News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Wed 3 Dec 2025· 59 articles
-
Admins and defenders gird themselves against maximum-severity server vulnerability
Security defenders are girding themselves after the disclosure of a maximum-severity vulnerability in React Server, an open source package widely used by websites and cloud environments. Exploitation requires only a single HTTP request and has shown…
Ars Technica -
King Addons flaw lets anyone become WordPress admin
Hackers are exploiting a critical vulnerability in the King Addons for Elementor WordPress plugin (CVE-2025-8489) that lets unauthenticated users register with administrator-level privileges, potentially taking full control of a site. The flaw affects…
Security Affairs -
Virginia Twins Arrested for Conspiring to Destroy Government Databases
Two Virginia men, brothers Muneeb and Sohaib Akhter of Alexandria, Virginia, were indicted on 13 November for conspiring to delete government databases hosted by a federal government contractor and related crimes, according to the U.S. Department of Justice.…
DataBreaches -
'ShadyPanda' Hackers Weaponize Millions of Browsers
ShadyPanda, a China-based threat group, has infected 4.3 million Chrome and Edge users through malicious browser extensions that masqueraded as legitimate tools for years before being weaponised. The operators have harvested detailed browsing histories,…
Dark ReadingShadyPanda -
Critical React Flaw Triggers Calls for Immediate Action
A maximum-severity vulnerability in the React open source library could enable remote code execution across a large number of cloud environments. The flaw was disclosed with two CVEs: CVE-2025-55182 in the React Server Components protocol and CVE-2025-66478…
Dark Reading -
Arizona AG Sues Temu Over 'Stealing' User Data
Arizona Attorney General Kris Mayes is suing Temu, alleging the Temu app secretly accesses and harvests users’ sensitive information without their knowledge or consent, in a case brought under the Arizona Consumer Fraud Act. According to a Dec. 2 press…
Dark Reading -
Shai Hulud 2.0, now with a wiper flavor
Shai Hulud 2.0 is a two‑stage worm that spreads by compromising npm tokens to republish trusted packages with a malicious payload, infecting more than 800 npm packages in this version. According to Kaspersky, the campaign targets individuals and…
securelist.com -
University of Pennsylvania and University of Phoenix disclose data breaches
The University of Pennsylvania and the University of Phoenix confirmed they were hit in the Oracle E-Business Suite cyberattack campaign, which targeted Oracle EBS users including academic institutions. Penn said it used Oracle EBS for supplier payments,…
Security Affairs -
Critical Remote Code Execution Vulnerabilities Discovered in React Server Components and Next.js
Security researchers have uncovered critical unauthenticated remote code execution vulnerabilities in React Server Components and the Next[.]js App Router, with near 100% exploitation success in testing environments. The vulnerabilities are tracked as…
StepSecurity -
Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code Execution
A critical security vulnerability in React Server Components could allow unauthenticated remote code execution, according to The Hacker News’ coverage of CVE-2025-55182, which has a CVSS score of 10.0. The React Team said the issue stems from how React…
The Hacker News -
Cyberattack on Puerto Rico IT vendor Truenorth hits 3 agencies
According to Dysruption Hub, Puerto Rico officials say a Thanksgiving-week cyberattack on IT contractor Truenorth Corporation briefly disrupted systems at three major agencies but did not compromise citizen data, even as independent reporting describes a…
DataBreaches -
Microsoft Silently Patches Windows LNK Flaw After Years of Active Exploitation
According to ACROS Security's 0patch, Microsoft has silently patched a Windows LNK flaw, CVE-2025-9491, that has been exploited by several threat actors since 2017 as part of Patch Tuesday updates in November 2025. The vulnerability is described as a Windows…
The Hacker News -
Fraudulent gambling network may be a nation-state spying operation
A sprawling infrastructure that has bilked unsuspecting people via fraudulent gambling websites for 14 years is likely a dual operation run by a nation-state‑sponsored group targeting government and private‑industry organisations in the US and Europe,…
Ars Technica -
WordPress King Addons Flaw Under Active Attack Lets Hackers Make Admin Accounts
A critical flaw in the WordPress King Addons for Elementor plugin is currently being actively exploited in the wild. The vulnerability, CVE-2025-8489 (CVSS 9.8), is a privilege-escalation flaw that lets unauthenticated attackers grant themselves…
The Hacker News -
How Harden Runner Detected the Sha1-Hulud Supply Chain Attack in CNCF's Backstage Repository
During 23–24 November 2025, the npm ecosystem suffered a major supply chain attack dubbed Sha1-Hulud: The Second Coming, compromising over 780 npm packages including those from Zapier, ENS Domains, PostHog, Postman and AsyncAPI. Among the affected pipelines…
StepSecurity -
Darktrace Named as a Leader in 2025 Gartner® Magic Quadrant™ for Email Security Platforms
Darktrace has been named a Leader in the 2025 Gartner® Magic Quadrant™ for Email Security Platforms, following a prior Customers’ Choice recognition in Gartner Peer Insights for Email Security in July 2025. The company highlights its AI-native detection and…
darktrace.com -
Attackers have a new way to slip past your MFA
Attackers are using a tool called Evilginx to steal session cookies, letting them bypass the need for a multi-factor authentication (MFA) token, Malwarebytes reports. Researchers are warning about a rise in cases where this method is used against educational…
Malwarebytes -
Easy Question, Complicated Answer: What Does It Take to Stop Workers From Snooping?
