News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Wed 26 Nov 2025· 53 articles
-
GitLab Patch: Fixes CI/CD Credential Theft & Unauthenticated DoS Attacks
GitLab has released a critical security update addressing multiple high-severity vulnerabilities in both its Community Edition (CE) and Enterprise Edition (EE). Key vulnerabilities include CVE-2024-9183, a race condition in the CI/CD cache leading to…
SecurityOnline -
RomCom2 articles this day · The Hacker News first
For the first time, a RomCom payload has been observed being distributed via SocGholish · RomCom Uses SocGholish Fake Update Attacks to Deliver Mythic Agent Malware
2 outlets-
For the first time, a RomCom payload has been observed being distributed via SocGholish
In November 2025, Arctic Wolf Labs reported the first instance of RomCom malware being distributed via the SocGholish framework, targeting a U.S. civil engineering firm. The RomCom group, linked to Russian interests, has been active since mid-2022 and…
Security Affairs -
RomCom Uses SocGholish Fake Update Attacks to Deliver Mythic Agent Malware
The article discusses the use of SocGholish fake update attacks by the RomCom group to deliver Mythic Agent malware. It highlights the tactics employed by cybercriminals to exploit users through deceptive software updates, emphasizing the importance of…
The Hacker News
-
-
CastleLoader & CastleRAT: Behind TAG150’s Modular Malware Delivery System
TAG-150 is a Malware-as-a-Service (MaaS) operator active since March 2025, utilizing two malware families: CastleLoader and CastleRAT. CastleLoader serves as a loader to download additional malware, while CastleRAT is a remote access trojan that allows…
darktrace.com -
Shai-Hulud v2 Campaign Spreads From npm to Maven, Exposing Thousands of Secrets
The article discusses the Shai-Hulud v2 campaign, which has expanded from npm to Maven, leading to the exposure of thousands of secrets. This campaign highlights the vulnerabilities in software package management systems and the importance of securing these…
The Hacker News -
Scattered Lapsus Hunters2 articles this day · unit42.paloaltonetworks.com first
Meet Rey, the Admin of ‘Scattered Lapsus$ Hunters’ · The Golden Scale: 'Tis the Season for Unwanted Gifts
2 outlets-
Meet Rey, the Admin of ‘Scattered Lapsus$ Hunters’
The article discusses the cybercriminal group "Scattered LAPSUS$ Hunters" (SLSH), which has gained notoriety for extorting major corporations by stealing data. The group's public face, known as "Rey," revealed his identity after being contacted by…
Krebs on Security -
The Golden Scale: 'Tis the Season for Unwanted Gifts
The article discusses recent activities of the cybercriminal group Scattered LAPSUS$ Hunters (SLSH), particularly focusing on their data theft campaigns and the emergence of a new ransomware-as-a-service (RaaS) called ShinySp1d3r. Key points include: 1.…
unit42.paloaltonetworks.com
-
-
Digital Fraud at Industrial Scale: 2025 Wasn't Great
In 2025, advanced fraud attacks increased by 180%, driven by cybercriminals utilizing generative AI for creating realistic identities, deepfakes, and autonomous bots. A report by Sumsub highlighted a shift towards sophisticated, AI-driven fraud techniques,…
Dark Reading -
'Dark LLMs' Aid Petty Criminals, But Underwhelm Technically
The article discusses the impact of 'dark' large language models (LLMs) like WormGPT 4 and KawaiiGPT on low-level cybercriminals. While these AI tools assist in creating basic malware and phishing emails, they are technically underwhelming and do not…
Dark Reading -
Prompt Injections Loom Large Over ChatGPT's Atlas Browser
The article discusses the security implications of prompt injections in AI-powered web browsers, particularly focusing on OpenAI's ChatGPT Atlas. Launched on October 21, 2025, Atlas integrates large language model (LLM) capabilities, allowing users to…
Dark Reading -
How Malware Authors Are Incorporating LLMs to Evade Detection
The article discusses how cyberattackers are using large language models (LLMs) to enhance malware capabilities and evade detection. Key points include: 1. **Integration of LLMs**: Attackers are incorporating LLMs into malware to dynamically rewrite code and…
Dark Reading -
Enterprises Aren't Confident They Can Secure Non-Human Identities (NHIs)
The article discusses the growing concern among organizations regarding the security of non-human identities (NHIs), with over 60% of surveyed organizations expressing a lack of confidence in their ability to secure these identities. NHIs, which include…
Dark Reading -
Multiple London councils faced a cyberattack
