News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Thu 6 Nov 2025· 76 articles
-
Wipers from Russia’s most cut-throat hackers rain destruction on Ukraine
Wipers from Russia’s most cut-throat hackers rain destruction on Ukraine, with Sandworm and other Russian-state groups unleashing data-destroying payloads on Ukrainian targets. In April, the group targeted a Ukrainian university with two wipers, one tracked…
Ars Technica -
Clop Ransomware group claims the breach of The Washington Post
The Clop Ransomware group claims the breach of The Washington Post and has added the American daily newspaper to its Tor data leak site, stating that it will leak the stolen data soon. The group, also known as Cl0p, is described as a prolific Russian‑speaking…
Security Affairs -
Sora 2 Makes Videos So Believable, Reality Checks Are Required
According to Reality Defender, GenAI tools like Sora 2 are advancing faster than regulations can catch up, driving mounting concerns about deepfakes in enterprises. OpenAI’s Sora 2, launched in September with more advanced world simulation capabilities, can…
Dark Reading -
SonicWall Firewall Backups Stolen by Nation-State Actor
The SonicWall breach centered on the MySonicWall cloud backup service, with attackers stealing firewall configuration files and, later, access expanding to all customers who used the cloud backup. The company had previously described the incident as the…
Dark Reading -
Inside the Great Firewall Part 2: Technical Infrastructure
The piece explains that the Great Firewall Part 2 delves into the technical infrastructure behind China’s censorship ecosystem, drawing on more than 7,000 files from a 500GB data dump. At its core is the Traffic Secure Gateway (TSG), a modular DPI platform…
dti.domaintools.com -
Hackers commit highway robbery, stealing cargo and goods
Hackers are carrying out a modern-day highway robbery, with a group of cybercriminals attacking trucking, freight and logistics firms by impersonating brands and redirecting real cargo to unapproved locations. According to new research, the attackers can…
Malwarebytes -
Cisco became aware of a new attack variant against Secure Firewall ASA and FTD devices
Cisco warned of a new attack variant targeting vulnerable Secure Firewall ASA and FTD devices by exploiting CVE-2025-20333 and CVE-2025-20362, in an alert published on 5 November 2025. According to Cisco, the attack can cause unpatched devices to…
Security Affairs -
Google sounds alarm on self-modifying AI malware
Google’s Threat Intelligence Group (GTIG) warns of a new generation of malware that uses AI during execution to mutate, adapt, and collect data in real time, boosting evasion and persistence. In 2025, GTIG identified the first malware that mid-execution…
Security Affairs -
New IDC research highlights a major cloud security shift
Cloud security is described as being at a tipping point, with IDC’s latest research showing organisations experienced an average of nine cloud security incidents in 2024, and 89% reporting a year-over-year increase. According to IDC, cloud-native application…
Microsoft -
Android malware steals your card details and PIN to make instant ATM withdrawals
According to Malwarebytes, a new Android-based malware called NGate was analysed by the Polish Computer Emergency Response Team (CERT Polska) and documented as enabling unauthorized ATM withdrawals by stealing card details and PIN via NFC. The threat relies…
Malwarebytes -
Take control of your privacy with updates on Malwarebytes for Windows
Malwarebytes has released Privacy Controls in the latest Malwarebytes for Windows update, bringing together four privacy settings in one easy screen to help you decide how Microsoft handles your data. You can toggle permissions for third‑party apps to use…
Malwarebytes -
11/6/25, 3:50 PM
Darktrace has been named the only Customers’ Choice in the 2025 Gartner® Peer Insights™ Voice of the Customer for Network Detection and Response, according to Gartner® Peer Insights™ Voice of the Customer. The award comes with a 4.8/5 rating from 242…
darktrace.com -
Researchers Hack ChatGPT Memories and Web Search Features
Tenable researchers disclosed seven new ChatGPT vulnerabilities and attack techniques that could facilitate data theft and other malicious activity. The flaws involve several features, including the bio or memories function, which lets ChatGPT recall user…
SecurityWeek -
Trojanized ESET Installers Drop Kalambur Backdoor in Phishing Attacks on Ukraine
