News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Wed 3 Dec 2025· 59 articles
-
AWS Bedrock Unleashed: 18 New AI Models, AgentCore Upgrades, and Enhanced Security
During the 3 December 2025 re:Invent 2025 conference, AWS unveiled the most extensive expansion of its Bedrock platform to date, adding 18 new open-weight AI models in a single release. According to AWS, the update reinforces Bedrock as a model marketplace,…
SecurityOnline -
Google Phone App Gets ‘Call Reason’: Mark Calls as Urgent to Ensure a Pick-Up
Google is testing a new feature in its Phone by Google app that lets users mark calls as urgent, with the recipient seeing an emergency badge on screen to help decide whether to pick up. The aim is to assist people who routinely divert calls to voicemail or…
SecurityOnline -
Microsoft Update Breaks Dark Mode: File Explorer Now Flashes White on Launch
Microsoft has released a preview update, KB5070311, for Windows 11 version 24H2/252, available only to users who manually check for updates. The update was quickly found to cause a flaw that, when the system is in dark mode, makes launching File Explorer…
SecurityOnline -
Security Tightens: Let’s Encrypt Will Cap Certificate Validity at 45 Days by 2028
According to the CA/Browser Forum, the maximum validity of digital certificates was reduced from 398 days to 45 days, with a slightly longer limit of 47 days agreed during discussion. Let’s Encrypt has announced that it will gradually shorten certificate…
SecurityOnline -
Red Alert at OpenAI: Ad Plans Dropped to Focus on ChatGPT Quality Amid Gemini Threat
OpenAI has shifted away from advertising inside ChatGPT, deprioritising the ad plan in favour of boosting ChatGPT’s overall quality, a move prompted by the pressure to keep pace with Google’s Gemini models. According to insiders, the focus change followed…
SecurityOnline -
India Mandates SIM-Binding: WhatsApp and Telegram Users Must Re-verify Every 6 Hours
On 3 December 2025, India’s Department of Telecommunications issued a directive requiring that users of major instant-messaging platforms must not access services or send messages unless their accounts are linked to a valid SIM card tied to an Indian mobile…
SecurityOnline -
Critical cPanel Flaw (CVSS 9.3) Allows Directory Traversal LPE for Full Server Takeover
SecurityOnline -
Critical ACF Extended Flaw (CVE-2025-13486, CVSS 9.8) Allows Unauthenticated RCE on 100K WordPress Sites
A critical vulnerability in Advanced Custom Fields: Extended (ACF Extended) tracked as CVE-2025-13486 with a CVSS of 9.8 allows unauthenticated remote code execution on more than 100,000 WordPress sites. The flaw exists in the prepare_form() function of the…
SecurityOnline -
CISA Warns: Critical Longwatch RCE Flaw (CVE-2025-13658, CVSS 9.8) Allows Unauthenticated SYSTEM Takeover of OT Surveillance
According to The Cybersecurity and Infrastructure Security Agency (CISA), a critical vulnerability in Industrial Video & Control’s Longwatch video surveillance and monitoring system could allow an unauthenticated attacker to seize control with SYSTEM-level…
SecurityOnline -
Malicious Rust Package ‘evm-units’ Exposes Crypto Developers to Stealth Attacks
Malicious Rust Package evm-units, discovered by The Socket Threat Research Team, masqueraded as a tool for handling Ethereum Virtual Machine units but carried a stealth loader that could silently compromise victim machines. The package, authored by ablerust,…
SecurityOnline -
DOJ Seizes Domain of Burma’s Notorious Tai Chang Scam Compound to Disrupt ‘Pig Butchering’ Fraud
The U.S. Department of Justice has seized the domain tickmilleas[.]com, identifying it as a primary tool used by scammers based in the Tai Chang compound in Kyaukhat, Burma, a hub linked to transnational organized crime. According to The U.S. Department of…
SecurityOnline -
Chrome 143 Stable Fixes 13 Flaws: High-Severity V8 Type Confusion Earns $11,000 Bounty
According to Google, Chrome 143 has been promoted to the stable channel for Windows, macOS and Linux, delivering a security update that fixes 13 vulnerabilities. The release, versioned as 143.0.7499.40 for Linux and 143.0.7499.40/41 for Windows and Mac, is…
SecurityOnline -
Django Flaw (CVE-2025-13372) Allows SQL Injection in PostgreSQL FilteredRelation
Django has released a security update for two vulnerabilities, the most critical being CVE-2025-13372, a high-severity SQL injection flaw that affects PostgreSQL environments using the FilteredRelation class. According to the technical details provided, the…
SecurityOnline -
CISA Warns: Critical Iskra iHUB Flaw (CVE-2025-13510) Allows Unauthenticated Smart Metering Takeover
CISA warns of a critical flaw in Iskra’s iHUB and iHUB Lite smart metering gateways (CVE-2025-13510) that could allow unauthenticated remote takeover of devices, with a CVSS v3.1 base score of 9.1 and affecting all versions of the two device lines. According…
SecurityOnline -
Critical Elementor Plugin Flaw (CVE-2025-8489, CVSS 9.8) Under Active Exploitation Allows Unauthenticated Admin Takeover
A critical flaw in King Addons for Elementor, CVE-2025-8489 with a CVSS of 9.8, is under active exploitation and can allow unauthenticated admins takeover on affected sites. The vulnerability stems from a lack of input validation in the user registration…
SecurityOnline -
China Researches Ways to Disrupt Satellite Internet
China is examining how to disrupt satellite Internet, noting that while constellation networks are resilient, jamming could be possible at a high cost. In an academic paper published in Chinese last month, researchers estimated that disrupting signals from…
Dark Reading -
High-Severity Angular Flaw (CVE-2025-66412) Allows Stored XSS via SVG and MathML Bypass
CVE-2025-66412 is a high-severity flaw in Angular that allows stored XSS via exploitation of SVG and MathML attributes, with a CVSS score of 8.5. The vulnerability stems from the compiler’s internal security schema being incomplete, allowing attackers to…
SecurityOnline -
Discontinued Library: High-Severity lz4-java Flaw (CVE‐2025‐12183) Forces Immediate Migration to Community Fork
A high-severity vulnerability, CVE-2025-12183, has been disclosed in the lz4-java compression library, exposing applications to potential Denial of Service and sensitive information disclosure. The flaw is classified as an “Out-of-bounds Read” (CWE-125) and…
SecurityOnline -
The Browser Defense Playbook: Stopping the Attacks That Start on Your Screen
The Browser Defense Playbook argues that the browser has become the new centre of work and risk, driven by the rise of cloud-based apps and remote working. It notes that about 85% of daily work takes place in the browser, a shift that organisations must…
unit42.paloaltonetworks.com
