News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Tue 18 Nov 2025· 54 articles
-
Cloud Break: IoT Devices Open to Silent Takeover Via Firewalls
IoT devices can be compromised due to gaps in cloud management interfaces for firewalls and routers, even if security software is in place or devices are not online. In a PoC presented at Black Hat Europe in London, Jincheng Wang, a Nanjing University…
Dark Reading -
From bad to worse: Doctor Alliance hacked again by same threat actor
According to ISMG, Doctor Alliance faced a renewed data breach after a threat actor known as Kazu claimed a second intrusion, following an initial breach in which 353 GB of data were allegedly exposed and a $200,000 ransom was demanded with a November 21…
DataBreaches -
Can a Global, Decentralized System Save CVE Data?
As vulnerabilities in the Common Vulnerabilities and Exposures ecosystem mount, a Black Hat Europe presenter argues for a global, distributed alternative to CVE data, highlighting that the NVD continues to lag in analysing vulnerabilities. In the past five…
Dark Reading -
Pennsylvania Office of the Attorney General (OAG) confirms data breach after August attack
The Pennsylvania Office of the Attorney General (OAG) confirms a data breach following a ransomware attack attributed to the Inc Ransom group. The organisation did not share details about the number of affected individuals, but a media notice published by…
Security Affairs -
Iran-Nexus Threat Actor UNC1549 Takes Aim at Aerospace
Researchers say an Iran-nexus threat actor known as UNC1549 has been targeting organisations in the aerospace sector, with activity focused on aerospace and defense entities in the US, the UAE, Qatar, Spain, and Saudi Arabia. Researchers for Google Cloud's…
Dark ReadingUNC1549 -
Bonkers Bitcoin heist: 5-star hotels, cash-filled envelopes, vanishing funds
Kent Halliburton, the CEO of Sazmining, travelled to Amsterdam in August 2025 to meet two representatives of a Monaco-based family office and discuss a multi-million-dollar deal for bitcoin mining rigs. After a staged lunch at the Rosewood Hotel, he was…
Ars Technica -
Sneaky 2FA Phishing Kit Adds BitB Pop-ups Designed to Mimic the Browser Address Bar
The Hacker News reports that the Sneaky 2FA phishing kit, a PhaaS offering, has incorporated BitB (Browser-in-the-Browser) functionality, making it easier for attackers to mount credential-stealing campaigns at scale. According to Push Security, BitB is…
The Hacker News -
Cloudflare Says Highly Disruptive Outage Not Caused by Attack
Cloudflare says a highly disruptive outage affecting services such as ChatGPT, X, Dropbox, Shopify and the game League of Legends was not caused by a cyberattack. Outages were reported across websites and digital services linked to critical organisations…
SecurityWeek -
Chrome zero-day under active attack: visiting the wrong site could hijack your browser
According to Google, Chrome has a zero-day under active attack after researchers found two high‑severity flaws in the browser’s V8 engine, the component that runs JavaScript in Chrome and other Chromium-based browsers. The flaws are type confusion defects…
Malwarebytes -
Surveillance tech provider Protei was hacked, its data stolen, and its website defaced
Protei, a Russian telecom company that develops technology for web surveillance and censorship, was hacked, with its data stolen and its website defaced, according to TechCrunch. Founded in Russia and now headquartered in Jordan, Protei supplies…
DataBreaches -
Malicious Npm Packages Abuse Adspect Cloaking in Crypto Scam
Malicious npm packages are abusing Adspect cloaking to run a crypto scam, with Socket Threat Research identifying seven such packages distributed by a threat actor using the online handle “dino_reborn,” according to a blog post. The malware campaign embeds…
Dark Reading -
Bug Bounty Programs Rise as Key Strategic Security Solutions
Bug bounty programs have emerged as a cornerstone of modern cybersecurity strategy, offering organisations a formal channel to tap external security expertise and providing researchers with legal protection and financial incentives for ethical disclosure.…
Dark Reading -
MI5 Warns Lawmakers That Chinese Spies Are Trying to Reach Them via LinkedIn
According to Associated Press, Britain’s domestic intelligence agency MI5 warned lawmakers that Chinese spies are actively reaching out to recruit and cultivate them via headhunters or cover companies. The alert states that Chinese nationals are “using…
SecurityWeek -
