News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Tue 11 Nov 2025· 73 articles
-
Adobe Patches 29 Vulnerabilities
Adobe has issued patches for 29 vulnerabilities across InDesign, InCopy, Photoshop, Illustrator, Pass, Substance 3D Stager, and Format Plugins. Critical flaws that could allow arbitrary code execution were addressed in InDesign, InCopy, Photoshop,…
SecurityWeek -
SAP fixed a maximum severity flaw in SQL Anywhere Monitor
SAP has fixed 19 security issues, including a critical flaw in SQL Anywhere Monitor (Non-GUI) that involves hardcoded credentials and could allow arbitrary code execution. The vulnerability is tracked as CVE-2025-42890 and carries a CVSS score of 10/10, with…
Security Affairs -
Microsoft Patches Actively Exploited Windows Kernel Zero-Day
Microsoft’s latest Patch Tuesday fixes address more than 60 vulnerabilities across Windows and other products, including a Windows kernel zero-day that has been exploited in unspecified attacks. The zero-day is tracked as CVE-2025-62215 and is described as…
SecurityWeek -
Tenzai Raises $75 Million in Seed Funding to Build AI-Powered Pentesting Platform
Tel Aviv, Israel based Tenzai has emerged from stealth with $75 million in seed funding to build an AI-driven platform for penetration testing, aiming to continuously identify and address vulnerabilities. The company, founded by Pavel Gurvich, Ariel Zeitlin,…
SecurityWeek -
Patch Now: Microsoft Flags Zero-Day & Critical Zero-Click Bugs
Microsoft’s November security update, while slimmer than October’s record patch-out, still tackles a set of high-priority flaws across Windows components, including a zero-day actively exploited in the Windows Kernel that allows privilege escalation to…
Dark Reading -
A jailed hacking kingpin reveals all about the gang that left a trail of destruction
A jailed hacking kingpin has given an insider’s view of the gang that left a trail of destruction, according to DataBreaches[.]Net. The article presents Vyacheslav Penchukov, who goes by “Tank” and is described as a 39-year-old Ukrainian, detailing how he…
DataBreaches -
Army gynecologist took secret videos of patients during intimate exams, lawsuit says
An Army gynecologist is accused of taking secret intimate videos of a patient at Fort Hood in Texas, according to a lawsuit filed on 11 November 2025. The suit says the woman is believed to be among scores preyed upon by Dr. Blaine McGraw, with Army…
DataBreaches -
Microsoft Patch Tuesday for November 2025 – Fix for 0-day and Other 62 Vulnerabilities
Microsoft’s November 2025 Patch Tuesday fixes 63 vulnerabilities across its software lineup, with one zero-day in the Windows Kernel confirmed as actively exploited in the wild. The most critical patch is for CVE-2025-62215, an Elevation of Privilege flaw in…
gbhackers.com -
WhatsApp Malware 'Maverick' Hijacks Browser Sessions to Target Brazil's Biggest Banks
According to CyberProof, threat hunters have found similarities between the banking malware known as Coyote and a newly disclosed program called Maverick, which has been propagated via WhatsApp and targets Brazilian users and banks with decryption and…
The Hacker News -
The Case for Making EdTech Companies Liable Under FERPA
The Case for Making EdTech Companies Liable Under FERPA reports that schools now rely on an average of 2,591 edtech tools in a single school year, tools that can track private conversations and store comprehensive academic and personal records. It notes that…
DataBreaches -
Introducing NPM Package Search: Find Where Any Package Was Introduced Across Your GitHub Organizations
StepSecurity has announced NPM Package Search, a new capability that lets you trace any npm package to its origin across your GitHub organisations, including every repository, pull request and contributor. The article notes that in September 2025 the…
StepSecurity -
Ivanti Endpoint Manager Vulnerabilities Let Attackers Write Files Anywhere on Target Systems
Ivanti Endpoint Manager has three high-severity vulnerabilities that could allow authenticated attackers to write arbitrary files to any location on affected systems. The company disclosed the advisory on 10 November 2025, and patches are available through…
gbhackers.com -
GootLoader Is Back, Using a New Font Trick to Hide Malware on WordPress Sites
According to Huntress, the malware known as GootLoader has resurfaced, with three infections observed since 27 October 2025, two of which involved hands-on keyboard intrusions and domain controller compromise within 17 hours of initial infection. It is…
The Hacker News -
