News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Mon 10 Nov 2025· 65 articles
-
Italian Adviser Becomes Latest Target in Expanding Paragon Graphite Spyware Surveillance Case
The GBHackers piece reports that Francesco Nicodemo, a veteran Italian political communications professional, has become the latest confirmed victim in the Paragon Graphite spyware surveillance case, marking another chapter in the campaign’s reach into…
gbhackers.com -
APT Groups Target Construction Firms to Steal RDP, SSH, and Citrix Credentials
GBHackers reports that APT groups and other sophisticated cyber actors are targeting construction firms to steal RDP, SSH and Citrix credentials, exploiting the sector’s rapid digitalisation. The piece notes nation‑state actors from China, Russia, Iran and…
gbhackers.com -
Ex-Intel Employee Hid 18,000 Sensitive Documents Prior to Leaving the Company
According to Intel’s lawsuit filed in Washington federal court, ex-software developer Jinfeng Luo downloaded thousands of confidential files shortly after being fired, with the company stating he connected a storage device and successfully transferred…
gbhackers.com -
LangGraph Deserialization Flaw Enables Execution of Malicious Python Code
A critical remote code execution vulnerability has been revealed in LangGraph’s checkpoint serialization library, affecting versions before 3.0. The flaw sits in the JsonPlusSerializer, the default serialization protocol for checkpointing, and enables…
gbhackers.com -
Elastic Defend for Windows Vulnerability Allows Threat Actors to Gain Elevated Access
Elastic Defend for Windows has a vulnerability tracked as CVE-2025-37735 that could allow local attackers to escalate privileges on affected systems, stemming from improper preservation of file permissions by the Defend service. According to Elastic, the…
gbhackers.com -
Hackers Abuse runc Tool to Escape Containers and Compromise Hosts
Three critical vulnerabilities in runc, the container runtime that powers Docker and Kubernetes, have been disclosed, enabling attackers to break out of container isolation and gain root access to host systems, according to a SUSE researcher. The flaws are…
gbhackers.com -
Data Leak Exposes Chinese State-Sponsored Cyber Arsenal and Target Database
In early November 2025, a massive data breach at Knownsec, a Chinese cybersecurity firm with government ties, was disclosed after the incident on 2 November 2025. The theft exposed more than 12,000 classified documents detailing state-sponsored cyber…
gbhackers.com -
New Whisper-Based Attack Reveals User Prompts Hidden Inside Encrypted AI Traffic
Microsoft researchers have unveiled a sophisticated side-channel attack that can infer the subject matter of user prompts to AI chatbots from encrypted network traffic, even when TLS is used. The Whisper Leak method exploits patterns in packet sizes and…
gbhackers.com -
Monsta FTP Remote Code Execution Flaw Being Exploited in the Wild
Security researchers have publicly flagged an actively exploited remote code execution vulnerability in Monsta FTP, tracked as CVE-2025-34299, affecting versions up to 2.11.2 and allowing attackers to run arbitrary code on vulnerable servers without…
gbhackers.com -
Laid-Off Intel Engineer Allegedly Stole 18,000 Confidential Files Before Disappearing
Laid-off Intel engineer Jinfeng Luo allegedly copied 18,000 internal Intel files before vanishing, the article notes, as Intel pursues a legal case to investigate the data breach and seek damages. The termination notice was issued on 7 July 2024, with Luo…
SecurityOnline -
Whisper Leak: Attack Infers Encrypted AI Chat Topics with 98%+ Accuracy
Microsoft’s Threat Intelligence team has disclosed a novel side-channel attack, Whisper Leak, showing that an attacker observing encrypted network traffic could infer the topics of AI chatbot conversations despite TLS protection. The attack relies on subtle…
SecurityOnline -
Touchscreen MacBook Pro & Foldable iPhone: Apple’s “Most Pivotal Year Yet” Revealed
Bloomberg News has outlined Apple’s ambitious 2026 product roadmap, describing it as the company’s most pivotal year yet. According to Mark Gurman’s latest Power On newsletter, Apple is preparing a major overhaul of its MacBook Pro lineup, with high-end…
SecurityOnline -
iPhone’s Off-Grid Future: Maps, Photos, & ‘Natural Usage’ Satellite Features Revealed
According to Bloomberg’s Mark Gurman in his Power On newsletter, Apple is actively developing a range of new iPhone satellite connectivity features that aim to extend beyond the current Emergency SOS via Satellite. The report notes several next-generation…
