News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Thu 4 Dec 2025· 54 articles
-
How Agentic AI Can Boost Cyber Defense
Cyberattack volumes are driving organisations to automate triage and scoring, with Transurban among early adopters using agentic AI to aid its SOC analysts. According to Omdia's Cybersecurity Decision Maker Survey 2025, autonomous SOCs could become standard…
Dark Reading -
SMS Phishers Pivot to Points, Taxes, Fake Retailers
China-based phishing groups are pivoting to mass-creating fake e-commerce websites that steal payment card data to feed mobile wallets, while also using SMS lures promising unclaimed tax refunds and rewards points, the Krebs on Security piece reports. In the…
Krebs on Security -
CISA Warns of 'Ongoing' Brickstorm Backdoor Attacks
CISA warns of ongoing intrusions by Chinese nation-state actors deploying the Brickstorm backdoor in VMware vSphere environments across government and information technology organisations, with the attackers using Brickstorm to retain long-term stealth…
Dark Reading -
U.S. CISA adds a new an OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added an OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities (KEV) catalog, tracked as CVE-2021-26828, with a CVSS score of 8.7. The vulnerability is described as an unrestricted…
Security Affairs -
CISA Publishes Security Guidance for Using AI in OT
A consortium of global agencies has published guidance on how to defend AI deployments in operational technology, emphasising that AI and OT are two of the most sensitive attack surfaces. The guidance, a 25-page document, notes that large language model…
Dark Reading -
Critical Vulnerabilities in React Server Components and Next.js
According to Unit 42, on 3 December 2025 researchers disclosed critical remote code execution vulnerabilities in the Flight protocol used by React Server Components and Next[.]js, tracked as CVE-2025-55182 and CVE-2025-66478 with a maximum CVSS of 10.0. The…
unit42.paloaltonetworks.com -
Atomic Stealer: Darktrace’s Investigation of a Growing macOS Threat
Atomic Stealer, also known as AMOS, is now described by Darktrace as a rapidly growing macOS threat, capable of infostealing and backdoor access to target devices. According to Darktrace, infostealers have emerged as the largest category of new macOS…
darktrace.com -
India Rolls Back Order to Preinstall Cybersecurity App on Smartphones
According to Associated Press, India’s telecoms ministry rolled back its order requiring smartphone manufacturers to preinstall the government’s Sanchar Saathi cybersecurity app on new devices. The Ministry of Communications had previously directed makers to…
SecurityWeek -
Marquis data breach impacted more than 780,000 individuals
Marquis, a Texas-based fintech and software firm, disclosed that hackers breached its systems and stole personal and financial data, impacting more than 780,000 individuals. The data exposed included names, addresses, Social Security numbers, dates of birth…
Security Affairs -
Marquis data breach impacts over 74 US banks, credit unions
According to Bleeping Computer, Marquis Software Solutions warned that a data breach affected dozens of banks and credit unions across the US, with the company stating it suffered a ransomware attack on 14 August 2025 after its network was breached through a…
DataBreaches -
How scammers use fake insurance texts to steal your identity
According to Malwarebytes, scammers are using fake insurance texts to harvest personal information and steal identities, sometimes even tailoring supposed pricing by asking for age and gender and offering seemingly “too good to be true” premiums. The piece…
Malwarebytes -
Cybersecurity M&A Roundup: 30 Deals Announced in November 2025
SecurityWeek reports that thirty cybersecurity-related merger and acquisition deals were announced in November 2025, with high-profile moves from Arctic Wolf, Bugcrowd, Huntress, Palo Alto Networks and Zscaler. Arctic Wolf announced the acquisition of…
SecurityWeek -
Silver Fox Uses Fake Microsoft Teams Installer to Spread ValleyRAT Malware in China
The Hacker News reports that the threat actor Silver Fox has been conducting a false-flag operation to mimic a Russian group in attacks against organisations in China, using a search engine optimisation–driven (SEO) poisoning campaign that leverages…
The Hacker NewsVoid Arachne -
Cybersecurity strategies to prioritize now