Insider threats remain a worrying concern in health data breaches, with snooping often driven by curiosity or, at times, more malicious motives. According to Report on Patient Privacy, Theresa Defino discusses a presentation by UHealth, the University of…
DataBreaches -
Brazil Hit by Banking Trojan Spread via WhatsApp Worm and RelayNFC NFC Relay Fraud
The Hacker News reports that Brazil is seeing a new wave of a banking Trojan spread by a WhatsApp worm and related NFC-relay fraud efforts, with attackers using HTML Application (HTA) files and PDFs to propagate the worm. The threat actor known as Water Saci…
The Hacker News -
How attackers use real IT tools to take over your computer
A new wave of attacks is exploiting legitimate Remote Monitoring and Management tools such as LogMeIn Resolve (formerly GoToResolve) and PDQ Connect to remotely control victims’ systems. Rather than dropping traditional malware, attackers trick people into…
Malwarebytes -
Niobium Raises $23 Million for FHE Hardware Acceleration
Niobium, the Dayton, Ohio-based startup building a hardware accelerator for fully homomorphic encryption (FHE), announced on 3 December 2025 that it has raised $23 million in an oversubscribed round, taking total funding to over $28 million. The company says…
SecurityWeek -
Cloudflare's 2025 Q3 DDoS threat report -- including Aisuru, the apex of botnets
According to Cloudflare’s Quarterly DDoS Threat Report, the third quarter of 2025 was dominated by the Aisuru botnet, estimated at 1–4 million infected hosts globally, which unleashed hyper-volumetric DDoS attacks routinely exceeding 1 Tbps and 1 Bpps. The…
Cloudflare -
The Ransomware Holiday Bind: Burnout or Be Vulnerable
There’s never a good time to get hit by ransomware, but the holidays, weekends and off-hours see attackers capitalising as security teams are stretched thin. Ransomware groups now operate almost like legitimate businesses, with structured attack steps and…
Dark Reading -
Critical King Addons Vulnerability Exploited to Hack WordPress Sites
A critical-severity vulnerability in the King Addons for Elementor plugin for WordPress has been exploited to take over websites, according to Defiant. Tracked as CVE-2025-8489 (CVSS 9.8), the flaw is a privilege-escalation issue affecting versions 24.12.92…
SecurityWeek -
Fileless protection explained: Blocking the invisible threat others miss
Fileless attacks are memory-based threats that evade traditional antivirus because they don’t leave files on the hard drive and vanish when you reboot. They hijack legitimate Windows tools such as PowerShell, running harmful commands in memory and blending…
Malwarebytes -
Researchers spotted Lazarus’s remote IT workers in action
Researchers exposed a Lazarus scheme in which North Korea-linked operators used remote IT workers to infiltrate Western organisations, with the joint investigation led by NorthScan and ANY[.]RUN and citing TheHackerNews as reporting source. The operation…
Security AffairsLazarus Group -
Arizona Attorney General Sues Chinese Online Retailer Temu Over Data Theft Claims
Arizona is pursuing Temu and its parent company PDD Holdings Inc, with Kris Mayes, the Arizona Attorney General, announcing that the state is suing over allegations the Chinese online retailer steals customers’ data. The suit claims the app deceives users…
SecurityWeek -
ServiceNow to Acquire Identity Security Firm Veza in Reported $1 Billion Deal
ServiceNow announced it has agreed to acquire Veza Security in what SecurityWeek reports as a deal worth more than $1 billion. The Information last week reported advanced talks to buy Veza for more than $1 billion, and ServiceNow has not disclosed contract…
SecurityWeek -
Discover the AI Tools Fueling the Next Cybercrime Wave — Watch the Webinar
