News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 16 so far |
Thu 13 Nov 2025· 78 articles
-
Cisco ISE, CitrixBleed 2 Vulnerabilities Exploited as Zero-Days: Amazon
According to Amazon, a threat actor exploited two critical Citrix and Cisco vulnerabilities as zero-days weeks before patches were released, with detection of in-the-wild activity noted ahead of public disclosure. The Citrix flaw, CVE-2025-5777 (CVSS 9.3),…
SecurityWeek -
Malicious Chrome Extension Grants Full Control Over Ethereum Wallet
Security researchers have uncovered a sophisticated supply chain attack disguised as a legitimate cryptocurrency wallet in a Chrome extension named “Safery: Ethereum Wallet.” According to Socket’s Threat Research Team, the extension was published on the…
gbhackers.com -
GitLab Vulnerabilities Expose Users to Prompt Injection Attacks and Data Theft
GitLab has released patches addressing nine vulnerabilities across Community Edition and Enterprise Edition, including a prompt injection flaw in GitLab Duo that could leak sensitive information from confidential issues. The company urges all self-managed…
gbhackers.com -
Amazon alerts: advanced threat actor exploits Cisco ISE & Citrix NetScaler zero-days
Amazon’s threat intelligence researchers reported that an advanced threat actor exploited two previously undisclosed zero-day flaws in Cisco Identity Service Engine (ISE) and Citrix NetScaler ADC to deliver custom malware. The campaign also leveraged…
Security Affairs -
New ClickFix Attack Targeting Windows and macOS Users to Deploy Infostealer Malware
Security researchers have detailed a sophisticated ClickFix campaign that targets both Windows and macOS users to deploy infostealer malware. The attack uses a social-engineering flow where users searching for cracked software are led to fake landing pages…
gbhackers.com -
-
CISA Flags Critical WatchGuard Fireware Flaw Exposing 54,000 Fireboxes to No-Login Attacks
According to CISA, a critical security flaw in WatchGuard Fireware has been added to the KEV catalog after evidence of active exploitation. The vulnerability, CVE-2025-9242 (CVSS 9.3), is an out-of-bounds write flaw affecting Fireware OS versions from…
The Hacker News -
Critical Dell Data Lakehouse Flaw Allows Remote Attackers to Escalate Privileges
Dell Technologies has disclosed a critical vulnerability in its Data Lakehouse platform that could let attackers with high-level privileges escalate their access and compromise system integrity. The flaw, tracked as CVE-2025-46608, affects versions prior to…
gbhackers.com -
Kenya Kicks Off 'Code Nation' With a Nod to Cybersecurity
Kenya Kicks Off 'Code Nation' With a Nod to Cybersecurity describes a plan to become a Code Nation, aiming to add more than 1 million technology specialists to its digital workforce, including software engineers, cybersecurity specialists and data…
Dark Reading -
Beware of Fake Bitcoin Tools Concealing DarkComet RAT Malware
A malware campaign is deceiving users by packaging a DarkComet RAT variant inside a RAR archive labelled “94k BTC wallet[.]exe,” masquerading as a Bitcoin wallet tool to lure downloads. The compressed RAR file (MD5: dbedd5e7481b84fc5fa82d21aa20106f) contains…
gbhackers.com -
CISA Warns of Active Exploitation of WatchGuard Firebox Out-of-Bounds Write Flaw
CISA has added a critical vulnerability affecting WatchGuard Firebox firewalls to its Known Exploited Vulnerabilities (KEV) catalog, warning of active exploitation in the wild, according to The Cybersecurity and Infrastructure Security Agency (CISA). The…
gbhackers.com -
Citrix NetScaler ADC and Gateway Flaw Allows Cross-Site Scripting (XSS) Attacks
Cloud Software Group has disclosed a cross-site scripting (XSS) vulnerability affecting NetScaler ADC and NetScaler Gateway platforms, tracked as CVE-2025-12101. According to Cloud Software Group, the flaw enables attackers to inject malicious scripts into…
gbhackers.com -
Hackers Using RMM Tools LogMeIn and PDQ Connect to Deploy Malware as Legitimate Software
Cybersecurity researchers at AhnLab Security Intelligence Center (ASEC) have uncovered a campaign that weaponises legitimate remote monitoring and management tools to deploy backdoor malware on users’ systems. The attackers abuse LogMeIn Resolve (GoTo…
gbhackers.com -
BreachLock and Vanta Bridge the Gap Between Continuous Security Testing and Compliance with New Integration
