News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Mon 15 Dec 2025· 51 articles
-
How Cyber Insurance MGAs Shape Policies for Evolving Cyber Risks
According to Diana Kelley, a CISO at Noma Security, cyber risk is well suited to the MGA model because risk evolves quickly and requires deep technical evaluation to understand exposure. MGAs write and administer policies on behalf of insurers, acting as…
Dark Reading -
Apple Patches More Zero-Days Used in 'Sophisticated' Attack
Apple has issued patches for two WebKit zero-days disclosed this month, with one sharing a CVE with a Google vulnerability reported last week. The flaws are CVE-2025-43529, a use-after-free that could lead to arbitrary code execution, and CVE-2025-14174, a…
Dark Reading -
Microsoft will finally kill obsolete cipher that has wreaked decades of havoc
Microsoft is finally phasing out RC4, the obsolete cipher that Windows has defaulted to in Active Directory for 26 years and which has long been linked to high-profile network compromises. The article notes that RC4 was central to securing the Windows…
Ars Technica -
Think Like an Attacker: Cybersecurity Tips From Cato Networks' CISO
Etay Mayor, chief security strategist at Cato Networks and a Boston College professor, shares his journey and advice for entering and advancing in cybersecurity in Dark Reading’s Think Like an Attacker feature. He notes that cybersecurity is a multifaceted…
Dark Reading -
Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components
CVE-2025-55182, also known as React2Shell, is a critical pre-authentication remote code execution vulnerability affecting React Server Components, Next[.]js and related frameworks, with a CVSS score of 10.0. Exploitation activity was detected as early as…
Microsoft -
U.S. CISA adds Apple and Gladinet CentreStack and Triofox flaws to its Known Exploited Vulnerabilities catalog
According to U.S. Cybersecurity and Infrastructure Security Agency (CISA), Apple and Gladinet CentreStack and Triofox flaws have been added to the Known Exploited Vulnerabilities catalog. The new entries are CVE-2025-43529, a Apple Multiple Products…
Security Affairs -
Microsoft named an overall leader in KuppingerCole Leadership Compass for Generative AI Defense
According to KuppingerCole Leadership Compass for Generative AI Defense (GAD), Microsoft has been named an overall leader in the independent report. The evaluation places Microsoft as the top Overall Leader, with other vendors such as Palo Alto Networks,…
techcommunity.microsoft.com -
Featured Chrome Browser Extension Caught Intercepting Millions of Users' AI Chats
A Google Chrome extension named Urban VPN Proxy, marketed as free VPN access with the “best secured” promise, has been observed silently harvesting conversations from users’ AI chats across platforms including OpenAI ChatGPT and Google Gemini, with about six…
The Hacker News -
Militant Groups Are Experimenting With AI, and the Risks Are Expected to Grow
Militant groups are experimenting with AI, with officials warning that the risks will grow as the technology becomes cheaper and more powerful. AI can help them pump out propaganda or deepfakes at scale, aiding recruitment and spreading disinformation across…
SecurityWeek -
Detecting Adversary-in-the-Middle Attacks and Phishing with Darktrace
Darktrace reports a real-world AiTM attack detected during a customer trial of Darktrace / EMAIL and Darktrace / IDENTITY that compromised an Office 365 account via a business email compromise phishing email. The incident unfolded as the compromised account…
darktrace.com -
Pig butchering is the next “humanitarian global crisis” (Lock and Code S06E25)
Pig butchering is described as a growing online investment scam that has ruined lives across the world, with the term used to describe scammers fattening up victims before slaughter. The feature on Lock and Code S06E25 frames it as the world’s worst scam,…
Malwarebytes -
Flaw in Hacktivist Ransomware Lets Victims Decrypt Own Files
A new version of VolkLocker, the ransomware‑as‑a‑service offering of CyberVolk, has surfaced with enhancements but a fatal flaw that could let victims decrypt their own files, according to SentinelOne. The pro‑Russia hacktivist group is described as…
Dark Reading -
Atlassian fixed maximum severity flaw CVE-2025-66516 in Apache Tika
Atlassian has released security updates addressing a maximum-severity flaw in Apache Tika, tracked as CVE-2025-66516, which carries a CVSS score of 10.0. The vulnerability enables an XML External Entity (XXE) injection by processing a crafted XFA file inside…
Security Affairs -
