News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Mon 1 Dec 2025· 47 articles
-
John P. Meehan Agency was hacked in July 2024. Affected customers were first finding out in November 2025.
John P. Meehan Agency, an insurance broker in Pennsylvania, was hacked in July 2024, with affected customers first learning of the incident in November 2025. In its notice, the firm says it discovered unusual activity on 8 July 2024 and engaged outside…
DataBreaches -
Ransomware blog claims New Horizons Medical has been attacked
According to DataBreaches.N, a ransomware blog claims that New Horizons Medical has been attacked. The article notes that the assertion comes from a blog, presenting it as a claim rather than a confirmed incident. It does not provide details on the nature of…
DataBreaches -
Tomiris Unleashes 'Havoc' With New Tools, Tactics
The Russian-speaking Tomiris cyber-espionage group is targeting government and diplomatic entities across the CIS and Central Asia in a renewed campaign, described as focusing on high-value diplomatic and political infrastructure. According to Kaspersky, new…
Dark Reading -
FTC Takes Action Against Education Technology Provider for Failing to Secure Students’ Personal Data
The Federal Trade Commission has taken action against Illuminate Education, Inc. over data security failures that led to a major breach affecting more than 10 million students, according to the FTC. The complaint alleges that Illuminate claimed to protect…
DataBreaches -
CodeRED Emergency Alert Platform Shut Down Following Cyberattack
CodeRED emergency notifications have been shut down after a cyberattack, with Crisis24’s parent GardaWorld Corporation saying the OnSolve CodeRED platform was decommissioned after damage to the CodeRED environment. The Inc ransomware gang claimed…
Dark Reading -
Australian man jailed for 7+ years over airport and in-flight Wi-Fi attacks
Australian Michael Clapsis was jailed for seven years and four months in relation to Wi‑Fi attacks at airports and on domestic flights, during which he stole sensitive information and private images, according to the Australian Federal Police (AFP). The…
Security Affairs -
Police Disrupt 'Cryptomixer,' Seize Millions in Crypto
On December 1, 2025, Europol announced the disruption of 'Cryptomixer,' a cryptocurrency mixing service used by cybercriminals to launder money from ransomware and other illegal activities. The operation, conducted by German and Swiss law enforcement,…
Dark Reading -
BreachLock Named a Leader in 2025 GigaOm Radar Report for Penetration Testing as a Service (PTaaS) for Third Consecutive Year
BreachLock has been named a Leader and Fast Mover in the 2025 GigaOm Radar Report for Penetration Testing as a Service (PTaaS) for the third year in a row, according to CyberNewsWire. The New York-based group is recognised in the report, which evaluated 16…
SecurityOnline -
India Orders Phone Makers to Pre-Install Sanchar Saathi App to Tackle Telecom Fraud
India has mandated that phone manufacturers pre-install the Sanchar Saathi app to combat telecom fraud. This initiative aims to enhance consumer protection and reduce fraudulent activities in the telecommunications sector. The app is designed to help users…
The Hacker News -
ShadyPanda Turns Popular Browser Extensions with 4.3 Million Installs Into Spyware
The article discusses the emergence of ShadyPanda, a group that has transformed popular browser extensions with over 4.3 million installs into spyware. This development raises significant concerns about user privacy and security, as these extensions were…
The Hacker NewsShadyPanda -
Europol and partners shut down ‘Cryptomixer’
From November 24 to 28, 2025, Europol supported a law enforcement operation in Zurich, Switzerland, targeting the illegal cryptocurrency mixing service 'Cryptomixer', suspected of facilitating cybercrime and money laundering. The operation led to the seizure…
DataBreaches -
Facial Recognition’s Trust Problem
Facial recognition technology is widely used for public surveillance and access control, but it faces significant trust issues due to privacy concerns. Surveillance is often non-consensual, with users unaware of when and how their images are captured,…
SecurityWeek -
$29 Million Worth of Bitcoin Seized in Cryptomixer Takedown
Europol announced the shutdown of the cryptocurrency mixer Cryptomixer, which was used for cybercrime and money laundering. The service, accessible on both the clear and dark web, helped users obscure cryptocurrency transactions by mixing their deposits with…
SecurityWeek -
