News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Tue 25 Nov 2025· 49 articles
-
Cheap Hardware Module Bypasses AMD, Intel Memory Encryption
Researchers from KU Leuven and the University of Birmingham have developed a low-cost hardware module, dubbed "Battering RAM," that can bypass memory encryption protections in AMD and Intel processors. This device, costing under $50, allows attackers with…
Dark Reading -
DPRK's FlexibleFerret Tightens macOS Grip
The article discusses the ongoing cyber threat posed by North Korea-linked malware known as FlexibleFerret, which targets macOS users through social engineering tactics, particularly fake job recruitment schemes. The malware has evolved, utilizing more…
Dark Reading -
FBI: bank impersonators fuel $262M surge in account takeover fraud
The FBI has reported a significant increase in account takeover fraud, with criminals impersonating banks and stealing over $262 million since January 2025. The Internet Crime Complaint Center (IC3) has received over 5,100 complaints from individuals and…
Security Affairs -
Little Rock Psychologist Indicted by Federal Grand Jury for Defrauding Medicare and Arkansas Blue Cross Blue Shield
A Little Rock psychologist, Krameelah Banks, has been indicted for defrauding Medicare and Arkansas Blue Cross and Blue Shield. She faces multiple charges including wire fraud and aggravated identity theft. Banks allegedly billed for thousands of hours of…
DataBreaches -
CISA Warns of Spyware Targeting Messaging App Users
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about the use of commercial spyware targeting users of mobile messaging apps like WhatsApp and Signal. CISA highlighted that cyber actors employ advanced targeting and social…
SecurityWeek -
AI Agent Security Firm Vijil Raises $17 Million
Vijil, a cybersecurity startup founded in 2023 by former AWS leaders, has raised $17 million in Series A funding, totaling $23 million to date. The investment, led by BrightMind Partners with support from Mayfield and Gradient, will accelerate the deployment…
SecurityWeek -
Advanced Security Isn't Stopping Ancient Phishing Tactics
A recent study highlights the ongoing threat of phishing attacks, revealing that even organizations with advanced security measures are vulnerable. Conducted by Okta, the research analyzed failed phishing-resistant authentication attempts over 26 months,…
Dark Reading -
Charting the future of SOC: Human and AI collaboration for better security
The blog post discusses the evolution of Security Operations Centers (SOCs) through the integration of AI and human collaboration. It highlights the challenges faced by SOCs due to increasing complexity and the need for speed and precision in threat…
techcommunity.microsoft.com -
Years of JSONFormatter and CodeBeautify Leaks Expose Thousands of Passwords and API Keys
The article discusses significant security breaches involving JSONFormatter and CodeBeautify, which have exposed thousands of passwords and API keys over several years. It highlights the risks associated with these tools, emphasizing the importance of…
The Hacker News -
New ClickFix wave infects users with hidden malware in images and fake Windows updates
The ClickFix campaign has evolved, with attackers now using a fake Windows update screen to deceive users into executing malware. This tactic requires users to copy and paste a command, which initiates a multi-stage infection process involving downloading…
Malwarebytes -
Detego Global Launches Case Management Platform for Digital Forensics and Incident Response Teams
Detego Global has launched the Detego Case Manager for Digital Forensics and Incident Response (DFIR), a platform designed to enhance the management of complex digital investigations. Developed with input from professionals in the field, it offers features…
SecurityOnline -
With Friends Like These: China Spies on Russian IT Orgs
A Chinese state-aligned hacking group, APT31, has been spying on Russia's IT sector, utilizing commercial cloud services for command-and-control communications. This espionage campaign, which began in late 2022, involved targeted phishing emails and…
Dark Reading -
Software companies must be held liable for British economic security, say MPs
A report by the Business and Trade Committee warns that the lack of liability for software vendors poses significant risks to Britain's economic and national security. The committee highlights that economic threats are increasing and calls for government…
DataBreaches -
Russia arrests young cybersecurity entrepreneur on treason charges
