News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Wed 5 Nov 2025· 85 articles
-
Musk and Trump both went to Penn—now hacked by someone sympathetic to their cause
The University of Pennsylvania was targeted after it became an obvious target of the Trump administration, with a hacker claiming to share Musk and Trump’s grievances over affirmative action and “wokeness.” On 31 October 2025, Penn said the breach stemmed…
Ars Technica -
AI-generated malware poses little real-world threat, contrary to hype
On 5 November 2025, Google revealed five recent malware samples built with generative AI, but their outcomes were far below professional malware development and pose little real-world threat. The samples—PromptLock, FruitShell, PromptFlux, PromptSteal, and…
Ars Technica -
Nikkei Suffers Breach Via Slack Compromise
Nikkei Inc. disclosed a data breach that exposed data and chat histories for more than 17,000 Slack accounts, with 17,368 individuals potentially affected. The breach stemmed from an unauthorized external login in the Slack workspace after a personal…
Dark Reading -
SonicWall blames state-sponsored hackers for September security breach
SonicWall has attributed the September security breach to state-sponsored hackers, with the incident involving cloud backup files tied to its MySonicWall service. In September the company urged customers to reset credentials after firewall backup files were…
Security Affairs -
Tracking a Dragon: Investigating a DragonForce-affiliated ransomware attack with Darktrace
Darktrace reports a DragonForce-affiliated ransomware attack that targeted the manufacturing sector, outlining an attack lifecycle beginning with network scanning and credential brute-forcing during August 2025, followed by eight days of inactivity before…
darktrace.comDragonForce -
U.S. sanctioned North Korea bankers for laundering funds linked to cyberattacks and peapons program
On 5 November 2025, the U.S. Treasury Department sanctioned two North Korean financial institutions and eight individuals accused of laundering funds from cybercrime to support the DPRK’s weapons programmes. According to the U.S. Treasury, these illicit…
Security Affairs -
Securing critical infrastructure: Why Europe’s risk-based regulations matter
The article explains how Europe’s new risk-based cybersecurity regulations, NIS2 and DORA, are reshaping the role of CISOs by expanding oversight across IT, OT, IoT and the supply chain, with directors now responsible for approving and supervising the…
Microsoft -
Operational Technology Security Poses Inherent Risks for Manufacturers
OT controls the processes and equipment essential to manufacturing, and the piece notes that while it is built to last, legacy technology remains on the factory floor, with a pervasive lack of visibility over a vast and growing number of assets. The article…
Dark Reading -
Google Uncovers PROMPTFLUX Malware That Uses Gemini AI to Rewrite Its Code Hourly
Google has uncovered an unknown threat actor using an experimental VB Script malware, dubbed PROMPTFLUX, that interacts with Gemini’s AI model API to rewrite its own code for obfuscation and evasion. According to Google Threat Intelligence Group (GTIG) the…
The Hacker News -
Malware Now Uses AI During Execution to Mutate and Collect Data, Google Warns
Google’s Threat Intelligence Group has documented malware that uses AI during execution to mutate, self-modify and data‑collect, signalling a step towards more autonomous threats. According to Google Threat Intelligence Group, examples seen in the wild…
SecurityWeek -
Critical Site Takeover Flaw Affects 400K WordPress Sites
Elizabeth Montalbano reports that a critical flaw in the Post SMTP WordPress plugin has affected about 400,000 sites, enabling unauthenticated account and website takeover. The vulnerability, tracked as CVE-2025-11833, carries a 9.8 CVSS score and stems from…
Dark Reading -
Clop Ransomware Group Exploits New 0-Day Vulnerabilities in Active Attacks
The Clop ransomware group is described as continuing to pose a significant threat to enterprise organisations worldwide, with recent analysis noting their exploitation of a critical zero-day vulnerability in Oracle E-Business Suite. Operating since early…
gbhackers.com -
Hack exposes Kansas City, Kansas, Police’s secret officer misconduct list
A DataBreaches[.]Net report dated 5 November 2025 reveals that documents hacked from the Kansas City, Kansas, Police Department show a secret corroborated list of officer misconduct, described as including dishonesty, sexual harassment, excessive force and…
DataBreaches -
Microsoft Issues Alert: BitLocker Recovery Risk After October 2025 Updates
