News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Tue 30 Dec 2025· 28 articles
-
Coupang announces $1.17B compensation plan for 33.7M data breach victims
Coupang will spend about $1.17 billion to compensate 33.7 million users affected by a data breach, offering purchase vouchers across its services. The four vouchers total 50,000 won and become usable from 15 January, with eligibility checkable in the app.…
Security Affairs -
CSA Issues Alert on Critical SmarterMail Bug Allowing Remote Code Execution
According to the Cyber Security Agency of Singapore (CSA), a maximum-severity flaw in SmarterTools SmarterMail could allow remote code execution via arbitrary file uploads, with no authentication required. The vulnerability is tracked as CVE-2025-52691 and…
The Hacker News -
MUSTANG PANDA3 articles this day · The Hacker News first
Mustang Panda deploys ToneShell via signed kernel-mode rootkit driver · Chinese APT Mustang Panda Caught Using Kernel-Mode Rootkit
3 outlets-
Mustang Panda deploys ToneShell via signed kernel-mode rootkit driver
China-linked APT Mustang Panda was observed using a signed kernel-mode rootkit driver with embedded shellcode to load ToneShell backdoor, marking the first observed delivery of ToneShell via a kernel-mode loader. The malicious driver, named…
Security Affairs -
Chinese APT Mustang Panda Caught Using Kernel-Mode Rootkit
The SecurityWeek piece reports that the Chinese APT Mustang Panda, also known as Basin, Bronze President, Earth Preta, Red Delta and HoneyMyte, has been observed using a kernel-mode rootkit in attacks against Asian targets, with findings attributed to…
SecurityWeek -
Mustang Panda Uses Signed Kernel-Mode Rootkit to Load TONESHELL Backdoor
The Chinese hacking group Mustang Panda has used a previously undocumented kernel-mode rootkit driver to deliver a new variant of the backdoor dubbed TONESHELL, in a cyber attack detected in mid-2025 targeting an unspecified entity in Asia. According to…
The Hacker News
-
-
Cybersecurity Predictions 2026: An AI Arms Race and Malware Autonomy
Cybersecurity predictions for 2026 focus on a deepening AI arms race, with attackers using autonomous malware and advanced AI to outpace defenders, while security teams deploy more sophisticated AI-driven tools to detect, contain, and remediate threats. The…
Dark Reading -
New Tech Deployments Cyber Insurers Recommend for 2026
New Tech Deployments Cyber Insurers Recommend for 2026 analyses cyber-insurance claims data to identify which defenses actually work for policyholders, outlining six technologies insurers expect to pay off in 2026. According to Resilience's 2025 Cyber Risk…
Dark Reading -
8 Cybersecurity Acquisitions Surpassed $1 Billion Mark in 2025
Eight cybersecurity acquisitions surpassed the $1 billion mark in 2025, according to SecurityWeek, as the year closed with eight deals above the threshold and a total disclosed value for all M&A deals of more than $84 billion. The article notes that the $1…
SecurityWeek -
Software company lacked ‘downstream’ liability for data breach
According to Massachusetts Lawyer Weekly, a software company could not face “downstream” liability for a data breach that led an end-user to settle a class action. The end-user Zoll Services had purchased Barracuda Network’s email archiving service through…
DataBreaches -
US, Australia say ‘MongoBleed’ bug being exploited
According to The Record, U.S. and Australian cyber agencies have confirmed that hackers are exploiting a vulnerability that emerged over the Christmas holiday and is affecting data storage systems from MongoDB. The issue drew attention on 25 December when…
DataBreaches -
French software company fined $2 million for cyber failings leading to data breach
France’s data protection regulator CNIL has fined Nexpublica France €1.7 million ($2 million) for poor cybersecurity practices in the wake of a data breach. In November 2022, users of a Nexpublica portal reported they could access documents about third…
DataBreaches -
‘Why should we pay these criminals?’: the hidden world of ransomware negotiations
Anna Isaac reports on the hidden world of ransomware negotiations, describing what they call “stopping the bleeding,” the vital window to prevent a database in a hacked business or production line from being ransacked. When a call comes into the London-based…
DataBreaches -
Lithuanian suspect arrested over KMSAuto malware that infected 2.8M systems
A Lithuanian national, aged 29, was arrested for allegedly spreading KMSAuto-based clipboard-stealing malware that infected about 2.8 million Windows and Office systems, according to the report. The suspect was extradited from Georgia to South Korea under…
Security Affairs -
Silver Fox Targets Indian Users With Tax-Themed Emails Delivering ValleyRAT Malware
