News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Wed 17 Dec 2025· 55 articles
-
Critical Fortinet Flaws Under Active Attack
The US Cybersecurity and Infrastructure Security Agency (CISA) has added a recently disclosed security flaw affecting multiple Fortinet network security and management platforms to its known exploited vulnerabilities (KEV) catalog, citing evidence of active…
Dark Reading -
In Cybersecurity, Claude Leaves Other LLMs in the Dust
New sobering data from the PHARE benchmark, according to Giskard, confirms that while large language models (LLMs) are making profit-driven advances, their safety and security improvements lag behind. Researchers tested brand-name models from OpenAI,…
Dark Reading -
'Cellik' Android RAT Leverages Google Play Store
Cellik is a RAT-as-a-service that leverages the Google Play Store to build poisoned versions of Android apps, allowing an attacker to remotely control a victim’s device. The malware can generate malicious apps inside the Play Store and, once installed,…
Dark Reading -
SonicWall warns of actively exploited flaw in SMA 100 AMC
SonicWall has urged customers to patch a flaw tracked as CVE-2025-40602 in the SMA1000 Appliance Management Console (AMC), a local privilege escalation vulnerability that was exploited as a zero-day in attacks in the wild. According to SonicWall PSIRT, the…
Security Affairs -
SonicWall Fixes Actively Exploited CVE-2025-40602 in SMA 100 Appliances
SonicWall has rolled out fixes to address a security flaw in Secure Mobile Access SMA 100 series appliances that it said has been actively exploited in the wild. The vulnerability, tracked as CVE-2025-40602 (CVSS 6.6), concerns a local privilege escalation…
The Hacker News -
Kimwolf Botnet Hijacks 1.8 Million Android TVs, Launches Large-Scale DDoS Attacks
A new distributed denial-of-service botnet called Kimwolf has enlisted at least 1.8 million infected devices, including Android-based TVs, set-top boxes and tablets, to launch large-scale DDoS attacks, according to findings from QiAnXin XLab. The researchers…
The Hacker News -
Access Fabric: A modern approach to identity and network access
Today, most organisations run multiple identity systems and network access tools from different vendors, creating a fragmented environment that attackers can exploit. Simply adding more tools isn’t enough; when identity and network security don’t work…
Microsoft -
Attackers Use Stolen AWS Credentials in Cryptomining Campaign
Attackers have been using compromised AWS Identity and Access Management (IAM) credentials to target cloud services in a cryptomining campaign that deploys miners across Amazon EC2 and Amazon ECS infrastructure, according to a blog post published by AWS.…
Dark Reading -
Two Chrome flaws could be triggered by simply browsing the web: Update now
Two Chrome flaws could be triggered merely by visiting a malicious webpage, and Google issued an extra patch to address them. According to Google, the vulnerabilities could be exploited remotely when a user visits a specially crafted site, making timely…
Malwarebytes -
APT28 Targets Ukrainian UKR-net Users in Long-Running Credential Phishing Campaign
According to Recorded Future's Insikt Group, the Russian state-sponsored threat actor known as APT28 has been attributed to a sustained credential-harvesting campaign targeting UKR[.]net users, with activity observed between June 2024 and April 2025. The…
The Hacker NewsAPT28 -
Browser extensions with 8 million users collect extended AI conversations
Ars Technica reports that browser extensions with over eight million installs are harvesting complete AI conversations and selling them for marketing analytics, according to data collected from Google’s and Microsoft’s extension stores. The investigation…
Ars Technica -
GNV ferry fantastic under cyberattack probe amid remote hijack fears
French prosecutors are investigating a suspected cyberattack on the GNV ferry Fantastic amid fears of a possible remote hijack, with the ship’s IT systems the focus of the inquiry prompted by GNV. Italian intelligence alerted Paris authorities about two…
Security Affairs -
New ForumTroll Phishing Attacks Target Russian Scholars Using Fake eLibrary Emails
The threat actor linked to Operation ForumTroll has been attributed to a fresh set of phishing attacks targeting individuals within Russia, according to Kaspersky. The Russian cybersecurity vendor said it detected the new activity in October 2025, and the…
The Hacker News -
GachiLoader: Defeating Node.js Malware with API Tracing
