News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Thu 11 Dec 2025· 56 articles
-
Critical Gogs zero-day under attack, 700 servers hacked
Hackers exploited an unpatched Gogs zero-day, tracked as CVE-2025-8110, to achieve remote code execution and compromise around 700 Internet-facing servers. Wiz researchers identified the flaw as a path-traversal issue in the PutContents API, enabling…
Security Affairs -
GeminiJack zero-click flaw in Gemini Enterprise allowed corporate data exfiltration
GeminiJack is a zero-click flaw in Gemini Enterprise that could leak corporate data via crafted emails, invites or documents, according to Noma Security. Google fixed the vulnerability after the researchers reported it. Gemini Enterprise is Google’s…
Security Affairs -
Attackers Exploited Gogs Zero-Day Flaw for Months
A vulnerability in the self-hosted Git service Gogs is being actively exploited with no patch available, according to Wiz. Wiz disclosed CVE-2025-8110 on 10 December, describing it as a bypass for the remote code execution flaw CVE-2024-55947 that was…
Dark Reading -
Google fixed a new actively exploited Chrome zero-day
Google fixed a new actively exploited Chrome zero-day, and Google released security updates to address three Chrome vulnerabilities, including a high-severity flaw that threat actors are already exploiting in the wild, according to Google. The high-severity…
Security Affairs -
Village of Golf Manor considering paying ransom amid cyberattack
The village of Golf Manor will consider paying a $10,000 ransom to unlock computer systems affected by a ransomware attack that infiltrated and encrypted the village’s systems, rendering them inaccessible to administrators. The attackers have demanded…
DataBreaches -
StepSecurity Is Now Available on Azure Marketplace
StepSecurity is now available on the Azure Marketplace, with the StepSecurity App joining its existing presence on the AWS Marketplace to offer another convenient procurement channel. Jake Karger notes that this makes it easier for organisations to procure…
StepSecurity -
Imposter for hire: How fake people can gain very real access
In the latest edition of our Cyberattack Series, Microsoft Incident Response describes a real-world case where four compromised user accounts connected PiKVM devices to employer workstations, enabling remote control as if the attacker were onsite.…
Microsoft -
DroidLock malware locks you out of your Android device and demands ransom
DroidLock is a new Android malware campaign that takes over a device and holds it for ransom, with early activity centred on Spanish-speaking users. It arrives via phishing sites that convince victims to install a dropper masquerading as a telecom provider…
Malwarebytes -
React2Shell and related RSC vulnerabilities threat brief: early exploitation activity and threat actor techniques
According to Cloudflare, the React2Shell vulnerability (CVE-2025-55182) was disclosed on 3 December 2025 and prompted immediate monitoring as soon as the public details emerged. Early activity showed rapid exploitation attempts and scanning from…
Cloudflare -
Virtual Event Today: Cyber AI & Automation Summit Day 2
Day two of SecurityWeek’s Cyber AI & Automation Summit kicks off today at 11AM ET, with Day One sessions already available on-demand for those who missed yesterday. according to SecurityWeek News, the event runs as a two‑day virtual summit exploring the hype…
SecurityWeek -
AI in OT Sparks Cascade of Complex Challenges
According to Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency, and the Australian Signals Directorate's Australian Cyber Security Centre, a joint government advisory sets out four key principles for OT owners and…
Dark Reading -
Former Accenture Employee Charged Over Cybersecurity Fraud
According to the Justice Department, Danielle Hillmer, 53, a former senior manager at a government contractor, has been charged over lying about a product’s compliance with Department of Defense requirements. The indictment alleges she concealed that her…
SecurityWeek -
1inch Named Exclusive Swap Provider at Launch for Ledger Multisig
Road Town, British Virgin Islands, 11 December 2025, according to CyberNewsWire, 1inch has been selected as the exclusive swap provider at launch for Ledger Multisig. By integrating the 1inch Swap API into its security-first multisig architecture, Ledger…
SecurityOnline -
MITRE Posts Results of 2025 ATT&CK Enterprise Evaluations
According to MITRE, MITRE has published the results of the 2025 ATT&CK Evaluations for enterprise cybersecurity solutions, with eleven companies taking part: Acronis, AhnLab, CrowdStrike, Cyberani, Cybereason, Cynet, ESET, Sophos, Trend Micro, WatchGuard,…
