News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Wed 5 Nov 2025· 85 articles
-
Nikkei Says 17,000 Impacted by Data Breach Stemming From Slack Account Hack
Nikkei says 17,000 Slack users were affected by a data breach stemming from a Slack account hack, with compromised credentials enabling access to employee and business partner information. An investigation found that names, email addresses and chat histories…
SecurityWeek -
Mysterious 'SmudgedSerpent' Hackers Target U.S. Policy Experts Amid Iran–Israel Tensions
A new threat activity cluster, codenamed UNK_SmudgedSerpent, has been attributed to attacks on academics and foreign policy experts from June to August 2025, timed with heightened Iran–Israel tensions. According to Proofpoint, the group leveraged domestic…
The Hacker News -
Coordinated Hacktivist Threat Activity Targeting Belgium
A coalition of eight hacktivist threat groups with pro-Russian and pro-Palestinian affiliations has announced a campaign targeting Belgium’s internet infrastructure, with DDoS operations, OT environment targeting, and potential data exposure claims expected…
SOCRadar -
Apple patches 50 security flaws—update now
Apple has released security updates for iPhones, iPads, Macs, Apple Watches, Apple TVs, Safari, and Xcode, fixing nearly 50 security flaws that could let cybercriminals view private data, take control of devices, or bypass protections, according to Apple.…
Malwarebytes -
Portal26 Raises $9 Million for Gen-AI Adoption Platform
Portal26 has announced a $9 million Series A round for its Gen-AI adoption management platform, bringing the company’s total funding to $15 million. The round was led by Shasta Ventures, with additional support from Fusion Fund and an unnamed venture, and…
SecurityWeek -
U.S. Sanctions 10 North Korean Entities for Laundering $12.7M in Crypto and IT Fraud
The U.S. Treasury Department on 4 November 2025 sanctioned eight individuals and two North Korean entities for laundering money linked to cybercrime and IT worker fraud, among other illicit schemes. The sanctions target Jang Kuk Chol (Jang) and Ho Jong Son,…
The Hacker News -
CISA Alerts of Control Web Panel Command Injection Flaw Actively Exploited
CISA has issued an urgent alert about a critical command-injection flaw in Control Web Panel that is currently being actively exploited in the wild. Tracked as CVE-2025-48703, the vulnerability allows unauthenticated attackers to execute arbitrary operating…
gbhackers.com -
Former cybersecurity firm experts attempted to extort five U.S. companies in 2023 using BlackCat ransomware attacks
U.S. prosecutors charged three Florida men for using BlackCat ransomware to hack and extort five U.S. companies in 2023, with attacks spanning May to November that year. The targets included a medical device company from which about $10 million was demanded…
Security Affairs -
Why SOC Burnout Can Be Avoided: Practical Steps
Behind every alert is an analyst, tired eyes and long hours spent on false positives, which helps explain why many SOCs battle burnout. The piece argues burnout can be prevented by working smarter, not harder, through real-time context, automation, and…
The Hacker News -
Elusive Iranian APT Phishes Influential US Policy Wonks
Elusive Iranian APT UNK_SmudgedSerpent carried out highly targeted phishing against prominent US think tanks this summer, with activity noted between June and August 2025. The group impersonated policy influencers and used a mix of lures, including a…
Dark Reading -
Hackers Exploit AI Tools to Intensify Ransomware Attacks on European Organizations
European organisations are facing an unprecedented surge in ransomware attacks as cybercriminals increasingly adopt artificial intelligence and sophisticated social engineering tactics to breach defences and accelerate their operations. According to…
gbhackers.com -
Swedish IT Company Data Breach Exposes Personal Details of 1.5 Million Users
Swedish authorities have launched formal investigations into a significant data breach that exposed the personal details of more than 1.5 million individuals linked to Miljödata, an IT company relied on by multiple Swedish municipalities and regional…
gbhackers.com -
AI Engine WordPress Plugin Exposes 100,000 WordPress Sites to Privilege Escalation Attacks
A critical vulnerability in the AI Engine WordPress plugin has left over 100,000 active installations worldwide exposed to privilege escalation. On 4 October 2025, security researchers identified a Sensitive Information Exposure flaw tracked as…
gbhackers.com -
Jupyter Misconfiguration Exposes Systems to Root Privilege Escalation