Multiple London councils, including Kensington & Chelsea and Westminster, experienced a cyberattack that may have compromised resident data. Authorities are investigating the incident with assistance from the National Cyber Security Centre. The attack has…
Security Affairs -
Qilin Ransomware Turns South Korean MSP Breach Into 28-Victim 'Korean Leaks' Data Heist
The article discusses the Qilin ransomware attack that exploited a breach in a South Korean Managed Service Provider (MSP), leading to a significant data heist affecting 28 victims. The attack highlights the vulnerabilities in MSPs and the increasing…
The Hacker News -
Fake LinkedIn jobs trick Mac users into downloading Flexible Ferret malware
Researchers have identified a new malware attack targeting Mac users, where attackers impersonate recruiters on LinkedIn to lure victims to a fake job website. Victims are tricked into downloading malware disguised as a software update for FFmpeg, which is…
Malwarebytes -
Clover Security Raises $36 Million to Secure Software by Design
Clover Security, a cybersecurity startup based in Tel Aviv, has raised $36 million in seed and Series A funding from Notable Capital, Team8, and SVCI. Founded in 2024, Clover aims to enhance product security through AI agents that identify vulnerabilities…
SecurityWeek -
INE Expands Cross-Skilling Innovations
INE, a leading provider of IT and Cybersecurity training, announced an expansion of its learning portfolio on November 26, 2025, to enhance workforce readiness. The new offerings include courses on AI in Automation, Enterprise Network Design, updated…
SecurityOnline -
Account Takeover Fraud Caused $262 Million in Losses in 2025: FBI
The FBI reports that cybercriminals have caused over $262 million in losses due to account takeover (ATO) fraud schemes since January 2025. These criminals impersonate financial institutions to steal money and information, utilizing social engineering…
SecurityWeek -
Thousands of Secrets Leaked on Code Formatting Platforms
A report by WatchTowr reveals that users of code formatting platforms like JSONFormatter and CodeBeautify are inadvertently exposing sensitive information, including credentials and API keys. In 2023, GitHub reported approximately 39 million leaked secrets,…
SecurityWeek -
Cybersecurity Is Now a Core Business Discipline
Cyber risk is increasingly prevalent in modern business, with nearly 2,000 attacks per organization weekly in Q1 2025, marking a 47% year-on-year rise. This surge indicates both an increase in attacks and improved detection by defenders. Cybersecurity is now…
SecurityWeek -
When Your $2M Security Detection Fails: Can your SOC Save You?
The article titled 'When Your $2M Security Detection Fails: Can your SOC Save You?' discusses the challenges faced by Security Operations Centers (SOCs) when high-cost security detection systems fail. It emphasizes the importance of having robust incident…
The Hacker News -
Ransomware Attack Disrupts Local Emergency Alert System Across US
A ransomware attack on the OnSolve CodeRED emergency alert system has caused significant disruptions across various U.S. states, affecting local governments and law enforcement's ability to send emergency notifications. The attack, attributed to the Inc…
SecurityWeek -
Emergency alerts go dark after cyberattack on OnSolve CodeRED
A cyberattack on OnSolve CodeRED disrupted emergency alert services for U.S. state and local agencies, including police and fire departments. The incident, reported by the City of University Park, Texas, involved a cybercriminal group that may have accessed…
Security Affairs -
Chrome Extension Caught Injecting Hidden Solana Transfer Fees Into Raydium Swaps
The article discusses a security issue involving a Chrome extension that was found to be injecting hidden Solana transfer fees into Raydium swaps. This malicious behavior raises concerns about the integrity of browser extensions and their potential to…
The Hacker News -
Webinar: Learn to Spot Risks and Patch Safely with Community-Maintained Tools
The page features a webinar titled "Learn to Spot Risks and Patch Safely with Community-Maintained Tools," focusing on cybersecurity practices. It highlights the importance of building a hybrid patch model that balances speed and safety in patch management.…
The Hacker News -
Old tech, new vulnerabilities: NTLM abuse, ongoing exploitation in 2025
The article discusses the ongoing vulnerabilities and exploitation of the NTLM (New Technology LAN Manager) authentication protocol in 2025. Despite being a legacy system with known weaknesses, NTLM is still widely used in Windows environments, making it a…
