News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Wed 12 Nov 2025· 66 articles
-
'CitrixBleed 2' Wreaks Havoc as Zero-Day Bug
CitrixBleed 2 and Cisco’s high-severity flaw have underlined growing adversary interest in identity and access management, with Citrix NetScaler ADC and Gateway affected by CVE-2025-5777 and Cisco ISE by CVE-2025-20337 (CVSS 10). Citrix disclosed…
Dark Reading -
Doctor Alliance Data Breach: 353GB of Patient Files Allegedly Compromised, Ransom Demanded
On 7 November 2025, a relatively new user on a hacking forum offered data allegedly from Doctor Alliance for sale, according to DataBreaches[.]net.
DataBreaches -
Google sues cybercriminal group Smishing Triad
Google has filed a lawsuit against a China-based cybercriminal group described as behind a large-scale smishing operation that uses a phishing-as-a-service kit named Lighthouse to harvest financial data via text messages, according to Security Affairs. The…
Security AffairsSmishing Triad -
New Danabot Windows version appears in the threat landscape after May disruption
DanaBot has resurfaced with a new Windows variant (v669), marking its comeback six months after Operation Endgame disrupted its activity in May, according to Zscaler ThreatLabz. The campaign includes a set of command and control servers and wallet addresses…
Security Affairs -
St. Thomas Brushed Off Red Flags Before Dark-Web Data Dump Rocks Houston
Hundreds of thousands of University of St. Thomas files have appeared on the dark web after a summer cyberattack that shut down campus systems, with investigators finding at least 630,000 UST files posted online following the intrusion, according to the…
DataBreaches -
A Wiltshire police breach posed possible safety concerns for violent crime victims as well as prison officers
A Wiltshire Police data breach exposed sensitive information that could pose safety concerns for violent crime victims and prison officers. On Saturday 8 November, the Telegraph reported that the leak included door codes to safe houses for rape and sexual…
DataBreaches -
Amendment 13 is gamechanger on data security enforcement in Israel
According to Globes (Israel), Amendment 13 to Israel’s Privacy Protection Law is being described as a gamechanger for data security enforcement, with industry leaders at a privacy and data-security conference noting the shift in how risks from advanced AI…
DataBreaches -
Microsoft Exchange 'Under Imminent Threat', Act Now
Microsoft Exchange remains a prime target, with warnings that Exchange environments are “under imminent threat” and organisations should act now to mitigate risk as support for older servers ends. The piece notes that end-of-life servers will not receive…
Dark Reading -
Vo1d Botnet Exposed: How Darktrace Detected a Global Android Threat
Vo1d malware first appeared in the wild in September 2024 and has since evolved into one of the most widespread Android botnets observed, primarily targeting smart TVs and low-cost Android TV boxes, with an estimated 1.3 to 1.6 million devices infected…
darktrace.com -
China’s Cyber Silence is More Worrying Than Russia’s Noise, Chief Cybersecurity Strategist Says
Mihoko Matsubara, chief cybersecurity strategist at Japan’s NTT, argues that China’s approach to cyber operations is more worrisome than Russia’s overt aggression, noting thatChina is active but not destructive toward critical infrastructure. In…
SecurityWeek -
Phishing emails disguised as spam filter alerts are stealing logins
Phishing emails disguised as spam filter alerts are credential harvesting attempts that spoof internal “email delivery” notices and redirect victims to a fake login page, according to Malwarebytes. The campaigns feed a base64ised spoofed address to the…
Malwarebytes -
Phishing Tool Uses Smart Redirects to Bypass Detection
According to KnowBe4, researchers Jeewang Singh Jalal, Prabhakaran Ravichandhiran and Anand Bodke wrote in a post that the phishing tool Quantum Route Redirect targets Microsoft 365 users and began appearing in the wild around August, with about 1,000…
Dark Reading -
Google Sues China-Based Hackers Behind $1 Billion Lighthouse Phishing Platform
Google has filed a civil lawsuit in the U.S. District Court for the Southern District of New York against China-based hackers behind a massive Phishing-as-a-Service platform called Lighthouse, which has ensnared over 1 million users across 120 countries. The…
The Hacker News -
How TTP-based Defenses Outperform Traditional IoC Hunting
Etay Maor argues that defenders should move from chasing Indicators of Compromise to detecting attacker behaviours, using a TTP-first approach aligned with MITRE ATT&CK to spot activity such as privilege escalation, credential theft, and lateral movement…
SecurityWeek -
Almost two years later, Alpha Omega Winery notifies those affected by a data breach.
