News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Fri 7 Nov 2025· 68 articles
-
The Congressional Budget Office Was Hacked. It Says It Has Implemented New Security Measures
The Congressional Budget Office confirmed it had been hacked, potentially exposing important government data to malicious actors. The agency, which has about 275 employees, provides impartial analysis to support lawmakers during the budget process. Caitlin…
SecurityWeek -
Chrome 142 Update Patches High-Severity Flaws
Chrome 142: Update Patches High-Severity Flaws, with Google shipping fixes for five vulnerabilities in the browser, including three high-severity flaws. The first high-risk issue is CVE-2025-12725 (CVSS 8.8), an out-of-bounds write bug in Chrome’s WebGPU…
SecurityWeek -
Enterprise Credentials at Risk – Same Old, Same Old?
Imagine this: Sarah from accounting receives a routine password reset email from her cloud provider, clicks the link, and unknowingly hands her credentials to cybercriminals who will sell them on underground markets for about $15. The piece outlines a…
The Hacker News -
Over 15 Malicious npm Packages Exploiting Windows to Deploy Vidar Malware
Datadog Security Research has uncovered a sophisticated supply chain attack targeting the npm ecosystem, involving 17 malicious packages across 23 releases designed to deliver Vidar infostealer malware to Windows systems. The campaign, attributed to a threat…
gbhackers.com -
Destructive Russian Cyberattacks on Ukraine Expand to Grain Sector
Multiple state-sponsored Russian groups are targeting Ukrainian entities and European countries connected to Ukraine, with their destructive wipers now aiming at the grain sector, according to ESET. The report identifies Sandworm (also known as APT44,…
SecurityWeek -
Researchers Bypass Elastic EDR Call-Stack Signatures Using Call Gadgets
Security researchers have unveiled a technique that uses call gadgets to insert an arbitrary module into the call stack during module loading, successfully bypassing Elastic EDR’s signature-based detection rules. The researchers’ approach leverages…
gbhackers.com -
Google Launches New Maps Feature to Help Businesses Report Review-Based Extortion Attempts
Google has announced a new dedicated form on Google Maps that lets businesses report extortion attempts by threat actors who post inauthentic negative reviews and demand ransoms to remove them. The feature targets the practice known as review bombing, where…
The Hacker News -
18 Arrested in Crackdown on Credit Card Fraud Rings
Europe-wide law enforcement arrested 18 individuals as part of Operation Chargeback, a crackdown on three major credit card fraud and money laundering networks. The group is alleged to have defrauded more than 4.3 million cardholders in 193 countries, using…
SecurityWeek -
OPNsense Firewall Update Addresses Multiple Security Issues and Enhances Features
OPNsense has released version 25.7.7, delivering critical security improvements and performance enhancements to strengthen enterprise firewall deployments. The update removes unsafe shell-execution patterns in the backend, notably eliminating the exec()…
gbhackers.com -
Russia-linked APT InedibleOchotense impersonates ESET to deploy backdoor on Ukrainian systems
Russia-linked group InedibleOchotense used trojanized ESET installers in phishing attacks on Ukrainian targets detected in May 2025. The campaign employed emails and Signal messages to deliver trojanized ESET installers that installed both legitimate…
Security Affairs -
New Phishing Campaign Targets Travelers via Compromised Hotel Booking.com Accounts
Cybersecurity researchers have uncovered a multi-stage phishing campaign that uses compromised hotel Booking[.]com accounts to defraud travellers worldwide. The operation has been active since at least April 2025 and begins by compromising hotel…
gbhackers.com -
Influence of Chinese Hacker Organizations on U.S. Foreign Policy
Chinese cyber-espionage groups have again demonstrated their capacity to target U.S. organisations tied to policy-making, highlighting the ongoing threat posed by state-linked actors. The campaign began with a mass scan on 5 April 2025, preceding an initial…
gbhackers.com -
Attackers Deploy LeakyInjector and LeakyStealer to Hijack Crypto Wallets and Browser Info
Cybersecurity researchers, according to Hybrid Analysis, have uncovered a two-stage malware campaign targeting cryptocurrency wallet users and browser data, with the LeakyInjector as the initial stage and LeakyStealer as the data thief. LeakyInjector uses…
gbhackers.com -
Vibe-Coded Malicious VS Code Extension Found with Built-In Ransomware Capabilities
A malicious Visual Studio Code extension, named susvsex and uploaded on 5 November 2025 by a user named suspublisher18, has been flagged as vibe-coded with basic ransomware capabilities, according to Secure Annex and The Hacker News. The extension’s…
The Hacker News -
Cavalry Werewolf Launches Cyberattack on Government Agencies to Deploy Network Backdoor
According to Doctor Web’s investigation, the July 2025 attack was a targeted operation attributed to the threat actor group known as Cavalry Werewolf, aimed at government agencies to steal confidential information and map network configurations for deeper…
gbhackers.comYoroTrooper -
Sandworm Hackers Target Ukrainian Organizations With Data-Wiping Malware
Russia-aligned threat actor Sandworm has intensified its destructive cyber operations against Ukrainian organisations, deploying data-wiper malware to cripple critical infrastructure and weaken the nation’s economy, according to the report. The data wipers…
gbhackers.comSandworm -
Amazon WorkSpaces for Linux Vulnerability Exposes Valid Auth Tokens to Attackers
A recently disclosed vulnerability in the Amazon WorkSpaces client for Linux exposes a flaw that could let attackers gain unauthorized access to user environments by improperly handling authentication tokens. The issue is tracked as CVE-2025-12779 and…
gbhackers.com -
Claude Desktop Hit by Critical RCE Flaws Allowing Remote Code Execution
Security researchers have found three official Claude Desktop extensions—Chrome, iMessage, and Apple Notes connectors—developed and published by Anthropic that share a critical remote code execution flaw tied to unsanitised command injection. The affected…
gbhackers.com -
The Congressional Budget Office was hacked. It says it has implemented new security measures.