According to The Hacker News, the webinar, published on 3 December 2025, paints a stark picture of how AI is accelerating cybercrime, with phishing now driven by accessible tools rather than lone clever operators. The session drills into the three tools…
The Hacker News -
Penn and Phoenix Universities Disclose Data Breach After Oracle Hack
The University of Pennsylvania and the University of Phoenix confirmed they were victims in the Oracle E-Business Suite hack campaign. The Penn disclosure said data breach letters are being sent to individuals whose personal information was compromised, with…
SecurityWeek -
re:Invent 2025: AWS and Security Vendors Unveil New Products and Capabilities
At re:Invent 2025, AWS revealed a slate of new security products and enhancements, including a preview version of AWS Security Agent designed to proactively secure applications throughout development and perform automated security reviews and context-aware…
SecurityWeek -
Microsoft Silently Mitigated Exploited LNK Vulnerability
Microsoft has quietly mitigated an exploited LNK vulnerability with its November 2025 security updates, Acros Security says. Tracked as CVE-2025-9491 (CVSS score 7.0), the flaw had allowed threat actors to hide malicious code in LNK files by concealing the…
SecurityWeek -
Exploits and vulnerabilities in Q3 2025
Exploits and vulnerabilities in Q3 2025 show attackers continuing to target familiar weaknesses, with the three‑month period seeing a sustained focus on Windows and Linux exploitation alongside new weaponisation of archive handling flaws. The Windows…
securelist.com -
Chopping AI Down to Size: Turning Disruptive Technology into a Strategic Advantage
On 3 December 2025, The Hacker News argues that AI is now embedded in almost every security product, but the intelligence it offers is often hidden behind proprietary models that security teams cannot inspect. It notes that these models may make risk…
The Hacker News -
Picklescan Bugs Allow Malicious PyTorch Models to Evade Scans and Execute Code
Three critical flaws disclosed in the open‑source Picklescan utility could let attackers load untrusted PyTorch models, bypassing the scanner and executing arbitrary code, potentially enabling large‑scale supply‑chain attacks. The…
The Hacker News -
India mandates SIM-linked messaging apps to fight rising fraud
India’s Department of Telecommunications has ordered messaging apps to operate only with active SIM cards linked to users’ numbers to curb fraud and misuse, after noting that some app-based services permit access without the underlying SIM. Indian Government…
Security Affairs -
Chrome 143 Patches High-Severity Vulnerabilities
Chrome 143 stable was released with patches for 13 vulnerabilities, including four high-severity flaws in the V8 JavaScript and WebAssembly engine and other components. According to Google, the four high-severity defects include a type confusion issue in V8…
SecurityWeek -
Malicious Rust Crate Delivers OS-Specific Malware to Web3 Developer Systems
Cybersecurity researchers have uncovered a malicious Rust crate, evm-units, that targets Windows, macOS and Linux systems by masquerading as an Ethereum Virtual Machine unit helper tool. Uploaded to crates[.]io in mid-April 2025 by a user named ablerust, it…
The Hacker News -
AWS AI Factories: Bringing Full Cloud AI Infrastructure On-Prem for Data Sovereignty
According to Ian Buck, NVIDIA’s Vice President of Hyperscale and HPC, AWS unveiled its AI Factories service at re:Invent 2025, bringing AWS’s full AI infrastructure—including NVIDIA accelerated computing platforms and Trainium chips—directly into customers’…
SecurityOnline -
AWS Unleashes Trainium3 Chip: 4.4x Faster AI Performance for EC2 UltraServers
AWS has announced the launch of its Amazon EC2 Trn3 UltraServers, powered by a new 3 nm AI chip, Trainium3, designed to tackle rising cost and compute bottlenecks in AI training and inference workloads. According to official metrics, Trainium3 delivers up to…
SecurityOnline
