News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Tue 9 Dec 2025· 60 articles
-
Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer Data
Researchers have uncovered two malicious Visual Studio Code extensions plus related malware activity across Go, npm and Rust ecosystems that steal developer data. The VS Code extensions masquerade as a premium dark theme and an AI coding assistant, but their…
The Hacker News -
Final Patch of 2025: Critical SAP Solution Manager Flaw (CVE-2025-42880, CVSS 9.9) Risks Full System Compromise
According to SAP, the final security update of the year includes a critical Code Injection vulnerability in SAP Solution Manager (CVE-2025-42880) with a CVSS of 9.9, affecting the Solution Manager version ST 720 and posing a risk of full system compromise.…
SecurityOnline -
-
Critical Authentication Bypass Flaws Discovered in Ruby SAML Library (CVE-2025-66567 & CVE-2025-66568)
A pair of critical authentication bypass vulnerabilities has been disclosed in the Ruby SAML library, affecting versions up to and including 1.12.4 and carrying a CVSS score of 9.3. According to the advisory, the library relies on two different XML parsers,…
SecurityOnline -
CISA KEV Alert: EOL D-Link and Array Networks Command Injection Under Active Attack
According to CISA KEV Alert cited by Daily CyberSecurity, two active threats have been added to the Known Exploited Vulnerabilities catalog: a critical flaw in legacy D-Link routers and a command injection vulnerability in Array Networks appliances,…
SecurityOnline -
Samsung Foundry Hits 60% 4nm Yield, Secures $100M AI Chip Order from Tsavorite
Samsung’s foundry division is reported to have lifted yields on its 4nm process to the 60–70% range and secured a new order worth more than USD 100 million from Tsavorite Scalable Intelligence for Omni Processing Unit chips. The deal centres on the…
SecurityOnline -
Ad Code Found in ChatGPT Android Build, OpenAI Denies Current Advertising Tests
On 9 December 2025, reports surfaced that ad-related code was found in the ChatGPT Android build, specifically version 1.2025.329, prompting claims that OpenAI might be preparing an advertising system. According to Tibor Blaho, chief engineer of the ChatGPT…
SecurityOnline -
AI Uncovers GhostPenguin: Undetectable Linux Backdoor Used RC5-Encrypted UDP for Covert C2
According to Trend Micro, researchers have uncovered a previously unknown and undetectable Linux backdoor dubbed “GhostPenguin,” designed to provide attackers with remote shell access and file-system control over an RC5-encrypted UDP channel. The malware…
SecurityOnline -
Shanya Crypter Is the New Ransomware Toolkit: Uses Kernel Driver Abuse to Kill EDR
According to Sophos X‑Ops, a sophisticated new “packer-as-a-service” called Shanya (or VX Crypt) has emerged to help ransomware gangs bypass modern security protections and is already favoured by major groups such as Akira, Medusa and Qilin. First spotted on…
SecurityOnline -
Undetectable Beima Webshell Sold by College Student for Tuition Hijacks 5,200+ Gov/Edu Websites
Researchers have uncovered a Beima PHP webshell operation run by a college student in Bangladesh, described as a freelance endeavour to pay for education. According to Cyderes Howler Cell Reverse Engineering Team, the Beima webshell has remained completely…
SecurityOnline -
Silent Supply Chain Attack: Malicious Go Typosquat Siphoned Data to Pastebin for Four Years Undetected
According to The Socket Threat Research Team, a malicious Go package operated undetected for over four years, masquerading as a typosquat of trusted libraries and exfiltrating data to a public pastebin service. The rogue packages, identified as…
SecurityOnline -
Silver Fox APT Uses Cyrillic False Flag in Teams SEO Poisoning to Deploy ValleyRAT
According to ReliaQuest, the Chinese APT cluster known as “Silver Fox” (or Void Arachne) has launched a sophisticated SEO poisoning campaign that impersonates Microsoft Teams to distribute ValleyRAT, with the attackers trying hard to look Russian. The…
SecurityOnlineVoid Arachne -
FinCEN data shows $4.5B in ransomware payments, record spike in 2023
FinCEN data shows $4.5B in ransomware payments, marking a record spike in 2023, with FinCEN analysing trends from January 2022 to February 2025. According to FinCEN, there were 4,194 ransomware incidents in the period and more than $2.1 billion in payments,…
Security Affairs -
Evolved ClayRat Spyware Gains Self-Defense, Using Accessibility Abuse to Block Uninstallation and Steal Keys
According to Zimperium’s zLabs, the ClayRat Android spyware family has resurfaced with upgraded capabilities, evolving from a data thief into a capable surveillance tool that can actively defend itself against removal. The new variant leverages Accessibility…
SecurityOnline -
New FvncBot Android Trojan Targets mBank Users with HVNC and H.264 Screen Streaming
A sophisticated new Android banking trojan, dubbed FvncBot, has been found targeting mBank customers in Poland. According to Intel 471, the malware masquerades as a legitimate security app to steal credentials and take remote control of victims’ devices,…
SecurityOnline -
JS#SMUGGLER Malware Evades EDR Using “Junk Code” JavaScript and Fileless PowerShell to Deploy NetSupport RAT
JS#SMUGGLER is a multi-stage malware campaign described by the Securonix Threat Research team as targeting enterprise users through compromised websites and designed to bypass modern security controls. According to the analysis, the chain unfolds in three…
SecurityOnline -
Sophisticated CastleRAT Backdoor Uses Steam Community Pages as Covert C2 Resolver for Espionage
A new Remote Access Trojan named CastleRAT has emerged, with the Splunk Threat Research Team (STRT) identifying it around March 2025 and noting that two variants exist—Python and C—with the C-compiled version deemed the more dangerous due to its stealth and…
SecurityOnline -
LockBit 5.0 Resurfaces Stronger: New Variant Blinds Defenders by Disabling Windows ETW for Stealth Encryption
LockBit 5.0 has resurfaced as a cross‑platform, stealth‑focused variant, with researchers saying it is significantly more dangerous than its predecessors. A new technical report from Picus Labs reveals the group’s latest version targets Windows, Linux and…
SecurityOnline -
AI Clutter Solved? Windows 11 Adds Setting to Disable AI Actions in File Explorer Menu
Microsoft has responded to user feedback about AI clutter in Windows 11’s File Explorer by adding a setting to disable AI actions, introduced with Windows 11 Build 26220.7344 (DEV & BETA). December 9, 2025 reports that, according to Microsoft, if no AI…
SecurityOnline -
Google Antitrust Remedy: Judge Limits Default Search Contracts to One-Year Term
On 9 December 2025, in response to the U.S. Department of Justice’s antitrust lawsuit against Google, federal judge Amit Mehta issued a broader set of remedies stating that any future contracts requiring device manufacturers to set Google’s search or AI…
SecurityOnline