GachiLoader is a heavily obfuscated Node[.]js JavaScript malware used to deploy additional payloads to an infected machine, identified in a campaign linked to the YouTube Ghost Network. According to Check Point Research, one variant downloads a remote…
Check Point -
NMFTA Warns of Surge and Sophistication of Cyber-Enabled Cargo Theft
The NMFTA warns that traditional cargo theft is being rapidly displaced by sophisticated, cyber-enabled heists, a trend highlighted in its 2026 Transportation Industry Cybersecurity Trends Report, released as part of its ongoing industry guidance. In…
SecurityWeek -
Inside a purchase order PDF phishing campaign
A Malwarebytes investigation into a phishing campaign centred on a PDF purchase order reveals a lure named “NEW Purchase Order # 52177236[.]pdf” that prompted recipients to view a supposed order. The campaign relied on a phishing webpage opened from the…
Malwarebytes -
Hacker Conversations: Alex Hall, One-time Fraudster
Hacker Conversations: Alex Hall, One-time Fraudster profiles how Hall moved from undetected fraud to a career defending trust, culminating in a role as a Trust and Safety Architect at Sift. He explains that his path into fraud began after a breakup and a…
SecurityWeek -
New $150 Cellik RAT Grants Android Control, Trojanizes Google Play Apps
SecurityWeek reports that a newly identified Android remote access trojan, named Cellik, offers a one-click APK builder to wrap its payload inside legitimate apps and even includes Google Play integration to enable attackers to bundle malicious code with…
SecurityWeek -
RansomHouse2 articles this day · unit42.paloaltonetworks.com first
Askul data breach exposed over 700,000 records after ransomware attack · From Linear to Complex: An Upgrade in RansomHouse Encryption
2 outlets-
Askul data breach exposed over 700,000 records after ransomware attack
Askul disclosed that an October ransomware attack by the RansomHouse group compromised over 700,000 records at the Japanese e‑commerce and logistics firm. The breach was detected on October 19, 2025, during which attackers accessed the company’s…
Security Affairs -
From Linear to Complex: An Upgrade in RansomHouse Encryption
RansomHouse is a ransomware-as-a-service (RaaS) operation run by a group that Unit 42 tracks as Jolly Scorpius, and recent samples show a significant upgrade in its encryption. The threat group uses a double extortion approach, combining data theft with…
unit42.paloaltonetworks.com
-
-
Five Cybersecurity Predictions for 2026: Identity, AI, and the Collapse of Perimeter Thinking
SecurityWeek argues that by 2026 identity will fully replace the network as the primary attack surface, with breaches centred on logging in rather than breaking through firewalls and attackers exploiting identity workflows, help desks, and recovery…
SecurityWeek -
Fix SOC Blind Spots: See Threats to Your Industry & Country in Real Time
The Hacker News piece argues that modern security operations require moving from reactive firefighting to a proactive, context-rich SOC that can see threats in real time. It highlights Threat Intelligence Lookup and TI Feeds from ANY[.]RUN as tools to enrich…
The Hacker News -
Russian state hackers targeted Western critical infrastructure for years, Amazon says
Amazon Threat Intelligence reports that a years-long Russian state-backed cyber campaign targeted Western critical infrastructure from 2021 to 2025, with a strong focus on the energy sector. The activity is linked with GRU/Sandworm (also known as APT44 and…
Security Affairs -
Adaptive Security Raises $81 Million in Series B Funding
Adaptive Security has announced raising $81 million in a Series B funding round, bringing the total raised by the New York‑based company to $146.5 million. The round was led by Bain Capital Ventures, with additional support from NVentures, OpenAI Startup…
SecurityWeek -
China-Linked Ink Dragon Hacks Governments Using ShadowPad and FINALDRAFT Malware
The threat actor known as Jewelbug has been increasingly focusing on government targets in Europe since July 2025, while continuing to attack entities in Southeast Asia and South America, Check Point Research notes in its Ink Dragon cluster analysis. Check…
The Hacker NewsREF7707 -
GhostPoster Firefox Extensions Hide Malware in Icons
SecurityWeek reports that GhostPoster is a campaign in which Firefox extensions hide malware in their icons using steganography, with the extensions posing as free VPN services, ad blockers, translation tools, and weather forecast apps. According to Koi,…