BreachLock and Vanta have announced a new integration that bridges continuous security testing and compliance by connecting the BreachLock Unified Platform to a Vanta environment, enabling mutual customers to push security validation evidence with a single…
SecurityOnline -
Active Exploitation of Cisco and Citrix 0-Day Vulnerabilities Allows Webshell Deployment
Amazon’s threat intelligence team has uncovered a sophisticated cyber campaign that exploits previously undisclosed zero-day vulnerabilities in Cisco Identity Service Engine (ISE) and Citrix systems, deploying custom webshells to gain unauthorised…
gbhackers.com -
Firefox 145 and Chrome 142 Patch High-Severity Flaws in Latest Releases
Google and Mozilla have rolled out Chrome 142 and Firefox 145 updates to address multiple high-severity vulnerabilities. The Chrome 142 update fixes a high-severity inappropriate implementation issue in the V8 JavaScript engine, tracked as CVE-2025-13042,…
SecurityWeek -
Over 46,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack
Cybersecurity researchers have flagged a large-scale spam campaign that has flooded the npm registry with thousands of fake packages since early 2024, with as many as 46,484 packages identified so far, according to SourceCodeRED security researcher Paul…
The Hacker News -
Google Sues “Lighthouse” Over Massive Phishing Attacks
Google has filed a lawsuit to dismantle the Lighthouse phishing-as-a-service operation, a move backed by Google’s push for bipartisan bills in Congress to curb digital scams. The Lighthouse kit is marketed as a PhaaS platform, enabling bad actors to run…
gbhackers.com -
Seamless Switch: Google Workspace Now Supports Direct Dropbox Data Migration
Google Workspace now offers a direct Dropbox data migration feature, a collaboration between Google and Dropbox that allows enterprises to move data seamlessly without manual downloads. Enterprises can initiate a migration within Google Workspace, once a…
SecurityOnline -
Apple Wallet Now Stores Digital Passports for TSA Checkpoints
Apple has announced a significant update to Apple Wallet that formally enables users to digitise their United States passports and store them directly within the Wallet app, allowing travellers to present a Digital ID on their iPhone or Apple Watch when…
SecurityOnline -
No More Separate Passkeys: Windows 11 Adds API for Password Manager Integration
Microsoft has announced that Windows 11 now includes new APIs to let password-manager applications integrate directly with the system, allowing users to store and use passkeys from their manager instead of a separate system-level passkey. Previously, each…
SecurityOnline -
Steam Frame VR Unveiled: Valve’s Standalone Headset Targets Quest with Snapdragon & Foveated Streaming
Valve has formally unveiled the VR headset codenamed “Deckard,” officially introduced as Steam Frame, a standalone device that also emphasises streaming without sacrificing standalone operation and is slated to launch in early 2026 alongside the new Steam…
SecurityOnline -
KMS38 Activation is Broken: Microsoft Removes License Transfer Mechanism in Windows 11
According to MAS activation team, Microsoft has modified the KMS activation mechanism in Windows 11 and other systems, removing the KMS38 method by making the grace period resets unavoidable after upgrades. KMS is Microsoft’s licensing model for enterprises,…
SecurityOnline -
Seagate Exos 4U100 Unveiled: 3.2 PB Storage Density for AI and Edge Data Centers
Seagate has unveiled its next-generation edge-enterprise storage solutions, the Exos 4U100 and 4U74 JBOD systems, designed for data centres and edge environments. The Exos 4U100 delivers a remarkable 3.2 PB of storage in a single high-density chassis, aimed…
SecurityOnline -
Android Sideloading Crackdown: Google to Verify All Apps, But Promises Power-User Bypass
Android sideloading will be tightened with a verification regime that requires apps to undergo identity authentication and code signing before installation outside the Google Play Store, a change Google announced in August and slated to begin next year in…
SecurityOnline -
PAN-OS Flaw (CVE-2025-4619) Allows Unauthenticated Firewall Reboot via Single Crafted Packet
PAN-OS CVE-2025-4619 is a denial-of-service vulnerability that allows an unauthenticated attacker to reboot a firewall by sending a single specially crafted packet through the dataplane. The flaw affects several PAN-OS versions used on PA-Series, VM-Series…
SecurityOnline -