SecurityWeek -
Malwarebytes for Mac now has smarter, deeper scans
Malwarebytes has upgraded its Mac protection, delivering smarter, deeper scans that think faster and search more of the system to hunt down threats such as infostealers and zero-hour malware, while preserving the familiar user experience. The update…
Malwarebytes -
ThreatsDay Bulletin: Spyware Alerts, Mirai Strikes, Docker Leaks, ValleyRAT Rootkit — and 20 More Stories
ThreatsDay’s weekly bulletin rounds up a broad mix of threats, from Apple and Google issuing new spyware alerts to Mirai botnet activity and widespread software flaws. A Reuters report notes that Apple and Google sent new spyware notifications to users in…
The Hacker News -
Top 10 Cybercrime Law Enforcement Operations of 2025
The Top 10 Cybercrime Law Enforcement Operations of 2025 detail a year of coordinated takedowns across ransomware, fraud networks and malware services, with dates spanning January to December. Among the highlights, Operation Talent (28–30 January 2025) shut…
SOCRadar -
NANOREMOTE Malware Uses Google Drive API for Hidden Control on Windows Systems
NANOREMOTE is a new Windows backdoor disclosed by Elastic Security Labs that uses the Google Drive API for its command-and-control channel, a design described as a data theft and payload‑staging conduit that is hard to detect. The malware, written in C++,…
The Hacker News -
Pierce County Library Data Breach Impacts 340,000
Pierce County Library System (PCLS) has notified over 340,000 people that their personal information was compromised in a data breach, with the incident spanning 15–21 April 2025 as threat actors accessed the network and stole data. The library says the…
SecurityWeek -
INE Highlights Enterprise Shift Toward Hands-On Training Amid Widening Skills Gaps
Cary, North Carolina, USA, 11 December 2025 — as AI accelerates job transformation, INE is highlighting a rapid enterprise shift towards experiential, hands-on training to address widening skills gaps. The release notes that 90% of organisations face…
SecurityOnline -
Wide Range of Malware Delivered in React2Shell Attacks
SecurityWeek reports a broad spectrum of malware delivered through React2Shell attacks, exploiting the critical CVE-2025-55182 vulnerability in React 19 with server components. The threats range from cryptocurrency miners and cloud-credential theft to…
SecurityWeek -
Unpatched Gogs Zero-Day Exploited for Months
More than 700 Gogs instances have been compromised via an unpatched zero-day vulnerability in the self-hosted Git service, according to SecurityWeek. The flaw, tracked as CVE-2025-8110, allows authenticated attackers to overwrite files outside the repository…
SecurityWeek -
Hunting for Mythic in network traffic
Hunting for Mythic in network traffic explains how threat actors use Mythic, a post-exploitation framework, and how network detection can identify its activity across several protocols. The piece notes Mythic supports HTTP/S, WebSocket, TCP, SMB, DNS, and…
securelist.com -
Another Chrome zero-day under attack: Update now
Google issued an extra patch for a security vulnerability in Chrome that is being actively exploited, urging users to update. The patch fixes two flaws in Chrome’s V8 engine, and for one of them Google says an exploit already exists in the wild. Both issues…
Malwarebytes -
The Impact of Robotic Process Automation (RPA) on Identity and Access Management
11 December 2025. The Hacker News notes that as organisations refine their handling of Non-Human Identities (NHIs), Robotic Process Automation (RPA) has become a powerful tool for streamlining operations and enhancing security, but bots with varying access…
The Hacker News -
WIRTE2 articles this day · The Hacker News first
Hamas-Affiliated Ashen Lepus Targets Middle Eastern Diplomatic Entities With New AshTag Malware Suite · WIRTE Leverages AshenLoader Sideloading to Install the AshTag Espionage Backdoor
2 outlets-
Hamas-Affiliated Ashen Lepus Targets Middle Eastern Diplomatic Entities With New AshTag Malware Suite
Unit 42 reports that Ashen Lepus, a Hamas-affiliated threat group, is targeting Middle Eastern diplomatic entities with a new malware suite named AshTag. The campaign features a multi-stage infection chain starting with a decoy PDF that leads to a RAR…
unit42.paloaltonetworks.com -
WIRTE Leverages AshenLoader Sideloading to Install the AshTag Espionage Backdoor
