News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Wed 19 Nov 2025· 64 articles
-
Fortinet Woes Continue With Another WAF Zero-Day Flaw
Fortinet disclosed a second zero-day vulnerability in its FortiWeb product line, just days after revealing a separate flaw in its WAF that had been exploited in the wild. The newly disclosed vulnerability, CVE-2025-58034, is an OS command injection that can…
Dark Reading -
Do National Data Laws Carry Cyber-Risks for Large Orgs?
National data localisation laws are not just compliance headaches for multinationals; they may also widen cybersecurity gaps as data flows cross borders. The piece notes that China enacted such a rule in 2017 and the EU followed in 2018, with other economies…
Dark Reading -
The AI Attack Surface: How Agents Raise the Cyber Stakes
The AI Attack Surface article explains that agentic AI tools can be hijacked to subvert an agent’s goals and alter interactions across networks, increasing the risk posed by autonomous systems. According to Accorian AI engineer Nagarjun Rallapalli, these…
Dark Reading -
U.S. CISA adds a Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA added a Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog, tracked as CVE-2025-13223. Google Chrome’s V8 engine contains a high-severity type confusion issue that can be triggered by a crafted HTML page to achieve code…
Security Affairs -
Critics scoff after Microsoft warns AI feature can infect machines and pilfer data
Microsoft warned on 19 November 2025 that an experimental AI Agent called Copilot Actions, integrated into Windows, can infect devices and pilfer sensitive user data, a claim that security critics quickly debated. The feature is off by default and described…
Ars Technica -
7-Zip RCE flaw (CVE-2025-11001) actively exploited in attacks in the wild
7-Zip’s remote code execution flaw, CVE-2025-11001, is described as actively exploited in the wild, with NHS England warning that attackers can trigger arbitrary code on affected installations. The advisory notes that a proof-of-concept exploit leverages…
Security Affairs -
Operation WrtHug hijacks 50,000+ ASUS routers to Bìbuild global botnet
Operation WrtHug has hijacked tens of thousands of outdated ASUS WRT routers to form a large botnet, with infections reported worldwide and concentrations in Taiwan, the U.S., and Russia, and infections also appearing across Southeast Asia and Europe. The…
Security Affairs -
How to Manage Risk in Amazon Bedrock
Generative AI services such as Amazon Bedrock bring new risks around access, visibility and data exposure, and the Darktrace blog explains how Darktrace / CLOUD helps prevent these incidents across Bedrock and SageMaker environments. It highlights…
darktrace.com -
Amazon Details Iran’s Cyber-Enabled Kinetic Attacks Linking Digital Spying to Physical Strikes
Amazon threat intelligence experts have documented two cases showing how Iran leveraged hacking to prepare for kinetic attacks, a practice they call cyber-enabled kinetic targeting. The first case involves Imperial Kitten and Tortoiseshell, believed to…
SecurityWeek -
Secure.com Raises $4.5 Million for Agentic Security
Secure[.]com this week announced raising $4.5 million in pre-seed funding and launching its Digital Security Teammates (DSTs), AI agents designed to complement existing security stacks. The investment came from Disrupt[.]com (previously Gaditek), a UAE-based…
SecurityWeek -
Hackers Actively Exploiting 7-Zip Symbolic Link–Based RCE Vulnerability (CVE-2025-11001)
A security flaw in 7-Zip, tracked as CVE-2025-11001, is being actively exploited in the wild, according to an advisory issued by NHS England Digital. The vulnerability, which has a CVSS score of 7.0, allows remote attackers to execute arbitrary code and was…
The Hacker News -
Mac users warned about new DigitStealer information stealer
A new infostealer called DigitStealer is going after Mac users, with researchers describing it as having advanced detection evasion, a multi‑stage attack chain and platform‑specific targeting. The variant is fileless in operation and limits itself to newer…
Malwarebytes -
Report released on PowerSchool cyber attack
A new report released on PowerSchool cyber attack, published by DataBreaches[.]Net on 19 November 2025, summarises findings from the Ontario information and privacy commissioner’s investigation into a large breach affecting power school technology used…
DataBreaches -
Cloudflare Blames Outage on Internal Configuration Error
