News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Wed 24 Dec 2025· 30 articles
-
FBI seized ‘web3adspanels.org’ hosting stolen logins
The U.S. authorities seized the domain web3adspanels[.]org and its database, which had been used by a criminal group to store thousands of stolen bank login credentials obtained from victims via fraudulent websites that mimicked real bank ads. Victims who…
Security Affairs -
Singing River Health System temporarily shut down access to patient medical records
Singing River Health System in Mississippi temporarily shut down access to patient medical records after spotting a potential cyber incident in its early stages, prompting action on Tuesday as it worked to address the threat. According to Magnolia State…
DataBreaches -
New MacSync macOS Stealer Uses Signed App to Bypass Apple Gatekeeper
Cybersecurity researchers have uncovered a new variant of the MacSync macOS information stealer, delivered via a digitally signed, notarised Swift application masquerading as a messaging app installer to bypass Apple’s Gatekeeper checks. According to Jamf,…
The Hacker News -
U.S. Federal Communications Commission (FCC) bans foreign-made drones over national security concerns
The U.S. Federal Communications Commission has banned drones and key components manufactured abroad over national security concerns, stating that foreign-made UAS pose unacceptable risks to the United States and to the safety of its people. The move, cited…
Security Affairs -
Pro-Russian Hackers Claim Cyberattack on French Postal Service
A pro-Russian hacking group claimed responsibility for a major cyberattack that knocked central computer systems at France’s national postal service La Poste offline in a distributed denial of service (DDoS) attack, with the disruption not fully resolved by…
SecurityWeek -
CISA loses key employee behind early ransomware warnings
David Stern, the driving force behind CISA’s Pre-Ransomware Notification Initiative (PRNI), resigned on 19 December after being ordered to take a job at the Federal Emergency Management Agency in Boston or quit, according to four people familiar with the…
DataBreaches -
Industry Continues to Push Back on HIPAA Security Rule Overhaul
Opposition to the proposed updates to the HIPAA Security Rule is mounting as industry groups submit feedback during the public comment period announced by the US Department of Health and Human Services in January 2025. The latest push comes from 100…
DataBreaches -
Italian regulator rules Apple’s ATT feature limits competition
Italy’s antitrust authority has fined Apple €98.6 million (about $116 million) for abusing a dominant position by ruling that its App Tracking Transparency framework limited competition in the App Store. The press release from Italy’s AGCM states the fine…
Security Affairs -
Nomani Investment Scam Surges 62% Using AI Deepfake Ads on Social Media
Nomani Investment Scam has surged by 62% according to data from ESET, with campaigns expanding beyond Facebook to YouTube. ESET said it blocked over 64,000 unique URLs associated with the threat this year, and most detections originated from Czechia, Japan,…
The Hacker News -
Attacks are Evolving: 3 Ways to Protect Your Business in 2026
According to Data Breach Observatory, small- and medium-sized businesses (SMBs) are now more likely to be targeted, with SMBs accounting for 70.5% of the data breaches identified in 2025 and companies between 1 and 249 employees proving the most vulnerable.…
The Hacker News -
La Poste outage after a cyber attack disrupts digital banking and online services
La Poste experienced a major network incident that knocked its information systems offline, disrupting digital banking and online services for millions of customers. The disruption rendered several platforms inaccessible, including the main website, the…
Security Affairs -
SEC Files Charges Over $14 Million Crypto Scam Using Fake AI-Themed Investment Tips
According to SEC, charges have been filed against Morocoin Tech Corp., Berge Blockchain Technology Co., Ltd., and Cirkor Inc., along with investment clubs AI Wealth Inc., Lane Wealth Inc., AI Investment Education Foundation (AIIEF) Ltd., and Zenith Asset…
The Hacker News -
Evasive Panda APT poisons DNS requests to deliver MgBot
The Evasive Panda APT group, also known as Bronze Highland, Daggerfly, and StormBamboo, has been active since 2012 and ran highly-targeted campaigns from November 2022 to November 2024, according to Securelist’s GReAT research. In this latest analysis, the…
securelist.comEvasive Panda -
Italy Fines Apple €98.6 Million Over ATT Rules Limiting App Store Competition
Apple has been fined €98.6 million by Italy’s antitrust authority after finding that its App Tracking Transparency (ATT) framework restricted App Store competition. According to Autorità Garante della Concorrenza e del Mercato (AGCM), Apple’s “absolute…
The Hacker News -
Linux Kernel 6.19 Slashes Latency & Boosts Legacy AMD GPUs by 30%
According to Phoronix, benchmarks show that switching an AMD Radeon HD 7950 to the new driver stack yields performance gains of up to 30 percent, with particularly notable improvements in older OpenGL titles. Owing to architectural constraints, AMD’s current…
SecurityOnline -