New Android malware lets criminals control your phone and drain your bank account
Albiriox is a new Android banking malware that allows attackers to gain live remote control over infected devices, enabling them to drain bank and cryptocurrency accounts. It operates as Malware-as-a-Service (MaaS), making it accessible to entry-level…
Malwarebytes -
New Albiriox Android Malware Developed by Russian Cybercriminals
A new Android malware called Albiriox has emerged, developed by Russian-speaking cybercriminals and offered on cybercrime forums. It is a banking trojan designed for on-device fraud, allowing attackers to control compromised devices for fraudulent…
SecurityWeek -
Data breach hits ‘South Korea’s Amazon,’ potentially affecting 65% of country’s population
Coupang, South Korea's largest online retailer, has confirmed a data breach affecting 33.7 million customer accounts, prompting an apology from the company. This incident is part of a series of high-profile breaches in South Korea, following similar breaches…
DataBreaches -
Malwarebytes joins Global Anti-Scam Alliance (GASA) as supporting member
Malwarebytes has joined the Global Anti-Scam Alliance (GASA) as a supporting member to combat online scams. A recent survey revealed that nearly half of mobile users encounter scams daily, with only 15% feeling confident in recognizing them. The emotional…
Malwarebytes -
CVE-2025-61260 — OpenAI Codex CLI: Command Injection via Project-Local Configuration
The article discusses a critical vulnerability (CVE-2025-61260) in OpenAI's Codex CLI, which allows command injection through project-local configuration files. The vulnerability arises from the CLI's automatic loading and execution of MCP server entries…
Check Point -
⚡ Weekly Recap: Hot CVEs, npm Worm Returns, Firefox RCE, M365 Email Raid & More
The article titled "Weekly Recap: Hot CVEs, npm Worm Returns, Firefox RCE, M365 Email Raid & More" provides a summary of significant cybersecurity events and vulnerabilities. Key points include: 1. **Hot CVEs**: A list of critical vulnerabilities that have…
The Hacker News -
Webinar: The "Agentic" Trojan Horse: Why the New AI Browsers War is a Nightmare for Security Teams
The content discusses a webinar titled "The 'Agentic' Trojan Horse: Why the New AI Browsers War is a Nightmare for Security Teams," highlighting the challenges posed by new AI-driven browsers to cybersecurity. It emphasizes the need for organizations to adapt…
The Hacker News -
Riyadh Airports Access Claim, Golden Goose Trojan, and NEWSAN Leak Surface Online
The SOCRadar Dark Web Team reported several significant findings, including: 1. **Unauthorized Access to Riyadh Airports**: A threat actor claims to have compromised the internal network of Riyadh Airports, showcasing video evidence of navigation through…
SOCRadar -
Shai-hulud 2.0 Variant Threatens Cloud Ecosystem
The article discusses the Shai-hulud 2.0 variant, a self-replicating worm that poses significant threats to the cloud ecosystem by stealing credentials from major cloud providers like AWS, Google Cloud Platform, and Azure. This variant enhances its…
Dark Reading -
CISA Warns of ScadaBR Vulnerability After Hacktivist ICS Attack
The cybersecurity agency CISA has added the ScadaBR vulnerability (CVE-2021-26829) to its Known Exploited Vulnerabilities (KEV) catalog, following its exploitation by the pro-Russia hacktivist group TwoNet. This medium severity cross-site scripting (XSS)…
SecurityWeek -
Emerging Android threat ‘Albiriox’ enables full On‑Device Fraud
The article discusses a new Android malware named Albiriox, which operates as malware-as-a-service (MaaS) and targets over 400 financial applications, including banking and crypto wallets. First observed in September 2025, Albiriox allows real-time control…
Security Affairs -
Boot Process Compromised: Critical Flaw (CVE-2025-47372) Hits Snapdragon 8 Gen 3 & 5G Modems
Qualcomm has released a significant security update for December 2025, addressing 11 vulnerabilities in its chipset ecosystem, including a critical flaw (CVE-2025-47372) in the boot process that allows arbitrary code execution. This vulnerability, rated…
SecurityOnline -
Australian Man Sentenced to Prison for Wi-Fi Attacks at Airports and on Flights
An Australian man, Michael Clapsis, has been sentenced to 7 years and 4 months in prison for launching Wi-Fi attacks at airports and on flights. He pleaded guilty and will be eligible for parole after 5 years. Clapsis used a Wi-Fi Pineapple device to create…
SecurityWeek -