A 21-year-old tech entrepreneur and cybersecurity specialist, Timur Kilin, was arrested in Moscow on treason charges, marking a significant case against Russia's tech community. The details of the case are classified, but reports suggest Kilin faced backlash…
DataBreaches -
As Gen Z Enters Cybersecurity, Jury Is Out on AI's Impact
The article discusses the impact of AI on cybersecurity careers, particularly for Generation Z. Bandana Kaur, an 18-year-old cybersecurity researcher, believes AI will enhance human capabilities rather than replace them, allowing analysts to focus on…
Dark Reading -
Morphisec warns StealC V2 malware spread through weaponized blender files
Morphisec has reported that Russian threat actors are distributing the StealC V2 malware through weaponized Blender files on 3D model sites like CGTrader. This malware exploits Blender's capability to run hidden Python scripts, allowing attackers to implant…
Security Affairs -
JackFix Uses Fake Windows Update Pop-Ups on Adult Sites to Deliver Multiple Stealers
The article discusses the JackFix malware, which uses deceptive Windows update pop-ups on adult websites to distribute various types of stealers. This malware targets users by tricking them into believing their system needs an update, leading to the…
The Hacker News -
Alumni, Student, and Staff Information Stolen From Harvard University
Harvard University reported a data breach affecting personal information of alumni, donors, students, and staff, discovered on November 18. Unauthorized access was gained to systems in the Alumni Affairs and Development department. Harvard has blocked the…
SecurityWeek -
Shai Hulud’s “The Second Coming”: New npm Campaign Hits Zapier, ENS, Postman
The article discusses a new wave of the Shai Hulud npm malware campaign that has compromised around 492 npm packages, affecting major projects like Zapier, ENS Domains, and Postman. This second wave, detected on November 24, 2025, follows an earlier attack…
SOCRadar -
Fake Battlefield 6 Pirated Versions and Game Trainers Used to Deploy Stealers and C2 Agents
The article discusses malware campaigns exploiting the popularity of EA's Battlefield 6, which was released in October 2025. Cybercriminals are distributing fake pirated versions and game trainers through torrent sites, which are actually infected installers…
bitdefender.com -
Fluent Bit Vulnerabilities Expose Cloud Services to Takeover
Oligo Security has identified five critical vulnerabilities in the Fluent Bit open-source tool, which is widely used for log collection and processing in cloud environments. The vulnerabilities, tracked as CVE-2025-12972, CVE-2025-12970, CVE-2025-12978,…
SecurityWeek -
WormGPT 4 and KawaiiGPT: New Dark LLMs Boost Cybercrime Automation
Palo Alto Networks researchers have analyzed two malicious large language models (LLMs), WormGPT 4 and KawaiiGPT, which facilitate cybercrime by lowering the skill barrier for attackers. WormGPT 4, available for $50 monthly or $220 for lifetime access, can…
SecurityWeek -
UK privacy regulator has seen ‘collapse in enforcement activity,’ rights coalition says
More than 70 civil liberties groups, academics, and legal experts are urging an investigation into the UK Information Commissioner's Office (ICO) due to a significant decline in enforcement activities. They claim the ICO is experiencing serious structural…
DataBreaches -
'JackFix' Attack Circumvents ClickFix Mitigations
The article discusses a new variant of the ClickFix attack, named 'JackFix', which enhances psychological manipulation and circumvents existing security mitigations. JackFix employs anxiety-inducing phishing tactics, such as fake Windows blue screens, to…
Dark Reading -
UK Cyber Security & Resilience Bill: What Organizations Need to Know
The UK Cyber Security and Resilience Bill (CSRB) aims to modernize the framework for Critical National Infrastructure, expanding the scope of regulated organizations and enhancing incident reporting and supply chain risk oversight. Key provisions include: 1)…
darktrace.com -
Major US Banks Impacted by SitusAMC Hack
SitusAMC, a real-estate lending and investing solutions provider, reported a data breach affecting major U.S. banks on November 12. The breach involved unauthorized access to corporate data related to clients, including accounting records and legal…
SecurityWeek -
ToddyCat’s New Hacking Tools Steal Outlook Emails and Microsoft 365 Access Tokens