A previously unknown threat activity cluster impersonating Slovak cybersecurity company ESET has been observed phishing Ukrainian entities with trojanized ESET installers, delivering a backdoor called Kalambur (aka SUMBUR). The campaign was detected in May…
The Hacker News -
Cisco Warns of New Firewall Attack Exploiting CVE-2025-20333 and CVE-2025-20362
Cisco has disclosed a new attack variant targeting devices running Cisco Secure Firewall ASA and FTD software that are vulnerable to CVE-2025-20333 and CVE-2025-20362, with the warning coming in an updated advisory issued on Wednesday. According to the…
The Hacker News -
HTTP/2 ‘MadeYouReset’ Vulnerability Enable Denial-of-Service (DoS) Attacks
A critical vulnerability across many HTTP/2 implementations, known as MadeYouReset and tracked as CVE-2025-8671, enables threat actors to orchestrate denial-of-service and distributed denial-of-service attacks by abusing server-sent stream resets. Security…
gbhackers.com -
AI Browsers That Beat Paywalls by Imitating Humans
AI-powered browsers such as OpenAI’s Atlas, Perplexity’s Comet and Microsoft’s Copilot mode in Edge are described as capable of bypassing paywalls by mimicking legitimate human users, a development that poses new challenges for publishers seeking to protect…
gbhackers.com -
Truffle Security Raises $25 Million for Secret Scanning Engine
According to SecurityWeek, Truffle Security today announced raising $25 million in a Series B funding round that brings the total raised by the company to over $40 million. The investment round was led by Intel Capital and a16z, with additional support from…
SecurityWeek -
Critical Bug in Midnight Ransomware Tool Unlocks File Recovery
First detected by Gen researchers, Midnight ransomware blends familiar mechanics with cryptographic modifications that unintentionally create a window for file recovery, presenting a rare opportunity for victims to reclaim data without paying. The threat…
gbhackers.com -
Iranian Hackers Exploit RMM Tools to Target Academics and Foreign-Policy Experts
According to Proofpoint Threat Research, a previously unknown Iranian threat actor dubbed UNK_SmudgedSerpent conducted sophisticated phishing campaigns against academics and foreign policy experts between June and August 2025. The group used credential…
gbhackers.com -
Cisco Confirms Active Exploitation of Secure ASA and FTD RCE Vulnerability
Cisco has issued a critical warning that ongoing attacks are targeting a severe remote code execution vulnerability affecting its Secure Firewall ASA Software and Secure Firewall FTD Software, with threat actors having developed a new attack variant to fully…
gbhackers.com -
Threat Actors Exploit VS Code Extensions for Ransomware via GitHub C2
Security researchers have uncovered a campaign in which threat actors are using Visual Studio Code extensions and GitHub as a command-and-control infrastructure to deliver multi-stage malware capable of deploying ransomware and conducting system…
gbhackers.comKimsuky -
Pro-Russian hackers target Belgian telecom websites in DDoS attack
According to Belgian News Agency, a DDoS briefly disrupted the websites of Belgian telecom operators Proximus and Scarlet on 6 November 2025, with the pro-Russian hacker group NoName057 claiming responsibility via Telegram and Ghent University Hospital also…
DataBreaches -
Follow Pragmatic Interventions to Keep Agentic AI in Check
SecurityWeek's article on agentic AI outlines how this evolving technology can speed operations but requires careful governance to manage opacity, misalignment and misuse. It describes first-use cases such as incident response and threat hunting, while…
SecurityWeek -
Nevada Refused to Pay Cyberattack Ransom as Systems Sat Compromised for Months
Nevada’s state systems sat unknowingly compromised for three months before officials noticed a major ransomware attack and flagged it up in August, according to an official document newly released by the Nevada office responsible for the state’s technology…
DataBreaches -
Journalists going solo on Substack at risk from hackers
Alys Keys reports that journalists going solo on Substack are at risk from hackers, with phishing playing a central role. Former BuzzFeed journalist Anne Helen Petersen received an email warning of suspicious activity on her Substack account and that her…
DataBreaches -
Kr: Investigation shows KT concealed malware infections, security failures leading to hacking breach
KT Corp., South Korea’s second-largest mobile carrier, was found to have concealed malware infections and failed to report the security breaches that led to a hacking and data theft incident, a government-led investigation revealed. The joint…
