News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Fri 12 Dec 2025· 50 articles
-
Doxers Posing as Cops Are Tricking Big Tech Firms Into Sharing People’s Private Data
Doxers posing as cops are tricking big tech firms into sharing private data, with one incident described by privacy specialists at the legal response operations centre of Charter Communications. According to the report, an emergency data request was sent on…
DataBreaches -
Notepad++ fixed updater bugs that allowed malicious update hijacking
Notepad++ addressed an updater vulnerability that allowed attackers to hijack update traffic by exploiting weak authentication of update files in earlier versions. The issue came to light after security researcher Kevin Beaumont reported incidents affecting…
Security Affairs -
Virginia Urology Silent on Possible Data Breach as Purported Patient Data Begins to Leak
Virginia Urology, a seven-site practice in Richmond, Virginia, remains silent about a possible data breach after threat actors calling themselves MS13-089 claimed they hacked the organisation on 9 November and exfiltrated 927 GB of data. DataBreaches[.]net…
DataBreaches -
The CISO-COO Partnership: Protecting Operational Excellence
Digital transformation has made cybersecurity preparation part of operational resilience, prompting CISOs and COOs to forge a purposeful partnership rather than work in parallel. The piece argues that downtime from cyberattacks is an existential operational…
Dark Reading -
React2Shell Exploits Flood the Internet as Attacks Continue
A torrent of PoC exploits for React2Shell followed the vulnerability’s disclosure, with Trend Micro researchers identifying about 145 public exploits, though most did not trigger the flaw. CVE-2025-55182 was disclosed on 3 December 2025, carrying a maximum…
Dark Reading -
Vibe Coding: Innovation Demands Vigilance
The article argues that the hype around AI in software development is undeniable, with vibe coding—using natural language and AI to generate and refine code—gaining rapid traction and promising speed and prototyping advantages. However, it cautions that this…
Dark Reading -
Microsoft Will Bundle Security Copilot with M365 Enterprise Licenses
At the recent Microsoft Ignite conference in San Francisco, Microsoft unveiled plans to automatically offer Security Copilot for enterprise customers, bundling it with the M365 E5 licenses and starting immediately for organisations already on that plan, with…
Dark Reading -
Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads
According to The Hacker News, cybersecurity researchers are warning about a GitHub-based campaign that distributes a previously undocumented JavaScript-based Remote Access Trojan called PyStoreRAT via Python repositories masquerading as OSINT tools and other…
The Hacker News -
Supply Chain Attacks Targeting GitHub Actions Increased in 2025
Supply Chain Attacks Targeting GitHub Actions Increased in 2025, with researchers highlighting that threat actors have exploited vulnerabilities in GitHub by compromising open-source packages and misconfigured GitHub Actions to access secrets. At Black Hat…
Dark Reading -
The US digital doxxing of H-1B applicants is a massive privacy misstep
The US is requiring skilled workers on H-1B visas and their families to set all social media profiles to public before their consular interviews, starting 15 December 2025, a move Malwarebytes calls a massive privacy misstep. According to the US State…
Malwarebytes -
In Other News: PromptPwnd Attack, Small macOS Bounties, Chinese Hackers Trained in Cisco Academy
Aikido Security has uncovered a new prompt injection attack method dubbed PromptPwnd, which leverages GitHub Actions and AI agents by embedding malicious prompts into issue bodies, commit messages and PR descriptions that AI systems such as Gemini CLI,…
SecurityWeek -
Critical React2Shell Vulnerability (CVE-2025-55182) Analysis: Surge in Attacks Targeting RSC-Enabled Services Worldwide
In December 2025, CVE-2025-55182 (React2Shell) was publicly disclosed as a vulnerability in React Server Components that enables remote code execution without authentication. The flaw stems from a validation weakness in the deserialization of the Flight…
SecurityOnline -
Google ads funnel Mac users to poisoned AI chats that spread the AMOS infostealer
Researchers have found evidence that Google search results for Mac users were contaminated with poisoned AI conversations used to spread the AMOS macOS infostealer. The infection chain begins when a user runs a query such as “clear disk space on macOS,”…
Malwarebytes -
New Advanced Phishing Kits Use AI and MFA Bypass Tactics to Steal Credentials at Scale
Cybersecurity researchers have documented four new phishing kits—BlackForce, GhostFrame, InboxPrime AI, and Spiderman—that enable credential theft at scale. BlackForce, first detected in August 2025, can bypass MFA and OTP prompts via Man-in-the-Browser…
The Hacker News -
Are Trade Concerns Trumping US Cybersecurity?
