News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Wed 10 Dec 2025· 58 articles
-
Fortinet fixed two critical authentication-bypass vulnerabilities
Fortinet fixed two critical authentication-bypass vulnerabilities, tracked as CVE-2025-59718 and CVE-2025-59719, affecting FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager when FortiCloud SSO is enabled. According to Fortinet PSIRT, both flaws stem from…
Security Affairs -
Storm-0249 Abuses EDR Processes in Stealthy Attacks
Storm‑0249, an initial access broker, has shifted from noisy phishing to highly targeted campaigns that are harder to detect, according to ReliaQuest. The group is weaponising endpoint detection and response (EDR) platforms and built‑in Windows utilities to…
Dark ReadingStorm-0249 -
ClickFix Style Attack Uses Grok, ChatGPT for Malware Delivery
A new ClickFix-style attack blends SEO poisoning with legitimate AI domains to deliver infostealer malware, exploiting trusted platforms to mislead users into running malicious prompts. Huntress researchers Stuart Ashenbrenner and Jonathan Semon describe a…
Dark Reading -
React2Shell Exploitation Delivers Crypto Miners and New Malware Across Multiple Sectors
According to Huntress, the React2Shell campaign continues to exploit the maximum-severity CVE-2025-55182 in React Server Components to deliver cryptocurrency miners and a range of previously undocumented malware families across multiple sectors, including…
The Hacker News -
Teen who allegedly stole millions of personal data records arrested in Spain
A 19-year-old man has been arrested in Igualada, in northeastern Spain, for allegedly stealing and selling about 64 million personal data records siphoned from nine companies, according to the National Police. The suspect allegedly accessed the systems of…
DataBreaches -
.NET SOAPwn Flaw Opens Door for File Writes and Remote Code Execution via Rogue WSDL
New research described by WatchTowr Labs, presented on 10 December 2025, details a .NET Framework flaw named SOAPwn that can enable remote code execution via rogue WSDL imports and HTTP client proxies. According to WatchTowr Labs, the vulnerability allows…
The Hacker News -
React2Shell: How Attackers Exploited CVE-2025-55182 Within Hours
React2Shell, also known as CVE-2025-55182, was exploited by opportunistic attackers within hours of its public disclosure, with Darktrace noting exploitation from honeypots deployed in the cloud just minutes after setup. According to Darktrace, the…
darktrace.com -
From awareness to action: Building a security-first culture for the agentic AI era
The Microsoft Cloud Blog notes that insights from Cybersecurity Awareness Month through Microsoft Ignite 2025 show security remains a top priority for business leaders, serving as a strategic lever for growth, trust, and AI innovation. The Work Trend Index…
Microsoft -
Clarity in complexity: New insights for transparent email security
Microsoft’s second email security benchmarking report updates its ICES-focused methodology to better reflect real-world deployment patterns, addressing journaling and connector-based reinjection that could inflate detections when Defender and an ICES vendor…
Microsoft -
December Patch Tuesday fixes three zero-days, including one that hijacks Windows devices
Malwarebytes reports that December Patch Tuesday fixes three zero-days, including one that hijacks Windows devices, with the updates addressing a total of 57 Microsoft security vulnerabilities. The three zero-days comprise CVE-2025-62221, an actively…
Malwarebytes -
Israeli Cybersecurity Funding Hits $4.4 Billion Record High
The total funding of Israeli cybersecurity companies reached a record $4.4 billion in 2025, according to cybersecurity-focused venture capital firm YL Ventures. The figure marks a 9% rise from $4.03 billion in 2024 and comes from 130 funding rounds, well…
SecurityWeek -
Virtual Event Today: Cyber AI & Automation Summit
SecurityWeek’s Virtual Event Today: Cyber AI & Automation Summit presents a fully immersive virtual 3D experience on December 10-11, 2025, with sessions exploring the implications and applications of predictive AI, machine learning, and automation in modern…
SecurityWeek -
New EtherRAT backdoor surfaces in React2Shell attacks tied to North Korea
