News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 13 so far |
Fri 19 Dec 2025· 58 articles
-
Code Orange: Fail Small — Our resilience plan following recent incidents
Cloudflare has launched a resilience initiative named Code Orange: Fail Small, aimed at making the network more robust after two outages earlier in the year. On 18 November 2025, Cloudflare’s network failed to deliver traffic for about two hours and ten…
Cloudflare -
Cisco VPNs, Email Services Hit in Separate Threat Campaigns
Cisco VPNs and email security appliances are the focus of two distinct campaigns within days of each other. A newly identified China-linked APT, UAT-9686, was exploiting a zero-day in Cisco AsyncOS on email security appliances, tracked as CVE-2025-20393,…
Dark Reading -
Thailand Conference Launches International Initiative to Fight Online Scams
According to Associated Press, Thailand helped launch a global effort to curb online scams, in a conference in Bangkok hosted by Thailand’s Ministry of Foreign Affairs and the United Nations Office on Drugs and Crime, culminating in the Global Partnership…
SecurityWeek -
Russia-Linked Hackers Use Microsoft 365 Device Code Phishing for Account Takeovers
A Russia-aligned threat group has been attributed to a device-code phishing campaign that aims to steal Microsoft 365 credentials and enable account takeovers, with activity ongoing since September 2025. Proofpoint, which tracks the operation under…
The Hacker News -
LongNosedGoblin2 articles this day · SecurityWeek first
LongNosedGoblin Caught Snooping on Asian Governments · Chinese APT ‘LongNosedGoblin’ Targeting Asian Governments
2 outlets-
LongNosedGoblin Caught Snooping on Asian Governments
A new Chinese-backed advanced persistent threat (APT) group, dubbed LongNosedGoblin, has been waging a cyber-espionage campaign against governments in Japan and across Southeast Asia since at least 2023. The group primarily uses custom C#/.NET applications…
Dark Reading -
Chinese APT ‘LongNosedGoblin’ Targeting Asian Governments
A newly identified Chinese APT, LongNosedGoblin, has been targeting government entities across Southeast Asia and Japan, according to ESET. The group has been active since at least September 2023 and is notable for using Group Policy to deploy its malware…
SecurityWeek
-
-
Trump signs defense bill allocating millions for Cyber Command, mandating Pentagon phone security
President Donald Trump signed a $901 billion Pentagon policy bill on 19 December 2025 that features a slew of key cybersecurity provisions. The compromise 2026 National Defense Authorization Act passed with bipartisan support in both the House and the…
DataBreaches -
In Other News: Docker AI Attack, Google Sues Chinese Cybercriminals, Coupang Hacked by Employee
On 19 December 2025, SecurityWeek recaps several notable security stories, including Google suing a Chinese‑speaking cybercrime group, Dracula, after NBC News reported that the suit targets the group and its leader Yucheng Chang, with Google estimating…
SecurityWeek -
FTC Issues Proposed Order Against Illusory Systems Over Allegations of Lax Security
According to The Federal Trade Commission, on 17 December 2025 it announced action against Illusory Systems, Inc., which does business as Nomad, for failing to implement adequate data security and contributing to a major breach in which hackers stole $186…
DataBreaches -
The Breachies 2025: The Worst, Weirdest, Most Impactful Data Breaches of the Year
The Breachies 2025 commemorates the year’s most noteworthy data breaches with a tongue‑in‑cheek awards slate, highlighting how some incidents exposed far more data than others. The winners include The Say Something Without Saying Anything Award for Mixpanel,…
DataBreaches -
Denmark says Russia was behind two ‘destructive and disruptive’ cyber-attacks
According to Associated Press, Danish authorities say Russia carried out cyberattacks against infrastructure and websites in Denmark in 2024 and 2025, including new cases not previously reported. Danish Defence Intelligence Service said Moscow was…
DataBreaches -
UK: National Heallth Service software supplier DXS hit by cyber attack
The UK-based software provider DXS, which helps to reduce costs for doctors and primary care physicians and is used by around 2,000 GPs overseeing the care of about 17 million patients, disclosed a security incident affecting its office servers. In a filing…
DataBreaches -
Court clears former Vastaamo CEO Ville Tapio of data protection charges
According to Helsinki Times, the Helsinki Court of Appeal overturned the criminal conviction of Ville Tapio, the former CEO of Vastaamo, in a case linked to one of Finland’s most serious data breaches. The court ruled that Tapio was not criminally liable for…