DataBreaches -
Hackers defraud multiple lawmakers, a Pakistan Senate committee told
According to MM News, the Senate Standing Committee on Interior in Pakistan heard that hackers have defrauded several members of Parliament of hundreds of thousands of rupees through online scams, a revelation disclosed during the committee meeting chaired…
DataBreaches -
Checkpoint Analysis: Dissecting the $128M Balancer Pool Drain in Under 30 Minutes
In the early hours of 3 November 2025, the Balancer V2 Vault was identified as the focus of a rapid DeFi heist, with attackers siphoning $128.64 million from Balancer ComposableStablePool contracts across six networks in under 30 minutes, according to Check…
gbhackers.com -
DeFi Protocol Balancer Starts Recovering Funds Stolen in $128 Million Heist
Hackers drained more cryptocurrency from the DeFi protocol Balancer in a $128 million heist by exploiting a rounding flaw in the upscale function of EXACT_OUT transactions and using batch swaps to manipulate pool balances. The attack occurred at 7:48 AM UTC,…
SecurityWeek -
Cisco UCCX Vulnerabilities Allow Remote Attackers to Execute Arbitrary Code
Cisco has issued a security advisory covering two severe vulnerabilities in its Unified CCX platform that could allow remote attackers to execute arbitrary commands and bypass authentication. The flaws, CVE-2025-20354 (Remote Code Execution) and…
gbhackers.com -
Airstalk Malware Exploits AirWatch MDM for Covert C2 Communication
Security researchers have identified Airstalk, a malware family that exploits VMware’s AirWatch API (Workspace ONE Unified Endpoint Management) to establish covert command-and-control channels, rather than relying on traditional network-based C2. The…
gbhackers.com -
From Tabletop to Turnkey: Building Cyber Resilience in Financial Services
The Hacker News piece, published on 6 November 2025, argues that cyber-resilience has shifted from a best practice to an operational necessity and regulatory requirement for financial institutions. It surveys how crisis management andTabletop exercises are…
The Hacker News -
Nevada Ransomware Attack Started Months Before It Was Discovered, Per Report
The Nevada ransomware attack was discovered in August but began as early as May when a state employee downloaded malicious software, according to the after-action report released by the state. The incident reportedly cost at least $1.5 million to recover,…
SecurityWeek -
ThreatsDay Bulletin: AI Tools in Malware, Botnets, GDI Flaws, Election Attacks & More
ThreatsDay’s latest bulletin surveys a wide range of cyber threats, from patched Windows GDI flaws that enable remote code execution and information disclosure to the ongoing use of AI to speed up malware triage, while human expertise remains essential for…
The Hacker News -
Automotive IT Firm Hyundai AutoEver Discloses Data Breach
Hyundai AutoEver America, the North American arm of the South Korean automotive IT services firm, disclosed a data breach resulting from a hacker attack that targeted the company earlier this year. The breach affected Hyundai AutoEver America (HAEA), based…
SecurityWeek -
Bitdefender Named a Representative Vendor in the 2025 Gartner® Market Guide for Managed Detection and Response
Bitdefender has been named a Representative Vendor in the Gartner Market Guide for Managed Detection and Response (MDR), marking the fourth consecutive year of inclusion. According to Gartner, more than 600 providers globally claim to deliver MDR services,…
The Hacker News -
Cyberattacks on UK water systems reveal rising risks to critical infrastructure
According to Recorded Future News, five cyber incidents affecting the UK’s water system have taken place since 1 January 2024, a figure drawn from information requested from the Drinking Water Inspectorate. In August 2022 the Clop ransomware gang hit South…
Malwarebytes -
Cisco Patches Critical Vulnerabilities in Contact Center Appliance
Cisco has released patches for nearly a dozen vulnerabilities across its networking and contact centre products, including two critical flaws that could allow remote code execution on the Unified CCX appliance. The issues, tracked as CVE-2025-20354 (CVSS…
SecurityWeek -
Multiple ChatGPT Security Bugs Allow Rampant Data Theft
Dark Reading reports that seven security flaws in OpenAI’s ChatGPT and its SearchGPT browsing feature could enable attackers to exfiltrate private user data, bypass safety filters and manipulate the chatbot’s behaviour. Researchers from Tenable describe…
Dark Reading
