News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Tue 16 Dec 2025· 51 articles
-
A cyber attack hit Petróleos de Venezuela (PDVSA) disrupting export operations
A cyber attack hit Petróleos de Venezuela (PDVSA) over the weekend, disrupting its export operations, according to Reuters. The company said the incident affected only its administrative systems and did not impact operations or oil output. PDVSA instructed…
Security Affairs -
The APT35 Dump Episode 4: Leaking The Backstage Pass To An Iranian Intelligence Operation
The APT35 Dump Episode 4 lays bare the bureaucratic machine behind Iran’s cyber operations, showing spreadsheets that log hosting providers, invoices, crypto receipts, and service IDs rather than spectacular exploits. The report describes a ledger-driven…
dti.domaintools.comAPT35 -
Venezuelan Oil Company Downplays Alleged US Cyberattack
PDVSA, Venezuela’s state-owned oil and natural gas company, downplayed the impact of what it described as a major cyberattack, blaming the US government but offering no evidence. In a statement, the company said the attack was a “despicable action…
Dark Reading -
Russia Hits Critical Orgs Via Misconfigured Edge Devices
Russian threat actors are conducting a multiyear campaign against critical organisations worldwide, with a notable focus on the energy sector and on organisations that rely on cloud-hosted network infrastructure. Between 2021 and 2025, the shift toward…
Dark Reading -
From Open Source to OpenAI: The Evolution of Third-Party Risk
From open source libraries to AI-powered coding assistants, the article notes that speed-driven development brings new third-party risks that threat actors are increasingly exploiting. It recalls the SolarWinds breach, a sophisticated supply-chain attack…
SecurityWeek -
SoundCloud, Pornhub, and 700Credit all reported data breaches, but the similarities end there
The Malwarebytes piece compares SoundCloud, Pornhub and 700Credit breaches, stressing how each incident differed in impact and method. 700Credit disclosed a late October 2025 third‑party supply‑chain attack that exposed names, addresses, dates of birth and…
Malwarebytes -
Compromised IAM Credentials Power a Large AWS Crypto Mining Campaign
An ongoing AWS crypto mining campaign has been observed using compromised Identity and Access Management credentials to fuel mining across ECS and EC2 resources. Detected on 2 November 2025 by Amazon’s GuardDuty, the operation quickly enumerates permissions…
The Hacker News -
Browser Extension Harvests 8M Users' AI Chatbot Data
Researchers at Koi Security have found that Urban VPN Proxy, a Chrome and Edge extension, harvests data from conversations with eight AI chatbots including ChatGPT, Claude, Gemini, Microsoft Copilot, Perplexity, DeepSeek, Grok (xAI) and Meta AI. The…
Dark Reading -
Hackers are exploiting critical Fortinet flaws days after patch release
Threat actors are exploiting two critical Fortinet flaws, tracked as CVE-2025-59718 and CVE-2025-59719, days after patch release, with attacks affecting FortiOS, FortiWeb, FortiProxy and FortiSwitchManager when FortiCloud SSO is enabled, according to Arctic…
Security Affairs -
Rogue NuGet Package Poses as Tracer.Fody, Steals Cryptocurrency Wallet Data
Cybersecurity researchers uncovered a malicious NuGet package named Tracer.Fody[.]NLog that typosquats and impersonates the Tracer[.]Fody library to slip in a cryptocurrency wallet stealer, the discovery noting it has remained on NuGet since February 26,…
The Hacker News -
Enterprises Gear Up for 2026’s IT Transformation
An IT infrastructure refresh is set for 2026, with predictions that AI adoption and hybrid cloud strategies will shape the approach to security and governance. According to IDC, organizations will increase IT spending by 10% in 2026, a pace described as one…
Dark Reading -
CISO Communities – Cybersecurity’s Secret Weapon
According to Kevin Townsend, CISO communities are closed, peer-led information exchanges that act as an advice centre, pressure valve, and safe haven from critical oversight, uniting CISOs across sectors and regions to share threats, experiences and vendor…
SecurityWeek -
700,000 Records Compromised in Askul Ransomware Attack
The SecurityWeek article reports that Askul, a Japanese e-commerce and logistics company, disclosed that a recent data breach from a ransomware attack compromised over 700,000 records, following an October incident in which files were encrypted after…
SecurityWeek -
Most Parked Domains Now Serving Malicious Content
