News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Sat 6 Dec 2025· 9 articles
-
Attackers launch dual campaign on GlobalProtect portals and SonicWall APIs
Attackers have launched a dual campaign targeting Palo Alto GlobalProtect portals and SonicWall APIs, beginning on 2 December 2025 with login attempts and scans of SonicWall SonicOS API endpoints. The activity originated from over 7,000 IPs linked to German…
Security Affairs -
Researchers Uncover 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE Attacks
Researchers have disclosed over 30 security vulnerabilities in AI-powered Integrated Development Environments (IDEs) that combine prompt injection with legitimate features to enable data exfiltration and remote code execution. The flaws affect popular IDEs…
The Hacker News -
Drones to Diplomas: How Russia’s Largest Private University is Linked to a $25M Essay Mill
Dreary links between academic cheating networks and Russia’s private education sector are laid bare in Krebs on Security’s Drones to Diplomas, which notes a sprawling operation that has generated nearly $25 million in revenue and now markets itself as an AI…
Krebs on Security -
Ex-teen hackers warn parents are clueless as children steal ‘millions’
In a post dated 6 December 2025, DataBreaches[.]Net discusses a new Orange Cyberdefense report based on a dataset of 418 arrests or publicly available legal cases, noting its limitations in capturing younger offenders. According to Sky News, a Brad Young…
DataBreaches -
Critical React2Shell Flaw Added to CISA KEV After Confirmed Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday formally added the critical React Server Components flaw, CVE-2025-55182 (also tracked as React2Shell), to its Known Exploited Vulnerabilities catalog after reports of active…
The Hacker News -
Coordinated Reconnaissance: 7,000+ IPs Target Palo Alto GlobalProtect and SonicWall API Endpoints
A security overview from GreyNoise notes a sudden surge in mass scanning that targeted Palo Alto Networks and SonicWall, raising alarms about potential reconnaissance activity. On 2 December 2025, GreyNoise sensors detected a concentrated spike of 7,000+ IPs…
SecurityOnline -
Critical Step CA Flaw (CVE-2025-44005, CVSS 10.0) Allows Unauthenticated Bypass to Issue Fraudulent Certificates
A critical Step CA vulnerability (CVE-2025-44005, CVSS 10.0) has been identified in the Automated Certificate Management Environment (ACME) and Simple Certificate Enrollment Protocol (SCEP) provisioners used by Step CA, potentially allowing an…
SecurityOnline -
Maximum-severity XXE vulnerability discovered in Apache Tika
A maximum severity XXE vulnerability in Apache Tika, tracked as CVE-2025-66516 (CVSS score of 10.0), allows XML external entity attacks by triggering an XXE injection in Tika’s core, PDF, and parser modules. An attacker can embed a malicious XFA file inside…
Security Affairs -
China APT UNC5174 Hijacks Discord API as Covert C2 Channel to Evade Detection and Conduct Espionage
A Chinese state-sponsored threat group, UNC5174, has been linked to a sophisticated cyber-espionage operation that hijacks the Discord API as a covert command-and-control channel to evade detection, according to ASEC. The campaign deploys a backdoor malware…
SecurityOnlineUNC5174
