News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Wed 12 Nov 2025· 66 articles
-
GitHub Copilot and Visual Studio Flaws Let Attackers Bypass Security Protections
Microsoft has disclosed two critical security vulnerabilities affecting GitHub Copilot and Visual Studio Code, which could allow attackers to bypass important security protections. Both flaws were reported on 11 November 2025 and carry “Important” severity…
gbhackers.com -
Chrome Security Update Fixes Improper Implementation in V8 JavaScript Engine
Google has released a stable Chrome update addressing a high-severity flaw in its V8 JavaScript engine, tracked as CVE-2025-13042, with fixes landing in the 142.0.7444.162/.163 build for Windows and 142.0.7444.162 builds for Mac and Linux. The vulnerability…
gbhackers.com -
Google Launches 'Private AI Compute' — Secure AI Processing with On-Device-Level Privacy
Google on Tuesday unveiled Private AI Compute, a privacy‑preserving technology to process AI queries in a secure cloud environment, described as a secure, fortified space akin to on‑device processing but with cloud capabilities. According to Google, Private…
The Hacker News -
ICS Patch Tuesday: Vulnerabilities Addressed by Siemens, Rockwell, Aveva, Schneider
On 12 November 2025, SecurityWeek reports that industrial giants Siemens, Schneider Electric, Rockwell Automation and Aveva issued Patch Tuesday advisories covering a range of ICS/OT vulnerabilities. Siemens published six new advisories, including two in its…
SecurityWeek -
$7.3B crypto laundering: ‘Bitcoin Queen’ sentenced to 11 Years in UK
A British court has sentenced Zhimin Qian, a Chinese national nicknamed the “Bitcoin Queen,” to 11 years and eight months in jail for laundering $7.3 billion from a crypto scam that defrauded about 128,000 victims in China. The Met Police described the…
Security Affairs -
Tor Browser 15.0.1 Update Patches Several High-Risk Security Flaws
The Tor Project has released a fresh update, with Tor Browser 15.0.1 now available and addressing several high-risk security issues that could have compromised users’ privacy. According to The Tor Project, the update is recommended for all users who want to…
gbhackers.com -
New Phishing Scam Targets iPhone Owners After Device Loss
A new phishing campaign targets iPhone owners after a loss, exploiting distress by impersonating Apple and claiming recovered devices. The attackers aim to steal Apple ID credentials and disable Apple’s Activation Lock, making stolen devices harder to…
gbhackers.com -
Lite XL Vulnerability Allows Attackers to Execute Arbitrary Code
Lite XL, a lightweight editor written in Lua and C, has been found to contain a high vulnerability that could enable arbitrary code execution, tracked as CVE-2025-12120. The flaw stems from Lite XL’s automatic execution of .lite_project.lua files when a…
gbhackers.com -
Microsoft Patch Tuesday security updates for November 2025 fixed an actively exploited Windows Kernel bug
Microsoft’s November 2025 Patch Tuesday updates addressed 63 vulnerabilities across Windows and related components, including an actively exploited Windows kernel zero‑day. Four of the flaws are rated Critical and 59 are rated Important, with none publicly…
Security Affairs -
Phishing Attack Impersonates Travel Brands Using 4,300 Malicious Domains
A Russian-speaking threat actor has orchestrated a large-scale phishing campaign that has registered over 4,300 malicious domains targeting travellers since the start of 2025. The operation customises phishing pages to impersonate travel giants such as…
gbhackers.com -
Windows Kernel 0-Day Under Active Exploitation for Privilege Escalation
Microsoft has disclosed a critical Windows Kernel vulnerability, tracked as CVE-2025-62215, that is under active exploitation in the wild. The flaw is an elevation-of-privilege issue in the Windows Kernel arising from improper synchronization when multiple…
gbhackers.com -
Mozilla Issues Urgent Firefox Update to Patch Critical Code Execution Flaws
The Mozilla Foundation issued three critical security advisories on 11 November 2025, addressing 16 unique vulnerabilities across multiple Firefox versions and platforms. The updates affect Firefox 145, Firefox ESR 115.30, and Firefox ESR 140.5, with 12…
gbhackers.com -
Chinese National Sentenced for Laundering Over £5 Billion from 128,000 Victims
According to the Metropolitan Police, Zhimin Qian, 47, was jailed for 11 years and eight months for possessing and transferring criminal property in the form of cryptocurrency, while her associate Seng Hok Ling, 47, received four years and eleven months for…
gbhackers.com -