Security researchers have identified a vulnerability in commonly misconfigured Jupyter notebook servers that can give attackers root-level access on Linux systems. The flaw stems from deployment choices rather than a Jupyter bug, with running a Jupyter…
gbhackers.com -
US Sanctions North Korean Bankers Accused of Laundering Stolen Cryptocurrency
The United States has imposed sanctions on a group of North Korean bankers, financial institutions and others accused of laundering money from cyber crime schemes to fund the regime’s nuclear weapons programme. Treasury’s Office of Foreign Assets Control…
SecurityWeek -
U.S. CISA adds Gladinet CentreStack, and CWP Control Web Panel flaws to its Known Exploited Vulnerabilities catalog
According to Security Affairs, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added Gladinet CentreStack and CWP Control Web Panel flaws to its Known Exploited Vulnerabilities (KEV) catalog, alongside XWiki Platform. The entries include…
Security Affairs -
Curly COMrades Hacker Group Deploys New Tools for Stealthy Remote Access on Compromised Windows 10 Systems
A sophisticated threat actor known as Curly COMrades has demonstrated advanced evasion by using Hyper-V on Windows 10 to host a minimal Alpine Linux‑based virtual machine containing their custom malware, creating a covert, long‑term foothold while the host…
gbhackers.comCurly COMrades -
CISA Warns of CWP Vulnerability Exploited in the Wild
CISA warned that a critical vulnerability in Control Web Panel (CWP), tracked as CVE-2025-48703, has been exploited in the wild. According to SecurityWeek, the flaw allows remote, unauthenticated attackers to execute arbitrary commands on vulnerable systems,…
SecurityWeek -
Security Professionals Charged for Using BlackCat Ransomware Against American Businesses
Two individuals with security backgrounds have been federally charged for orchestrating a coordinated ransomware campaign against American businesses using the BlackCat strain, also known as ALPHV. Ryan Clifford Goldberg from Georgia and Kevin Tyler Martin…
gbhackers.com -
FIN7 Hackers Leverage Windows SSH Backdoor for Stealthy Remote Access and Persistence
FIN7, also known as Savage, continues to rely on a Windows SSH backdoor infrastructure with minimal modifications since 2022, according to threat intelligence analysis. The threat actor employs an install[.]bat script paired with OpenSSH toolsets to…
gbhackers.comFIN7 -
Nine arrested in €600M crypto laundering bust across Europe
Nine arrests were made in a coordinated Eurojust-led operation across Europe for laundering €600M in crypto fraud. Authorities in France, Belgium, Cyprus, Germany, and Spain dismantled a ring that ran dozens of fake crypto investment sites, luring victims…
Security Affairs -
CISA Adds Gladinet and CWP Flaws to KEV Catalog Amid Active Exploitation Evidence
According to CISA, the U.S. Cybersecurity and Infrastructure Security Agency, two security flaws affecting Gladinet CentreStack/Triofox and Control Web Panel (CWP) have been added to the Known Exploited Vulnerabilities (KEV) catalog amid evidence of active…
The Hacker News -
Hackers Abuse OneDrive.exe via DLL Sideloading to Run Malicious Code
Security researchers have disclosed a sophisticated attack that abuses OneDrive[.]exe through DLL sideloading to run attacker-controlled code, a technique highlighted in GBHackers On Security on 5 November 2025. The method hinges on Windows loading libraries…
gbhackers.com -
Silent Lynx APT New Attack Targeting Governmental Employees Posing as Officials
Seqrite Labs’ APT Team has documented fresh campaigns from Silent Lynx, a sophisticated threat actor group known for orchestrating spear-phishing operations that impersonate government officials to target diplomatic and governmental employees across Central…
gbhackers.comYoroTrooper -
Attackers Exploit Microsoft Teams Flaws to Manipulate Messages and Fake Notifications
According to Check Point Research, four critical vulnerabilities in Microsoft Teams could allow attackers to impersonate executives, manipulate messages, alter notifications and forge identities during video and audio calls, undermining trust for the…
gbhackers.com -
DragonForce Cartel Surfaces from Leaked Conti v3 Ransomware Source Code
According to Acronis Threat Research Unit, DragonForce has emerged from leaked Conti v3 ransomware source code, rebranding itself as a ransomware cartel and increasing its global activity. The latest sample leverages vulnerable drivers such as…
gbhackers.comDragonForce -
Critical RCE Bug in Leading React Native NPM Module Could Allow Full System Compromise
Security researchers from JFrog recently uncovered CVE-2025-11953, a critical remote code execution flaw affecting the @react-native-community/cli-server-api package used with React Native, which attracts approximately two million weekly downloads. The…
