News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 16 so far |
Fri 14 Nov 2025· 66 articles
-
Fortinet FortiWeb Flaw Actively Exploited in the Wild Before Company's Silent Patch
Cybersecurity researchers warn of an authentication bypass vulnerability in Fortinet FortiWeb that could let attackers take over admin accounts and fully compromise a device. According to The Hacker News, the flaw was patched in FortiWeb version 8.0.2, and…
The Hacker News -
Critical Zoho Analytics Plus Flaw Allows Attackers to Run Arbitrary SQL Queries
A critical unauthenticated SQL injection vulnerability has been discovered in Zoho Analytics Plus on-premise, tracked as CVE-2025-8324, which allows attackers to run arbitrary SQL queries without authentication. The flaw stems from insufficient input…
gbhackers.com -
App Store Cuts Commission to 15% for Mini Apps to Expand Services
The App Store has announced a new Mini Apps Partner Program offering reduced In-App Purchase fees for developers of miniature applications that provide services within larger apps, with the commission cut from 30% to 15%. Mini Apps are described as…
SecurityOnline -
Washington Post Oracle E-Suite Breach Exposes Data of Over 9,000 Staff and Contractors
The Washington Post disclosed a significant data breach affecting more than 9,700 employees and contractors after an external system compromise targeting its Oracle E-Suite infrastructure. The breach occurred on 10 July 2025 and went undetected for roughly…
gbhackers.com -
Washington Post notifies 10,000 individuals affected in Oracle-linked data theft
The Washington Post has warned that 10,000 staff and contractors were affected by an Oracle E-Business Suite breach, with personal and financial data exposed. Between 10 July 2025 and 22 August 2025, threat actors accessed parts of the Post’s network by…
Security Affairs -
Anthropic Says Claude AI Powered 90% of Chinese Espionage Campaign
A China-linked state-sponsored threat actor manipulated Claude Code to carry out cyberattacks on roughly 30 organisations worldwide, according to Anthropic. The AI-powered campaign, identified in September, involved abusing Claude Code to inspect victim…
SecurityWeek -
Critical Imunify360 Vulnerability Exposes Millions of Linux-Hosted Sites to RCE Attacks
A critical Remote Code Execution vulnerability has been patched in Imunify360 AV, a security product protecting approximately 56 million websites worldwide. Hosting companies must apply the patch immediately to prevent potential server compromises. The issue…
gbhackers.com -
Android Photo Frame App Infects Devices With Malware, Allows Full Remote Takeover
A recent investigation has uncovered that Android-powered digital photo frames come with preinstalled apps that can download and execute malware automatically, potentially giving remote attackers full control of the device without the user touching the…
gbhackers.com -
Google Says Chinese ‘Lighthouse’ Phishing Kit Disrupted Following Lawsuit
Google says the Lighthouse phishing service has been disrupted after the company filed a lawsuit against the cybercrime group operating it, with Google stating Lighthouse operations have been shut down since the filing was announced. The threat actor,…
SecurityWeek -
Microsoft Teams Introduces Premium Feature to Prevent Screenshots and Screen Recording
Microsoft Teams has rolled out a new security feature in Teams Premium called “Prevent screen capture,” designed to block screenshots and recordings during sensitive meetings. It will be available worldwide through late November 2025, addressing concerns…
gbhackers.com -
Checkout.com Suffers Data Breach as ShinyHunters Attack Cloud Storage
Checkout[.]com has disclosed a data breach driven by the ShinyHunters group, with attackers accessing old data stored in a third‑party cloud system. According to Checkout[.]com’s investigation, the cybercriminals obtained documents by exploiting a legacy…
gbhackers.comShinyHunters -
CISA Warns: Akira Ransomware Has Extracted $42M After Targeting Hundreds
CISA Warns: Akira Ransomware Has Extracted $42M After Targeting Hundreds is the headline, reflecting claims that the Akira operation has amassed substantial ransom proceeds. According to the FBI, CISA, Department of Defense Cyber Crime Center (DC3),…
gbhackers.comStorm-1567 -
Palo Alto PAN-OS Flaw Lets Attackers Force Firewall Reboots via Malicious Packets
Palo Alto Networks has disclosed a denial-of-service vulnerability in its PAN-OS software that lets attackers force firewalls into unexpected reboots by sending malicious packets, with the flaw tracked as CVE-2025-4619. The issue affects multiple PAN-OS…
gbhackers.com -
Lumma Stealer Leverages Browser Fingerprinting for Data Theft and Stealthy C2 Communications
Lumma Stealer has evolved to use browser fingerprinting as part of its data theft and stealthy C2 communications, supplementing its existing HTTP-based exfiltration with JavaScript-driven collection. According to Trend Micro, which tracks Lumma Stealer as…
gbhackers.com -
Fortinet FortiWeb Zero-Day Exploited to Gain Full Admin Access
A critical zero-day vulnerability in Fortinet FortiWeb has been actively exploited in the wild, allowing attackers to gain complete administrator access without any prior authentication. On 6 October 2025, cyber deception company Defused published a public…
gbhackers.com -
ZERO-DAY ATTACK WARNING: Fortinet FortiWeb Exploit Grants Unauthenticated Admin Access!