securelist.com -
Qualcomm Unveils Snapdragon 8 Gen 5: 36% Faster CPU, 46% More AI Power
Qualcomm has unveiled the Snapdragon 8 Gen 5 mobile platform, part of a dual-tier flagship strategy alongside the Snapdragon 8 Elite Gen 5. This new platform aims to deliver elite performance and AI capabilities to a wider range of premium smartphones. Key…
SecurityOnline -
Opti Raises $20 Million for Identity Security Platform
Israeli cybersecurity startup Opti has raised $20 million in seed funding to launch its AI-native identity and access management (IAM) platform. Founded in 2023 by cybersecurity veterans, Opti's solution features a context-aware engine that monitors access…
SecurityWeek -
Pichai Forecast: Quantum Computing Will Reach ‘Breathless Excitement’ in Five Years
Sundar Pichai, CEO of Google, predicts that quantum computing will reach a level of excitement comparable to today's AI within five years. In a podcast, he discussed Google's evolution into an 'AI-first' company since 2016, driven by advancements from Google…
SecurityOnline -
Perplexity Launches AI Shopping with PayPal Instant Buy & Personalized Product Search
Perplexity has launched a new AI-powered shopping experience that simplifies and personalizes purchasing through its assistant, now available for free to U.S. users. This system allows users to ask tailored questions about products, with results presented in…
SecurityOnline -
Meta Accused of Hiding Internal Data Showing Facebook Causes Depression & Anxiety
Meta is facing allegations of concealing internal research that indicates deactivating Facebook can alleviate feelings of depression, anxiety, and loneliness. A class-action lawsuit from U.S. school districts claims Meta halted an investigation that revealed…
SecurityOnline -
Anthropic Unleashes Opus 4.5: Excel Integration & ‘Infinite Chat’ for Enterprise AI
Anthropic has launched Opus 4.5, an AI model focused on enhancing workplace productivity, particularly through deep integration with Microsoft Excel. Key features include the full rollout of Claude for Excel, which embeds a chatbot in Excel's sidebar,…
SecurityOnline -
Tor Project Develops New CGO Encryption to Replace Vulnerable Tor1 Protocol
The Tor Project is developing a new encryption scheme called the Counter Galois Onion (CGO) to replace the vulnerable Tor1 protocol, which has been exploited in tagging attacks that compromise user privacy. The Tor1 algorithm, which encrypts data through…
SecurityOnline -
Dissecting a new malspam chain delivering Purelogs infostealer
The report titled "Dissecting a new malspam chain delivering Purelogs infostealer," published by the AISI Research Center's Cybersecurity Observatory on November 25, 2025, highlights the ongoing threat of malspam as a primary vector for malware distribution.…
Security Affairs -
Dartmouth College Confirms Data Theft in Oracle Hack
Dartmouth College confirmed a data breach involving its Oracle E-Business Suite (EBS) after a zero-day attack occurred between August 9 and August 12. The breach resulted in the exfiltration of personal and financial information, including Social Security…
SecurityWeek -
Iran Exploits Cyber Domain to Aid Kinetic Strikes
The article discusses how Iran is utilizing cyberattacks to enhance its military operations, specifically through a strategy termed "cyber-enabled kinetic targeting." This approach involves using cyber reconnaissance to gather intelligence on targets before…
Dark Reading -
FBI Reports $262M in ATO Fraud as Researchers Cite Growing AI Phishing and Holiday Scams
The FBI reported $262 million in losses due to Account Takeover (ATO) fraud, highlighting a rise in AI-driven phishing scams and holiday-related fraud. The report emphasizes the need for enhanced cybersecurity measures as these threats become more…
The Hacker News -
-
Critical Patch: NVIDIA DGX Spark Flaw (CVE-2025-33187, CVSS 9.3) Exposes AI Secrets to Takeover
NVIDIA has released a critical security update for its DGX Spark platform, addressing 14 vulnerabilities, including CVE-2025-33187, which has a CVSS score of 9.3. This vulnerability allows attackers with privileged access to gain control over the hardware,…
SecurityOnline -
Silent, Fast, & Brutal: How WormGPT 4 and KawaiiGPT Democratize Cybercrime
The cybersecurity landscape is undergoing a significant transformation as tools originally designed for productivity are being weaponized. A report by Unit 42 discusses the 'dual-use dilemma' in AI, highlighting how powerful tools can be repurposed for…
SecurityOnline