gbhackers.com -
Auto Draft
Daily CyberSecurity presents a 404 Not Found page, with the explicit message “Oops! That page can’t be found.” The page suggests trying one of the links below or using a search to locate content, and it displays a November 2025 timestamp, which in UK format…
SecurityOnline -
Chromebook Killer? Apple Prepares Affordable MacBook Air (J700) for 2026 Launch
5 November 2025: There have long been rumours suggesting Apple is preparing to launch a more affordable line of MacBook devices aimed at competing directly with Chromebooks and other budget laptops. According to Bloomberg’s Mark Gurman, the upcoming device,…
SecurityOnline -
Orbital AI: Google Unveils Project Suncatcher to Launch TPU Data Centers into Space
Google is exploring a space-based twist on AI data centres with its Project Suncatcher, aiming to deploy TPU-equipped satellites to perform AI computations in orbit and harness solar power around the clock. The plan envisions data centres in space that could…
SecurityOnline -
Dev Oversight: Apple Accidentally Leaked Entire App Store Web Source Code via SourceMap
Apple’s redesigned App Store web version was launched with a new homepage and search function, but an oversight left the production environment’s SourceMap enabled, allowing anyone to download the complete front-end codebase from the live site. According to…
SecurityOnline -
Five-Year Support: Ubuntu Unveils Final Release Schedule for 26.04 LTS Edition
The article reports that Ubuntu 26.04 LTS will enter its feature freeze on 19 February 2026, with the final stable release scheduled for 23 April 2026, marking the start of a five-year support cycle lasting through 2031. It notes that users on Ubuntu 24.04…
SecurityOnline -
False Alarm: Microsoft Fixes Bug Incorrectly Warning Windows 10 LTSC & ESU Users That Support Ended
According to Microsoft, the issue where Windows Update could incorrectly display that a version is no longer supported may appear on some systems. In October 2025, Microsoft officially ended security update support for Windows 10 version 22H2, with ESU…
SecurityOnline -
Finally Independent: WhatsApp Launches Native Apple Watch App with Voice Messages
The article, dated 5 November 2025, reports that Meta has officially announced a native WhatsApp app for Apple Watch, addressing long-standing limits by moving beyond mirrored iPhone notifications. According to WhatsApp, the watchOS 10-compatible version…
SecurityOnline -
Critical CVE-2025-11749 Flaw in AI Engine Plugin Exposes WordPress Sites to Full Compromise
Researchers at Wordfence have disclosed a critical vulnerability, CVE-2025-11749 (CVSS 9.8), in the AI Engine WordPress plugin that could allow unauthenticated attackers to escalate privileges and take full control of affected sites. The flaw affects all…
SecurityOnline -
Kimsuky Debuts HTTPTroy Backdoor Against South Korea Users
Kimsuky has released an updated toolset, HttpTroy, described by threat researchers as a backdoor designed to give its controllers full access to an infected system, including moving files, taking screenshots and executing commands, with the aim of making…
Dark ReadingKimsuky -
Microsoft Teams Flaws Exposed: Attackers Could Impersonate Executives and Forge Caller Identity
Researchers at Check Point Research disclosed four critical vulnerabilities in Microsoft Teams that could allow attackers and malicious insiders to impersonate executives, manipulate messages, spoof notifications, and forge caller identities, undermining…
SecurityOnline -
Coordinated Cryptojacking Blitz: Hackers Exploit ThinkPHP and PHP RCE Flaws to Maximize Mining Profit
Analysts at GreyNoise Intelligence have reported a sharp, coordinated surge in attacks exploiting ThinkPHP, PHPUnit and PHP RCE flaws as cybercriminals rush to deploy cryptominers ahead of a high-profit window driven by rising cryptocurrency prices,…
SecurityOnline -
NGate NFC Malware Steals Cash from ATMs by Relaying EMV Data and PINs from Victim’s Phone
CERT Polska has uncovered a new Android-based NFC relay malware, dubbed NGate, that enables criminals to withdraw cash from ATMs using victims’ own payment cards without stealing the card itself. According to CERT Polska, the campaign is designed to enable…
SecurityOnline -
Trustwave Confirms ‘Trinity of Chaos’ Alliance: Scattered LAPSUS$ Hunters Form EaaS Supergroup
According to Trustwave SpiderLabs’ Cyber Threat Intelligence team, researchers have identified the formation of a federated threat alliance uniting Scattered Spider, ShinyHunters, and LAPSUS$ under a single banner known as Scattered LAPSUS$ Hunters (SLH).…
SecurityOnlineScattered Spider