DataBreaches -
Palo Alto Networks, Google Cloud Strike Multibillion-Dollar AI and Cloud Security Deal
Palo Alto Networks and Google Cloud have announced a multibillion-dollar AI and cloud security deal designed to deepen their existing partnership. The agreement will see Palo Alto migrate key internal workloads to Google Cloud and utilise Google’s Vertex AI…
SecurityWeek -
Cracked Software and YouTube Videos Spread CountLoader and GachiLoader Malware
Cybersecurity researchers have detailed a campaign that uses cracked software distribution sites as a delivery vector for CountLoader, a modular loader that Cyderes Howler Cell Threat Intelligence team says acts as the initial tool in a multistage attack for…
The Hacker News -
AI Security Firm Ciphero Emerges From Stealth With $2.5 Million in Funding
Ciphero, a New York-based AI verification startup, has emerged from stealth with $2.5 million in a pre-seed funding round co-led by Sovereign’s Capital and Chingona Ventures, according to SecurityWeek. The company says its solution provides an AI…
SecurityWeek -
Dismantling Defenses: Trump 2.0 Cyber Year in Review
Dismantling Defenses: Trump 2.0 Cyber Year in Review chronicles a year of sweeping policy pivots that critics warn weaken the United States’ capacity to address cybersecurity, privacy, and information integrity. The piece highlights actions from NSPM-7 to…
Krebs on Security -
Identity Fraud Among Home Care Workers Puts Patients at Risk
Identity fraud among home care workers is increasingly putting patients at risk, with reports that unqualified aides are caring for patients under false identities and sometimes using log-in credentials to appear present during visits. According to Daon,…
Dark Reading -
Denmark Blames Russia for Cyberattacks Ahead of Elections and on Water Utility
According to the Associated Press, Denmark’s Defence Intelligence Service assessed that Russia carried out cyberattacks against Denmark in 2024 and 2025 as part of a broader “hybrid war” to create instability. The agency said a destructive attack on a Danish…
SecurityWeek -
System Status: “Things Happen”
System Status: “Things Happen” is a post on DataBreaches[.]Net by Dissent, dated 19 December 2025. In it, the author explains that they slipped and fell down the stairs at home, fracturing four of the five lumbar vertebrae. They note they are out of…
DataBreaches -
Criminal IP and Palo Alto Networks Cortex XSOAR integrate to bring AI-driven exposure intelligence to automated incident response
According to CyberNewsWire, Criminal IP, the AI-powered threat intelligence platform developed by AI SPERA, is now officially integrated into Palo Alto Networks’ Cortex XSOAR, embedding real-time external threat context, exposure intelligence, and automated…
SecurityOnline -
A Cybersecurity Playbook for AI Adoption
A Cybersecurity Playbook for AI Adoption argues that while AI adds real value to security today, it cannot yet serve as a single guardian and must be combined with deterministic, proven safety practices. It describes two planes of cybersecurity operations: a…
Dark Reading -
A Good Year for North Korean Cybercriminals
North Korea’s cybercriminal groups have enjoyed a bumper year, shifting to patiently target larger payouts and jobs in the software supply chain. The article notes a $1.5 billion Ethereum theft from ByBit in February 2025, and says that, so far this year,…
Dark Reading -
Innovating to address streaming abuse — and our latest transparency report
Cloudflare’s latest transparency report for the first half of 2025 shows a continued focus on addressing streaming abuse and coordinating with rightsholders to identify and act on unauthorized streaming. The report notes a significant rise in DMCA activity,…
Cloudflare -
CISA warns ASUS Live Update backdoor is still exploitable, seven years on
According to CISA, ASUS has added the ASUS Live Update vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, signalling ongoing exploitation and urgency. The flaw is tracked as CVE-2025-59374 and carries a CVSS score of 9.3, affecting the Live…
Malwarebytes -
Docker Makes 1,000 Hardened Images Free and Open Source
Docker has announced that it has made more than 1,000 hardened images free and open source for developers, building on the May release of Docker Hardened Images (DHI), a catalog designed to strengthen enterprise supply chain security. The images are…
SecurityWeek -
US Shuts Down Crypto Exchange E-Note, Charges Russian Administrator
US authorities this week announced the takedown of E-Note, a cryptocurrency exchange allegedly involved in laundering money for ransomware groups and other transnational cybercriminal organisations. The exchange has been used to transfer over $70 million in…
