News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 13 so far |
Thu 27 Nov 2025· 30 articles
-
Asahi says crooks stole data of approximately 2M customers and employees
Asahi Group Holdings, Japan's largest brewing company, reported a ransomware attack that compromised the personal data of approximately 2 million customers and employees. The attack, which occurred in September 2025, disrupted operations in Japan, halting…
Security Affairs -
Bloody Wolf Expands Java-based NetSupport RAT Attacks in Kyrgyzstan and Uzbekistan
The article discusses the expansion of Java-based NetSupport RAT (Remote Access Trojan) attacks by a group known as Bloody Wolf in Kyrgyzstan and Uzbekistan. It highlights the increasing sophistication of these cyber threats, which target various sectors,…
The Hacker News -
11/27/25, 5:21 PM
Darktrace's analysis reveals a significant increase in phishing attacks during the Black Friday shopping season, with a 620% surge in attempts to impersonate well-known brands like Amazon and Louis Vuitton. Attackers exploit urgency and brand trust, using…
darktrace.com -
Phishing attacks surge by 620% in the lead-up to Black Friday
The article discusses a significant increase in phishing attacks, specifically a 620% surge in the weeks leading up to Black Friday 2025. Darktrace's analysis highlights that attackers are impersonating well-known brands, with Amazon being the most targeted,…
darktrace.com -
Asahi Data Breach Impacts 2 Million Individuals
Asahi, a Japanese beer company, reported a ransomware attack on September 29, 2025, resulting in the theft of personal information from approximately 2 million individuals. The Qilin ransomware group claimed responsibility, stating they stole 27 GB of data.…
SecurityWeek -
Microsoft to Block Unauthorized Scripts in Entra ID Logins with 2026 CSP Update
Microsoft plans to block unauthorized scripts in Entra ID logins starting in 2026 as part of a significant update to its Cloud Solution Provider (CSP) program. This move aims to enhance security by preventing potential exploitation through unauthorized…
The Hacker News -
OpenAI data may have been exposed after a cyberattack on analytics firm Mixpanel
OpenAI has warned users that their data may have been exposed due to a cyberattack on Mixpanel, an analytics firm. The attack, identified as a smishing campaign on November 8, 2025, led to the theft of a limited dataset containing user profile details from…
Security Affairs -
One Identity Safeguard Named a Visionary in the 2025 Gartner Magic Quadrant for PAM
One Identity has been recognized as a Visionary in the 2025 Gartner Magic Quadrant for Privileged Access Management (PAM). This classification highlights the company's innovative approaches and performance in the PAM market, focusing on simplified security…
SecurityOnline -
Inside Morte Loader: How Loader as a Service Builds Modern Botnets
The page indicates that the requested content is not found, providing a link to return to the home page. It suggests reading recent blog posts, highlighting several articles related to cybersecurity incidents, data breaches, and vulnerabilities. The blog…
SOCRadar -
Quttera Launches “Evidence-as-Code” API to Automate Security Compliance for SOC 2 and PCI DSS v4.0
Quttera has launched enhancements to its Web Malware Scanner API, introducing automated compliance evidence and an AI-powered Threat Encyclopedia. The new features aim to eliminate the manual burden of audit preparation, which typically consumes 30-40 hours…
SecurityOnline -
Millions at risk after nationwide CodeRED alert system outage and data breach
A nationwide cyberattack on the OnSolve CodeRED emergency notification system has led to significant service outages and a data breach, prompting local governments across the US to advise residents to change their passwords. CodeRED, a cloud-based platform…
Malwarebytes -
Holiday shoppers targeted as Amazon and FBI warn of surge in account takeover attacks
The FBI has issued a warning about a rise in account takeover (ATO) fraud, coinciding with Amazon's alert to its customers regarding brand impersonation scams. ATO fraud involves scammers hijacking accounts through tactics like malware and credential…
Malwarebytes -
OpenAI User Data Exposed in Mixpanel Hack
OpenAI has notified some users about a data breach linked to Mixpanel, a product analytics provider, which was detected on November 8. The breach, described as a 'smishing campaign', affected a limited number of customers. Mixpanel took measures to secure…
SecurityWeek -
Crypto Crisis: UPBIT Hacked for $369 Million in Solana-Based Tokens
UPBIT, South Korea's largest cryptocurrency exchange, experienced a significant cyberattack resulting in the theft of digital assets worth approximately USD 369 million. The attack involved the transfer of multiple Solana-based tokens to an unknown wallet,…
SecurityOnline -
500M PCs Stranded: Windows 11 Adoption Lags as Windows 10 Support Ends
Microsoft has officially ended support for Windows 10, offering an Extended Security Update (ESU) program for users who still rely on it. Dell's Q3 FY2026 report indicates that the transition to Windows 11 is slow, with over 500 million PCs unable to meet…