The piece argues that US trade concerns are shaping cybersecurity policy, noting that sanctions against China’s Ministry of State Security over Salt Typhoon may have been dropped in favour of ongoing negotiations, a point linked to reports about Nvidia’s…
Dark Reading -
Multiple Threat Actors Exploit React2Shell (CVE-2025-55182)
Written by: Aragorn Tseng, Robert Weiner, Casey Charrier, Zander Work, Genevieve Stark, Austin Larsen Introduction On Dec. 3, 2025, a critical unauthenticated remote code execution (RCE) vulnerability in React Server Components, tracked as CVE-2025-55182…
Google Cloud -
Gladinet CentreStack Flaw Exploited to Hack Organizations
SecurityWeek reports that Huntress warns of attacks on Gladinet CentreStack instances, with nine organisations affected as of 10 December, across sectors from healthcare to technology. The exploitation targets an insecure cryptography flaw in CentreStack’s…
SecurityWeek -
Fieldtex Data Breach Impacts 238,000
Fieldtex Products, a US contract sewing and medical supply fulfilment firm, disclosed a data security incident after it was targeted by the Akira ransomware group. The attackers claimed to have stolen more than 14 Gb of data and listed Fieldtex’s E-First Aid…
SecurityWeek -
Recent GeoServer Vulnerability Exploited in Attacks
According to SecurityWeek, a recent OSGeo GeoServer vulnerability, tracked as CVE-2025-58360 with a CVSS of 9.8, is an XML External Entity issue that could allow attackers to access arbitrary files, conduct SSRF, or cause DoS. The flaw centres on…
SecurityWeek -
Google Chrome Zero-Day Actively Exploited via ANGLE Graphics Component
Google has released a Stable Channel update for Chrome on 10 December 2025, with new versions for Windows, macOS, and Linux that fixes three security vulnerabilities, one of which has been confirmed as actively exploited in the wild. According to Google, the…
SOCRadar -
MITRE Releases 2025 List of Top 25 Most Dangerous Software Vulnerabilities
MITRE has released the 2025 CWE Top 25 list, with cross-site scripting (XSS) remaining the top software weakness, followed by SQL injection and cross-site request forgery (CSRF). The update notes six new entries this year, including four CWEs that were not…
SecurityWeek -
Elastic detects stealthy NANOREMOTE malware using Google Drive as C2
Elastic Security Labs researchers uncovered NANOREMOTE, a new Windows backdoor that uses the Google Drive API for C2, and they note it shares code with the FINALDRAFT (Squidoor) implant linked to threat group REF7707. According to Elastic, one of the…
Security Affairs -
Microsoft Bug Bounty Program Expanded to Third-Party Code
Microsoft has expanded its bug bounty programme to cover third‑party and open source code, with rewards available for any critical vulnerability that impacts Microsoft services. All critical vulnerabilities in Microsoft, third‑party, and open source code are…
SecurityWeek -
Notepad++ Patches Updater Flaw After Reports of Traffic Hijacking
Notepad++ has patched a flaw in how its updater authenticates update files, after reports that traffic from the updater could be redirected to malicious servers. The vulnerability affected the WinGUp component, with security updates failing to execute if the…
SecurityWeek -
How private is your VPN?
