News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Thu 20 Nov 2025· 60 articles
-
Thunderbird 145: Native Microsoft Exchange Support Makes Outlook Migration Easy!
Thunderbird has released version 145.0, introducing full, native support for Microsoft Exchange email through the Exchange Web Services (EWS) protocol. The Microsoft Exchange protocol is widely used in enterprise environments, including Microsoft 365 and…
SecurityOnline -
EU Launches DMA Probes: Is Gatekeeper Status Next for AWS & Azure Cloud?
According to the European Commission, three investigations will be launched into cloud-computing services under the EU’s Digital Markets Act, including an assessment of whether Amazon’s AWS and Microsoft’s Azure should be designated as gatekeepers. Although…
SecurityOnline -
Google Extends FREE AI Pro Subscription for Students Until 2027
According to Google, the free Google AI Pro subscription first introduced in May 2025 for university students across the United States has been extended for an additional year, with active users now able to retain access until May 2027. The offer, which…
SecurityOnline -
Iran-Linked Hackers Mapped Ship AIS Data Days Before Real-World Missile Strike Attempt
Threat actors with ties to Iran engaged in cyber reconnaissance to enable real-world attacks on maritime targets, according to Amazon’s threat intelligence team. The report highlights Imperial Kitten (also known as Tortoiseshell), assessed as affiliated with…
The Hacker News -
SolarWinds Patches Three Critical Serv-U Vulnerabilities
SolarWinds has issued patches for three critical vulnerabilities in its Serv-U enterprise file transfer solution, all tied to version 15.5.2[.]2.102 and addressed in the new 15.5.3 release. The flaws include CVE-2025-40549, described as a path restriction…
SecurityWeek -
TamperedChef Malware Spreads via Fake Software Installers in Ongoing Global Campaign
The TamperedChef campaign continues to spread via fake software installers, with threat actors deploying bogus installers masquerading as popular utilities to entice users into installing malware. According to Acronis Threat Research Unit, the operators rely…
The Hacker News -
Palo Alto Networks to Acquire Observability Platform Chronosphere in $3.35 Billion Deal
According to SecurityWeek News, on 19 November 2025 Palo Alto Networks announced it has agreed to acquire observability platform Chronosphere in a deal valued at $3.35 billion. Under the terms, the total consideration will be paid in cash and replacement…
SecurityWeek -
Critical ASUSTOR Flaw (CVE-2025-13051) Allows Local DLL Hijacking for SYSTEM Privilege Escalation
ASUSTOR has issued a security advisory warning of a critical DLL hijacking vulnerability, tracked as CVE-2025-13051, that could allow local attackers to execute arbitrary code with SYSTEM-level privileges on Windows clients used with ASUSTOR’s backup and…
SecurityOnline -
Critical CVE-2025-65015 Vulnerability in joserfc Could Let Attackers Exhaust Server Resources via Oversized JWT Tokens
A critical vulnerability in the Python library joserfc, tracked as CVE-2025-65015 with a CVSS of 9.2, can let attackers exhaust server resources by logging extremely large JWT payloads. The issue centres on how the library embeds parts of JWT tokens in…
SecurityOnline -
CISA/FBI/NSA Unite to Dismantle Bulletproof Hosting Ecosystem with New Global Defense Guide
According to CISA—alongside the NSA, FBI, DoD Cyber Crime Center, and international cybersecurity partners—a joint announcement has published a comprehensive guide aimed at dismantling the global ecosystem of bulletproof hosting providers, the infrastructure…
SecurityOnline -
Lazarus Group’s New ScoringMathTea RAT Uses Reflective Plugin Loader and Custom Polyalphabetic Crypto for Espionage
A new technical deep-dive into ScoringMathTea reveals a sophisticated Lazarus Group remote access Trojan written in C++ that includes a fully manual reflective plugin loader to evade detection. The analysis describes a modular architecture with a reflective…
SecurityOnlineLazarus Group -
One Click, 42 Days: Akira Ransomware Used CAPTCHA Decoy to Destroy Cloud Backups and Cripple Storage Firm
The piece reports that a global data storage and infrastructure company was crippled by a destructive ransomware attack triggered by one employee’s click on a malicious CAPTCHA decoy, described in a newly released Unit 42 analysis. According to Unit 42, the…
SecurityOnlineStorm-1567 -
Sophisticated “The Gentlemen” Ransomware RaaS Emerges with XChaCha20 Encryption and 48 Victims in 3 Months
Cybereason’s Threat Intelligence Team published an in-depth look at a rapidly evolving ransomware group known as “The Gentlemen”, which surfaced in mid-2025 and has quickly become one of the most technically sophisticated threats seen this year. According to…
SecurityOnlineThe Gentlemen -
Next-Gen Stealth: Malware Hides C2 Traffic as Fake LLM API Requests on Tencent Cloud
The Akamai Hunt team has uncovered a new malware strain that hides its command-and-control traffic behind what appears to be legitimate large language model API requests on Tencent Cloud, signalling a disturbing evolution in attacker tradecraft as…
SecurityOnline -
Next-Gen Ransomware Targets AWS S3: Five Cloud-Native Variants Exploit Misconfigurations for Irreversible Data Destruction
According to Trend Research, ransomware operators are shifting from traditional systems to cloud-native environments, with Amazon S3 emerging as a high-value target. The report outlines five S3 ransomware variants, combining real-world incidents and…
SecurityOnline -
Cybercriminals Shift Tactics: Group Deploys Multiple RMM Tools (ScreenConnect, LogMeIn, Naverisk) for Redundant Persistence and Access Resale
A highly active cybercriminal group has shifted tactics in a long-running campaign that abuses remote monitoring and management software to infiltrate corporate environments, according to The Threat Hunter Team at Broadcom. The actor is now deploying…
SecurityOnline -
Critical Apache Causeway RCE Flaw (CVE-2025-64408) Allows Authenticated Code Execution via Java Deserialization
Apache Causeway has been found to contain a critical Java deserialization flaw, CVE-2025-64408, that could let authenticated attackers execute arbitrary code within affected applications. The vulnerability is reachable via user-controlled URL parameters and…
SecurityOnline -
No More Public BSODs: Windows 11 Will Hide Crash Screens on Public Displays
No More Public BSODs explains that Windows 11 will hide crash screens on public displays, preserving a cleaner look for venues such as airports. When a critical failure occurs, the crash screen will remain visible for only 15 seconds before the display…
SecurityOnline -
Post-CrowdStrike: Microsoft to Phase Out OEM Kernel-Level Driver Privileges
On 20 November 2025, security news outlet Daily CyberSecurity reports that Microsoft is establishing a new driver standard and plans to phase out OEM kernel-level privileges. The move follows years of driver-related failures, including the July 2024 global…
SecurityOnline -
Trend & AWS Partner on Cloud IPS: One-Click Protection
Trend Micro has unveiled a native integration with AWS Network Firewall via AWS Marketplace managed rules, enabling Trend-managed IPS rule groups with a single click and requiring no additional deployment or infrastructure changes. According to Trend Micro,…
trendmicro.com