SecurityMetrics Wins “Data Leak Detection Solution of the Year” in 2025 CyberSecurity Breakthrough Awards Program
SecurityMetrics has been named the winner of the “Data Leak Detection Solution of the Year” at the 9th CyberSecurity Breakthrough Awards, recognised for its Shopping Cart Inspect (SCI) solution. The award, announced in Orem, United States on 18 November…
SecurityOnline -
Ambient and autonomous security for the agentic era
According to Microsoft Security Blog, Microsoft Ignite 2025 showcased an ambient and autonomous security approach designed to protect AI agents and apps across platforms, clouds and devices as humans and agents push innovation. The article notes that more…
Microsoft -
Agents built into your workflow: Get Security Copilot with Microsoft 365 E5
According to Microsoft Security Blog, security agents are being embedded in the everyday flow of work, with Security Copilot expanding the Microsoft 365 E5 security stack by adding built-in agents that act as a force multiplier across Defender, Entra, Intune…
Microsoft -
Meta Expands WhatsApp Security Research with New Proxy Tool and $4M in Bounties This Year
Meta has expanded its WhatsApp security research by releasing a tool called WhatsApp Research Proxy to long-time bug bounty researchers to aid in researching the platform’s network protocol. The move includes a pilot initiative inviting research teams to…
The Hacker News -
Meta Paid Out $4 Million via Bug Bounty Program in 2025
Meta has paid out $4 million through its bug bounty programme in 2025, bringing the total awarded since the programme’s creation to more than $25 million, according to SecurityWeek. The company says it received roughly 13,000 vulnerability reports this year,…
SecurityWeek -
DoorDash data breach exposes personal info after social engineering attack
According to DoorDash, a social engineering attack led to a data breach that exposed the names, addresses, emails, and phone numbers of users, Dashers, and merchants. The company said one employee was targeted, but access was shut down and law enforcement…
Security Affairs -
Webinar Today: Protecting What WAFs and Gateways Can’t See – Register
Webinar Today: Protecting What WAFs and Gateways Can’t See highlights how attackers are bypassing WAFs and API gateways as organisations scale their API portfolios, using business logic abuse, hidden parameter manipulation, and AI-driven automation to…
SecurityWeek -
SpyCloud Unveils Top 10 Cybersecurity Predictions Poised to Disrupt Identity Security in 2026
According to CyberNewsWire, SpyCloud’s forecast for 2026 centres on a surge of identity-based threats, with predictions outlining evolving attacker tactics and greater risk from AI and insider threats. The report highlights a non-human identity (NHI)…
SecurityOnline -
Apono Raises $34 Million for Cloud Identity Management Platform
Apono, a cloud identity management start-up, announced on 18 November 2025 that it has raised $34 million in a Series B round, taking its total funding to more than $54 million. The round was led by USVP, with additional support from 33N, Swisscom Ventures,…
SecurityWeek -
Nudge Security Raises $22.5 Million in Series A Funding
According to SecurityWeek, Nudge Security today announced raising $22.5 million in Series A funding, bringing total raised to close to $30 million. The round was led by Cerberus Ventures, with participation from Ballistic Ventures, Forgepoint Capital, and…
SecurityWeek -
Thieves order a tasty takeout of names and addresses from DoorDash
DoorDash disclosed a data breach on 25 October 2025 after an employee fell for a social engineering attack that allowed attackers to gain account access. According to DoorDash, the information stolen varied by user and included names, phone numbers, email…
Malwarebytes -
Researchers Detail Tuoni C2's Role in an Attempted 2025 Real-Estate Cyber Intrusion
Cybersecurity researchers have detailed a mid-October 2025 attack against a major U.S.-based real-estate company that used a nascent command-and-control framework known as Tuoni. According to Morphisec researcher Shmuel Uzan, the campaign leveraged the Tuoni…
The Hacker News -
Cloudflare Outage Crashes the Internet: X, ChatGPT, and Major Websites Inaccessible
Around 12:30 PM GMT on 18 November 2025, a large number of users reported that major global websites, including X and ChatGPT, were inaccessible. According to Tom’s Guide, the likely source of the disruption was a server incident at Cloudflare, which…
SecurityOnline -
