News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Mon 17 Nov 2025· 45 articles
-
Record Supply Chain Attack: 150,000+ Malicious npm Packages Flooded Registry for Token Farming Rewards
In one of the largest open-source supply chain incidents on record, Amazon Inspector researchers uncovered over 150,000 malicious npm packages linked to a coordinated tea[.]xyz token farming campaign. The attackers used self-replicating automation to create…
SecurityOnline -
CISA Warns: Critical Lynx+ Gateway Flaw (CVSS 10.0) Allows Unauthenticated Remote Reset; Vendor Non-Responsive
According to CISA, the advisory details four high‑severity vulnerabilities affecting the Lynx+ Gateway manufactured by General Industrial Controls (GIC). The flaws include CVE-2025-55034 (CVSS 8.2) for weak password requirements, CVE-2025-58083 (CVSS 10.0)…
SecurityOnline -
Lumma Stealer Resurfaces After Doxxing with New Browser Fingerprinting to Target High-Value Victims
Trend Micro researchers have observed a significant resurgence in Lumma Stealer activity, also tracked as Water Kurita, despite a targeted doxxing campaign last month that exposed the malware’s alleged core members and disrupted its operations. The…
SecurityOnline -
Phishing-as-a-Service Uncovered: Automated Kit Impersonates Aruba S.p.A. to Steal Credentials and Credit Cards
According to Group-IB, a new, highly automated phishing framework impersonates Aruba S.p.A. to harvest credentials and credit card details, highlighting the emergence of phishing-as-a-service as a commercial ecosystem. The kit is designed as a four-stage…
SecurityOnline -
New Yurei Ransomware Emerges: Go-Based Threat Uses ChaCha20-Poly1305 for Irreversible Double Extortion
According to AhnLab, Yurei is a newly emerging Go-based ransomware strain first observed in early September 2025, operating with a classic double-extortion model that encrypts data, deletes backups and threatens to leak stolen information. The malware uses a…
SecurityOnline
