News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Tue 4 Nov 2025· 70 articles
-
‘SleepyDuck’ Malware in Open VSX Lets Attackers Remotely Control Windows PCs
Security researchers have identified SleepyDuck as a remote access trojan hidden in the Open VSX IDE extension marketplace, targeting developers using code editors such as Cursor and Windsurf. The malicious extension masqueraded as a legitimate Solidity tool…
gbhackers.com -
Google’s AI ‘Big Sleep’ Finds 5 New Vulnerabilities in Apple’s Safari WebKit
Google’s AI cybersecurity agent Big Sleep has been credited by Apple with identifying up to five security flaws in the WebKit component used by Safari, potential triggers for browser crashes or memory corruption. The vulnerabilities are CVE-2025-43429,…
The Hacker News -
Crooks exploit RMM software to hijack trucking firms and steal cargo
Crooks are targeting trucking and logistics firms by weaponising remote monitoring and management (RMM) tools to hijack cargo and steal freight, a campaign active since June 2025 and linked to organised crime. The crew hijacks cargo bids, uses compromised…
Security Affairs -
Android Zero-Click RCE (CVE-2025-48593) in System Component Requires Immediate Patch for Versions 13-16
Google’s November 2025 Android Security Bulletin addresses a critical remote code execution flaw in the System component, tracked as CVE-2025-48593, which could allow an attacker to run arbitrary code with no additional execution privileges and no user…
SecurityOnline -
U.S. Prosecutors Indict Cybersecurity Insiders Accused of BlackCat Ransomware Attacks
Federal prosecutors in the U.S. have accused a trio of cybersecurity insiders of conducting BlackCat (aka ALPHV) ransomware attacks against five U.S. companies between May and November 2023, extorting victims as they operated from Florida and elsewhere. The…
The Hacker News -
Malicious PuTTY Ads Deliver OysterLoader, Allowing Attackers Full Device and Network Access
The Rhysida ransomware gang has been running a sophisticated malvertising campaign that delivers OysterLoader malware through deceptive search engine advertisements, giving attackers complete access to compromised devices and networks. The operation targets…
gbhackers.comRhysida -
SesameOp: Using the OpenAI Assistants API for Covert C2 Communication
Microsoft’s DART researchers disclosed SesameOp, a backdoor that uses the OpenAI Assistants API as a covert command-and-control channel rather than any OpenAI SDK, embedded in two components: the loader Netapi64[.]dll and the main backdoor…
gbhackers.com -
Microsoft’s WSUS Patch Causes Hotpatching Failures on Windows Server 2025
Microsoft has acknowledged a critical issue affecting Windows Server 2025 systems enrolled in the Hotpatch programme, after a WSUS patch was inadvertently distributed to machines configured for Hotpatch updates. The distribution error briefly made the update…
gbhackers.com -
Microsoft Detects "SesameOp" Backdoor Using OpenAI's API as a Stealth Command Channel
Microsoft has disclosed a novel backdoor dubbed SesameOp that uses OpenAI Assistants API as a stealth command-and-control channel, with the attack described by Microsoft’s Detection and Response Team as a means to covertly manage compromised devices.…
The Hacker News -
Hackers Can Manipulate Claude AI APIs with Indirect Prompts to Steal User Data
A security researcher disclosed that Anthropic’s Claude AI system can be exploited through indirect prompts to exfiltrate user data via its built‑in File API. The attack relies on Claude’s Code Interpreter and API features, which researchers demonstrated…
gbhackers.com -
Cybercriminals Exploit RMM Tools to Target Trucking Firms and Hijack Freight
Cybercriminals are exploiting remote monitoring and management (RMM) tools to target trucking firms and hijack freight, with campaigns described as aiming to steal cargo shipments worth millions. According to Proofpoint researchers, activity against trucking…
gbhackers.com -
Apple Releases Security Update Addressing Critical Flaws in iOS 26.1 and iPadOS 26.1
Apple has rolled out security updates for iOS 26.1 and iPadOS 26.1, issued on 3 November 2025, including fixes for a wide range of vulnerabilities that could allow malicious apps to access sensitive data, bypass privacy settings, or destabilise devices. The…
gbhackers.com -
AI Compute Race: Microsoft Secures $9.7 Billion GPU Deal with IREN for Cloud Expansion
Microsoft announced a five-year deal with Australian infrastructure operator IREN, valued at up to $9.7 billion, to secure additional AI cloud computing capacity as demand for its services grows, according to Reuters. Under the agreement, Microsoft will…
SecurityOnline -
Cloud Wars: OpenAI Signs $38 Billion Computing Deal with AWS, Ending Microsoft Exclusivity
OpenAI has announced a multi-year cloud computing agreement with Amazon, valued at up to $38 billion, marking the first formal collaboration between the two companies and ending OpenAI’s exclusive arrangement with Microsoft. Under the seven-year contract,…
SecurityOnline -
Streamlined? Microsoft Strips Critical Info from Windows Update Names, Causing IT Backlash
Microsoft is tightening Windows Update naming by stripping away contextual details such as the update type and release date, a move that has drawn sharp objections from IT admins and users who say it reduces clarity. The article notes that the current…