Pennsylvania Attorney General Confirms Data Breach After Ransomware Attack
According to the Pennsylvania Office of the Attorney General (OAG), the state’s top law officer, the Inc Ransom group has claimed responsibility for a data breach tied to a ransomware attack earlier this year, stating that it stole 5.7 TB of data and gained…
SecurityWeek -
Princeton University Data Breach Impacts Alumni, Students, Employees
According to Princeton University, the data breach affected alumni, donors, faculty, students, parents and other members of its community after a November 10 phishing attack on an employee with ordinary access to the Advancement database. Hackers accessed…
SecurityWeek -
Iranian Hackers Use DEEPROOT and TWOSTROKE Malware in Aerospace and Defense Attacks
Suspected Iran-linked espionage actors have been observed deploying backdoors such as TWOSTROKE and DEEPROOT in attacks focused on aerospace, aviation and defence industries in the Middle East, according to Mandiant. The activity is attributed to a threat…
The Hacker News -
Data Stolen in Eurofiber France Hack
Eurofiber France disclosed that a threat actor compromised its ticket management platform and the ATE customer portal, with the incident occurring on 13 November 2025 and resulting in a data breach. The hackers allegedly exploited an SQL injection bug in the…
SecurityWeek -
Learn How Leading Companies Secure Cloud Workloads and Infrastructure at Scale
The Hacker News reports on a free webinar titled Securing Cloud Workloads and Infrastructure: Balancing Innovation with Identity and Access Control, aimed at helping organisations secure growing cloud deployments. The session features two CyberArk…
The Hacker News -
Why it matters when your online order is drop-shipped
Online shopping has become easy, but drop-shipping—where the seller never handles stock and passes orders to a third party—can leave buyers stranded with poor support or legal and safety headaches, the article notes, posted on 18 November 2025. According to…
Malwarebytes -
Beyond IAM Silos: Why the Identity Security Fabric is Essential for Securing AI and Non-Human Identities
Identity security fabric (ISF) is a unified architectural framework that brings together disparate identity capabilities, integrating identity governance and administration (IGA), access management (AM), privileged access management (PAM), and identity…
The Hacker News -
Critical Flowise Flaw Allows Unauthenticated Remote Admin Takeover via Exposed Registration Endpoint
SecurityOnline -
Seven npm Packages Use Adspect Cloaking to Trick Victims Into Crypto Scam Pages
Cybersecurity researchers have identified seven npm packages published by a single threat actor that use a cloaking service called Adspect to redirect victims to sketchy crypto scam pages. The malicious packages, published by a threat actor named…
The Hacker News -
Google fixed the seventh Chrome zero-day in 2025
Google patched two Chrome flaws, including a high-severity V8 type-confusion bug tracked as CVE-2025-13223 that has been actively exploited in the wild, according to NIST’s advisory. The flaw impacts the V8 script engine in Google Chrome before…
Security Affairs -
Microsoft Mitigates Record 5.72 Tbps DDoS Attack Driven by AISURU Botnet
Microsoft disclosed that it automatically detected and neutralised a DDoS attack on a single Australian endpoint that peaked at 15.72 terabits per second and around 3.64 billion packets per second, marking the largest cloud-based DDoS observed to date. The…
The Hacker News -
Chrome 142 Update Patches Exploited Zero-Day
Google on Monday rolled out an emergency Chrome 142 update to address a vulnerability exploited in the wild as a zero-day. Tracked as CVE-2025-13223 (CVSS 8.8), the exploited high-severity flaw is described as a type confusion issue in the V8 JavaScript and…
SecurityWeek -
Dutch police takes down bulletproof hosting hub linked to 80+ cybercrime cases
Dutch police says they seized 250 servers running a bulletproof hosting service used solely by criminal actors, a move linked to investigations dating back to 2022. The operation has been connected to more than 80 cybercrime investigations at home and abroad…
Security Affairs -
Google Issues Security Fix for Actively Exploited Chrome V8 Zero-Day Vulnerability
Google has released security updates for Chrome to address two flaws, including one that has been actively exploited in the wild, according to the NIST National Vulnerability Database (NVD). The vulnerability is CVE-2025-13223 (CVSS 8.8), a type confusion…
The Hacker News