U.S. CISA adds an OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a cross-site scripting (XSS) vulnerability, tracked as CVE-2021-26829, to its Known Exploited Vulnerabilities catalog. This flaw affects OpenPLC ScadaBR versions 1.12.4 on Windows and…
Security Affairs -
New Albiriox MaaS Malware Targets 400+ Apps for On-Device Fraud and Screen Control
The article discusses the emergence of Albiriox MaaS malware, which targets over 400 applications for on-device fraud and screen control. It highlights the malware's capabilities, including its ability to manipulate device screens and conduct fraudulent…
The Hacker News -
A week in security (November 24 – November 30)
The Malwarebytes Labs report for the week of November 24 to November 30, 2025, highlights several significant cybersecurity threats and incidents. Key points include: 1. An overview of CVSS v4.0, which characterizes and scores vulnerabilities. 2. A…
Malwarebytes -
Kevin Lancaster Joins the usecure Board to Accelerate North American Channel Growth
usecure has appointed Kevin Lancaster as a Non-Executive Director to enhance its North American channel growth. Lancaster, a seasoned expert in human risk management and security awareness, previously founded ID Agent and led its channel program. His role…
SecurityOnline -
PoC Exploit Releases for CVE-2025-60718 – Windows Administrator Protection Elevation of Privilege Vulnerability
SecurityOnline -
Tomiris Shifts to Public-Service Implants for Stealthier C2 in Attacks on Government Targets
The article discusses the shift of the Tomiris group towards using public-service implants for command and control (C2) in cyberattacks targeting government entities. This change aims to enhance stealth and effectiveness in their operations. The piece…
The Hacker News -
CVE-2025-59789: Critical Flaw in Apache bRPC Framework Exposes High-Performance Systems to Crash Risks
A critical vulnerability (CVE-2025-59789) has been discovered in Apache bRPC, an RPC framework used in high-performance systems. This flaw allows remote attackers to crash servers by exploiting a stack exhaustion issue due to unbounded recursion in JSON data…
SecurityOnline -
Apple Eyes Intel Foundry for M-Series Chips on 18A Node by 2027
Apple is set to certify its entry-level M-series chips using Intel's 18A process, with mass production expected to start in Q2 or Q3 of 2027. This marks Intel's return to Apple's supply chain, which has primarily relied on TSMC for chip production. The…
SecurityOnline -
Windows 11 Bug Makes Lock Screen Password Icon Vanish After Update
A recent Microsoft support notice reveals a bug in Windows 11 where the password-login icon on the lock screen disappears after installing the August 2025 preview update or subsequent cumulative updates. Users typically see a PIN option first, but without…
SecurityOnline -
Google’s Pixel AI Strategy: Focusing on ‘Tangible Benefits,’ Not Just Hype
Google's Pixel line is distinguishing itself in the competitive smartphone market through its unique AI integration, as discussed by Adrienne Lofton, VP of Global Marketing for Pixel. Despite not matching iPhone's market share, Pixel aims to be the leading…
SecurityOnline -
OpenAI Under Siege: Google’s Gemini 3 Surge Threatens to End ChatGPT’s Early Lead
OpenAI faces significant competition from Google and Anthropic, with Google's Gemini 3 model recently surpassing OpenAI's GPT-5 in benchmark tests. Google has seen a resurgence in its AI capabilities, increasing its monthly active users from 400 million to…
SecurityOnline -
Android Hotspot Upgrade: New Feature Allows Simultaneous 2.4 GHz + 6 GHz Dual-Band Sharing
The article discusses a new feature in the latest Android Canary build that allows mobile hotspots to broadcast both 2.4 GHz and 6 GHz Wi-Fi signals simultaneously. This dual-band capability enables users to provide high-speed, low-interference connectivity…
SecurityOnline -
Operation Hanoi Thief: Hackers Use ‘Pseudo-Polyglot’ LNK/Image to Deploy LOTUSHARVEST Stealer via DLL Sideloading
Operation Hanoi Thief is a sophisticated cyber-espionage campaign targeting Vietnam's technology and recruitment sectors, discovered by SEQRITE Labs on November 3, 2025. The campaign uses spear-phishing tactics, starting with a malicious email containing a…
SecurityOnline -
Critical Devolutions Server Flaw (CVE-2025-13757) Allows Authenticated SQL Injection to Steal All Passwords
Devolutions has issued urgent security updates for its password management solution, Devolutions Server, addressing three critical vulnerabilities. The most severe, CVE-2025-13757, is a high-risk SQL injection flaw (CVSS 9.4) that allows authenticated users…
SecurityOnline