The Congressional Budget Office was hacked, and it says it has implemented new security measures. Fatima Hussein reports that the small government office, with some 275 employees, provides objective analysis to support lawmakers during the budget process.…
DataBreaches -
Clop Ransomware group claims the breach of The Washington Post
The Clop Ransomware group claims a breach of The Washington Post, posting that the cybercrime group created a page for the university on its Tor data leak site and announced it will leak the stolen data soon, according to Security Affairs. The group’s…
DataBreaches -
EU Parliament committee votes to advance controversial Europol data sharing proposal
Lawmakers in the European Union’s Parliament voted on 6 November 2025 to greenlight a proposal that would allow Europol to expand data sharing and biometric data collection as part of its efforts to fight human trafficking and migrant smuggling. Parliament’s…
DataBreaches -
US Treasury Sanctions 8 North Koreans and 2 Banks for Laundering Crypto to Fund WMD Programs
According to the Office of Foreign Assets Control (OFAC), eight individuals and two entities linked to North Korea’s cybercrime and illicit IT operations were sanctioned for laundering millions of dollars in stolen cryptocurrency to fund Pyongyang’s weapons…
SecurityOnline -
OCI Fixes Container Escape Vulnerabilities in runc (CVE-2025-31133, CVE-2025-52565, CVE-2025-52881)
OCI has released security updates to fix three high-severity vulnerabilities in runc, tracked as CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881, which could allow container escape, denial of service, or privilege escalation on the host. The flaws affect…
SecurityOnline -
Booking.com Phishing Campaign Hijacks Hotel Accounts to Deliver PureRAT via ClickFix Lure
Threat analysts at Sekoia[.]io have uncovered a global phishing operation targeting the hospitality sector through compromised Booking[.]com and Expedia accounts, in a campaign that blends social engineering, malware delivery, and financial fraud. The…
SecurityOnline -
High-Severity Cisco ISE Flaw (CVE-2025-20343) Allows Unauthenticated DoS via Crafted RADIUS Requests
Cisco has flagged a high-severity vulnerability in its Identity Services Engine (ISE), CVE-2025-20343, which could allow unauthenticated remote attackers to trigger an unexpected restart and cause a denial-of-service. The flaw arises from a logic error in…
SecurityOnline -
DragonForce Ransomware Strikes Manufacturing Sector with Brute-Force, Exfiltrating Data Over SSH to Russian Host
Darktrace has published a detailed investigation into a DragonForce-affiliated ransomware attack that targeted a manufacturing organisation, detailing a multi-phase intrusion involving network scanning, brute-force credential attacks, data exfiltration, and…
SecurityOnlineDragonForce -
Amazon Fixes High-Severity Authentication Token Exposure in WorkSpaces Client for Linux (CVE-2025-12779)
Amazon has released a security update for the WorkSpaces client for Linux to address a high-severity vulnerability, CVE-2025-12779, that could allow local users to extract valid authentication tokens and gain unauthorized access to another user’s WorkSpace.…
SecurityOnline -
New Cephalus Ransomware Uses Fake AES Keys and GoLang to Thwart Analysis
Researchers from AhnLab Security Emergency Response Center (ASEC) have identified a new ransomware group named “Cephalus,” which surfaced in mid-June 2025 and uses Go-based ransomware with anti-analysis features. According to AhnLab’s report, Cephalus’…
SecurityOnline