FreePBX Patches Critical SQLi, File-Upload, and AUTHTYPE Bypass Flaws Enabling RCE
FreePBX has been patched after Horizon3[.]ai disclosed multiple critical flaws that could allow remote code execution, including an authentication bypass when AUTHTYPE is set to webserver. The vulnerabilities span an authenticated SQL injection…
The Hacker News -
ChatGPT's rivals, Kwai's quiet rise: the top Internet services of 2025
According to Cloudflare Radar Year in Review, Google remained the most popular Internet service globally in 2025, with Facebook and Instagram also featuring in the top ranks across various categories. The report highlights a notable rise for Kwai in emerging…
Cloudflare -
The 2025 Cloudflare Radar Year in Review: The rise of AI, post-quantum, and record-breaking DDoS attacks
The 2025 Cloudflare Radar Year in Review notes that global Internet traffic grew by 19% in 2025, with growth accelerating from August onwards. The report highlights Starlink traffic doubling in 2025, with growth in more than 20 new countries/regions, and…
Cloudflare -
Google Sees 5 Chinese Groups Exploiting React2Shell for Malware Delivery
Google has detected five China-linked threat groups exploiting the recently disclosed React2Shell vulnerability (CVE-2025-55182) to deliver malware, in attacks that began after the disclosure on 3 December 2025. The groups include the espionage cluster…
SecurityWeek -
PayPal closes loophole that let scammers send real emails with fake purchase notices
PayPal closed a loophole that allowed scammers to send real emails from the legitimate service@paypal[.]com address with fake purchase notices, following an investigation by BleepingComputer. The scam involved criminals pausing a PayPal subscription to…
Malwarebytes -
DDoSia Campaign Targeting Belgium: Weekly DDoS Threat Intelligence Analysis
Between 8 and 14 December 2025, SOCRadar identified a coordinated DDoS campaign conducted by the pro-Russian threat actor NoName057(16), with 4,435 recorded attack entries across 155 unique domains and 144 unique IP addresses in 15+ countries. The activity…
SOCRadar -
⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & More
According to The Hacker News, the weekly recap highlights that Apple and Google have released fixes for two actively exploited zero-days, CVE-2025-14174 and CVE-2025-43529, with Apple noting a memory corruption issue and a use-after-free bug that can be…
The Hacker News -
ANNOUNCE: A new resource to help small and mid-sized HIPAA-regulated entities
DataBreaches[.]net highlights a new consultancy, North Country Communications, LLC (NCC), aimed at helping small and mid-sized HIPAA-regulated entities meet privacy, security and breach notification requirements. NCC is led by Rachel Klugman Seeger, with…
DataBreaches -
A Browser Extension Risk Guide After the ShadyPanda Campaign
In early December 2025, security researchers exposed a cybercrime campaign called ShadyPanda that quietly hijacked popular Chrome and Edge browser extensions on a massive scale. A threat group spent seven years building trust by publishing or acquiring…
The Hacker NewsShadyPanda -
Soverli Raises $2.6 Million for Secure Smartphone OS
Soverli, an ETH Zurich spin-off based in Zurich, Switzerland, announced that it has raised $2.6 million in a pre-seed funding round led by Founderful, with additional support from the ETH Zurich Foundation, Venture Kick, and angel investors. The sovereign…
SecurityWeek -
U.S. fintech and data services firm 700Credit suffered a data breach impacting at least 5.6 million people
According to Security Affairs, a data breach at U.S. fintech and data services company 700Credit exposed the names, addresses, dates of birth, and Social Security numbers of at least 5.6 million people. The Michigan-based firm disclosed an October breach…
Security Affairs -
Atlassian Patches Critical Apache Tika Flaw
Atlassian has rolled out patches for roughly 30 third‑party vulnerabilities across Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, Jira and Jira Service Management, with the standout fix addressing CVE-2025-66516, a critical XXE flaw in Apache Tika…
SecurityWeek -
Third DraftKings Hacker Pleads Guilty
Nathan Austad, 21, of Farmington, Minnesota, also known as “Snoopy”, admitted in court to launching a credential stuffing attack against a fantasy sports and betting website, according to the DoJ announced by SecurityWeek. He pleaded guilty to computer…
SecurityWeek -
CERT-FR recommends completely deactivate Wi-Fi whenever it’s not in use
According to CERT-FR, the French Computer Emergency Response Team, iPhone and Android users should fully disable Wi‑Fi to reduce exposure to multiple vulnerabilities across wireless interfaces, apps, operating systems and even hardware. The advisory…