Cybersecurity strategies to prioritise now centre on four practical priorities that organisations should act on immediately. First, prioritise essential cyber hygiene basics, such as keeping an accurate network inventory, using network segmentation, blocking…
Microsoft -
ASUS confirms vendor breach as Everest gang leaks data, claims ArcSoft and Qualcomm
ASUS confirms a third-party breach after Everest leaks sample data, with the Everest ransomware group claiming access to data from ASUS, ArcSoft and Qualcomm. According to ASUS, a supplier breach exposed some camera source code but did not affect ASUS…
Security Affairs -
ServiceNow's Acquisition of NHI Provider Veza Strengthens Governance Portfolio
ServiceNow plans to acquire non-human identity management provider Veza, a move aimed at strengthening its governance, risk and security offerings. The deal is reported to be worth roughly $1 billion, with Veza previously valuing itself at $800 million after…
Dark Reading -
Agentic Security Firm 7AI Raises $130 Million
Boston, Mass-based agentic cybersecurity firm 7AI today announced a $130 million Series A funding round, bringing its total funding to $166 million. Established in 2024 by Cybereason co-founders Lior Div and Yonatan Striem-Amit, 7AI says the round was led by…
SecurityWeek -
Inotiv Says Personal Information Stolen in Ransomware Attack
According to Inotiv, between approximately 5–8 August 2025 a threat actor gained unauthorised access to the company’s systems and may have acquired certain data, with personal, financial and health information belonging to 9,542 people affected. Hackers…
SecurityWeek -
Reporters Without Borders Targeted by Russian Hackers
According to Sekoia, the Russia-linked Star Blizzard APT targeted the French press freedom organisation Reporters Without Borders (RSF) earlier this year, with the March campaign delivered via phishing emails aimed at one of RSF’s core members. The attackers…
SecurityWeek -
SpyCloud Data Shows Corporate Users 3x More Likely to Be Targeted by Phishing Than by Malware
Austin, UK, 4 December 2025: according to SpyCloud, phishing has surged 400% year over year, with the workforce three times more likely to be targeted by phishing than by infostealer malware. The company tracked nearly 28+ million recaptured phished records,…
SecurityOnline -
Student Sells Gov't, University Sites to Chinese Actors
Asian threat actors have been buying access to misconfigured government, university and other high-value websites at relatively low prices, with researchers noting a broader ecosystem on Telegram channels selling compromised sites. According to Cyderes'…
Dark Reading -
Canadian police trialling facial recognition bodycams
Edmonton’s municipal police force is trialling facial recognition bodycams from US-based Axon, with up to 50 officers taking part this month, according to reports. Officers won’t activate the cameras in the field unless they are actively investigating or…
Malwarebytes -
Canadian police trialing facial recognition bodycams
A Canadian municipal police force in Edmonton is trialling facial recognition bodycams, with up to 50 officers taking part in the trial this month. According to Axon, the technology will run the recognition software in the background when cameras are…
Malwarebytes -
Global Cyber Agencies Issue AI Security Guidance for Critical Infrastructure OT
Global cyber agencies have published joint guidance on the safe and secure use of artificial intelligence in operational technology, with the document published on the website of CISA. The 25-page guidance, dated 4 December 2025, is authored by government…
SecurityWeek -
How Darktrace Unifies Email Security with Cross-Domain AI
Darktrace / EMAIL is expanding its capabilities to end email security silos by delivering cross-domain AI-native detection that links email, identity, and SaaS, and by introducing label-free behavioural DLP to protect sensitive data without manual rules. The…
darktrace.com -
How Darktrace email security catches the 17% of threats that SEGs miss
New research published by Darktrace shows that nearly one in six of the riskiest inbound emails still evade native security layers after Microsoft filtering, with an average SEG miss rate of about 17%. The metric comes from a volume-weighted analysis of…
darktrace.com -
Update Chrome now: Google fixes 13 security issues affecting billions
Google has released an update for its Chrome browser that fixes 13 security issues, four of which are high severity, including one in the Digital Credentials feature that could enable a remote attacker to exploit heap corruption via a crafted HTML page.…
