News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Wed 19 Nov 2025· 64 articles
-
AirDrop PIN Pairing Arrives: New iOS Beta Allows 30-Day File Sharing Without Contacts
Apple has, for various reasons, adjusted AirDrop so that it now defaults to receiving content only from contacts, with a manual enabling option allowing file transfers from strangers for up to ten minutes before reverting to contacts-only. The company has…
SecurityOnline -
Major Blow to Cybercrime: Police Seize 250 Servers from Dutch Bulletproof Host
Police seized 250 physical servers from a Dutch bulletproof hosting provider operating in the Netherlands, confiscating them during the operation. According to investigators, the hosting company has been exploited by cybercriminals since 2022, with more than…
SecurityOnline -
CredShields Joins Forces with Checkmarx to Bring Smart Contract Security to Enterprise AppSec Programs
According to CyberNewsWire, CredShields and Checkmarx have joined forces to bring smart contract security to enterprise AppSec programmes, uniting Checkmarx’s AppSec leadership with CredShields’ Web3 focus. The partnership, announced for Singapore on 19…
SecurityOnline -
New Windows 11 Tools: Point-in-Time Restore & Network-Enabled Recovery Environment
Microsoft has announced that Windows 11 will gain a suite of new recovery tools designed to help users restore systems after catastrophic failures, including updates or drivers that cause crashes. The first feature, Point-in-Time Restore, lets users roll…
SecurityOnline -
Gemini 3 Launch: Google Unveils ‘Antigravity’ Platform for Agentic AI Development
Google has announced the launch of Gemini 3, its newest generation of artificial intelligence models, with Sundar Pichai describing the release as the company’s “most intelligent model yet.” Gemini 3 is positioned as the culmination of Gemini 1 and Gemini 2,…
SecurityOnline -
AI Bubble Fear: Microsoft & NVIDIA Pour Billions into Anthropic, Fueling Circular Investment
According to Microsoft, which has revised its partnership with OpenAI, the company announced a planned investment of up to 10 billion USD in Anthropic, while NVIDIA pledged an additional 5 billion USD for Anthropic. This trilateral arrangement also includes…
SecurityOnline -
Microsoft Unveils Security Enhancements for Identity, Defense, Compliance
Microsoft has unveiled a raft of security enhancements at Ignite 2025 across Defender, Sentinel, Copilot, Intune, Purview, and Entra, with most announcements aimed at strengthening identity and cloud security. According to SecurityWeek, new Defender…
SecurityWeek -
Google Pledges $78 Billion for ‘Investing in America 2025’ AI Infrastructure
Google has unveiled a major annual investment initiative called “Investing in America 2025,” aimed at expanding cloud computing and data‑centre infrastructure while also boosting sustainable energy development and talent cultivation. According to details…
SecurityOnline -
Grok 4.1 Thinking Steals #1 Spot on LMArena, Surpassing Google Gemini 2.5 Pro
Grok 4.1 Thinking Steals #1 Spot on LMArena, Surpassing Google Gemini 2.5 Pro reports that Elon Musk’s xAI released two Grok 4.1 variants—the standard Grok 4.1 and the deep-reasoning-enabled Grok 4.1 Thinking—which are now freely available to users. On the…
SecurityOnline -
AI Mode Upgraded: Google Launches Canvas for Planning and Agentic Booking for Reservations
According to Google, AI Mode has been upgraded with a suite of new tools and expanded capabilities to handle increasingly complex everyday tasks. The company says the AI-enhanced search tool Flight Deals, which sits within Google Flights, will graduate from…
SecurityOnline -
Eurofiber confirms November 13 hack, data theft, and extortion attempt
Eurofiber has confirmed that on 13 November 2025 threat actors exploited a software vulnerability to breach its ticketing system and the ATE customer portal used by Eurofiber France and its regional brands, exfiltrating data and attempting extortion. The…
Security Affairs -
New FortiWeb zero-day CVE-2025-58034 under attack patched by Fortinet
Fortinet patched a new FortiWeb zero-day, tracked as CVE-2025-58034, which is being actively exploited in attacks in the wild, according to Fortinet’s advisory. The flaw is an improper neutralization of special elements used in an OS Command Injection…
Security Affairs -
Fortinet Warns of New FortiWeb CVE-2025-58034 Vulnerability Exploited in the Wild