SecurityWeek -
University of Sydney Data Breach Affects 27,000 Individuals
The University of Sydney says hackers stole personal information pertaining to roughly 27,500 people from one of its online code libraries, a dataset containing historical files likely used for testing purposes. The affected data include details for staff…
SecurityWeek -
‘Kimwolf’ Android Botnet Ensnares 1.8 Million Devices
‘Kimwolf’ Android botnet has infected over 1.8 million devices and can launch massive DDoS attacks, according to XLab. The botnet, linked to the Aisuru IoT botnet, mainly focuses on traffic proxying and was observed issuing over 1.7 billion DDoS attack…
SecurityWeek -
CLOP targets Gladinet CentreStack servers in large-scale extortion campaign
The Clop ransomware group is targeting Gladinet CentreStack file servers in a new large-scale extortion campaign aimed at stealing sensitive data from organisations worldwide, according to Security Affairs. Experts from threat intel firm Curated Intelligence…
Security Affairs -
WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability
WatchGuard has released fixes for a critical Fireware OS vulnerability that has been observed in real-world attacks, tracked as CVE-2025-14733 (CVSS 9.3). According to WatchGuard, the out-of-bounds write affects the iked process and could allow a remote…
The Hacker News -
ASRock, ASUS, GIGABYTE, MSI Boards vulnerable to pre-boot memory attacks
Researchers have disclosed a newly identified UEFI vulnerability that affects select ASRock, ASUS, GIGABYTE and MSI motherboards, enabling early-boot DMA attacks that bypass IOMMU protections. Modern systems rely on UEFI and IOMMU to shield memory during…
Security Affairs -
Nigeria Arrests RaccoonO365 Phishing Developer Linked to Microsoft 365 Attacks
Authorities in Nigeria have announced the arrest of three high-profile internet fraud suspects linked to phishing attacks, including the main developer behind the RaccoonO365 phishing-as-a-service toolkit. The Nigeria Police Force National Cybercrime Centre…
The Hacker News -
North Korea’s Digital Surge: $2B Stolen in Crypto as Amazon Blocks 1,800 Fake IT Workers
North Korea’s digital surge is reflected in cryptocurrency thefts and a plentiful supply of fraudulent IT workers, with data from Chainalysis showing hackers stole more than $2 billion worth of cryptocurrency in 2025, a rise from 2024’s figure. The report…
SecurityWeek -
Cloud Atlas activity in the first half of 2025: what changed
Known since 2014, the Cloud Atlas group targets countries in Eastern Europe and Central Asia, with infections typically delivered by phishing emails containing a malicious document that exploits an old vulnerability in the Microsoft Office Equation Editor to…
securelist.comInception Framework -
China-linked APT UAT-9686 is targeting Cisco Secure Email Gateway and Secure Email and Web Manager
Cisco disclosed a critical zero-day, tracked as CVE-2025-20393, in Secure Email Gateway and Secure Email and Web Manager, actively exploited by a China-linked group, with Cisco Talos linking the activity to the APT UAT-9686 based on tooling and…
Security AffairsUAT-9686 -
Pay to Post: Meta Tests 2-Link Monthly Limit for Unverified Facebook Creators
Reports indicate Meta is quietly testing a policy that limits unverified Facebook creators to two external links per month unless they subscribe to Meta’s blue-check verification, a move described as a paid feature for link sharing. The test was first…
SecurityOnline -
The AI Super App Arrives: OpenAI Launches ChatGPT App Directory to Rule Your Digital Life
OpenAI has announced the launch of a new App Directory within the ChatGPT platform, enabling users to directly connect ChatGPT with external services such as Spotify, Dropbox, and Apple Music, in a move described as letting people “chat while getting things…
SecurityOnline -
Fusion of Power: Trump Media Inks $6 Billion Merger to Build World’s First Fusion Power Plant
Trump Media, the group behind Truth Social, plans to merge with TAE Technologies in a deal valued at up to $6 billion, according to Financial Times. The transaction aims to create what the parties describe as the world’s first utility-scale nuclear fusion…
SecurityOnline -
FIFA’s Post-EA Comeback: Netflix to Launch a Reimagined Football Game for the 2026 World Cup
FIFA ended its nearly 30-year partnership with EA in 2022, after which EA rebranded its football empire as EA Sports FC, while FIFA has yet to deliver a canonical football simulation to rival it. Now Netflix has announced that FIFA’s first football…
SecurityOnline