The article discusses new hacking tools developed by ToddyCat that are capable of stealing Outlook emails and Microsoft 365 access tokens. These tools pose a significant threat to cybersecurity, particularly for organizations using Microsoft services. The…
The Hacker NewsToddyCat -
WhatsApp closes loophole that let researchers collect data on 3.5B accounts
WhatsApp, with approximately three billion users, recently faced scrutiny after researchers exploited a flaw in its API, allowing them to identify around 3.5 billion registered accounts, including inactive ones. The researchers from the University of Vienna…
Malwarebytes -
3 SOC Challenges You Need to Solve Before 2026
The article discusses three key challenges that Security Operations Centers (SOCs) must address before 2026. These challenges include: 1) Adapting to the evolving threat landscape, which requires continuous updates to security protocols and technologies. 2)…
The Hacker News -
Hackers Hijack Blender 3D Assets to Deploy StealC V2 Data-Stealing Malware
The article discusses a cybersecurity incident where hackers exploited Blender 3D assets to distribute StealC V2, a data-stealing malware. This malware targets sensitive information and is part of a broader trend of cybercriminals hijacking legitimate…
The Hacker News -
The Dual-Use Dilemma of AI: Malicious LLMs
The article discusses the dual-use dilemma of large language models (LLMs) in cybersecurity, highlighting how their strengths as defensive tools can also empower malicious activities. It emphasizes that LLMs can be used for phishing, malware development, and…
unit42.paloaltonetworks.com -
640 NPM Packages Infected in New ‘Shai-Hulud’ Supply Chain Attack
A new variant of the Shai-Hulud self-replicating worm has infected approximately 640 NPM packages, escalating from a previous attack that compromised over 180 packages. The worm exploits NPM tokens and uses preinstall scripts for propagation, significantly…
SecurityWeek -
CISA: Spyware and RATs used to target WhatsApp and Signal Users
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about the use of commercial spyware and remote access trojans (RATs) targeting users of messaging apps like WhatsApp and Signal. CISA reports that threat actors are…
Security Affairs -
Dark Web Profile: Berserk Bear
The article provides a comprehensive overview of Berserk Bear, a Russian state-sponsored cyber espionage group linked to the FSB, active since at least 2010. It details their history, operations, and targets, primarily focusing on critical infrastructure in…
SOCRadarENERGETIC BEAR -
SitusAMC confirms data breach affecting customer information
SitusAMC, a real-estate financing firm, has confirmed a data breach that exposed customer information. The breach was discovered on November 12, 2025, and the company is investigating the incident with external experts. SitusAMC, which serves around 1,500…
Security Affairs -
Canon Says Subsidiary Impacted by Oracle EBS Hack
Canon has confirmed that a subsidiary was targeted in the recent Oracle E-Business Suite (EBS) hacking campaign, but the incident was limited to a web server and no data has been leaked. Other companies affected include Cox Enterprises, which reported a…
SecurityWeek -
CISA Warns of Active Spyware Campaigns Hijacking High-Value Signal and WhatsApp Users
The article from The Hacker News discusses a warning issued by CISA regarding active spyware campaigns targeting high-value users of Signal and WhatsApp. These campaigns are designed to hijack accounts and compromise user privacy. The report emphasizes the…
The Hacker News -
CRITICAL: Fluent Bit Flaws Enable RCE and Telemetry Tampering in Major Orgs
Oligo Security researchers have identified critical vulnerabilities in Fluent Bit, a telemetry agent used by major organizations. These vulnerabilities allow attackers to manipulate log routing, write malicious files, and achieve Remote Code Execution (RCE).…
SecurityOnline -
Apache Syncope Flaw (CVE-2025-65998) Exposes Encrypted User Passwords Due to Hard-Coded AES Key
Apache has issued a security advisory regarding a critical design flaw in Apache Syncope, an open-source identity management platform, tracked as CVE-2025-65998. This vulnerability arises from a hard-coded AES encryption key used for encrypting user…
SecurityOnline -
CISA Emergency Alert: Commercial Spyware Exploiting Zero-Click and Malicious QR Codes to Hijack Messaging Apps
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a nationwide alert regarding the exploitation of commercial spyware targeting users of popular mobile messaging applications. Attackers are employing sophisticated methods, including…
SecurityOnline