Security Affairs -
Rolladen Planet Data Sale, Windows 0-Day, and New macOS RAT Detected
SOCRadar’s Dark Web Team has identified multiple new underground listings this week, including a customer database sale linked to Rolladen Planet, a German retailer, alongside new tools for Windows and macOS and a modular macOS Remote Access Trojan. The…
SOCRadar -
Phantom Stealer Spread by ISO Phishing Emails Hitting Russian Finance Sector
Cybersecurity researchers have disclosed an active phishing campaign targeting a wide range of sectors in Russia with phishing emails that deliver Phantom Stealer via malicious ISO optical disc images. The activity, codenamed Operation MoneyMount-ISO by…
The Hacker News -
700Credit Data Breach Impacts 5.8 Million Individuals
700Credit has disclosed a data breach affecting 5,836,521 individuals, with personal information such as names, addresses, dates of birth, and Social Security numbers exposed. The intrusion was identified on 25 October, and involved a compromised third-party…
SecurityWeek -
Apple Patches Two Zero-Days Tied to Mysterious Exploited Chrome Flaw
Apple has released macOS and iOS updates to patch two WebKit zero-days that Apple says were exploited in an extremely sophisticated targeted attack. The flaws are CVE-2025-14174, described as a memory corruption issue, and CVE-2025-43529, a use-after-free…
SecurityWeek -
A week in security (December 8 – December 14)
A week in security (December 8 – December 14) compiled by Malwarebytes Labs, dated 15 December 2025, surveys a range of cyber threats and privacy concerns from the past week. According to Malwarebytes Labs, topics include the US digital doxxing of H-1B…
Malwarebytes -
Frogblight threatens you with a court case: a new Android banker targets Turkish users
According to Securelist, Frogblight is a new Android banking Trojan that was first observed in August 2025, targeting individuals in Turkey. It initially masqueraded as an app for accessing court case files via an official government webpage, with later…
securelist.com -
VolkLocker Ransomware Exposed by Hard-Coded Master Key Allowing Free Decryption
The Hacker News reports that VolkLocker, a ransomware offering linked to the pro-Russian hacktivist group CyberVolk (also known as GLORIAMIST), was found to suffer from hard-coded master keys, enabling free decryption. According to SentinelOne, VolkLocker…
The Hacker News -
Windows 11 Gaming Guide: Microsoft’s Recommended PC Specs for 1080p to 4K
According to a recent Microsoft support document published on 15 December 2025, Windows 11 gaming PCs can be optimised across entry-level to 4K setups to deliver a smoother, more immersive experience. The guidance mirrors typical game studio requirements and…
SecurityOnline -
Reader Freedom: Amazon Returns DRM Control to Publishers for EPUB/PDF Downloads
According to the Kindle Direct Publishing (KDP) guidelines, starting 20 January 2026, control over DRM settings will be returned to publishers and authors, enabling readers who purchase a title to download unencrypted EPUB or PDF files directly with a…
SecurityOnline -
Catching Apple: Google Overhauls Health Connect to Track Alcohol & Medical Symptoms
Google is expanding Health Connect to narrow the gap with Apple’s Health app, adding more granular data-tracking capabilities for alcohol consumption and medical symptoms, according to Android Authority. In the redesigned interface, the settings have been…
SecurityOnline -
Human-Like AI: Google Translate Gets Gemini Upgrade for Slang & Tone Preservation
Google has announced a Gemini-powered upgrade for Translate that aims to make translations feel more distinctly human by better interpreting slang and idiomatic expressions, while adding real-time translation for headphone users that preserves the speaker’s…
SecurityOnline -
The End of an Era? Samsung Rumored to Discontinue All SATA SSD Production
According to Moore’s Law Is Dead, Samsung is preparing to gradually wind down its SATA-based solid-state drive business, with a formal announcement expected in January 2026 while existing contracts are honoured in full. The tip-offs come from multiple…
SecurityOnline -
NVIDIA Merlin Flaws Risk AI Pipeline RCE via Unsafe Deserialization in NVTabular & Transformers4Rec
NVIDIA has issued a security update for its Merlin framework, patching high-severity vulnerabilities in NVTabular and Transformers4Rec that could allow code execution, denial of service, information disclosure, or data tampering. The flaws stem from unsafe…
SecurityOnline