SecurityWeek -
Operation ForumTroll continues: Russian political scientists targeted using plagiarism reports
Kaspersky’s GReAT researchers report that Operation ForumTroll has continued into 2025, targeting Russian political scientists with a new phishing campaign that uses plagiarism reports to entice victims. The fall campaign, dated 17 December 2025 in…
securelist.comOperation ForumTroll -
Auto Parts Giant LKQ Confirms Oracle EBS Breach
LKQ Corporation has confirmed it was among the victims of the Oracle E-Business Suite (EBS) campaign, with personal information of more than 9,000 individuals compromised in the attack. The company told the Maine Attorney General’s Office that the incident…
SecurityWeek -
U.S. CISA adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Fortinet’s vulnerability tracked as CVE-2025-59718 to its Known Exploited Vulnerabilities catalog, noting a CVSS score of 9.1. The flaws, described as improper verification of…
Security Affairs -
GhostPoster Malware Found in 17 Firefox Add-ons with 50,000+ Downloads
A campaign named GhostPoster has leveraged logo files associated with 17 Mozilla Firefox browser add-ons to embed malicious JavaScript designed to hijack affiliate links, inject tracking code, and commit ad fraud; the extensions were downloaded collectively…
The Hacker News -
Precise, Faster, Cheaper: OpenAI Unleashes GPT-Image-1.5 to Reclaim the Visual AI Crown
OpenAI has released GPT-Image-1.5, claiming improvements that address speed, controllability and cost in the visual AI space, in response to Google Nano Banana’s resurgence. The article notes that GPT-Image-1.5 is four times faster than its predecessor and…
SecurityOnline -
Prompt to Play: YouTube’s New Gemini 3 Tool Lets Creators Speak Games Into Existence
YouTube has launched an open beta programme called Playables Builder, powered by Google’s Gemini 3 model, which lets creators with no programming knowledge build simple web-based mini-games using natural language prompts. The prototype web application,…
SecurityOnline -
RAMageddon: Why Your Next Smartphone Will Cost 7% More with Worse Specs in 2026
A global surge in memory demand has triggered shortages that are impacting the smartphone market, with mid-sized and smaller manufacturers feeling the pressure as memory chip prices rise and bill-of-materials costs increase. Manufacturers face squeezed…
SecurityOnline -
Hardware Inflation: Dell Hikes Business PC Prices by up to 30% as Memory Costs Skyrocket
Dell has told its business customers that prices for its business-oriented PCs will rise from 17 December 2025 as memory and storage costs increase, with the magnitude varying by SKU based on installed RAM and SSD capacity. According to Dell sales…
SecurityOnline -
Dux Emerges From Stealth Mode With $9 Million in Funding
Dux has emerged from stealth mode with a seed funding round of $9 million, as reported by SecurityWeek. The startup, which has offices in Tel Aviv and New York, was founded by Israel Defence Forces veterans and focuses on preventing vulnerability…
SecurityWeek -
Afripol Focuses on Regional Cyber Challenges, Deepening Cooperation
Afripol is tightening regional cybercrime cooperation as cross-border investigations gain momentum, driven by rapid digital adoption and rising cyber threats in Africa. At the Sixth Meeting of the Heads of National Liaison Offices in Algiers earlier this…
Dark Reading -
“Too Many Pointless Things”: Torvalds Rejects TSEM Module, Sparking a Linux Security Civil War
On 17 December 2025, a dispute within the Linux kernel community re-emerged over a proposed TSEM module intended to implement a universal security model. Linus Torvalds voiced open frustration, arguing that the sheer number of security initiatives has long…
SecurityOnline -
NVIDIA Critical AI Patch: Isaac Lab and NeMo Framework Flaws Risk Full Code Execution
NVIDIA has rolled out a security update addressing multiple high‑severity vulnerabilities across its AI and simulation ecosystem, including the Isaac Sim robotics platform, NeMo Framework and the Resiliency Extension. The most severe deserialization flaw…
SecurityOnline -
-
Sandworm’s Tactical Pivot: Russian GRU Abandons Zero-Days to Weaponize Misconfigured Edge Devices
According to Amazon Threat Intelligence, Sandworm, a group linked to Russia’s GRU, has shifted from exploiting complex software flaws to weaponising misconfigured edge devices, a tactical pivot disclosed in a report on 17 December 2025. The operation focuses…
SecurityOnlineSandworm