Cloudflare has blamed an outage that disrupted major websites and services for several hours on an internal configuration error. The incident began at 11:20 UTC on Tuesday and affected sites such as X, Uber, Canva and ChatGPT, among others, initially leading…
Dark Reading -
Seraphic Becomes the First and Only Secure Enterprise Browser Solution to Protect Electron-Based Applications
According to CyberNewsWire, Seraphic has become the first and only secure enterprise browser solution to provide native protection for Electron-based applications, including ChatGPT desktop, Teams and Slack. The announcement, dated 19 November 2025, places…
SecurityOnline -
Python-Based WhatsApp Worm Spreads Eternidade Stealer Across Brazilian Devices
Cybersecurity researchers have revealed a new campaign that uses social engineering and hijacked WhatsApp accounts to spread a Delphi-based banking trojan named Eternidade Stealer, primarily targeting Brazilian users. The campaign uses IMAP to dynamically…
The Hacker News -
Sue The Hackers – Google Sues Over Phishing as a Service
According to Security Boulevard, Google filed a lawsuit on 12 November 2025 in the Southern District of New York against the operators of a massive Phishing-as-a-Service platform called Lighthouse. The complaint portrays Lighthouse as selling ready-made…
DataBreaches -
Princeton University Data Breach Impacts Alumni, Students, Employees
Princeton University disclosed a data breach over the weekend that affected alumni, donors, faculty, students, parents, and other community members. On 10 November 2025, a threat actor accessed an Advancement database containing names, addresses, email…
DataBreaches -
Eurofiber admits crooks swiped data from French unit after cyberattack
Eurofiber says cybercriminals swiped data during an attack on its French unit last week, with only the French business affected and other operations in Belgium, Germany and the Netherlands considered safe. The firm confirmed that the breach targeted its…
DataBreaches -
Five major changes to the regulation of cybersecurity in the UK under the Cyber Security and Resilience Bill
The article explains five major regulatory shifts arising from the UK’s Cyber Security and Resilience Bill. It notes that the Bill will significantly expand the scope of the NIS Regulations to cover data centers and managed service providers, imposing…
DataBreaches -
French agency Pajemploi reports data breach affecting 1.2M people
French agency Pajemploi has reported a data breach that may have exposed the personal information of 1.2 million people. The breach concerns registered professional caregivers who work for private employers using the Pajemploi service, which is part of…
DataBreaches -
The Cloudflare Outage May Be a Security Roadmap
An intermittent outage at Cloudflare on Tuesday briefly knocked many of the Internet’s top destinations offline, with some customers able to pivot away from the platform to keep sites reachable. According to Cloudflare’s postmortem, the disruption was not…
Krebs on Security -
Obscure MCP API in Comet Browser Breaches User Trust, Enabling Full Device Control via AI Browsers
SquareX has released critical research exposing a hidden MCP API in Comet that allows extensions in the AI Browser to execute local commands and gain full control over users’ devices, a capability that traditional browsers explicitly prohibit. The research…
SecurityOnline -
Critical Railway Braking Systems Open to Tampering
Researchers have shown that signalling used by some rail systems can be spoofed, potentially enabling dangerous tampering with train braking. In Spain, the ASFA system dates back to the 1960s, and TechFrontiers’ Gabriela Garcia and David Melendez…
Dark Reading -
Mate Emerges From Stealth Mode With $15.5 Million in Seed Funding
Mate, an AI-powered Security Operations Center startup, has emerged from stealth with $15.5 million in seed funding from Team8 and Insight Partners. Founded in early 2025 by Wiz and Microsoft alumni Asaf Wiener, Oren Saban, and Guy Pergal, the Tel Aviv-based…
SecurityWeek -
U.S. CISA adds a new Fortinet FortiWeb flaw to its Known Exploited Vulnerabilities catalog
According to U.S. CISA, a Fortinet FortiWeb flaw, tracked as CVE-2025-58034, has been added to the Known Exploited Vulnerabilities (KEV) catalog and is being actively exploited in the wild. The vulnerability is an OS Command Injection flaw that allows an…
Security Affairs -
Two-Year-Old Ray AI Framework Flaw Exploited in Ongoing Campaign
Threat actors are exploiting a two-year-old vulnerability in the Ray AI framework, tracked as CVE-2023-48022 with a CVSS of 9.8, to remotely execute arbitrary code via the framework’s Jobs API, unauthenticated. Maintained by Anyscale, Ray is an open‑source…