The threat actor known as Silver Fox has turned its focus to India, using income tax-themed lures in phishing campaigns to deliver a modular remote access Trojan called ValleyRAT (also known as Winos 4.0). This sophisticated operation employs a complex kill…
The Hacker NewsVoid Arachne -
2025 exposed the risks we ignored while rushing AI
Malwarebytes’ December 2025 post argues that 2025 saw an escalating rush to add AI features, with manufacturers slapping AI onto products simply because it sounded exciting, often without proper safety controls. It highlights agentic browsers that can act…
Malwarebytes -
How to Integrate AI into Modern SOC Workflows
Artificial intelligence is making its way into security operations quickly, but many practitioners are still struggling to turn early experimentation into consistent operational value. The article notes that 40 percent of SOCs use AI or ML tools without…
The Hacker News -
Korean Air Data Compromised in Oracle EBS Hack
Korean Air has disclosed a data breach exposing 30,000 employee records following a cyberattack on its former subsidiary and current catering supplier, KC&D. KC&D was originally part of Korean Air but was spun off and sold in 2020. According to Korea…
SecurityWeek -
U.S. CISA adds a flaw in MongoDB Server to its Known Exploited Vulnerabilities catalog
According to CISA, the U.S. Cybersecurity and Infrastructure Security Agency added a MongoDB Server vulnerability, tracked as CVE-2025-14847 (CVSS Score 8.7), to its Known Exploited Vulnerabilities catalog. The flaw, also known as MongoBleed, is being…
Security Affairs -
The Big Screen Remembers: Samsung & Google Bring Vision AI to Your Photos
Samsung has announced plans to become the world’s first television manufacturer to natively integrate Google Photos into its TV lineup, a move that goes beyond simply porting an app to the screen. According to Samsung, the integration will deeply fuse Google…
SecurityOnline -
The Memory Rebellion: SoftBank & Intel’s SAIMEMORY Aims to Topple HBM Dominance
The Memory Rebellion: SoftBank and Intel’s SAIMEMORY aims to topple HBM dominance, with the project seeking to deliver a commercially scalable memory technology that offers higher capacity, lower power and competitive pricing. According to Nikkei, Fujitsu…
SecurityOnline -
The Year Linux Went “Rusty”: 2025’s Most Audacious Kernel Breakthroughs
The year saw Rust firmly establish itself in the Linux kernel, with the Rust-for-Linux project reaching a formal milestone as Rust became a fully fledged part of Linux and a patch by Miguel Ojeda closing the experimental chapter. According to CVE-WATCHTOWER,…
SecurityOnline -
CISA Alert: MongoBleed Added to KEV Catalog as 80,000+ Servers Face Active Exploitation
According to CISA, a critical MongoDB vulnerability dubbed “MongoBleed” has been added to the Known Exploited Vulnerabilities (KEV) Catalog and is being actively exploited to exfiltrate data from servers worldwide. The flaw, tracked as CVE-2025-14847,…
SecurityOnline -
CVE-2025-52691 (CVSS 10): Critical SmarterMail Flaw Opens Servers to Unauthenticated Attacks
CVE-2025-52691 (CVSS 10) is a critical SmarterMail flaw that could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution, according to the advisory. The vulnerability lies…
SecurityOnline -
CVE-2025-13915: Critical 9.8 Flaw in IBM API Connect Lets Attackers Bypass Login
CVE-2025-13915 is described as a critical 9.8 flaw in IBM API Connect that could let remote attackers bypass authentication and gain unauthorised access to the application. IBM has issued an urgent security alert noting that the vulnerability could allow…
SecurityOnline -
The $339 Trillion Glitch: Ubisoft Loses Control of Rainbow Six Siege in Massive Breach
The Daily CyberSecurity report dated 30 December 2025 describes a hacker attack that compromised Ubisoft’s Rainbow Six Siege servers, with attackers infiltrating the system and granting large amounts of in‑game currency and items to many players. This…
SecurityOnline -
The Arms Dealer Returns: Why NVIDIA is Retreating from the Cloud War
On 30 December 2025, sources cited by The Information indicate that NVIDIA is undergoing an internal reorganisation, scaling back the public DGX Cloud division and folding the unit into the core engineering organisation under Senior Vice President Dwight…
SecurityOnline -
Beyond SOS: Samsung’s Exynos 5410 Brings 5G Video Calls to the Middle of Nowhere
Samsung has unveiled its latest 5G data modem, the Exynos Modem 5410, manufactured using a 4nm process, which has already entered mass production and is widely expected to become a standard component of next year’s Galaxy S26 series. Its most striking…
SecurityOnline -
The £1.5bn Showdown: Apple Appeals Landmark Ruling Over “Unfair” App Store Fees
Apple has appealed the UK Competition Appeal Tribunal’s ruling that it abused its dominant position in the App Store by charging a “Apple tax” and ordered around £1.5 billion in damages, signalling it does not intend to concede quietly. Reports indicate the…
SecurityOnline