SecurityOnline -
Zero-Click Samsung Zero-Day (CVE-2025-21042) Delivered LANDFALL Spyware Via Malicious DNG Images
Researchers from Unit 42, the threat intelligence team at Palo Alto Networks, have identified a previously unknown Android spyware family dubbed LANDFALL that exploits a zero-day in Samsung’s image processing library to compromise Galaxy devices. The…
SecurityOnline -
Fantasy Hub RAT MaaS Uncovered: Russian Spyware Uses Telegram Bot and WebRTC to Hijack Android Devices
Researchers at zLabs have uncovered Fantasy Hub, a sophisticated Android Remote Access Trojan (RAT) sold on Russian-language cybercrime channels under a Malware-as-a-Service (MaaS) model. The spyware advertises videos, documentation and Telegram-based…
SecurityOnline -
NuGet Sabotage: Time-Delayed Logic in 9 Packages Risks Total App Destruction on Hardcoded Dates
A nine-pack NuGet sabotage campaign, published under the alias shanhai666 between 2023 and 2024, uses time-delayed destructive payloads aimed at database applications and industrial control systems, according to Socket’s Threat Research Team. The malicious…
SecurityOnline -
GlassWorm Worm Resurfaces: Invisible Unicode Malware Re-Infects VS Code Extensions, Spreads to GitHub
GlassWorm has re-emerged as a self-propagating malware campaign, infecting three new VS Code extensions and spreading to GitHub repositories. According to Koi Security, the fresh wave on OpenVSX on 6 November 2025 brought in approximately 10,000 additional…
SecurityOnline -
CVE-2025-64439: RCE Flaw Detected in LangGraph: Agent Orchestration Framework at Risk
CVE-2025-64439 is an RCE flaw detected in LangGraph, a low-level agent orchestration framework used for building stateful AI agents, with a CVSS of 7.4. The vulnerability resides in the JsonPlusSerializer component and could allow an attacker to execute…
SecurityOnline -
Vidar Infostealer Hits npm for the First Time via 17 Typosquatted Packages and Postinstall Scripts
Researchers at Datadog Security Research have uncovered a major supply-chain incident in the npm ecosystem, marking the first known instance of Vidar infostealer distributed via npm packages. The campaign involved 17 malicious packages across 23 releases,…
SecurityOnline -
High-Severity Elastic Defend Flaw (CVE-2025-37735) Allows Local Attackers to Delete Arbitrary Files as SYSTEM
Elastic has issued security updates for Elastic Defend to address a high-severity flaw tracked as CVE-2025-37735, described as Improper Preservation of Permissions with a CVSS of 7.0. According to the advisory, improper preservation of permissions on Windows…
SecurityOnline -
China APT Infiltrates US Policy Nonprofit in Months-Long Espionage Campaign Using DLL Sideloading
A new investigation by the Broadcom Threat Hunter Team has uncovered a China-linked cyber espionage campaign that infiltrated a U.S.-based nonprofit organisation involved in influencing U.S. government policy on international issues, with the intrusion…
SecurityOnline -
MSP Nightmare: Medusa & DragonForce Exploit SimpleHelp RMM Flaws for SYSTEM Access
A new Zensec report highlights a critical supply-chain risk in the IT sector, detailing how two Ransomware-as-a-Service groups, Medusa and DragonForce, are actively exploiting unpatched SimpleHelp RMM vulnerabilities to gain SYSTEM-level access. The…
SecurityOnlineDragonForce -
Kimsuky APT Uses JavaScript Loader and Certutil to Achieve Minute-by-Minute Persistence via Windows Scheduled Task
The article, according to Pulsedive Threat Research, describes a new JavaScript-driven espionage campaign from the North Korean APT group Kimsuky that targets government entities, think tanks and policy experts. It details a multi-stage infection chain…
SecurityOnlineKimsuky -
QNAP fixed multiple zero-days in its software demonstrated at Pwn2Own 2025
QNAP has patched seven zero-day vulnerabilities that were demonstrated at Pwn2Own 2025, affecting QTS, QuTS hero, Hyper Data Protector, Malware Remover and HBS 3 Hybrid Backup Sync. The flaws, addressed by updates to several products, include CVE-2025-62847,…
Security Affairs -
PoC Exploit Released for CVE-2025-55680 – Windows Cloud Files Mini Filter Driver Elevation of Privilege Flaw
PoC exploit has been released for CVE-2025-55680, a Windows Cloud Files Mini Filter Driver elevation-of-privilege flaw, researchers from TyphoonPWN and the Windows PE Winner team, in collaboration with SSD Secure Disclosure, have disclosed a time-of-check to…
SecurityOnline