SecurityOnline -
The 69 MB Challenge: Developer Strips Windows 7 to Its Bare Minimum—And It Still Boots
The Daily CyberSecurity article published on 4 November 2025 reports that a developer, known as XenoPanther, has created a version of Windows 7 that occupies a mere 69 MB. According to the developer, the Windows 7 desktop can just barely start, with…
SecurityOnline -
Access Denied: Microsoft Authenticator to Purge Entra ID Credentials on Rooted Devices
According to Microsoft’s latest Microsoft Entra ID verification notice, beginning in February 2026 identity authentication for any enterprise will no longer be supported on jailbroken or rooted devices using Microsoft Authenticator. The feature appears to be…
SecurityOnline -
Years Late: Apple Finally Launches Full Web-Based App Store Homepage with Search & Discovery
Apple has unveiled a revamped web-based App Store homepage with a fully featured search and discovery experience, marking a shift from years of relying on individual app description pages rather than a central storefront. The new interface offers…
SecurityOnline -
Passwordless Future: Microsoft Edge 142 Rolls Out Cross-Platform Passkey Sync
On 4 November 2025, Microsoft Edge v142.0 was released with cross-platform passkey synchronization, enabling users to reuse their passkeys across multiple devices without repeated setup. The feature aims to simplify authentication by allowing passkeys stored…
SecurityOnline -
Clarity Fix: iOS 26.1 Launches with Liquid Glass Tint Option & Camera Gesture Toggle
Apple has officially released iOS 26.1, introducing two notable features: a Liquid Glass tint option to increase background opacity for readability, and a new Camera gesture toggle that lets users disable the swipe-to-open Camera gesture on the Home Screen.…
SecurityOnline -
Model Pulled: Google Removes Gemma AI After Fabricating Defamatory Claims About U.S. Senator
Gemma, an open‑source AI model developed by Google and accessible through Google AI Studio, has been removed from the platform with Google offering no explanation for the move. The action follows a letter from U.S. Republican Senator Marsha Blackburn…
SecurityOnline -
SesameOp Backdoor Hijacks OpenAI Assistants API for Covert C2 and Espionage
SesameOp is a sophisticated espionage-focused backdoor that hijacks OpenAI Assistants API to act as a covert command-and-control channel, a technique uncovered by Microsoft’s Incident Response – Detection and Response Team. The malware was identified after a…
SecurityOnline -
AI-Discovered Flaw: Redis Flaw (CVE-2025-62507) Allows Remote Code Execution via Stack Buffer Overflow
According to Redis advisory, CVE-2025-62507 is a high-severity vulnerability that could allow remote code execution via a stack buffer overflow triggered by improper input handling in the XACKDEL command, which is used in stream message acknowledgment and…
SecurityOnline -
Cyber-Enabled Cargo Theft: Hackers Hijack Logistics Firms with RMM Tools to Steal Physical Shipments
Proofpoint researchers have uncovered a sophisticated cyber-enabled cargo theft operation in which threat actors infiltrate trucking and logistics companies, use remote monitoring and management tools, and exploit industry-specific platforms to hijack…
SecurityOnline -
Generative AI Accelerates Malware Reverse Engineering: ChatGPT Breaks XLoader’s Multiple RC4 Encryption Layers in Hours
According to Check Point Research, Generative AI tools such as ChatGPT can accelerate malware reverse engineering, cutting analysis time from days to hours while focusing on the XLoader malware, a rebrand of FormBook. The study notes that XLoader is built…
SecurityOnline -
Operation Peek-A-Baku: Silent Lynx APT Exploits LNK Flaws to Deploy Reverse Shells via GitHub Against Central Asian Diplomacy
Seqrite Labs’ APT Team has released a detailed report on Operation Peek-A-Baku, identifying the threat actor Silent Lynx as behind a series of LNK-based exploits used to deploy reverse shells via GitHub against Central Asian diplomacy targets. The campaigns,…
SecurityOnlineYoroTrooper -
-
Researcher Details Windows SMB Server Elevation of Privilege Vulnerability – CVE-2025-58726
A newly disclosed Windows vulnerability, CVE-2025-58726, lets attackers with low privileges gain SYSTEM-level access remotely by exploiting Kerberos authentication reflection via Ghost SPNs. Disclosed by Andrea Pierini, a researcher at Semperis, the flaw…
SecurityOnline -
Rhysida Ransomware Abuses Microsoft Trusted Signing to Deploy OysterLoader Via Teams Malvertising
The Rhysida ransomware gang, previously known as Vice Society, has launched a malvertising campaign that uses Microsoft’s Trusted Signing certificates to deploy OysterLoader, a multi-stage initial access tool, via ads imitating legitimate software such as…
SecurityOnline -
Perplexity Unveils AI-Powered Patents Tool That Democratizes Research with Natural Language Search
4 November 2025: Perplexity has unveiled a new AI-powered patent research tool called Perplexity Patents, currently in beta testing and available for free to all users. Described as an AI patent research agent, the platform aims to democratise access to…
SecurityOnline