Racing the Zombie: PoC Released for Linux Kernel POSIX Timer Vulnerability (CVE-2025-38352)
According to CVE Watchtower, a vulnerability in the Linux kernel’s implementation of POSIX CPU timers has drawn attention after a working PoC exploit was released for CVE-2025-38352. The flaw is a classic use-after-free issue in handle_posix_cpu_timers()…
SecurityOnline -
Search Engine “Malvertising” Ring Disrupted: DOJ Seizes Backend of $14.6 Million Bank Fraud Scheme
A sprawling cybercrime operation that weaponised trusted search engines to drain millions from American bank accounts has been dismantled, with the DOJ seizing a backend domain used to manage thousands of stolen credentials. According to Department of…
SecurityOnline -
The Hard-Coded Backdoor: Critical 9.8 Severity NVIDIA Flaws Grant Total Control of AI Systems
NVIDIA has issued an urgent security update for its Isaac Launchable software, patching three critical vulnerabilities that could allow attackers to seize total control of affected systems. The flaws, CVE-2025-33222, CVE-2025-33223 and CVE-2025-33224, carry…
SecurityOnline -
Critical Network Collapse: 9.8 Severity Net-SNMP Buffer Overflow Threatens Global Monitoring Systems
A critical vulnerability in Net-SNMP, tracked as CVE-2025-68615, carries a near-maximum CVSS score of 9.8 and threatens the snmptrapd daemon used for receiving SNMP trap messages. The flaw is a classic buffer overflow that can crash the daemon when it…
SecurityOnline -
“Casting Call” for Malware: APT37 Poses as TV Writers to Hack Targets
APT37, also known as Reaper or Ricochet Chollima, is linked to a campaign that masquerades as TV production staff to slip malware past defenses, according to Genians Security Center. The Artemis operation begins with a deceptive email in which the threat…
SecurityOnlineAPT37 -
The Notarized Nightmare: New MacSync Stealer Bypasses Gatekeeper to Hijack Mac Devices
The Notarized Nightmare: New MacSync Stealer Bypasses Gatekeeper to Hijack Mac Devices reports that a new MacSync Stealer variant has moved to an automated infection process hidden inside legitimate-looking applications, shedding reliance on user actions.…
SecurityOnline -
“Operation IconCat”: Hackers Masquerade as Security Giants to Target Israeli Firms
A new cyber-espionage campaign named “Operation IconCat” targets Israeli organisations by disguising malicious implants as trusted antivirus updates and spoofing branding from major security vendors. The activity is linked to a threat cluster tracked as…
SecurityOnline -
APT-36 Uses Fake “WhatsApp Fraud” Advisory to Hack Government Systems
According to CYFIRMA, the advanced threat group APT-36 is hacking government systems by peddling a fake “Fraudulent WhatsApp Messages” advisory. The campaign starts with victims receiving a lure named NCERT-Whatsapp-Advisory[.]pdf, which is actually a…
SecurityOnlineOperation C-Major -
“Webrat” Trap: Hackers Lure Junior Security Researchers with Fake GitHub Exploits
The “Webrat” malware campaign has evolved from disguising itself in game cheats to a trap that targets students and junior security researchers by presenting fake PoC exploits for high-profile vulnerabilities. According to Kaspersky Labs, the operators…
SecurityOnline -
Operation PCPcat: 60,000 Next.js Servers Hijacked in Just 48 Hours
Operation PCPcat has been described as a highly automated cyber-espionage campaign harvesting cloud credentials from compromised Next[.]js and React servers. According to Beelzebub Research Team, the attackers exploited CVE-2025-29927 and CVE-2025-66478 to…
SecurityOnline -
The Final Countdown: Valve Moves Steam to 64-Bit and Sets January 2026 Cutoff
Valve has completed its plan to move Steam to a 64-bit client, with 32-bit Windows editions gradually phased out and new releases only supporting 64-bit Windows 10 and Windows 11. According to Valve, all Steam builds for Windows 10 and Windows 11 are now…
SecurityOnline -
The Great Rewrite: Microsoft’s Radical 2030 Vision to Kill C/C++ with AI-Powered Rust
A recent job posting from Microsoft’s engineering team appears to hint at an ambitious transformation, with the aim by 2030 to eliminate all C and C++ code from its codebase and replace it with Rust. According to Microsoft Distinguished Engineer Galen Hunt,…
SecurityOnline -
Bypassing the Bottleneck: How Microsoft’s Native NVMe Driver Delivers an 80% IOPS Surge
Microsoft has introduced a newly developed native NVMe SSD capability in Windows Server 2025, effectively a new driver that bypasses the legacy SCSI interface to deliver a meaningful performance uplift. The feature is positioned to unlock greater performance…
SecurityOnline -
Who Does Cybersecurity Need? You!
Cybersecurity needs you, across every discipline, from marketers to copywriters and social media experts, the article argues, stressing that the field is not limited to a single path. It challenges stereotypes about who works in cyber intelligence and…
unit42.paloaltonetworks.com -
The PowerShell Pivot: MAS Roadmap Reveals End of Batch Scripting Era
The PowerShell Pivot: MAS Roadmap Reveals End of Batch Scripting Era reports that MAS, the Windows activation tool, plans to abandon batch scripts entirely and migrate the project to PowerShell to improve reliability, usability and efficiency. The article…
SecurityOnline
