025-11953, which carries a CVSS score of 9.8 and is associated with roughly two million weekly downloads. According to JFrog, the…
SecurityWeek -
Europol and Eurojust Dismantle €600 Million Crypto Fraud Network in Global Sweep
Nine people have been arrested in connection with a crypto money laundering network that defrauded victims of €600 million. According to Eurojust, the operation took place between 27 and 29 October across Cyprus, Spain and Germany, with suspects facing…
The Hacker News -
Bob Flores, Former CTO of the CIA, Joins Brinker
According to CyberNewsWire, Brinker, the narrative intelligence company combating disinformation and influence campaigns, announced on 4 November 2025 that Bob Flores, former Chief Technology Officer of the CIA, has joined its advisory board in Delaware,…
gbhackers.com -
Transportation Companies Hacked to Steal Cargo
Threat actors have been hacking surface transportation firms to deploy remote access tools and hijack shipments for financial gain, according to Proofpoint notes. The attack chain begins with a compromised broker load board account used to post a fake load,…
SecurityWeek -
SesameOp Backdoor Uses OpenAI API for Covert C2
A new backdoor dubbed SesameOp uses an OpenAI API for covert command-and-control communications to manage malicious activity within a compromised environment, illustrating how threat actors can abuse generative AI services. Researchers from Microsoft’s…
Dark Reading -
Critical React Native CLI Flaw Exposed Millions of Developers to Remote Attacks
A critical flaw in the React Native CLI has been patched after it enabled remote command execution on developers’ machines. The vulnerability, tracked as CVE-2025-11953 with a CVSS score of 9.8, affects the @react-native-community/cli-server-api package…
The Hacker News -
2025 Insider Risk Report Finds Most Organizations Struggle to Detect and Predict Insider Risks
The 2025 Insider Risk Report, produced by Cybersecurity Insiders in collaboration with Cogility, finds that 93% of security leaders say insider threats are as difficult or harder to detect than external cyberattacks, while only 23% express strong confidence…
gbhackers.com -
Microsoft Teams Bugs Let Attackers Impersonate Colleagues and Edit Messages Unnoticed
Cybersecurity researchers disclosed details of four security flaws in Microsoft Teams that could enable impersonation and social engineering attacks, including the ability to alter message content without the “Edited” label and to modify sender information…
The Hacker News -
Hacker Conversations: Kunal Agarwal and the DNA of a Hacker
Hacker Conversations: Kunal Agarwal and the DNA of a Hacker profiles Kunal Agarwal, founder and CEO of dope[.]security, whose mission is shaped by a lifelong hacker mindset that he says is “in my DNA.” The piece traces his path from childhood curiosity and…
SecurityWeek -
Exploiting Microsoft Teams: Impersonation and Spoofing Vulnerabilities Exposed
According to Check Point Research, four vulnerabilities in Microsoft Teams could allow attackers to impersonate executives, manipulate messages, alter notifications and forge identities in video and audio calls, undermining the trust users place in a widely…
Check Point -
Preparing for Threats to Come: Cybersecurity Forecast 2026
Every November, we make it our mission to equip organizations with the knowledge needed to stay ahead of threats we anticipate in the coming year. The Cybersecurity Forecast 2026 report, released today, provides comprehensive insights to help security…
Google Cloud -
SesameOp Malware Abuses OpenAI API
SesameOp is a backdoor that uses the OpenAI Assistants API as a covert channel between its command-and-control server and infected hosts, enabling the operators to fetch and execute commands and then return results. According to Microsoft, the malware first…
SecurityWeek -
Critical WordPress Post SMTP Plugin Vulnerability Puts 400,000 Sites at Risk of Account Takeover
A critical vulnerability in the WordPress Post SMTP plugin has been linked to more than 400,000 active installations, enabling unauthenticated attackers to access email logs and carry out account takeover attempts, with CVE-2025-11833 and a CVSS of 9.8.…
gbhackers.com -
Chicago firm that resolves ransomware attacks had rogue workers carrying out their own hacks, FBI says
Rogue employees at a Chicago firm that specialises in negotiating ransomware settlements are alleged to have carried out their own hacks in a bid to extort millions, prosecutors say. Kevin Tyler Martin, a ransomware threat negotiator for River North-based…
DataBreaches -
Bob Flores, Former CTO of the CIA, Joins Brinker
According to CyberNewsWire, Brinker, the narrative intelligence company focused on mitigating disinformation and influence campaigns, announced that Bob Flores, the former Chief Technology Officer of the U.S. Central Intelligence Agency, has joined its…
SecurityOnline -
Bugcrowd Acquires Application Security Firm Mayhem
Bugcrowd has announced its acquisition of Mayhem Security, an application security firm, with financial terms undisclosed. According to SecurityWeek, Bugcrowd says the deal has nearly doubled its valuation, a figure tied to the integration of Mayhem’s…
SecurityWeek -
Zscaler Acquires SPLX to Strengthen AI-Powered Zero Trust Security
