News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Fri 28 Nov 2025· 20 articles
-
Attackers stole member data from French Soccer Federation
The French Soccer Federation (FFF) reported a data breach where hackers accessed member data through a compromised account. The breach was confirmed on November 28, 2025, but the number of affected members was not disclosed. The FFF took immediate action by…
Security Affairs -
Legacy Python Bootstrap Scripts Create Domain-Takeover Risk in Multiple PyPI Packages
The article discusses a security vulnerability in multiple Python Package Index (PyPI) packages caused by legacy bootstrap scripts. These scripts can lead to domain-takeover risks, allowing attackers to hijack domains associated with the affected packages.…
The Hacker News -
North Korean Hackers Deploy 197 npm Packages to Spread Updated OtterCookie Malware
North Korean hackers have deployed 197 npm packages to distribute an updated version of the OtterCookie malware. This malware targets web browsers and is designed to steal sensitive information such as cookies and credentials. The attack highlights the…
The Hacker News -
‘Trickery and f…ery’: Agency under fire over senior manager’s ‘serious’ privacy breach
A senior manager at the Crown Response Office (CRO) mistakenly exposed the identities of over 30 Lake Alice torture survivors by failing to use the 'bcc' field in an email, instead using 'cc'. This breach occurred while informing survivors about a financial…
DataBreaches -
French Soccer Federation Hit by Cyberattack, Member Data Stolen
The French soccer federation (FFF) experienced a cyber-attack that led to the theft of member data, including personal information such as names, gender, nationality, and contact details. The breach was attributed to unauthorized access via a compromised…
SecurityWeek -
AI-Powered Cyber Espionage: Inside the GTG-1002 Campaign
The GTG-1002 campaign represents a significant evolution in cyber espionage, utilizing AI to conduct autonomous attacks with minimal human involvement. This state-sponsored operation, active from late 2022 to mid-2025, targeted over 50 organizations in Asia…
SOCRadar -
How CVSS v4.0 works: characterizing and scoring vulnerabilities
The article discusses the Common Vulnerability Scoring System (CVSS), a standardized method for assessing software vulnerabilities, which helps organizations prioritize mitigation efforts. It outlines the components of CVSS, including base, temporal, and…
Malwarebytes -
Why Organizations Are Turning to RPAM
The article discusses the increasing trend of organizations adopting Robotic Process Automation and Management (RPAM) to enhance operational efficiency and security. Key points include the benefits of RPAM in automating repetitive tasks, reducing human…
The Hacker News -
In Other News: HashJack AI Browser Attack, Charming Kitten Leak, Hacker Unmasked
SecurityWeek's cybersecurity news roundup highlights key stories in the field, including: 1. **TfL Cyberattack**: Two suspected members of the Scattered Spider group, Thalha Jubair and Owen Flowers, pleaded not guilty to charges related to a cyberattack on…
SecurityWeekScattered Spider -
OpenAI API Users Exposed in Mixpanel Security Breach
OpenAI confirmed a data exposure incident involving its API platform due to a security breach at Mixpanel, a third-party analytics provider. The breach, discovered on November 9, 2025, allowed unauthorized access to customer identifiable information,…
SecurityOnline -
Thousands of sensitive secrets published on JSONFormatter and CodeBeautify
A recent study by WatchTowr revealed that users of JSONFormatter and CodeBeautify have inadvertently leaked thousands of sensitive secrets, including passwords, private keys, and API tokens. The research identified over 80,000 pieces of JSON data containing…
Security Affairs -
Google Cuts Free Daily Quota for Gemini 3 Pro and Nano Banana Pro AI Models
Google has reduced the free daily quota for its AI services, specifically the Nano Banana Pro image-generation tool, from three creations to two per day due to high demand. This change also affects the Gemini 3 Pro text model, which now offers only basic…
SecurityOnline -
Pixel 10 Exclusive: Google Maps Launches Power-Saving Navigation Mode for 4-Hour Battery Boost
Google has introduced a new Power-Saving Navigation Mode for its Pixel 10 series, including Pixel 10, Pixel 10 Pro, Pixel 10 Pro XL, and Pixel 10 Pro Fold. This feature, designed to extend battery life by up to four hours during navigation, presents a…
SecurityOnline -
AWS Guarantees 60-Minute Recovery Time with New Route 53 Accelerated Recovery
Amazon's AWS experienced a significant outage due to a malfunction in its Route 53 DNS system, affecting numerous websites and causing operational losses. In response, Amazon introduced the Route 53 Accelerated Recovery feature, which guarantees a 60-minute…
SecurityOnline -
MS Teams Guest Access Can Remove Defender Protection When Users Join External Tenants
The article discusses a security vulnerability in Microsoft Teams where guest access can inadvertently disable Microsoft Defender protection when users join external tenants. This poses a significant risk as it may expose sensitive data and systems to…
The Hacker News -
New Mirai variant ShadowV2 tests IoT exploits amid AWS disruption
The article discusses the emergence of a new Mirai-based botnet named ShadowV2, which targeted vulnerable IoT devices during the AWS outage in late October 2025. Researchers from FortiGuard Labs observed that ShadowV2 exploited various IoT vulnerabilities…
Security Affairs -
Tomiris wreaks Havoc: New tools and techniques of the APT group
The report discusses the activities of the Tomiris APT group, which has been identified as targeting foreign ministries and government entities since early 2025. The group has shifted tactics, utilizing implants that leverage public services like Telegram…
securelist.com -
Zombie Protocol: How NTLM Flaws Like CVE-2024-43451 Are Haunting 2025
A Kaspersky Labs report highlights the ongoing security risks associated with the NTLM authentication protocol in 2025, despite its age. Cybercriminals are exploiting vulnerabilities, particularly CVE-2024-43451, which allows attackers to steal NTLMv2 hashes…
SecurityOnline -
Silent Threat: How Malicious Calendars & ‘Promptware’ Target 4M+ Devices Daily
A recent investigation by Bitsight TRACE has revealed a new attack vector involving malicious calendar subscriptions that target over 4 million iOS and macOS devices daily. Unlike traditional email phishing, these attacks exploit users' trust in system…
SecurityOnline -
The “Korean Leaks” Siege: Qilin & North Korea Cripple Financial Sector via MSP Hack
A sophisticated cyber campaign named "Korean Leaks" has targeted South Korea's financial sector, executed by the Qilin ransomware group, potentially with North Korean state support. This unprecedented attack involved a supply chain breach affecting multiple…
SecurityOnline