According to Sysdig researchers, North Korea–linked threat actors are likely exploiting the new critical React2Shell flaw (CVE-2025-55182) to deploy a previously unknown remote access trojan named EtherRAT. The vulnerability affects React Server Components…
Security Affairs -
Cracking ValleyRAT: From Builder Secrets to Kernel Rootkits
According to Check Point Research, ValleyRAT backdoor, also known as Winos or Winos4.0, is dissected as a modular system with a Driver Plugin that embeds a kernel‑mode rootkit. The analysis shows the rootkit driver remains loadable on fully updated Windows…
Check Point -
Akira ransomware: FBI tallies 250 million in payouts
The piece reports that US and European agencies have updated their joint warning on Akira, noting ransom demands estimated at nearly 250 million dollars, with a focus on exploitation of VPNs and remote access tools and ties to the former Conti gang. It…
DataBreachesStorm-1567 -
US Indicts Extradited Ukrainian on Charges of Aiding Russian Hacking Groups
A Ukrainian woman, Victoria Eduardovna Dubranova, 33, has been charged in the US in two indictments for alleged ties with Russia-backed hacktivist groups CyberArmyofRussia_Reborn (CARR) and NoName057(16). She faces up to 27 years in prison for her…
SecurityWeek -
IE: HSE confirms second ransomware attack but ‘no evidence’ patient data was stolen
According to BreakingNews[.]ie, the Health Service Executive (HSE) has confirmed a second ransomware attack, but there is no evidence that patients’ data was stolen during the incident. The disruption followed a cyberattack earlier this year that prompted…
DataBreaches -
Fake Leonardo DiCaprio Movie Torrent Drops Agent Tesla Through Layered PowerShell Chain
Bitdefender uncovered a sophisticated malware deployment method using a fake torrent of Leonardo DiCaprio's film **_One Battle After Another_**. Users trying to download the film inadvertently execute a series of PowerShell scripts that install **Agent…
bitdefender.com -
Three PCIe Encryption Weaknesses Expose PCIe 5.0+ Systems to Faulty Data Handling
Three IDE vulnerabilities in PCIe 5.0+ have been disclosed, with CVE-2025-9612, CVE-2025-9613 and CVE-2025-9614 describing issues such as forbidden IDE reordering, completion timeout redirection and delayed posted redirection that could expose devices to…
The Hacker News -
Feds: Pro-Russia Hactivists Target US Critical Infrastructure
Feds: Pro-Russia Hacktivists Target US Critical Infrastructure, a December 2025 advisory notes that unsophisticated hacktivists are probing US OT networks by compromising Internet-facing VNC connections and targeting water and wastewater, food and…
Dark Reading -
Google Patches Gemini Enterprise Vulnerability Exposing Corporate Data
Google has patched Gemini Enterprise after a zero-click vulnerability, dubbed GeminiJack, that security firm Noma Security described as an architectural weakness in how enterprise AI systems interpret information. The flaw could be exploited via specially…
SecurityWeek -
GhostFrame phishing kit fuels widespread attacks against millions
GhostFrame is a new phishing-as-a-service kit that has powered more than a million phishing attacks since it was tracked from September 2025. Threat analysts linked over a million attempts to this kit, which they named GhostFrame for its stealthy use of…
Malwarebytes -
Fortinet Patches Critical Authentication Bypass Vulnerabilities
Fortinet has issued patches for 18 vulnerabilities across its products, including two flaws that could allow authentication bypass, tracked as CVE-2025-59718 and CVE-2025-59719 with a CVSS of 9.8. The weaknesses affect FortiOS, FortiWeb, FortiProxy and…
SecurityWeek -
Examining impact of federal relief program after major healthcare cyberattack — Research Brief
New research from the University of Minnesota School of Public Health provides the first detailed look at whether funding provided through a federal relief programme reached hospitals affected by a ransomware attack on Change Healthcare, a major processor of…
DataBreaches -
Justice Department Announces Actions to Combat Two Russian State-Sponsored Hacking Groups
The Justice Department has announced indictments against Ukrainian national Victoria Eduardovna Dubranova for her role in supporting two Russian state‑sponsored hacking groups, CARR and NoName057(16), with trials set for early 2026. According to the U.S.…
DataBreaches -
Should entities be required to disclose the name of a vendor if the breach was at the vendor’s?