ThreatBook Peer-Recognized as a Strong Performer in the 2025 Gartner® Peer Insights™ Voice of the Customer for Network Detection and Response — for the Third Consecutive Year
ThreatBook has been recognised as a Strong Performer in the 2025 Gartner Peer Insights Voice of the Customer for Network Detection and Response, marking the third consecutive year the company has received this distinction. According to Gartner: “Voice of the…
gbhackers.com -
High-Severity GitLab XSS Flaw (CVE-2025-11224) Risks Kubernetes Proxy Session Hijacking
GitLab has released security updates for both Community Edition (CE) and Enterprise Edition (EE) addressing multiple vulnerabilities, including a high-severity cross-site scripting flaw tracked as CVE-2025-11224 that affects GitLab’s Kubernetes proxy…
SecurityOnline -
Critical Dell Data Lakehouse Vulnerability (CVE-2025-46608) Allows Privilege Escalation
Dell has issued a security advisory regarding a critical vulnerability (CVE-2025-46608) affecting Dell Data Lakehouse products prior to version 1.6.0.0, with a CVSS score of 9.1. This flaw allows high-privileged remote attackers to elevate their privileges,…
SecurityOnline -
ThreatBook Peer-Recognized as a Strong Performer in the 2025 Gartner® Peer Insights™ Voice of the Customer for Network Detection and Response — for the Third Consecutive Year
ThreatBook has been recognised as a Strong Performer in the 2025 Gartner Peer Insights Voice of the Customer for Network Detection and Response (NDR) for the third consecutive year, based on feedback for its Threat Detection Platform (TDP). The recognition…
SecurityOnline -
Google Launches Private AI Compute for Pixel 10, Blending Cloud Power with On-Device Privacy
Google has announced the launch of Private AI Compute, a cloud-based architecture designed to enable advanced AI computations on devices while preserving full data privacy. According to blog[.]google/technology/ai/google-private-ai-compute/, the platform…
SecurityOnline -
Elastic Patches Two Kibana Flaws — SSRF (CVE-2025-37734) and XSS (CVE-2025-59840) Flaws Affect Multiple Versions
Elastic has issued advisories for two Kibana flaws—CVE-2025-37734 and CVE-2025-59840—that could enable server-side request forgery and DOM-based cross-site scripting across multiple Kibana versions in both Elastic Cloud and self-hosted environments. The…
SecurityOnline -
CVE-2025-11919: Wolfram Cloud Vulnerability Exposes Users to Privilege Escalation and Remote Code Execution
CVE-2025-11919 concerns Wolfram Cloud version 14.2, which could allow attackers to achieve privilege escalation, information exfiltration and remote code execution (RCE) within multi-tenant cloud environments. According to CERT Coordination Center (CERT/CC),…
SecurityOnline -
Malware Disguised as SteamCleaner Uses Valid Signature to Inject Node.js RCE Backdoor
Researchers from the AhnLab Security Intelligence Center (ASEC) have uncovered a malware campaign that repurposes the long‑abandoned SteamCleaner open‑source project to distribute a Node[.]js remote command‑execution backdoor. The fake installer,…
SecurityOnline -
Open WebUI XSS Flaw (CVE-2025-64495) Risks Admin RCE via Malicious Prompts
Open WebUI has disclosed a high-severity vulnerability, CVE-2025-64495, affecting versions up to 0.6.34 and rated CVSS 8.7, which enables stored DOM-based XSS through the prompt-handling functionality when Insert Prompt as Rich Text is enabled. According to…
SecurityOnline -
Legacy Malware Resurfaces: DarkComet RAT Uses Bitcoin Wallet Lure to Deploy UPX-Packed Payload
According to Lat61 Threat Intelligence Team, a new campaign repackages DarkComet RAT with Bitcoin-themed lures to distribute a UPX-packed payload, aiming at cryptocurrency enthusiasts. The operation begins with a RAR archive posing as a legitimate…
SecurityOnline -
CERT/CC Warns of Code Execution Flaws in Lite XL Text Editor (CVE-2025-12120, CVE-2025-12121)
CERT/CC has warned of two severe flaws in Lite XL that could allow remote code execution, tracked as CVE-2025-12120 and CVE-2025-12121. The first flaw stems from Lite XL’s automatic execution of .lite_project.lua files when a user opens a project directory,…
SecurityOnline -
Delphi PatoRAT Backdoor Hijacks LogMeIn Resolve and PDQ Connect RMM Tools for Full System Takeover
Researchers from the AhnLab Security Intelligence Center (ASEC) have disclosed a new campaign that exploits remote monitoring and management tools—LogMeIn Resolve (GoTo Resolve) and PDQ Connect—to deploy a Delphi-based backdoor named PatoRAT, enabling full…
SecurityOnline