WIRTE, a threat actor described as an advanced persistent threat, has been linked to attacks on government and diplomatic entities in the Middle East, using a previously undocumented malware suite called AshTag. According to Palo Alto Networks, the activity…
The Hacker News
-
-
Unpatched Gogs Zero-Day Exploited Across 700+ Instances Amid Active Attacks
A high-severity unpatched vulnerability in Gogs is under active exploitation, with more than 700 compromised instances exposed on the internet and around 1,400 exposed in total, according to Wiz’s findings. The flaw, tracked as CVE-2025-8110, has a CVSS…
The Hacker News -
IBM Patches Over 100 Vulnerabilities
IBM this week announced fixes for more than 100 vulnerabilities across its products, most of them in third‑party dependencies, with the emphasis on critical-severity defects. According to IBM’s security bulletins page, Storage Defender received patches for…
SecurityWeek -
Copilot's No-Code AI Agents Liable to Leak Company Data
Copilot’s No-Code AI Agents Liable to Leak Company Data highlights how easy it is to loosen sensitive information from Microsoft Copilot-powered bots. A new Tenable report demonstrates in a simple experiment that an agent can be coaxed into spilling private…
Dark Reading -
Pro-Russia Hacktivist Support: Ukrainian Faces US Charges
Ukrainian Victoria Dubranova, 33, has been charged in the US for allegedly aiding pro-Russia hacktivist groups Cyber Army of Russia Reborn (CARR) and NoName057(16) in cyberattacks against critical infrastructure worldwide. She was extradited to the US and…
Security AffairsCyber Army of Russia Reborn -
Google Patches Mysterious Chrome Zero-Day Exploited in the Wild
Google has released a security update for its Chrome browser to address a zero-day vulnerability that is actively being exploited in the wild. The flaw does not yet have a CVE identifier, and it is unclear who reported it or which browser component it…
SecurityWeek -
It didn’t take long: CVE-2025-55182 is now under active exploitation
On 4 December 2025, researchers published details on the critical vulnerability CVE-2025-55182, which received a CVSS score of 10.0 and is unofficially dubbed React4Shell for its impact on React Server Components. Almost immediately after the exploit was…
securelist.com -
Chrome Targeted by Active In-the-Wild Exploit Tied to Undisclosed High-Severity Flaw
Chrome maker Google has shipped security updates for its browser to fix three flaws, including one that is already under active exploitation in the wild. The vulnerability is being tracked under the Chromium issue tracker ID 466192044, with Google saying…
The Hacker News -
Active Attacks Exploit Gladinet's Hard-Coded Keys for Unauthorized Access and Code Execution
Huntress warns of an actively exploited vulnerability in Gladinet’s CentreStack and Triofox products that stems from hard-coded cryptographic keys used to encrypt access tickets, which could allow threat actors to decrypt or forge tickets and access…
The Hacker News -
Urgent Patch: Notepad++ WinGUp Flaw Allowed Malware to Hijack Updates
News of urgency surrounds Notepad++ after a WinGUp flaw allowed malware to hijack updates, with SecurityOnline[.]info noting that researchers uncovered the vulnerability which, in certain regions, could redirect the update process and deliver a tampered…
SecurityOnline -
16-Year Battle Ends: Intel Loses Appeal, Must Pay €237 Million EU Fine
In a case spanning sixteen years, Intel has again suffered a setback as a European court upheld the European Commission’s finding of wrongdoing and reduced the fine from €376 million to €237 million, according to Reuters. The ruling centres on “naked…
SecurityOnline -
Qualcomm Buys Ventana to Double Down on RISC-V and Custom Oryon CPU
On 11 December 2025, Qualcomm announced its acquisition of Ventana Micro Systems to strengthen its CPU engineering capabilities by integrating Ventana’s expertise in developing RISC-V instruction set architecture. The deal will complement Qualcomm’s ongoing…
SecurityOnline -
You’re In Control: Instagram Launches “Your Algorithm” Feature for Reels
Instagram has announced a new feature called “Your Algorithm,” giving users direct visibility into and control over the topics shaping their Reels recommendations. The feature will initially roll out on the Reels page, with plans to expand to Explore and…
SecurityOnline -
EU’s Green Mandate: Parliament Pledges 90% Emissions Cut by 2040
The European Parliament has announced a provisional agreement to cut greenhouse gas emissions by 90 percent by 2040, using 1990 levels as the baseline, a target pitched as surpassing major economies and driving Europe towards climate neutrality by 2050. To…
SecurityOnline