The piece questions whether entities should be required to disclose the name of a vendor when a breach occurred at the vendor’s. It highlights a November notification from Cigna Healthcare to the Massachusetts Attorney General’s Office, showing that the…
DataBreaches -
The Hidden Risks of Information Disclosure: A Costly Lesson from Cornwall
The piece recounts how Royal Cornwall Hospital, in responding to a routine Freedom of Information request in 2023, exposed sensitive staff data when a spreadsheet published on its website contained hidden sickness absence information. The dataset affected…
DataBreaches -
Warning: WinRAR Vulnerability CVE-2025-6218 Under Active Attack by Multiple Threat Groups
According to CISA, the WinRAR vulnerability CVE-2025-6218 is a path traversal flaw that could enable code execution, with exploitation requiring a user to visit a malicious page or open a malicious file. The flaw was patched by RARLAB with WinRAR 7.12 in…
The Hacker News -
Webinar: How Attackers Exploit Cloud Misconfigurations Across AWS, AI Models, and Kubernetes
The Hacker News reports a webinar titled “Webinar: How Attackers Exploit Cloud Misconfigurations Across AWS, AI Models, and Kubernetes,” hosted by the Cortex Cloud team at Palo Alto Networks. The session promises a technical deep dive into three…
The Hacker News -
Ivanti EPM Update Patches Critical Remote Code Execution Flaw
Ivanti has released patches for four vulnerabilities in Endpoint Manager (EPM), including a critical remote code execution flaw tracked as CVE-2025-10573 (CVSS 9.6) that is described as a stored XSS issue exploitable without authentication. The bug can be…
SecurityWeek -
SAP Patches Critical Vulnerabilities With December 2025 Security Updates
SAP has rolled out 14 new security notes as part of its December 2025 patch day, three of which are rated critical and affect Solution Manager, Commerce Cloud and the jConnect SDK for SAP ASE. The first critical note fixes CVE-2025-42880, a code-injection…
SecurityWeek -
01flip: Multi-Platform Ransomware Written in Rust
In June 2025, Unit 42 researchers observed a new ransomware family named 01flip targeting a limited set of victims in the Asia-Pacific region. 01flip is written entirely in Rust and supports multi-platform architectures, including Windows and Linux, through…
unit42.paloaltonetworks.com -
ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Rockwell, Schneider
ICS Patch Tuesday highlights: Siemens, Schneider Electric, and Rockwell Automation have issued patch advisories for their ICS/OT products, with Siemens publishing 14 new advisories and three deemed critical covering Comos, Sicam T, and Ruggedcom ROX…
SecurityWeek -
U.S. CISA adds Microsoft Windows and WinRAR flaws to its Known Exploited Vulnerabilities catalog
According to the U.S. Cybersecurity and Infrastructure Security Agency (CISA), Microsoft Windows and WinRAR flaws have been added to the Known Exploited Vulnerabilities catalog. The entries include CVE-2025-6218, a WinRAR path traversal vulnerability with a…
Security Affairs -
EtherRAT Malware Hijacks Ethereum Blockchain for Covert C2 After React2Shell Exploit
EtherRAT is a new malware strain described by security researchers as a persistent implant that hijacks the Ethereum blockchain to receive its command-and-control instructions, rather than connecting to a conventional server. The researchers, according to…
SecurityOnline -
Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two Zero-Days
Microsoft closed out 2025 with patches for 56 security flaws across the Windows platform, including one vulnerability that has been actively exploited in the wild. Of the 56 flaws, three are rated Critical and 53 are rated Important, with two listed as…
The Hacker News -
Microsoft Patch Tuesday security updates for December 2025 fixed an actively exploited zero-day
Microsoft’s December 2025 Patch Tuesday fixed 57 vulnerabilities across Windows and its components, Office, Edge, Exchange Server, Azure, Copilot, PowerShell and Windows Defender, with three rated Critical and the remainder Important. One flaw,…
Security Affairs -
Intel, AMD Processors Affected by PCIe Vulnerabilities
SecurityWeek reports that three recently discovered PCI Express vulnerabilities, tracked as CVE-2025-9612, CVE-2025-9613, and CVE-2025-9614, affect PCIe IDE and were identified by Intel employees. PCIe IDE uses AES-GCM encryption to protect data between PCIe…
SecurityWeek -
Fortinet, Ivanti, and SAP Issue Urgent Patches for Authentication and Code Execution Flaws
According to Fortinet, Ivanti, and SAP, they have moved to address critical security flaws in their products that could allow authentication bypass and remote code execution. The Fortinet flaws affect FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager and…
The Hacker News -
Slack CEO Denise Dresser Joins OpenAI as CRO to Solve the Profitability Puzzle
OpenAI has announced the recruitment of Denise Dresser, the current CEO of Slack, to join the company as its new Chief Revenue Officer (CRO) to oversee revenue strategies across enterprise markets and customer success. The move is framed as part of OpenAI’s…
SecurityOnline