Grandparents to C-Suite: Elder Fraud Reveals Gaps in Human-Centered Cybersecurity
Elder fraud is being amplified by AI voice cloning and publicly available personal data, allowing scammers to impersonate relatives and emotionally manipulate seniors into wiring funds. According to the Federal Bureau of Investigation's 2024 Internet Crime…
Dark Reading -
Critical Triofox Vulnerability Exploited in the Wild
According to Google, a threat actor tracked as UNC6485 exploited a critical Triofox vulnerability to obtain remote access and then create a new administrator account. The flaw, CVE-2025-12480 (CVSS 9.1), was resolved in late July by preventing access to…
SecurityWeek -
Fantasy Hub: Russian-sold Android RAT boasts full device espionage as MaaS
Fantasy Hub is described by researchers as a Russian-sold Android RAT offered as Malware-as-a-Service, enabling operators to spy, steal data and control devices via Telegram. The malware can take over infected devices to gather SMS messages, contacts, call…
Security Affairs -
Patch now: Samsung zero-day lets attackers take over your phone
A critical vulnerability has put Samsung mobile device owners at risk of sophisticated cyberattacks. On 10 November 2025, according to the Cybersecurity and Infrastructure Security Agency (CISA), CVE-2025-21042 was added to the Known Exploited…
Malwarebytes -
NHS providers reviewing stolen Synnovis data published by cyber criminals
NHS providers are reviewing stolen Synnovis data that was published online by cyber criminals after a major cyber-attack last year. The pathology supplier Synnovis is contacting NHS organisations whose data were compromised, including data that was made…
DataBreaches -
Gates Down: Third Circuit Says Breaking Employer Computer Access Policies Is Not Hacking
According to The National Law Review, the U.S. Court of Appeals for the Third Circuit has ruled that violations of employers’ computer access policies do not amount to federal CFAA violations, and that account passwords are not company trade secrets. The…
DataBreaches -
New Firefox Protections Halve the Number of Trackable Users
New Firefox Protections Halve the Number of Trackable Users reports that Mozilla has rolled out enhanced fingerprinting protections in Firefox 145, building on years of anti-tracking work to make user identification harder even when cookies are blocked or…
SecurityWeek -
Bridging the Skills Gap: How Military Veterans Are Strengthening Cybersecurity
Military veterans are increasingly pivoting to cybersecurity, bringing leadership, teamwork and problem-solving strengths from diverse service backgrounds to strengthen the industry’s defence capabilities, according to Dark Reading. The piece notes that the…
Dark Reading -
Zoom Workplace for Windows Flaw Allows Local Privilege Escalation
A security flaw has been found in Zoom Workplace’s VDI Client for Windows that could enable local privilege escalation. The vulnerability, tracked as CVE-2025-64740 and issued bulletin ZSB-25042, is rated High with a CVSS score of 7.5 and requires local…
gbhackers.com -
SAP Patches Critical Flaws in SQL Anywhere Monitor, Solution Manager
SAP released 18 new security notes and one updated note in its November 2025 patch day, addressing a range of vulnerabilities across SQL Anywhere Monitor, Solution Manager and related SAP components. The most important note covers CVE-2025-42890, a 10/10…
SecurityWeek -
WinRAR Vulnerability Exploited by APT-C-08 to Target Government Agencies
The article reports that APT-C-08, also known as BITTER, has weaponised a critical WinRAR directory traversal vulnerability, CVE-2025-6218, to target government organisations across South Asia. Security researchers observed exploitation of WinRAR versions…
gbhackers.comHAZY TIGER -
CMMC Live: Pentagon Demands Verified Cybersecurity From Contractors
The US Department of Defense’s Cybersecurity Maturity Model Certification (CMMC) program officially entered its enforcement phase on 10 November 2025, with enforcement of DFARS amendments requiring defence contractors and subcontractors to implement specific…
SecurityWeek -
How credentials get stolen in seconds, even with a script-kiddie-level phish
A Malwarebytes piece from 11 November 2025 describes a crude phishing attack that still proves highly effective due to its front-end simplicity. The email uses a fake Po or invoice scenario, with the attacker’s address linked to a likely compromised Czech…
Malwarebytes -
Honoring Our Veteran Readers: Thank You for Your Service
SecurityWeek marks Veterans Day by thanking the veterans among its readers and highlighting the contributions they have made to the field of cybersecurity. The article notes that many readers proudly served in various branches and roles around the world, and…