According to Zscaler, the cloud security company has acquired SPLX to enhance its AI-powered Zero Trust Security offering. The deal will integrate SPLX’s shift-left AI asset discovery, automated red teaming, and governance features to secure the AI lifecycle…
gbhackers.com -
XLoader Malware Analyzed Using ChatGPT’s AI, Breaks RC4 Encryption Layers in Hours
Cybersecurity researchers have demonstrated that artificial intelligence can dramatically accelerate malware analysis, using XLoader as the case study. The work, reported on 4 November 2025, examined XLoader, a loader with information‑theft capabilities…
gbhackers.com -
Android Hit by 0-Click RCE Vulnerability in Core System Component
Google has disclosed a critical remote code execution vulnerability, tracked as CVE-2025-48593, in Android’s System component that requires no user interaction to exploit. The flaw affects Android versions 13 through 16, allowing an attacker to remotely run…
gbhackers.com -
2025 Insider Risk Report Finds Most Organizations Struggle to Detect and Predict Insider Risks
According to CyberNewsWire, the 2025 Insider Risk Report, produced by Cybersecurity Insiders in collaboration with Cogility, finds that 93% of security leaders say insider threats are as difficult or harder to detect than external cyberattacks, while only…
SecurityOnline -
“Sneaky” new Android malware takes over your phone, hiding in fake news and ID apps
Researchers at Cyfirma have investigated Android Trojan capable of stealing data by masquerading as trusted apps, such as a news reader or digital ID apps, tricking users into downloading it. According to Cyfirma, once installed the malware avoids detection,…
Malwarebytes -
Google Big Sleep found five vulnerabilities in Safari
According to Google Big Sleep, Google’s AI agent, five WebKit flaws were found in Safari that could lead to browser crashes or memory corruption if exploited. The vulnerabilities are CVE-2025-43434 (use-after-free), CVE-2025-43429 (buffer overflow),…
Security Affairs -
Apple Patches 19 WebKit Vulnerabilities
Apple has issued updates for iOS 26.1 and macOS Tahoe 26.1 to patch more than 100 vulnerabilities, including 56 security defects in iOS that cover 19 WebKit issues. According to the advisory, successful exploitation could allow cross-origin data…
SecurityWeek -
Ransomware Defense Using the Wazuh Open Source Platform
Ransomware remains a major threat, with the article noting that it encrypts data to demand payment and may use double extortion to steal and publish sensitive information. According to Wazuh, a free and open source security platform, ransomware detection and…
The Hacker News -
Operation SkyCloak Deploys Tor-Enabled OpenSSH Backdoor Targeting Defense Sectors
Operation SkyCloak is a campaign that uses phishing to deliver a backdoor that combines OpenSSH with a Tor hidden service, designed to target defence sectors in Russia and Belarus. According to Cyble and Seqrite Labs, the attack chain begins with a ZIP file…
The Hacker News -
Anatomy of Tycoon 2FA Phishing: Tactics Targeting M365 and Gmail
The Tycoon 2FA phishing kit is described as one of the most sophisticated threats targeting enterprise environments, a Phishing-as-a-Service platform that emerged in August 2023 and uses adversary-in-the-middle techniques to bypass multi-factor…
gbhackers.com -
Zscaler Acquires AI Security Company SPLX
Zscaler has announced the acquisition of AI security company SPLX, a deal that SecurityWeek reports will bolster its Zero Trust Exchange platform with SPLX’s AI security capabilities. SPLX, founded in 2023, specialises in securing AI chatbots, agents, models…
SecurityWeek -
Microsoft Plans to Remove Entra Accounts from Authenticator on Jailbroken Devices
Microsoft is rolling out a security enhancement for its Authenticator app that will automatically wipe Microsoft Entra credentials from devices that are jailbroken or rooted, starting February 2026. The update will apply to both iOS and Android devices, with…
gbhackers.com -
Android Update Patches Critical Remote Code Execution Flaw
Google has rolled out a fresh Android security update in November 2025 addressing two vulnerabilities in the System component, with devices at patch level 2025-11-01 now protected. The most severe issue, tracked as CVE-2025-48593, could allow remote code…
SecurityWeek -
Sling TV turned privacy into a game you weren’t meant to win
Sling TV has settled with the California Attorney General over claims that it blocked users from exercising their privacy rights, agreeing to pay $530,000. According to a press release from the Attorney General’s office, Sling misled users attempting to opt…
Malwarebytes -
RondoDox Botnet Swells Its Arsenal — 650% Jump in Enterprise-Focused Exploits
The RondoDox botnet has evolved from an IoT-focused threat into a multifaceted enterprise menace, with security researchers reporting October 30, 2025, as the shift date and Mayura Kathir noting the development on November 4, 2025. The v2 variant now…
gbhackers.com -
Balancer DeFi Platform Hit by Major Exploit Resulting in $100M+ in Losses
The Balancer DeFi platform was hit by a major exploit targeting Balancer’s V2 Composable Stable Pools, with losses reportedly exceeding $100 million. The incident highlights ongoing security challenges within the DeFi sector and the particular vulnerability…
gbhackers.com
