News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Thu 25 Dec 2025· 26 articles
-
Five-year-old Fortinet FortiOS SSL VPN vulnerability actively exploited
Fortinet has disclosed a five-year-old FortiOS SSL VPN vulnerability, tracked as CVE-2020-12812, which allows an authentication bypass by altering the case of a username when two-factor authentication is enabled with LDAP. FortiGate systems in certain…
Security Affairs -
Hackers Unredact Epstein Files — What You Need To Know
Hackers have unredacted Epstein files, with the piece noting the Department of Justice released a total of 11,034 documents on Monday, 22 December 2025, many of which were heavily redacted before publication. The article says some documents were quickly…
DataBreaches -
Pen testers accused of ‘blackmail’ after reporting Eurostar chatbot flaws
According to The Register, researchers at Pen Test Partners found four flaws in Eurostar’s public AI chatbot that could allow an attacker to inject malicious HTML content or trick the bot into leaking system prompts. The researchers reported the weaknesses…
DataBreaches -
Condé Nast gets hacked, and DataBreaches gets “played” — Christmas lump of coal edition
Condé Nast became the target in a post describing a data leak on a few forums involving data from WIRED and Condé Nast, with DataBreaches stating that Lovely claimed to have downloaded more than 33 million accounts. According to DataBreaches[.]Net, Lovely…
DataBreaches -
ThreatsDay Bulletin: Stealth Loaders, AI Chatbot Flaws AI Exploits, Docker Hack, and 15 More Stories
ThreatsDay Bulletin for 25 December 2025 surveys a landscape where attackers blend into everyday tools, trusted apps and AI assistants, rather than shouting for attention. The roundup highlights Stealth Loaders, AI chatbot flaws, Docker prompt-injection…
The Hacker News -
Top 10 CVEs of 2025: High-Impact Vulnerabilities & Exploitation Trends
The article presents a curated snapshot of the 2025 threat landscape, highlighting ten high‑impact CVEs that dominated headlines and real‑world activity, rather than ranking them by severity. It notes React2Shell, with CVE-2025-55182 and CVE-2025-66478, as…
SOCRadar -
LastPass 2022 Breach Led to Years-Long Cryptocurrency Thefts, TRM Labs Finds
TRM Labs has found that the encrypted vault backups stolen in the 2022 LastPass breach were used to crack weak master passwords and drain cryptocurrency assets for years, with activity continuing into late 2025. According to TRM Labs, the findings point to…
The Hacker News -
High-severity MongoDB flaw CVE-2025-14847 could lead to server takeover
MongoDB has addressed a high-severity vulnerability, tracked as CVE-2025-14847, which carries a CVSS score of 8.7 and could allow an unauthenticated, remote attacker to execute arbitrary code on vulnerable servers. The flaw is linked to a client-side exploit…
Security Affairs -
Threat landscape for industrial automation systems in Q3 2025
The Threat landscape for industrial automation systems in Q3 2025 notes that the percentage of ICS computers on which malicious objects were blocked fell to 20.1%, the lowest level observed in the period. Regional data show figures ranging from 9.2% in…
securelist.com -
Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability
Fortinet has said it observed “recent abuse” in the wild of a five‑year‑old FortiOS SSL VPN flaw, CVE‑2020‑12812 (CVSS 5.2), that could let a user log in without triggering the second factor when the username’s case is not exact. According to the latest…
The Hacker News -
CISA Flags Actively Exploited Digiever NVR Vulnerability Allowing Remote Code Execution
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Digiever DS-2105 Pro network video recorders to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation. The flaw, tracked as CVE-2023-52163 (CVSS score: 8.8),…
The Hacker News -
The AMX Lockdown: Critical KVM Bug Allows Guest VMs to Crash Linux Hosts
On 25 December 2025, security coverage describes a flaw in Linux KVM that can trigger a kernel panic on the host when a guest VM uses Intel AMX. The issue arises from how KVM handles FPU and XSAVE state, with AMX inside a guest potentially provoking an…
SecurityOnline -
Beyond Pixel: Google Rebrands Magic Cue to Bring Proactive AI to All Androids
Google is preparing to roll out its Pixel 10’s proactive AI feature, Magic Cue, to the wider Android ecosystem under the name “Contextual Suggestions” via Google Play Services updates, according to Android Authority. A Play Services test build (v25.49.32)…
SecurityOnline -
The 2nm Overflow: Why AMD and Tesla are Deserting TSMC for Samsung’s Texas Fab