Microsoft has issued an urgent advisory for Windows users, confirming that a set of security updates released after 14 October 2025 may push some systems to the BitLocker recovery screen on restart. The issue, under active investigation, has led to reports…
gbhackers.com -
Swedish IT Company Data Breach Exposes Personal Details of 1.5 Million Users
According to DataBreaches[.]Net, Swedish authorities have launched formal investigations into a data breach affecting Miljödata, an IT company whose security lapse exposed the personal information of over 1.5 million individuals. The August attack, detected…
DataBreaches -
Scattered Spider2 articles this day · gbhackers.com first
Webinar Today: Scattered Spider Exposed – Critical Takeaways for Cyber Defenders · Three Infamous Hacker Groups Join Forces as the ‘Scattered LAPSUS$ Hunters
2 outlets-
Webinar Today: Scattered Spider Exposed – Critical Takeaways for Cyber Defenders
According to SecurityWeek, the webinar today titled Scattered Spider Exposed – Critical Takeaways for Cyber Defenders examines the cybercrime collective Scattered Spider, described as loosely connected yet highly organised, which has recently attacked…
SecurityWeek -
Three Infamous Hacker Groups Join Forces as the ‘Scattered LAPSUS$ Hunters
Three of the cybercriminal heavyweights—Scattered Spider, ShinyHunters, and LAPSUS$—have formally aligned to form the Scattered LAPSUS$ Hunters (SLH), a federated collective that emerged in early August 2025. According to Trustwave’s SpiderLabs Blog, SLH…
gbhackers.com
-
-
Researchers Find ChatGPT Vulnerabilities That Let Attackers Trick AI Into Leaking Data
Cybersecurity researchers have disclosed a new set of vulnerabilities in OpenAI’s ChatGPT, capable of leaking personal information from users’ memories and chat histories, in a report attributed to Tenable published on 05 November 2025. The seven identified…
The Hacker News -
Risk 'Comparable' to SolarWinds Incident Lurks in Popular Software Update Tool
Researchers have identified a supply chain risk in Advanced Installer, a popular installer authoring tool, describing it as potentially enabling cyberattacks comparable in scope to notable supply chain incidents. The risk centres on Advanced Installer’s…
Dark Reading -
GTIG AI Threat Tracker: Advances in Threat Actor Usage of AI Tools
Executive Summary Based on recent analysis of the broader threat landscape, Google Threat Intelligence Group (GTIG) has identified a shift that occurred within the last year: adversaries are no longer leveraging artificial intelligence (AI) just for…
Google Cloud -
Closing the AI Execution Gap in Cybersecurity — A CISO Framework
Closing the AI Execution Gap in Cybersecurity outlines five critical dimensions CISOs must manage: augmenting security with AI, automating security with AI, protecting AI systems, defending against AI-powered threats, and aligning AI strategies with business…
Dark Reading -
Should you let Chrome store your driver’s license and passport?
Google has rolled out an enhanced autofill feature in Chrome that can now stash your driver’s license, passport details, VIN or license plate information. The piece notes that storing government-issued IDs in Chrome is convenient but raises security…
Malwarebytes -
Flare Raises $30 Million for Threat Exposure Management Platform
Flare raised $30 million in a funding round, taking its total funding to nearly $70 million, according to SecurityWeek. The round comprises a $15 million Series B extension led by Inovia Capital’s Growth Fund with additional support from Base10 Partners and…
SecurityWeek -
Armis Raises $435 Million in Pre-IPO Funding Round at $6.1 Billion Valuation
According to SecurityWeek, Armis has raised $435 million in a pre-IPO funding round that values the company at $6.1 billion, announced on November 5, 2025. The round was led by Growth Equity at Goldman Sachs Alternatives, with participation from CapitalG,…
SecurityWeek -
Beware: 239 Dangerous Android Apps Found on Google Play with 40M+ Installs
According to Zscaler, Inc.'s ThreatLabz 2025 report, Google Play hosts 239 malicious Android applications that have been downloaded 42 million times, with attackers disguising them in the Tools category to target users in hybrid and remote work environments.…
gbhackers.com -
Malanta Emerges from Stealth with $10 Million Seed Funding
Malanta, a Tel Aviv-based cybersecurity startup, has emerged from stealth with a $10 million seed funding round led by Cardumen Capital and with participation from The Group Ventures. The round also counted angel investors including Udi Mokady, Benny…
SecurityWeek -
ConductorOne Raises $79 Million in Series B Funding