SecurityWeek -
Phishing Scam Uses Big-Name Brands to Steal Logins
According to Cyble Research and Intelligence Labs (CRIL), a sophisticated phishing campaign is using big-name brands to steal credentials by delivering HTML attachments that masquerade as procurement documents or invoices. The emails carry HTML files such as…
gbhackers.com -
SAP Releases Security Update to Fix Critical Code Execution and Injection Flaws
SAP has released a significant security update addressing 18 new vulnerabilities across its enterprise software portfolio, including several critical flaws related to code execution and data injection. The patch day covers four high-severity issues, the most…
gbhackers.com -
Stolen iPhones are locked tight, until scammers phish your Apple ID credentials
Posted on 11 November 2025, Malwarebytes reports that stolen iPhones are kept under control not by breaking Apple’s security, but by phishing owners for their Apple ID credentials. According to the Swiss National Cyber Security Centre (NCSC), the scam starts…
Malwarebytes -
ClickFix may be the biggest security threat your family has never heard of
ClickFix is a relatively new technique that bypasses many endpoint protections and can affect both macOS and Windows, with researchers calling it a growing threat the public is largely unaware of. The attacks often begin with an email from a hotel with…
Ars Technica -
New “KomeX” Android RAT Hits Hacker Forums with Tiered Subscriptions
According to GBHackers On Security, a sophisticated Android remote-access Trojan named KomeX RAT has emerged on underground hacking forums, with the threat actor Gendirector actively marketing the malware through tiered subscription models. The malware,…
gbhackers.com -
‘Whisper Leak’ LLM Side-Channel Attack Infers User Prompt Topics
Whisper Leak is a new AI side-channel attack that uses metadata patterns to infer the topic of a user’s conversation with a remote language model, even when the content is encrypted. The attack assumes an observer can monitor the network traffic between the…
SecurityWeek -
CISO's Expert Guide To AI Supply Chain Attacks
The Hacker News’ CISO’s Expert Guide to AI supply chain attacks highlights that AI-enabled supply chain assaults have grown rapidly, with malicious package uploads jumping 156% year over year. It notes that real-world breaches exist, pointing to the 3CX…
The Hacker News -
New Phishing Campaign Targets Meta Business Suite Users
Security researchers at Check Point have recently uncovered a large-scale phishing campaign that weaponises Facebook’s own Business Suite infrastructure to deliver convincing fraudulent notifications, according to Check Point. The campaign distributed over…
gbhackers.com -
Researchers Detect Malicious npm Package Targeting GitHub-Owned Repositories
Cybersecurity researchers have uncovered a malicious npm package named "@acitons/artifact" that typosquats the legitimate "@actions/artifact" package with the aim of targeting GitHub-owned repositories. Veracode says the package series comprises six versions…
The Hacker News -
Android Trojan 'Fantasy Hub' Malware Service Turns Telegram Into a Hub for Hackers
Android Trojan Fantasy Hub is being sold on Russian‑speaking Telegram channels under a Malware-as-a-Service model, with its operator offering device control and espionage capabilities to buyers. The malware can harvest SMS messages, contacts, call logs,…
The Hacker News -
North Korea-linked Konni APT used Google Find Hub to erase data and spy on defectors
North Korea-linked Konni APT employed Google Find Hub to erase data and spy on defectors in September 2025,researchers warn. The campaign impersonated psychological counsellors and North Korean human rights activists, delivering malware disguised as…
Security AffairsOpal Sleet -
Ferocious Kitten APT Uses MarkiRAT for Keystroke and Clipboard Surveillance
Ferocious Kitten, a covert cyber-espionage group active since at least 2015, uses its MarkiRAT implant to conduct keystroke and clipboard logging, screenshot capture, credential theft, and broader surveillance while evading defences. The group commonly…
gbhackers.comFerocious Kitten -
Attackers Use Quantum Route Redirect to Launch Instant Phishing on M365
KnowBe4 Threat Labs has uncovered a sophisticated phishing operation dubbed Quantum Route Redirect, described as a turning point in cybercriminal capabilities. The campaign automates credential theft via a pre-configured phishing-as-a-service kit that…
gbhackers.com
