News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 13 so far |
Sat 15 Nov 2025· 11 articles
-
Multiple Vulnerabilities in GoSign Desktop lead to Remote Code Execution
Researchers identified multiple vulnerabilities in GoSign Desktop, the on‑premise electronic signature tool from Tinexta InfoCert, which can lead to remote code execution when TLS certificate validation is disabled in proxy configurations and the update…
Security Affairs -
RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet
RondoDox, a botnet malware, has been observed exploiting unpatched XWiki instances against CVE-2025-24893, an eval injection flaw that could permit arbitrary remote code execution via requests to /bin/get/Main/SolrSearch. The vulnerability was patched by…
The Hacker News -
Washington Post hack exposes personal data of John Bolton, almost 10,000 others
The Washington Post was hacked, with personal data exposed for John Bolton among nearly 10,000 others after access to its Oracle E-Business Suite systems.
DataBreaches -
Draft UK Cyber Security and Resilience Bill Enters UK Parliament
On 12 November 2025, the UK government introduced the draft Cyber Security and Resilience (Network and Information Systems) Bill to the UK Parliament, seeking to amend the Network and Information Systems Regulations 2018 in light of the EU NIS2 Directive.…
DataBreaches -
Five U.S. Citizens Plead Guilty to Helping North Korean IT Workers Infiltrate 136 Companies
According to The U.S. Department of Justice (DoJ), five individuals have pleaded guilty to aiding North Korea’s illicit IT worker schemes by enabling overseas workers to use U.S. identities to secure jobs with American firms, affecting more than 136 victim…
The Hacker News -
Barrier Removed: Microsoft Makes Xbox Game Publishing Guide Public for All Developers
The Daily CyberSecurity piece, dated 15 November 2025, reports that Microsoft has announced it is officially opening its internal Xbox Game Publishing Guide to the public. Previously accessible only to select partners, the document is now online for everyone…
SecurityOnline -
WhatsApp Interoperability Live: Meta Confirms DMA Integration with BirdyChat and Haiket
Meta has announced that, to comply with the EU Digital Markets Act, WhatsApp will soon be interoperable with two third‑party messaging services, BirdyChat and Haiket. After months of limited testing, the company says WhatsApp can operate smoothly with both…
SecurityOnline -
Project Kuiper is Now Amazon Leo: Amazon Rebrands Satellite Initiative for Commercial Launch
Amazon has announced that its satellite communications initiative, formerly known as Project Kuiper, will be officially rebranded as Amazon Leo, a name intended to reflect its reliance on Low Earth Orbit satellites. The programme, launched in 2019, has aimed…
SecurityOnline -
U.S. CISA adds Fortinet FortiWeb flaw to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added Fortinet FortiWeb flaw CVE-2025-64446, with a CVSS score of 9.1, to its Known Exploited Vulnerabilities catalog. The vulnerability is a relative path traversal issue affecting…
Security Affairs -
Symfony Patches PATH_INFO Parsing Flaw Leading to Authorization Bypass (CVE-2025-64500)
The Symfony project has released security updates for a newly disclosed vulnerability in its HTTP Foundation component, tracked as CVE-2025-64500 and rated CVSS 7.3, which stems from incorrect parsing of PATH_INFO and could lead to a limited authorization…
SecurityOnline -
Cisco Warns of High-Severity Privilege Escalation Flaw (CVE-2025-20341) in Catalyst Center Virtual Appliance
Cisco warns of a high-severity privilege escalation flaw, CVE-2025-20341, in the Catalyst Center Virtual Appliance, according to Cisco. The advisory says the vulnerability could allow an authenticated, remote attacker to elevate privileges from the lowest…
SecurityOnline