VPN privacy hinges on more than flashy marketing wording, and the article argues that true privacy comes from how a provider designs and operates its service. It explains that a privacy-first VPN should collect as little data as possible, enforce a real…
Malwarebytes -
Securing GenAI in the Browser: Policy, Isolation, and Data Controls That Actually Work
The Hacker News reports that the browser has become the main interface for GenAI in many enterprises, with employees using web-based LLMs, copilots, and extensions that can involve copying sensitive data into prompts or uploading files. A practical GenAI…
The Hacker News -
Following the digital trail: what happens to data stolen in a phishing attack
Phishing data becomes a commodity almost immediately after capture, with the article noting that 88.5% of attacks aim to steal credentials for online accounts, 9.5% target personal data, and 2% seek banking details. Data harvested via phishing pages is…
securelist.com -
U.S. CISA adds an OSGeo GeoServer flaw to its Known Exploited Vulnerabilities catalog
According to Security Affairs, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added an OSGeo GeoServer flaw, tracked as CVE-2025-58360, to its Known Exploited Vulnerabilities catalog with a CVSS score of 8.2. The flaw exists in…
Security Affairs -
New React RSC Vulnerabilities Enable DoS and Source Code Exposure
The React team has released fixes for two new flaws in React Server Components (RSC) that could cause denial-of-service and expose source code, if exploited. The vulnerabilities are CVE-2025-55184 (CVSS 7.5), CVE-2025-67779 (CVSS 7.5) and CVE-2025-55183…
The Hacker News -
React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency Mitigation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has urged federal agencies to patch the React2Shell vulnerability, CVE-2025-55182, by 12 December 2025 as exploitation spreads. The flaw, with a CVSS score of 10.0, affects the React Server…
The Hacker News -
Turn me on, turn me off: Zigbee assessment in industrial environments
According to Kaspersky, a Securelist piece published on 12 December 2025, the Zigbee protocol is examined through two realistic attack vectors in industrial deployments: spoofed packet injection and coordinator impersonation (rejoin attack). The analysis…
securelist.com -
$320,000 Paid Out at Zeroday.Cloud for Open Source Software Exploits
According to SecurityWeek, $320,000 was paid out at Zeroday[.]Cloud, the London hacking competition organised this week by cloud security giant Wiz, in partnership with AWS, Google Cloud and Microsoft. The event, part of Zeroday[.]Cloud’s $4.5 million prize…
SecurityWeek -
Hamas-Linked Hackers Probe Middle Eastern Diplomats
Hamas-affiliated hackers have been conducting espionage across the Middle East, with Unit 42 researchers noting that the group has evolved from simple tools to a fully formed malware suite. According to Palo Alto Networks’ Unit 42, the threat group is…
Dark Reading -
CISA Flags Actively Exploited GeoServer XXE Flaw in Updated KEV Catalog
According to CISA, the U.S. Cybersecurity and Infrastructure Security Agency, GeoServer has been added to the Known Exploited Vulnerabilities (KEV) catalog after evidence of active exploitation in the wild. The flaw is CVE-2025-58360, an unauthenticated XML…
The Hacker News -
OpenAI Fights Back: GPT-5.2 Unveiled to Rival Google’s Gemini 3 Pro
OpenAI unveiled GPT-5.2 on December 12, 2025, the model it says is its most capable yet for real‑world professional applications, developed to challenge Google’s Gemini 3 Pro, long-rumoured to be its flagship codenamed “Red Alert.” The release introduces…
SecurityOnline -
The IP Wall Falls: Disney Invests $1B in OpenAI to License 200+ Characters for AI
Disney has announced a landmark three-year collaboration with OpenAI, after investing USD 1 billion in OpenAI equity and receiving warrants to purchase additional shares in the future. The deal will allow OpenAI to incorporate more than 200 characters from…
SecurityOnline -
The AI Super-App Rises: Photoshop & Adobe Express Integrate into ChatGPT
OpenAI is expanding its bid for an “AI super-app” by integrating three Adobe tools—Photoshop, Acrobat, and Adobe Express—into the ChatGPT platform, following earlier links with Spotify and Canva. The integration, driven by OpenAI’s Model Context Protocol,…
SecurityOnline -
The “USB-C of AI” is Here: Google Launches Managed Servers for MCP Protocol
The article reports that after the Linux Foundation established the Agentic AI Foundation (AAIF) and designated the Model Context Protocol (MCP) as a core standard, Google has moved quickly to offer full MCP support and fully managed remote MCP servers.…
SecurityOnline -
YouTube TV’s New Subscription Bundles: Is Streaming Becoming Cable All Over Again?
YouTube TV is moving away from its single-price model to new subscription bundles called YouTube TV Plans, set to launch in early 2026. The redesign will let subscribers mix category-based bundles such as Sports, News, and Family & Entertainment to suit…
SecurityOnline -
Farewell, Tabs: Google’s Experimental Disco Browser Generates Web Apps with AI
Google’s experimental Disco browser, powered by the GenTab system running on Gemini 3 models, aims to reimagine web browsing by generating interactive web applications that assist users in completing tasks. Judging from current demonstrations, Disco’s most…
SecurityOnline