As of 25 December 2025, the piece notes that TSMC remains dominant in advanced AI chip manufacturing, with capacity increasingly constrained as Apple and NVIDIA reportedly absorb the initial 2-nanometre capacity while AMD, Google and Tesla have begun…
SecurityOnline -
Intel’s 14A/18A Super Chip: The AI “System Foundry” That Challenges TSMC
Intel’s 14A/18A “super chip” concept, unveiled in late 2025, is pitched as a full system foundry solution capable of rivaling TSMC’s CoWoS-led approaches. The design combines the 14A-E compute tiles with RibbonFET 2 and PowerDirect on the 14A era, alongside…
SecurityOnline -
The End of AirPods’ Monopoly: Apple to Unlock Proximity Pairing and Smartwatch Replies
To meet the European Union’s Digital Markets Act, Apple is expected to introduce two features in iOS 26.3 that will reshape the pairing experience for EU users: third-party Proximity Pairing and more comprehensive notification interaction. The changes are…
SecurityOnline -
Hackers Revive 2020 FortiGate Flaw to Bypass 2FA
Fortinet has warned that a three-year-old vulnerability, FG-IR-19-283 (or CVE-2020-12812), originally disclosed and patched in July 2020, is being exploited in the wild to bypass two-factor authentication on FortiGate firewalls by changing username…
SecurityOnline -
“LotusBail” Trap: 56,000 Developers Downloaded a Fake WhatsApp API That Works perfectly—While Stealing Everything
A new investigation into a sophisticated npm supply chain attack reveals a package called lotusbail masquerading as a legitimate WhatsApp Web API library, fooling more than 56,000 developers over six months. The package is a fork of the popular…
SecurityOnline -
Evasive Panda APT Hijacks Dictionary.com and App Updates in Two-Year Spree
A new report describes Evasive Panda, a cyber-espionage group (also known as StormBamboo or Daggerfly), conducting a two-year campaign that hijacked software updates and DNS responses to deliver malware. Targeting victims in China, India, and Türkiye between…
SecurityOnlineEvasive Panda -
High-Severity Flaws in TeamViewer DEX Allow Attackers to Hijack Nomad Services
TeamViewer has issued security bulletins for its Digital Employee Experience (DEX) product line addressing multiple flaws across the Windows Client and the central Platform that could bypass integrity checks, execute arbitrary code, and escalate privileges.…
SecurityOnline -
ChatGPT Atlas Under Guard: OpenAI Fortifies Browser Agent Against “Prompt Injection” Attacks
OpenAI has rolled out a critical security update for its ChatGPT Atlas agent mode to harden it against a new class of prompt-injection attacks discovered during internal testing. The update introduces a newly adversarially trained model and strengthened…
SecurityOnline -
The “lc” Leak: Critical 9.3 Severity LangChain Flaw Turns Prompt Injections into Secret Theft
The article reports a critical vulnerability in LangChain, tracked as CVE-2025-68664, with a CVSS score of 9.3 that could allow attackers to extract environment variable secrets or trigger unintended system actions. The flaw arises from how LangChain handles…
SecurityOnline -
Hackers Weaponize npm to Hunt Critical Infrastructure Sales Teams
The Socket Threat Research Team’s investigation, published on 25 December 2025, reveals a sophisticated spear-phishing operation that abused the npm registry for at least five months to target critical infrastructure sectors in the US and allied nations.…
SecurityOnline -
Zimbra Under Siege: High-Severity LFI Vulnerability Exposes Internal Files to Unauthenticated Attackers
Administrators of Zimbra Collaboration Suite are being urged to patch after two vulnerabilities were disclosed, tracked as CVE-2025-68645 and CVE-2025-67809, affecting the 10.0 and 10.1 branches. The most severe, CVE-2025-68645, is a high-severity Local File…
SecurityOnline -
“Contagious Interview” Goes macOS: North Korean Hackers Deploy Stealthy “DriverFixer” Stealer
A new macOS-targeting tool, DriverFixer0428, has been uncovered as part of the Contagious Interview campaign, aimed at tricking job seekers and developers into installing malware under the guise of technical interviews. A security researcher, LunchM0n3y,…
SecurityOnlineContagious Interview -
The Ghost in the Market: Unmasking “Fly,” the Secret Architect of the Infamous Russian Market
According to Intrinsec, the investigation into the Russian Market links its infrastructure to a persistent threat actor known as “Fly,” also known as “Flyded,” who was instrumental in the marketplace’s early promotion and has maintained a decade-long…
SecurityOnline