SecurityOnline -
ThreatsDay Bulletin: AI Malware, Voice Bot Flaws, Crypto Laundering, IoT Attacks — and 20 More Stories
The article titled 'ThreatsDay Bulletin: AI Malware, Voice Bot Flaws, Crypto Laundering, IoT Attacks — and 20 More Stories' discusses various cybersecurity threats and incidents. Key points include the rise of AI malware, vulnerabilities in voice bots, and…
The Hacker News -
OpenAI Notifies Users of Mixpanel Security Incident
On November 26, 2025, OpenAI disclosed a security incident involving Mixpanel, a third-party analytics provider, where limited analytics data from OpenAI's API platform was accessed due to a breach in Mixpanel's systems. The breach, detected on November 9,…
SOCRadar -
New ASUS firmware patches critical AiCloud vulnerability
ASUS has released new firmware to address nine security vulnerabilities, including a critical authentication bypass flaw (CVE-2025-59366) in routers with AiCloud enabled, which has a CVSS score of 9.2. The company advises users to update their router…
Security Affairs -
Gainsight Expands Impacted Customer List Following Salesforce Security Alert
Gainsight has expanded its list of impacted customers following a recent security alert from Salesforce. The alert raised concerns about potential vulnerabilities affecting customer data. Gainsight is actively communicating with its clients to address these…
The Hacker News -
Security Alert: Apache SkyWalking Stored XSS Vulnerability (CVE-2025-54057)
Apache SkyWalking, an open-source Application Performance Monitoring (APM) system, has released a critical update addressing a Stored Cross-Site Scripting (XSS) vulnerability (CVE-2025-54057). This vulnerability allows attackers to compromise dashboards and…
SecurityOnline -
Hidden Theft: ‘Crypto Copilot’ Chrome Extension Drains Solana Wallets on X
A new malicious Chrome extension named Crypto Copilot targets the Solana ecosystem, deceiving users into thinking they are executing legitimate trades while siphoning funds into an attacker's wallet. Discovered by Socket's Threat Research Team, the extension…
SecurityOnline -
Critical Ray AI Flaw Exposes Devs via Safari & Firefox (CVE-2025-62593)
A critical remote code execution vulnerability (CVE-2025-62593) has been found in the Ray framework, affecting AI and Python developers using Safari and Firefox. This flaw allows attackers to execute arbitrary code on a developer's machine through malicious…
SecurityOnline -
Water Gamayun Weaponizes “MSC EvilTwin” Zero-Day for Stealthy Backdoor Attacks
A new cyber espionage campaign by the Russia-aligned APT group Water Gamayun has been uncovered, exploiting a zero-day vulnerability (CVE-2025-26633) in Windows' Microsoft Management Console (MMC). The attack begins with victims being redirected to a…
SecurityOnlineWater Gamayun -
Fragging Your Data: Fake ‘Battlefield 6’ Cracks & Trainers Spread Infostealers
The article discusses the rise of malware campaigns exploiting the popularity of EA's Battlefield 6, particularly through fake cracked versions and cheat software. Bitdefender Labs has identified three main variants of malware: 1) A straightforward…
SecurityOnline -
Hidden Danger in 3D: Malicious Blender Files Unleash StealC V2 Infostealer
Morphisec has issued a critical alert about a sophisticated malware campaign targeting 3D artists and developers through malicious Blender files. The StealC V2 infostealer is delivered via compromised 3D model files, exploiting Blender's ability to run…
SecurityOnline -
Zero-Day Warning: Unpatched Twonky Server Flaws Expose Media to Total Takeover
A critical security warning has been issued for Twonky Server, a media server software, due to two severe vulnerabilities (CVE-2025-13315 and CVE-2025-13316) that allow hackers to bypass authentication and gain control of the server. The first flaw enables…
SecurityOnline -
UNMASKED: Massive Leak Exposes Iran’s ‘Department 40’ Cyber-Terror Unit
A significant leak of internal documents has exposed Iran's Department 40, a cyber unit linked to state-sponsored hacking and assassination plots. The leak reveals the identities and operations of over 60 operatives, led by commander Abbas Rahrovi, who uses…
SecurityOnlineAPT35 -
Angular Alert: Protocol-Relative URLs Leak XSRF Tokens (CVE-2025-66035)
The Angular team has issued a high-severity security advisory regarding a logic flaw in the framework’s HTTP Client, tracked as CVE-2025-66035. This vulnerability allows attackers to exploit protocol-relative URLs to steal users' XSRF tokens, undermining…
SecurityOnline -
Holiday Heist: 200,000 Fake Shops & Amazon Clones Target Black Friday
Cybersecurity researchers have identified a network of over 200,000 fraudulent online stores exploiting the Black Friday and Cyber Monday shopping frenzy. Two main clusters of fake storefronts were uncovered: 1. **Cluster A: Amazon Typosquatters** - This…
SecurityOnline -
Shai-hulud 2.0 Campaign Targets Cloud and Developer Ecosystems
The Shai-hulud 2.0 campaign is a sophisticated malware targeting cloud and developer ecosystems, capable of stealing credentials from major cloud platforms and automating the backdooring of NPM packages. Key points include: 1) It continues credential theft…
trendmicro.com