Direct navigation has become riskier as a new study finds that the vast majority of parked domains now redirect visitors to scams, malware or other unwanted content. Infoblox researchers say that in large-scale experiments, over 90% of visits to a parked…
Krebs on Security -
Echo Raises $35 Million in Series A Funding
Echo today announced raising $35 million in a Series A funding round that brings the total raised by the company to $50 million, according to SecurityWeek. The round was led by N47, with additional support from Notable Capital, Hyperwise Ventures, and…
SecurityWeek -
Verisoul Raises $8.8 Million for Fraud Prevention
Verisoul, a fraud detection start‑up founded in 2022 in Austin, Texas, announced it has raised $8.8 million in a Series A round, bringing total funding to more than $12 million. according to SecurityWeek, the round was led by High Alpha with participation…
SecurityWeek -
Android threats in 2025: When your phone becomes the main attack surface
Android users spent 2025 navigating a sharper attack surface, with malware, data‑stealing apps, and SMS‑based scams all climbing, while attackers refined mobile data and access monetisation. According to Malwarebytes, adware detections nearly doubled in the…
Malwarebytes -
Amazon: Russian Hackers Now Favor Misconfigurations in Critical Infrastructure Attacks
On 16 December 2025, SecurityWeek reports that after years of exploiting zero‑day and n‑day vulnerabilities, Russian state‑sponsored threat actors are shifting to misconfigured devices for access to critical infrastructure, according to Amazon’s threat…
SecurityWeek -
Inside Ink Dragon: Revealing the Relay Network and Inner Workings of a Stealthy Offensive Operation
according to Check Point Research, Ink Dragon is a Chinese-aligned espionage cluster that has expanded from Southeast Asia and South America into Europe, targeting government and public-sector infrastructure. The operation centres on a ShadowPad IIS Listener…
Check Point -
Link11 Identifies Five Cybersecurity Trends Set to Shape European Defense Strategies in 2026
Link11 has released five cybersecurity developments it says will shape European defence strategies in 2026, based on threat activity, industry research, and insights from the Link11 European Cyber Report alongside PwC’s Global Digital Trust Insights 2026.…
SecurityOnline -
Amazon Exposes Years-Long GRU Cyber Campaign Targeting Energy and Cloud Infrastructure
Amazon's threat intelligence team has disclosed details of a years-long Russian state-sponsored campaign that targeted Western critical infrastructure between 2021 and 2025, focusing on energy sector organisations, North American and European providers, and…
The Hacker News -
Photo booth flaw exposes people’s private pictures online
Malwarebytes reports that a flaw in a photo booth operator’s system potentially exposed hundreds of customers’ private pictures online. A security researcher known as Zeacer found that a website run by photo kiosk company Hama Film allowed anyone to download…
Malwarebytes -
Photo booth flaw exposes people’s private pictures online
A security researcher known as Zeacer spent weeks warning a photo booth operator about a vulnerability that allegedly exposed hundreds of customers’ private photos to anyone who knew where to look, in a flaw tied to a website run by photo kiosk company Hama…
Malwarebytes -
JumpCloud Remote Assist Vulnerability Can Expose Systems to Takeover
A vulnerability in JumpCloud Remote Assist for Windows could allow attackers to escalate privileges and potentially take over endpoints. The flaw, tracked as CVE-2025-34352 (CVSS 8.5), can be triggered during the removal or update of the JumpCloud Agent,…
SecurityWeek -
Why Data Security and Privacy Need to Start in Code
AI-assisted coding and AI app generation platforms have spurred unprecedented growth in software development, putting security and privacy teams under pressure as the number of applications and the pace of change rise. The piece argues that traditional data…
The Hacker News -
Google is discontinuing its dark web report: why it matters
Google has announced that it will discontinue its dark web report, with new scans stopping on 15 January 2026 and the entire tool disappearing on 16 February 2026 along with all associated monitoring data. According to Google, the decision follows feedback…
Malwarebytes -
Fortinet FortiGate Under Active Attack Through SAML SSO Authentication Bypass
Threat actors are exploiting two newly disclosed authentication bypasses in Fortinet FortiGate devices, CVE-2025-59718 and CVE-2025-59719 (CVSS scores: 9.8), in active intrusions involving malicious single sign-on logins, according to Arctic Wolf Labs.…
