News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Tue 2 Dec 2025· 57 articles
-
Update on Dos-OP’s report on Nova RaaS
According to DataBreaches[.]Net, the update concerns Dos-OP’s report on Nova RaaS and follows Nova’s complaints, disputes and accusation of unprofessional journalism after the initial posting. The article notes that Dos-OP answered questions and supplied…
DataBreaches -
MuddyWater2 articles this day · Security Affairs first
Iran's 'MuddyWater' Levels Up With MuddyViper Backdoor · MuddyWater strikes Israel with advanced MuddyViper malware
2 outlets-
Iran's 'MuddyWater' Levels Up With MuddyViper Backdoor
Iran’s MuddyWater has evolved its toolkit, adopting memory‑only loaders and a previously undocumented backdoor to pursue stealthier espionage, according to ESET researchers in a report issued this week. The group used a new 64‑bit loader named “Fooder” to…
Dark Reading -
MuddyWater strikes Israel with advanced MuddyViper malware
Iran-linked threat group MuddyWater targeted Israeli organisations and one Egyptian victim with a new MuddyViper backdoor, as described by ESET researchers. The operation, which ran from 30 September 2024 to 18 March 2025 and spanned sectors including…
Security Affairs
-
-
U.S. CISA adds Android Framework flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added Android Framework flaws to its Known Exploited Vulnerabilities (KEV) catalog, naming CVE-2025-48572 and CVE-2025-48633. The article notes that Google’s December Android update patched 107…
Security Affairs -
Researchers Use Poetry to Jailbreak AI Models
Three years into the "AI future," researchers from the Sapienza University of Rome, the Sant’Anna School of Advanced Studies, and Dexai demonstrated jailbreaking AI models by framing prompts as a rhyming poem, publishing their white paper on 19 November…
Dark Reading -
“Sleeper” browser extensions woke up as spyware on 4 million devices
Researchers have uncovered a long-running campaign in which a set of browser extensions installed on roughly 4.3 million Chrome and Edge users’ devices suddenly started behaving as spyware. Five extensions operated cleanly for years before being weaponised…
Malwarebytes -
India Orders Messaging Apps to Work Only With Active SIM Cards to Prevent Fraud and Misuse
According to the Department of Telecommunications (DoT), app-based communication services must ensure their platforms cannot be used unless linked to an active SIM card associated with the user’s mobile number. The directions cover messaging apps including…
The Hacker News -
How to build forward-thinking cybersecurity teams for tomorrow
We are witnessing something unprecedented in cybersecurity: the democratization of advanced cyberattack capabilities, with tools once reserved for nation-state actors now fitting in a prompt window. AI is no longer futuristic but a present-day reality,…
Microsoft -
Zafran Security Raises $60 Million in Series C Funding
Zafran Security announced on 2 December 2025 that it had raised $60 million in a Series C round, bringing the company’s total funding to $130 million. The New York City‑based cybersecurity startup, founded in 2022, uses an AI‑native exposure management…
SecurityWeek -
Air fryer app caught asking for voice data (re-air) (Lock and Code S06E24)
In a Lock and Code S06E24 re-air, Malwarebytes revisits how some air fryer apps requested extensive user data, including location and voice recordings, often without a clear reason. The piece notes that in 2024 a UK consumer rights group highlighted that air…
Malwarebytes -
12/2/25, 3:56 PM
A leading experiential leisure provider has embraced Darktrace AI for autonomous, preventative cybersecurity to protect guest experience while enabling secure global venue expansion. The approach emphasises a phased rollout with minimal disruption to…
darktrace.com -
Researchers Capture Lazarus APT's Remote-Worker Scheme Live on Camera
According to The Hacker News, researchers have exposed one of North Korea’s most persistent infiltration schemes—a remote-worker operation linked to Lazarus Group’s Famous Chollima division, monitored live as operators worked on what they believed were real…
The Hacker News -
GlassWorm Returns with 24 Malicious Extensions Impersonating Popular Developer Tools
According to Secure Annex, the GlassWorm supply-chain campaign has reappeared, infiltrating both Microsoft Visual Studio Marketplace and Open VSX with 24 extensions impersonating popular developer tools and frameworks such as Flutter, React, Tailwind, Vim,…
The Hacker News -
KR: Privacy Commissioner’s Office Urges the Public to Beware of Fraudsters Exploiting the Tai Po Fire Disaster
The KR: Privacy Commissioner’s Office has warned that fraudsters are exploiting the Tai Po fire disaster by impersonating volunteers and using a fraudulent “Tai Po Wang Fuk Court Victims Registration Form” to harvest victims’ personal data, including Chinese…
DataBreaches -
Cyber attack on Indian airports? Govt explains the scary threat that disrupted 400 flights last month.