Chrome Emergency Fix: High-Severity V8 Flaw (CVE-2025-13042) Risks Remote Code Execution
Google has released an important security update for Chrome Stable Channel addressing a high-severity vulnerability in the V8 JavaScript engine, CVE-2025-13042, described as an inappropriate implementation in V8 that could potentially lead to type confusion,…
SecurityOnline -
Broadcom & CAMB.AI Developing AI Chip for Real-Time On-Device Dubbing
Broadcom has announced a strategic partnership with the AI startup CAMB[.]AI to jointly develop an entirely new AI chipset designed to perform real-time audio translation, dubbing, and audio description entirely on-device. The two companies say the chip will…
SecurityOnline -
Apache OpenOffice Fixes 7 Flaws: Memory Corruption and Unprompted Remote Content Loading
Apache OpenOffice has released a crucial security patch, version 4.1.16, to address seven vulnerabilities, including an important memory corruption flaw and six moderate issues tied to unauthorized remote content loading. Released on 12 November 2025, the…
SecurityOnline -
Critical Apache OFBiz Flaw (CVE-2025-59118) Allows Remote Command Execution via Unrestricted File Upload
The Apache Software Foundation has issued a security update for Apache OFBiz, addressing two disclosed vulnerabilities affecting all versions before 24.09.03. The most severe, CVE-2025-59118, is an Unrestricted Upload of File with Dangerous Type flaw that…
SecurityOnline -
November Patch Tuesday: Microsoft Fixes 68 Flaws, Including Kernel Zero-Day Under Active Exploitation
Microsoft’s November 2025 Patch Tuesday addresses a total of 68 vulnerabilities, including a kernel zero-day that is already being actively exploited in the wild. The updates include five critical-severity and 64 important-severity fixes across products such…
SecurityOnline -
Critical Authentication Bypass Vulnerability Found in Milvus Proxy (CVE-2025-64513, CVSS 9.3)
Milvus has disclosed a critical authentication bypass in its Proxy component, tracked as CVE-2025-64513 with a CVSS of 9.3, which allows unauthenticated attackers to gain administrative access and fully control affected Milvus deployments. According to…
SecurityOnline -
Rockwell Automation Fixes Critical Privilege Escalation Flaw in Verve Asset Manager (CVE-2025-11862, CVSS 9.9)
Rockwell Automation has issued a patch for a critical privilege escalation flaw in Verve Asset Manager, tracked as CVE-2025-11862 with a CVSS of 9.9. The vulnerability resides in the Verve Asset Manager API and could allow read-only users to read, update,…
SecurityOnline -
Meta Open-Sources Omnilingual ASR: State-of-the-Art Speech Recognition for 1,600+ Languages
Meta’s FAIR team has unveiled Omnilingual ASR, a suite of models claiming to provide speech recognition for over 1,600 languages and setting a new benchmark for scale and quality. The release includes an Omnilingual ASR Model Family available in…
SecurityOnline -
Galaxy S26 Standard Model Gets Thicker: Hinting at a Possible Battery Upgrade
Samsung is reportedly making last-minute changes to the Galaxy S26 standard edition’s physical dimensions, with the new design showing slight increases in height, width and thickness. The final dimensions are 149.5 x 71.6 x 7.24 mm, and the camera module…
SecurityOnline -
New Android Rule: Google to Flag Battery-Draining Apps on Play Store Listings
Google has introduced an “Excessive Wake Lock” metric for Android app developers, with the Play Store set to display a red warning banner on listings that cross the threshold. Wake locks keep a device from sleeping, and while they can be legitimate, repeated…
SecurityOnline -
AI Boom Creates 2-Year HDD Backlog, Forcing Shift to QLC SSDs and Price Hikes
Fueled by the AI boom, demand for memory and storage has surged, with Western Digital’s affiliate SanDisk already raising the contract price of NAND flash chips by 20% for November 2025 and supply still falling short of demand. As a result, the delivery…
SecurityOnline -
Wikipedia Fights Back: Paid API Launches as AI Traffic Steals 8% of Human Visitors
Wikipedia Fights Back: Paid API Launches as AI Traffic Steals 8% of Human Visitors reports that the Wikimedia Foundation has announced a paid API service for AI companies, enabling subscription-based access to Wikipedia’s knowledge base for training data or…
SecurityOnline -
IBM Infrastructure: Continuous Risk & Compliance
IBM Z 17 and LinuxONE 5 underpin a shift to AI-powered, proactive infrastructure security, with Trend Micro noting real-time telemetry, AI acceleration, and quantum-safe infrastructure to support unified risk and compliance monitoring across mainframe,…
trendmicro.com