The Hacker News -
User Data Compromised in SoundCloud Hack
According to SoundCloud, hackers accessed certain limited data stored on its systems, including email addresses and information visible on public SoundCloud profiles, while passwords or financial information were not exposed. The company said roughly 20% of…
SecurityWeek -
God Mode On: how we attacked a vehicle’s head unit modem
Researchers have demonstrated a scenario in which a vehicle’s head unit could be controlled remotely after compromising its modem, including the remote execution of code and the potential to run Doom on the head unit as part of their demonstration. The…
securelist.com -
In-the-Wild Exploitation of Fresh Fortinet Flaws Begins
Threat actors began exploiting two critical Fortinet authentication bypass vulnerabilities just days after patches were issued, according to Arctic Wolf. The flaws are tracked as CVE-2025-59718 and CVE-2025-59719, with a CVSS score of 9.8, and affect…
SecurityWeek -
Pornhub targeted in extortion attempt following Mixpanel breach exposing user activity
PornHub faces extortion after hackers linked to ShinyHunters allegedly stole Premium users’ search and viewing history via a Mixpanel breach, according to SecurityAffairs. The article notes that Mixpanel reported a smishing attack on November 8, but says the…
Security AffairsShinyHunters -
Industry Shockwave? Rumors Claim Samsung Will Discontinue All SATA SSDs Despite Company’s Denial
Industry rumours about Samsung potentially winding down SATA SSD production have circulated since video creator @MLID claimed the firm would gradually phase out SATA-based drives, a claim reportedly corroborated by multiple independent distributors and…
SecurityOnline -
React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors
The React2Shell vulnerability, tracked as CVE-2025-55182, is being actively exploited to deliver Linux backdoors such as KSwapDoor and ZnDoor, according to findings from Palo Alto Networks Unit 42 and NTT Security. “KSwapDoor is a professionally engineered…
The Hacker News -
French Interior Minister says hackers breached its email servers
The French Interior Minister Laurent Nunez said that threat actors compromised email servers at the Ministry of the Interior, with the incident detected overnight between 11 and 12 December. He added that attackers gained access to some document files but…
Security Affairs -
Google to Shut Down Dark Web Monitoring Tool in February 2026
Google has announced that it will discontinue its dark web report tool in February 2026. Scans for new dark web breaches will stop on 15 January 2026, with the feature ceasing to exist effective 16 February 2026. According to Google, the report offered…
The Hacker News -
Bake Harden-Runner Into GitHub's Custom Runner Images for Organization-Wide CI/CD Security
GitHub has introduced custom runner images, now in public preview, that allow Harden-Runner to be baked directly into runner images. This lets organisations embed automatic runtime protection across all workflows without modifying any workflow files. The…
StepSecurity -
Critical OpenShift GitOps Flaw Risks Cluster Takeover (CVE-2025-13888) via Privilege Escalation to Root
A critical vulnerability in Red Hat OpenShift GitOps, tracked as CVE-2025-13888 with a severity of 9.1 (Critical), can allow a namespace administrator to escalate to root on the entire cluster. The flaw stems from how the GitOps operator handles ArgoCD…
SecurityOnline -
Critical ScreenConnect Flaw (CVE-2025-14265) Risks Config Exposure & Untrusted Extension Installation
ConnectWise has issued a security update for ScreenConnect, addressing a critical vulnerability tracked as CVE-2025-14265 with a high CVSS of 9.1 that could expose configuration data and enable the installation of untrusted extensions. The flaw is described…
SecurityOnline -
Enterprise Alert: Windows 10 Update KB5071546 Breaks MSMQ Service with Insufficient Permissions
Microsoft has published documentation confirming that installing the extended security update KB5071546 on Windows 10 can cause failures in Microsoft Message Queuing (MSMQ). The issue appears after installing the December 2025 updates on Windows 10 or…
SecurityOnline -
EU Compliance: iOS 26.3 Adds Notification Forwarding to Third-Party Wearables, Bypassing Apple Watch
In the latest iOS 26.3 beta, Apple has introduced a new feature called Notification Forwarding, which allows an iPhone to automatically relay incoming notifications to third-party wearable devices, without sending them to an Apple Watch. The EU-only feature…
SecurityOnline