The government confirmed that several major airports, including Delhi, Mumbai and Bengaluru, detected GPS spoofing signals last month, but assured that flight operations were not affected, according to The Economic Times. In a reply to MP Niranjan Reddy,…
DataBreaches -
How a noisy ransomware intrusion exposed a long-term espionage foothold
Threat researchers at Positive Technologies have detailed two incidents at Russian companies, tying them to QuietCrabs, a threat actor believed to be of Asian origin and focused on cyber espionage, and to Thor, a group that has targeted Russian firms with…
DataBreaches -
KR: Hacking scheme targeted 120,000 home cameras for sexual footage
Four people have been charged in South Korea with hacking into tens of thousands of private video cameras in homes and businesses in search of sexually exploitative footage, authorities said on Monday, 2 December 2025. In a news release, according to Korean…
DataBreaches -
The Great Disconnect: Unmasking the ‘Two Separate Conversations’ in Security
The Great Disconnect argues that security conversations often unfold as two separate discussions, leaving audiences on different wavelengths and hindering outcomes. Written by Joshua Goldfarb and published on SecurityWeek, the piece uses a workplace example…
SecurityWeek -
Whispering poetry at AI can make it break its own rules
Researchers from Icaro Lab, Sapienza University and AI safety startup DEXAI tested whether giving AI instructions as poetry would make them harder to detect and more prone to misbehaviour, comparing prompts in prose with those written as poems across nine…
Malwarebytes -
Malicious npm Package Uses Hidden Prompt and Script to Evade AI Security Tools
Cybersecurity researchers have highlighted an npm package, eslint-plugin-unicorn-ts-2, which masquerades as a TypeScript extension of ESLint and was uploaded to the registry by a user named “hamburgerisland” in February 2024. The library, which has been…
The Hacker News -
Chrome, Edge Extensions Caught Tracking Users, Creating Backdoors
On 2 December 2025, SecurityWeek reports that a threat actor named ShadyPanda, according to Koi Security, published more than a hundred malicious extensions for Chrome and Microsoft Edge that can track and profile users and execute payloads with browser API…
SecurityWeek -
The $9M yETH Exploit: How 16 Wei Became Infinite Tokens
According to Check Point Research, on 30 November 2025 a critical exploit targeted Yearn Finance’s yETH pool on Ethereum, and within hours about $9 million was stolen from the protocol. The attacker minted an astronomical number of tokens—235 septillion yETH…
Check Point -
Iran-Linked Hackers Hits Israeli Sectors with New MuddyViper Backdoor in Targeted Attacks
Israeli entities across academia, engineering, local government, manufacturing, technology, transportation and utilities have been targeted in a new MuddyWater operation that delivers a previously undocumented backdoor named MuddyViper. The activity has been…
The Hacker News -
DPRK's 'Contagious Interview' Spawns Malicious Npm Package Factory
North Korean attackers behind the Contagious Interview campaign have delivered more than 197 malicious npm packages, with over 31,000 collective downloads since Oct 10, as part of ongoing state-sponsored activity to compromise software developers. The latest…
Dark ReadingContagious Interview -
Cyber Startup Frenetik Launches with Patented Deception Technology That Bets Against the AI Arms Race
Frenetik, a Maryland-based cybersecurity startup, emerged from stealth today with a novel approach to thwarting attackers by using cyber deception backed by a newly issued U.S. patent. The company’s Deception In-Use technology, covered by U.S. Patent…
SecurityOnline -
Saporo Raises $8 Million for Identity Security Platform
Swiss cybersecurity startup Saporo announced it has raised €7 million (~$8.1 million) in a Series A round, bringing total funding to €13.6 million (~€15.8 million). The round was led by TIN Capital with additional support from G+D Ventures, CDP Venture…
SecurityWeek -
‘Korea’s Amazon’ Coupang discloses a data breach impacting 34M customers
Coupang, South Korea’s leading e‑commerce and logistics platform, disclosed a data breach that exposed the personal information of nearly 34 million South Korean customers. The company said unauthorized access began on 24 June 2025 via overseas servers and…
Security Affairs -
Vulnerability in OpenAI Coding Agent Could Facilitate Attacks on Developers