SecurityWeek -
WrtHug Exploits Six ASUS WRT Flaws to Hijack Tens of Thousands of EoL Routers Worldwide
According to SecurityScorecard's STRIKE team, a new campaign dubbed Operation WrtHug has compromised tens of thousands of outdated or end-of-life ASUS WRT routers worldwide, with the majority in Taiwan, the U.S., and Russia and additional infections across…
The Hacker News -
Attackers are using “Sneaky 2FA” to create fake sign-in windows that look real
According to Malwarebytes, attackers are adopting a technique called Browser-in-the-Browser, or BitB, to present fake sign-in windows that mimic real browser prompts. A Phishing-as-a-Service kit named “Sneaky 2FA” is enabling these capabilities on the…
Malwarebytes -
AI Is Supercharging Phishing: Here’s How to Fight Back
AI‑driven phishing is accelerating, with attackers crafting highly personalised, scalable campaigns that blend into legitimate communications across email, social media, messaging apps and more. The piece notes that phishing accounted for 16 percent of…
SecurityWeek -
Application Containment: How to Use Ringfencing to Prevent the Weaponization of Trusted Software
Security leaders are urged to move beyond reactive measures and adopt Zero Trust with application containment, where Ringfencing defines what trusted software is allowed to access and do. Ringfencing restricts the capabilities of approved applications by…
The Hacker News -
Largest Azure DDoS Attack Powered by Aisuru Botnet
Microsoft said the DDoS attack aimed at its Azure cloud service was the “largest DDoS attack ever observed in the cloud,” peaking at 15.72 Tbps and nearly 3.64 Bpps, and targeted a single endpoint in Australia on October 24. Similar to the 22 Tbps attack…
SecurityWeek -
DDoS Suspected, Internal Bug Found: Cloudflare Outage Caused by Bot Management Config File
Cloudflare has described the outage as the company’s most severe service disruption in years, clarifying that it was not a network attack but an internal misdiagnosis. According to Cloudflare, the disruption stemmed from a change in permissions within an…
SecurityOnline -
Sharenting: are you leaving your kids’ digital footprints for scammers to find?
Sharenting refers to parents sharing details of their child’s life online, creating a digital footprint that can be public and permanent long after the moment has passed. The article notes that both active footprints (photos, posts, usernames) and passive…
Malwarebytes -
IT threat evolution in Q3 2025. Mobile statistics
In IT threat evolution for Q3 2025, Securelist notes that, according to Kaspersky Security Network, 47 million attacks involving malware, adware or unwanted mobile software were prevented, with Trojan activity remaining the most common threat. The quarter…
securelist.com -
IT threat evolution in Q3 2025. Non-mobile statistics
In Q3 2025, Kaspersky solutions blocked more than 389 million attacks that originated with various online resources, with Web Anti-Virus triggering 51,886,619 unique URLs. In the same period, File Anti-Virus blocked more than 21 million malicious and…
securelist.com -
EdgeStepper Implant Reroutes DNS Queries to Deploy Malware via Hijacked Software Updates
The Hacker News reports that the threat actor PlushDaemon has been seen using a previously undocumented Go-based network backdoor called EdgeStepper to carry out adversary-in-the-middle attacks. EdgeStepper redirects all DNS queries to an external malicious…
The Hacker News -
ServiceNow AI Agents Can Be Tricked Into Acting Against Each Other via Second-Order Prompts
ServiceNow’s Now Assist AI platform can be tricked into acting against itself through second-order prompt injection, leveraging agent-to-agent discovery to copy or exfiltrate data, modify records, or escalate privileges. The researchers note that this is not…
The Hacker News -
Fortinet Discloses Second Exploited FortiWeb Zero-Day in a Week
Fortinet has disclosed a second FortiWeb zero-day exploited in a week, tracked as CVE-2025-58034, an OS command injection flaw that allows authenticated attackers to execute arbitrary code via crafted HTTP requests or CLI commands. The vendor notes that this…
SecurityWeek -
Copilot Gets Brains: Microsoft Unveils ‘Work IQ’ & Agent Mode Integration with GPT-5 and Anthropic
At Microsoft’s Ignite 2025 developer conference, the focus was on empowering the AI lifecycle, with Microsoft unveiling the Work IQ intelligence layer and Agent Mode for Microsoft 365 Copilot, alongside integration with GPT-5, Sora 2 and Anthropic models.…
SecurityOnline