ConductorOne has raised $79 million in a Series B funding round, bringing its total raised to over $110 million, according to SecurityWeek. The investment round was led by Greycroft, with additional support from CrowdStrike Falcon Fund and previous investors…
SecurityWeek -
Something Old and Something New: The False Claims Act and Cybersecurity
According to The National Law Review, the Department of Justice has obtained several cybersecurity-related False Claims Act settlements totaling more than $50 million, underscoring cybersecurity as an enforcement priority for the administration with…
DataBreaches -
CISA Issues Alert on Gladinet CentreStack and Triofox Vulnerabilities Under Active Exploitation
According to CISA, the Cybersecurity and Infrastructure Security Agency has added a critical vulnerability affecting Gladinet CentreStack and Triofox to its Known Exploited Vulnerabilities catalog, signalling active exploitation in the wild. The flaw is…
gbhackers.com -
Google Warns: AI Makes Cyber Threats Faster and Smarter by 2026
Google has released its Cybersecurity Forecast 2026 report, warning that AI will make cyber threats faster and smarter by 2026, with the threat landscape shaped by real-world data from Google Cloud security leaders, dozens of experts, analysts, researchers…
gbhackers.com -
SesameOp Backdoor Explained: What You Need to Know About the OpenAI API Exploitation
In July 2025, Microsoft uncovered a new backdoor named SesameOp, which marks a notable shift in cyber-espionage tactics by exploiting the OpenAI Assistants API to communicate with and exfiltrate data from compromised devices. According to Microsoft’s…
SOCRadar -
Nikkei Says 17,000 Impacted by Data Breach Stemming From Slack Account Hack
Nikkei says hackers gained access to employee Slack accounts, with malware stealing Slack credentials from an employee’s personal computer. The credentials were then used to access Slack accounts, enabling the attacker to steal information pertaining to…
DataBreaches -
Software dev accidentally leaks Australian govt documents
An external software developer engaged by a Australian government agency accidentally made a collection of private documents available on the public internet earlier this year, according to the Office of the Australian Information Commissioner (OAIC). The…
DataBreaches -
Phone location data of top EU officials for sale, report finds
Phone location data of top EU officials for sale, report finds, reports DataBreaches[.]Net on 5 November 2025, revealing that journalists in Europe found it easy to spy on senior officials using commercially obtained location histories sold by data brokers.…
DataBreaches -
How an Attacker Drained $128M from Balancer Through Rounding Error Exploitation
According to Check Point Research, on 3 November 2025 an attacker drained $128.64 million from Balancer V2 across six blockchain networks by exploiting arithmetic precision loss in pool invariant calculations within ComposableStablePools. The attack…
Check Point -
Securing the Open Android Ecosystem with Samsung Knox
Samsung Knox is presented as a built‑in security platform for Samsung Galaxy devices that combines hardware and software protections to safeguard data, give IT teams deeper control, and support enterprise needs. The article highlights how Knox defends…
The Hacker News -
NGate Malware Enables Unauthorized Cash Withdrawals at ATMs Using Victims’ Payment Cards
NGate is described as an Android-based threat that exploits near-field communications to enable unauthorized ATM cash withdrawals using victims’ payment cards, without stealing the physical card. The malware uses a relay attack whereby NFC communications…
gbhackers.com -
Exploited ‘Post SMTP’ Plugin Flaw Exposes WordPress Sites to Takeover
According to SecurityWeek, a critical vulnerability in the WordPress Post SMTP plugin exposes hundreds of thousands of sites to takeover by letting attackers read arbitrary logged emails, including password resets. The flaw, tracked as CVE-2025-11833 with a…
SecurityWeek -
Daylight Raises $33 Million for AI-Powered MDR Platform
SecurityWeek reports that Daylight has announced a $33 million Series A round to fuel the development of its AI-powered Managed Detection and Response platform, described as MASS, and the launch of new protection modules for identity threat response and…
SecurityWeek -
APT-C-60 Campaign: Malicious VHDX Hosted on Google Drive Lures Job Applicants
According to JPCERT/CC, the APT-C-60 campaign continues to target recruitment professionals in Japan, with attackers now attaching weaponised VHDX files directly to emails after evolving from Google Drive-hosted files observed earlier. The operation uses a…
gbhackers.comAPT-C-60