Almost two years after Alpha Omega Winery in California experienced what it describes as a ransomware incident, the organisation began notifying those affected on or about 6 November 2025, when it submitted a copy of the notification letter to the California…
DataBreaches -
Australia’s spy chief warns of China-linked threats to critical infrastructure
Australia’s intelligence chief, Mike Burgess, warned that China‑linked threat actors are probing critical infrastructure and, in some cases, have gained access, with at least two state‑sponsored groups positioning themselves for future sabotage and espionage…
Security Affairs -
Virtual Event Today: CISO Forum 2025 Virtual Summit
According to SecurityWeek News, the 2025 CISO Forum Virtual Summit is taking place today as a free online event designed for cybersecurity leaders, bringing together CISOs, researchers and innovators to share practical insights and strategies. The summit…
SecurityWeek -
Amazon Uncovers Attacks Exploited Cisco ISE and Citrix NetScaler as Zero-Day Flaws
Amazon’s threat intelligence team disclosed that an advanced threat actor was exploiting two zero-day flaws in Cisco Identity Service Engine (ISE) and Citrix NetScaler ADC as part of campaigns designed to deliver custom malware. The attacks targeted…
The Hacker News -
Connecting to production: the architecture of remote bindings
Remote bindings now generally available let you connect to deployed resources such as R2 buckets and D1 databases while running Worker code on your local machine, enabling testing against real data without redeploying for each iteration, according to The…
Cloudflare -
Court of Appeal reaffirms MFSA liability in data leak case, orders regulator to shoulder costs
The Court of Appeal has affirmed that the Malta Financial Services Authority (MFSA) bears liability for an unauthorised disclosure of confidential data to the investigative website OffshoreAlert, according to Malta Today. The judgment, delivered on 12…
DataBreaches -
Sweet Security Raises $75 Million for Cloud and AI Security
Sweet Security, the Israeli cybersecurity startup, announced a $75 million Series B funding round, bringing its total raised to $120 million. The round was led by Evolution Equity Partners, with additional support from Glilot Capital Partners, Key1 Capital,…
SecurityWeek -
AppleScript Used to Deliver macOS Malware Disguised as Zoom & Teams Updates
AppleScript is being used to deliver macOS malware, with threat actors disguising payloads as Zoom and Microsoft Teams updates to bypass security controls. Since Apple removed the Gatekeeper override for right-click and open in August 2024, attackers have…
gbhackers.com -
Google Sues Chinese Cybercriminals Behind ‘Lighthouse’ Phishing Kit
According to SecurityWeek, Google has filed a lawsuit against a cybercrime group believed to be operating out of China, known as Smishing Triad. The group has been active since at least 2023, targeting users worldwide with large-scale SMS phishing campaigns…
SecurityWeek -
SecureVibes Introduces Multi-Language Vulnerability Scanner Powered by Claude AI
SecureVibes has unveiled a multi-language vulnerability scanner powered by Claude AI, designed to deliver intelligent security analysis across eleven programming languages. The platform uses Claude’s multi-agent architecture with five specialised AI…
gbhackers.com -
High-Severity Vulnerabilities Patched by Ivanti and Zoom
Enterprise software providers Ivanti and Zoom have issued patches for multiple vulnerabilities in their products, including high‑severity flaws that could allow arbitrary file writes, privilege escalation, code execution, and information disclosure.…
SecurityWeek -
MastaStealer Exploits Windows LNK to Launch PowerShell and Bypass Defender
MastaStealer exploits Windows LNK files to launch PowerShell and bypass Defender, according to GBHackers On Security. The campaign starts with a spear-phishing email containing a ZIP archive that holds a single .lnk file; when opened, the LNK file launches…
gbhackers.com -
[Webinar] Learn How Leading Security Teams Reduce Attack Surface Exposure with DASR
The Hacker News and Bitdefender are hosting a free cybersecurity webinar to explore Dynamic Attack Surface Reduction (DASR), a method described as helping security teams close gaps before attackers find them. The session will explain how DASR differs from…
The Hacker News -
Update now: November Patch Tuesday fixes Windows zero-day exploited in the wild