SecurityWeek reports that OpenAI Codex CLI contains a vulnerability, tracked as CVE-2025-61260, which can be exploited for command execution and was patched with Codex CLI 0.23.0 after being reported to OpenAI in August. The issue arises because Codex CLI…
SecurityWeek -
AI Adoption Surges While Governance Lags — Report Warns of Growing Shadow Identity Risk
According to CyberNewsWire, the 2025 State of AI Data Security Report finds AI adoption to be nearly universal in enterprises, with 83 percent of organisations already using AI in daily operations, but only 13 percent reporting strong visibility into how…
SecurityOnline -
Google patches 107 Android flaws, including two being actively exploited
Google has patched 107 vulnerabilities in Android in its December 2025 Android Security Bulletin, including two high-severity flaws that are being actively exploited. The fixes cover Android 13, 14, 15, and 16, with patches issued for the framework layer…
Malwarebytes -
SecAlerts Cuts Through the Noise with a Smarter, Faster Way to Track Vulnerabilities
SecAlerts cuts through the noise of vulnerability management by delivering relevant, up-to-date alerts that match vulnerabilities to your software, using information as soon as it’s released rather than relying solely on the delayed NVD. The service runs in…
The Hacker News -
Personal Information of 33.7 Million Stolen From Coupang
Coupang has disclosed a five-month data breach exposing the personal information of 33.7 million Korean customers, including names, email addresses, shipping addresses, and phone numbers, though no payment details or login credentials were exposed. The…
SecurityWeek -
Google’s latest Android security update fixes two actively exploited flaws
Google’s latest Android security update patches 107 vulnerabilities across system, kernel and major vendor components, with two high-severity flaws already under limited, targeted exploitation in the wild. The two elevated-privilege and…
Security Affairs -
Kaspersky Security Bulletin 2025. Statistics
Kaspersky Security Bulletin 2025. Statistics reports findings from the Kaspersky Security Network (KSN), with statistics covering the period from November 2024 through October 2025 and noting that mobile statistics are not included in this report. According…
securelist.com -
Android’s December 2025 Updates Patch Two Zero-Days
According to SecurityWeek, Google on Monday released new Android security updates and warned that two of the resolved vulnerabilities have been exploited in limited, targeted attacks. The exploited zero-days are tracked as CVE-2025-48633 and CVE-2025-48572,…
SecurityWeek -
Apple AI Shakeup: Giannandrea Out, Former Google Gemini Chief Amar Subramanya Hired
Apple has announced a major leadership reshuffle, with Senior Vice President of Machine Learning and AI Strategy John Giannandrea set to step down in spring next year after seven years at the company. According to Bloomberg, Tim Cook has lost confidence in…
SecurityOnline -
Google Patches 107 Android Flaws, Including Two Framework Bugs Exploited in the Wild
Google has released its December 2025 Android security updates, addressing 107 flaws across Framework, System, Kernel and third‑party components from Arm, Imagination Technologies, Mediatek, Qualcomm and Unison, with two Framework bugs among those exploited…
The Hacker News -
Sonesta International Hotels Implements Industry-Leading Cloud Security Through AccuKnox Collaboration
Sonesta International Hotels has partnered with AccuKnox to deploy Zero Trust Integrated Application and Cloud Security, including ASPM and CNAPP capabilities for Microsoft Azure, as part of a multi-cloud security refresh. The collaboration, announced from…
SecurityOnline -
Alarm: Coupang Data Breach Exposes 33.7 Million Users—Over Half of South Korea
A major data breach has struck Coupang, one of South Korea’s most prominent e-commerce platforms, exposing 33.7 million user records—more than half of the country’s population of 51.66 million. The company initially believed only about 4,500 accounts were…
SecurityOnline -
Europol Shuts Down CryptoMixer, Seizes €25 Million in Bitcoin & 12 TB of Data
Europol has disclosed that, during a coordinated operation, it dismantled CryptoMixer, a centralised custodial mixing service used by cybercriminals to obscure illicit cryptocurrency flows. Investigators seized more than €25 million in digital assets,…
SecurityOnline