Fortinet has warned of a new FortiWeb vulnerability, tracked as CVE-2025-58034, that is being exploited in the wild. The flaw is classified as medium severity with a CVSS of 6.7/10 and is described as an OS Command Injection (CWE-78) that could allow an…
The Hacker News -
CISA KEV Alert: FortiWeb RCE Flaw (CVE-2025-58034) Under Active Exploitation for Command Injection
Fortinet has issued an urgent advisory warning that a newly disclosed vulnerability in FortiWeb, tracked as CVE-2025-58034, is being actively exploited in the wild, prompting CISA to add the flaw to its Known Exploited Vulnerabilities Catalog. According to…
SecurityOnline -
AI-Generated Malware Attacks 230,000 Exposed Ray AI Clusters in Massive ShadowRay 2.0 Botnet Campaign
SecurityOnline[.]info reports that researchers at Oligo Security have uncovered a massive, fast-evolving cyberattack campaign hijacking exposed Ray AI clusters worldwide through the long-standing ShadowRay vulnerability (CVE-2023-48022), marking one of the…
SecurityOnline -
D-Link DIR-878 Reaches EOL: 3 Unpatched RCE Flaws Allow Unauthenticated Remote Command Execution
D-Link DIR-878 has reached End-of-Life and End-of-Service, with the company warning that three unauthenticated remote code execution flaws will not be patched. The advisory details four vulnerabilities across the DIR-878 firmware, three of which allow…
SecurityOnline -
Critical METZ CONNECT Flaws (CVSS 9.8) Allow Unauthenticated RCE and Admin Takeover on Industrial Controllers
METZ CONNECT GmbH, in coordination with CERT@VDE, has issued an urgent advisory warning of multiple critical vulnerabilities affecting its EWIO-2 series, including Energy-Controlling EWIO2-M, EWIO2-M-BM, and Ethernet-IO EWIO2-BM devices, with some flaws…
SecurityOnline -
9 Million Installs: Malicious Chrome VPN Extensions Hijack User Traffic Via Remote PAC Proxy Injection
SecurityOnline[.]info reports that LayerX researchers have exposed a long-running malicious campaign in VPN and ad-blocking Chrome extensions designed to intercept traffic, exfiltrate data, disable security tools, and redirect users through…
SecurityOnline -
Critical SolarWinds Serv-U Flaws (CVSS 9.1) Allow Authenticated Admin RCE and Path Bypass
SolarWinds has released security updates addressing three critical vulnerabilities in Serv-U, each with a CVSS score of 9.1 and enabling remote code execution when abused by an authenticated administrator. The flaws, CVE-2025-40547, CVE-2025-40548 and…
SecurityOnline -
npm Supply Chain Attack: Hackers Use Adspect Cloaking and Fake Crypto CAPTCHA to Deceive Victims and Researchers
The Socket Threat Research Team has uncovered a highly coordinated malware campaign across seven npm packages published by a threat actor using the alias “dino_reborn,” which employ Adspect-powered cloaking, anti-analysis JavaScript, and fake CAPTCHA…
SecurityOnline -
Iranian APT UNC1549 Infiltrates Aerospace by Hijacking Trusted DLLs and Executing VDI Breakouts
According to Mandiant, the threat group UNC1549, suspected to be linked to Iran, has broadened its cyber-espionage operations across the aerospace, aviation, and defence sectors since mid-2024. The group employs a dual intrusion strategy, compromising…
SecurityOnlineUNC1549 -
Stealth Stealer: New .NET Loader Hides LokiBot Payload in BMP/PNG Images Using Advanced Steganography
The Splunk Threat Research Team (STRT) has uncovered a new variant of a .NET steganographic loader that hides malicious payloads inside image files and ultimately deploys LokiBot, a credential-stealing trojan. The researchers note that in August 2025 a…
SecurityOnline -
macOS Wallet Stealer Uncovered: “Nova” Malware Replaces Ledger/Trezor Apps with Phishing Clones for Seed Theft
A new macOS stealer campaign, internally dubbed “Nova” by researchers, has been uncovered, revealing a modular malware ecosystem that exfiltrates cryptocurrency wallets and silently replaces Ledger and Trezor apps with phishing clones for seed theft.…
SecurityOnline -
Anatomy of an Akira Ransomware Attack: When a Fake CAPTCHA Led to 42 Days of Compromise
Unit 42 recently assisted a global data storage and infrastructure company that experienced a destructive ransomware attack, an incident orchestrated by Howling Scorpius, the distributors of Akira ransomware. What began with a single click on a compromised…
unit42.paloaltonetworks.comStorm-1567