Malwarebytes notes that November Patch Tuesday fixes several critical Windows flaws, including ones already being exploited in the wild to gain control of systems. The update fixes CVE-2025-62215, a Windows Kernel Elevation of Privilege flaw that can be…
Malwarebytes -
Google Paid Out $458,000 at Live Hacking Event
Google handed out $458,000 in bug bounty rewards at this year’s bugSWAT hacking event, held during the ESCAL8 conference in New Mexico. During the event, 38 top bug hunters participated in training, knowledge exchange, and live-hacking sessions targeting AI,…
SecurityWeek -
Hackers Exploit SSRF Flaw in Custom GPTs to Steal ChatGPT Secrets
A cybersecurity researcher uncovered a server-side request forgery (SSRF) flaw hidden in OpenAI’s ChatGPT Custom GPTs feature, which could have allowed attackers to access sensitive cloud infrastructure secrets, including Azure management API tokens.…
gbhackers.com -
November 2025 Patch Tuesday: Microsoft Fixes 63 Vulnerabilities, Including Windows Kernel Zero-Day (CVE-2025-62215)
November 2025 Patch Tuesday saw Microsoft release updates that fix 63 vulnerabilities across Windows, Office, .NET, and developer tools. The rollout includes one zero-day vulnerability that is actively exploited in the wild, CVE-2025-62215, a Windows Kernel…
SOCRadar -
Rhadamanthys Stealer Servers Reportedly Seized; Admin Urges Immediate Reinstallation
Widespread reports indicate that Rhadamanthys stealer infrastructure has been disrupted as German and EU law enforcement actions appear to have seized the main control, triggering urgent security alerts and a call for immediate reinstallation. The incident…
gbhackers.com -
Active Directory Under Siege: Why Critical Infrastructure Needs Stronger Security
Active Directory remains the authentication backbone for over 90% of Fortune 1000 companies, with its growing use in hybrid and cloud environments increasing both its value and its attack surface. The article explains that once adversaries compromise AD,…
The Hacker News -
Authentication Coercion: How Windows Machines Are Tricked into Leaking Credentials
Authentication coercion is a Windows-focused attack class that exploits native OS features to make machines authenticate to attacker-controlled systems without user interaction or exploits. The technique manipulates legitimate Remote Procedure Call…
gbhackers.com -
Chipmaker Patch Tuesday: Over 60 Vulnerabilities Patched by Intel
According to SecurityWeek, Chipmaker Patch Tuesday: Over 60 Vulnerabilities Patched by Intel reports that Intel, AMD and Nvidia have published security advisories describing vulnerabilities found recently in their products, with Intel alone issuing 30 new…
SecurityWeek -
Microsoft Fixes 63 Security Flaws, Including a Windows Kernel Zero-Day Under Active Attack
Microsoft has released patches for 63 new security vulnerabilities, including a Windows Kernel privilege-escalation zero-day that has been exploited in the wild, with four flaws rated Critical and 59 Important. Of the total, 29 are privilege-escalation, 16…
The Hacker News -
How Malwarebytes stops the ransomware attack that most security software can’t see
According to Malwarebytes Core Technology, Malwarebytes stops ransomware by using multiple defensive layers, including AI-based analysis, machine learning models, signature detection, runtime sandboxing, exploit mitigation, and web protection, with the…
Malwarebytes -
English-Speaking Cybercriminal Network ‘The COM’ Drives Global Cyberattacks
The COM, described as an English-speaking cybercriminal ecosystem, has evolved from niche underground forums into a decentralised, service‑oriented economy that orchestrates large‑scale attacks against multinational corporations, government entities,…
gbhackers.com -
Synology patches critical BeeStation RCE flaw shown at Pwn2Own Ireland 2025
Synology has patched a critical remote code execution flaw in BeeStation, tracked as CVE-2025-12686, which was demonstrated at Pwn2Own Ireland 2025. The vulnerability stems from unchecked buffer input that enables arbitrary code execution, and its CVSS score…
Security Affairs -
Microsoft SQL Server Vulnerability Allows Privilege Escalation
Microsoft has disclosed a critical SQL injection vulnerability in SQL Server that could allow authenticated attackers to escalate their privileges over a network, tracked as CVE-2025-59499 with an Important severity rating. The flaw stems from improper…
gbhackers.com