Malwarebytes -
Personal Information Compromised in Freedom Mobile Data Breach
Freedom Mobile has disclosed a data breach affecting a limited number of customers, identified on October 23 as the result of credential compromise. According to the incident notice, a threat actor gained access to a subcontractor’s account and used it to…
SecurityWeek -
ThreatsDay Bulletin: Wi-Fi Hack, npm Worm, DeFi Theft, Phishing Blasts— and 15 More Stories
The ThreatsDay bulletin highlights a major npm worm incident, with the Shai-Hulud 2.0 campaign exposing around 400,000 unique raw secrets after compromising over 800 packages and publishing stolen data to about 30,000 GitHub repositories. Wiz said the…
The Hacker News -
5 Threats That Reshaped Web Security This Year [2025]
The Hacker News outlines five threats that reshaped web security in 2025. It highlights Vibe Coding, where AI-generated code can be production-ready yet riddled with exploitable flaws, with Base44 authentication bypass on a Wix platform and several CVEs…
The Hacker News -
Marquis Data Breach Impacts Over 780,000 People
Marquis Data Breach Impacts Over 780,000 People shows how hackers breached the fintech firm’s network, stealing personal and financial information from more than 780,000 individuals. The incident was discovered on 14 August, but the investigation into the…
SecurityWeek -
React2Shell: In-the-Wild Exploitation Expected for Critical React Vulnerability
SecurityWeek reports that a critical React vulnerability, CVE-2025-55182, can allow a remote, unauthenticated attacker to achieve remote code execution, with patches issued for versions 19.0, 19.1.0, 19.1.1 and 19.2.0, to be followed by 19.0.1, 19.1.2 and…
SecurityWeek -
GoldFactory Hits Southeast Asia with Modified Banking Apps Driving 11,000+ Infections
Cybersecurity researchers have linked a financially motivated group known as GoldFactory to a fresh wave of mobile-targeted attacks in Southeast Asia, with Indonesia, Thailand, and Vietnam as the primary targets. According to Group-IB, the operation,…
The Hacker NewsGoldFactory -
Policy U-Turn: India Drops Mandatory Sanchar Saathi App After Fierce Opposition
On 4 December 2025, India reversed its decision to require pre-installation of the Sanchar Saathi app on smartphones after fierce opposition from global tech firms and domestic political forces. The Ministry of Communications said the policy U-turn was…
SecurityOnline -
Cloudflare mitigates record 29.7 Tbps DDoS attack by the AISURU botnet
Cloudflare blocked a record 29.7 Tbps DDoS attack from the AISURU botnet in a 69-second barrage, with the targeted organisation left undisclosed. According to Cloudflare’s Q3 2025 DDoS Threat Report, the AISURU network comprises 1–4 million devices and…
Security Affairs -
AWS Trainium Chip Business Hits Multi-Billion Revenue, Challenging NVIDIA’s Pricing
According to Andy Jassy, AWS’s in-house AI compute chip business built around Trainium has already reached multi-billion-dollar revenues, signalling strong market endorsement of Amazon’s strategy to drive down the cost of AI computation, with momentum behind…
SecurityOnline -
Design Wars: Meta Hires Apple Veteran Alan Dye to Lead New Reality Labs Creative Studio
Meta chief Mark Zuckerberg has announced that the company has recruited Alan Dye, a veteran design executive who spent nearly two decades at Apple, to lead a newly established Creative Studio within Meta Reality Labs. Dye previously served as Apple’s Vice…
SecurityOnline -
Misleading AI Headlines: Google Discover Testing Rewrites That Distort News Facts
According to The Verge, Google has begun testing AI-rewritten headlines within its Google Discover service, a move intended to help users grasp key information quickly but which has produced misleading or incorrect results in some cases. The piece notes that…
SecurityOnline -
'MuddyWater' Hackers Target Israeli Orgs With Retro Game Tactic
MuddyWater, one of Iran’s most active APTs, targeted Israeli organisations in a campaign that began on 30 September last year and concluded on 18 March this year, hitting 17 Israeli entities across universities, engineering firms, local government, and…
Dark ReadingMuddyWater -
Record 29.7 Tbps DDoS Attack Linked to AISURU Botnet with up to 4 Million Infected Hosts
Cloudflare has disclosed that it detected and mitigated the largest ever distributed denial-of-service (DDoS) attack, hitting 29.7 terabits per second (Tbps). The assault originated from a DDoS botnet-for-hire called AISURU, which has been linked to…
The Hacker News