Cybersecurity firms have highlighted a critical Fortinet FortiWeb vulnerability that allows an unauthenticated attacker to gain administrator-level control of the FortiWeb Manager panel, with a public PoC exploit already in circulation and active…
SecurityOnline -
Critical ASUS DSL Router Flaw (CVE-2025-59367, CVSS 9.3) Allows Unauthenticated Remote Access
ASUS has issued an urgent advisory about a critical authentication bypass affecting several models in its DSL Series Router lineup, tracked as CVE-2025-59367 with a CVSSv4 score of 9.3, which could allow remote threat actors to access affected systems…
SecurityOnline -
Qualcomm Launches Dragonwing IQ-X: Oryon CPU Brings 45 TOPS Edge AI to Factory PCs
According to Qualcomm, the Dragonwing IQ-X is the first processor lineup designed for industrial PCs, built on the company’s Oryon CPU architecture and delivering up to 45 TOPS of AI computing power for on-device edge workloads. The processors are…
SecurityOnline -
GPT-5.1 Arrives: OpenAI Unveils ‘Adaptive Reasoning’ & New Human-Like Chat Styles
OpenAI has announced GPT-5.1, a major revision within the GPT-5 generation that aims to make ChatGPT more intelligent and more human in conversation, with two new models—GPT-5.1 Instant and GPT-5.1 Thinking. According to OpenAI, GPT-5.1 Instant adopts a…
SecurityOnline -
macOS Tahoe Beta Reveals ‘Edge Light’: Apple’s New AI-Driven Virtual Ring Light for Video Calls
The article reports that macOS Tahoe 26.2 Developer Beta introduces a feature called Edge Light, an AI-driven virtual ring light for video calls. Edge Light makes a MacBook’s display function as a rectangular band of light radiating from the screen edges to…
SecurityOnline -
Windows Agentic OS Revealed: Microsoft Aims to Transform Windows 11 into an AI-First Platform
Microsoft is gradually weaving a wide range of artificial intelligence capabilities into Windows 11, with the most significant being the Microsoft Copilot suite of AI-driven services, though some features require hardware such as processors with dedicated…
SecurityOnline -
Sui Blockchain Seed Stealer: Malicious Chrome Extension Hides Mnemonic Exfiltration in Microtransactions
The Sui Blockchain Seed Stealer story, published on 14 November 2025, reports a malicious Chrome extension posing as an Ethereum wallet that exfiltrates seed phrases by hiding the data inside normal-looking Sui blockchain transactions. The extension, named…
SecurityOnline -
High-Severity NVIDIA NeMo Framework Flaws Allow Code Injection and Privilege Escalation in AI Pipelines
NVIDIA has released a security update for its NeMo Framework on 14 November 2025, addressing two high-severity vulnerabilities that could enable code execution, privilege escalation, information disclosure, and data tampering in AI pipelines. The first flaw,…
SecurityOnline -
Amazon Exposes Advanced APT Exploiting Cisco ISE (RCE) and Citrix Bleed Two as Simultaneous Zero-Days
According to Amazon Threat Intelligence, a highly sophisticated threat campaign was uncovered that exploits multiple zero‑day vulnerabilities in Cisco Identity Services Engine (ISE) and Citrix systems, signalling a major escalation in targeting of identity…
SecurityOnline -
macOS Threat: AppleScript (.scpt) Files Emerge as New Stealth Vector for Stealer Malware
A new macOS threat shows AppleScript (.scpt) files being used as a stealth delivery vector for stealer malware, according to fresh research from Pepe Berba, Threat Detection & Hunting specialist at Canva. The analysis notes a rise in malicious .scpt files…
SecurityOnline -
Critical Zoho Analytics Plus Flaw (CVE-2025-8324, CVSS 9.8) Allows Unauthenticated SQL Injection and Data Takeover
Zoho Analytics Plus has a critical on‑premise flaw tracked as CVE-2025-8324 with a CVSS of 9.8 that allows unauthenticated remote attackers to execute arbitrary SQL queries, potentially exposing data and, in severe cases, taking over user accounts. According…
SecurityOnline
