News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Wed 31 Dec 2025· 27 articles
-
Sunken Ships: Will Orgs Learn From Ivanti EPMM Attacks?
The Ivanti Endpoint Manager Mobile (EPMM) zero-day exploits began in April 2025 and persisted into the summer, exploiting patching lag to compromise thousands of organisations, with Europe heavily affected and a government entity in the United Kingdom cited…
Dark Reading -
Trust Wallet Chrome Extension Hack Drains $8.5M via Shai-Hulud Supply Chain Attack
Trust Wallet says a second wave of the Shai-Hulud supply chain attack in November 2025 was likely responsible for the hack of its Google Chrome extension, resulting in about $8.5 million in assets being drained. The incident followed the exposure of…
The Hacker News -
Attorney General James Secures $500,000 from Capital Region Health Care Provider for Failing to Protect Patients’ Information
New York Attorney General Letitia James announced that her office has secured $500,000 in penalties from OrthopedicsNY, LLP for failing to protect patients’ private information, with the health care practice serving the Capital Region. An investigation by…
DataBreaches -
DarkSpectre Browser Extension Campaigns Exposed After Impacting 8.8 Million Users Worldwide
The Hacker News reports that the DarkSpectre operation has impacted 2.2 million users across Google Chrome, Microsoft Edge and Mozilla Firefox, forming part of a broader set of campaigns attributed to a Chinese threat actor tracked by Koi Security under the…
The Hacker NewsDarkSpectre -
ESA disclosed a data breach, hackers breached external servers
The European Space Agency (ESA) disclosed a data breach after a threat actor offered to sell data allegedly stolen from the organisation. A hacker using the moniker “888” announced the hack on BreachForums on 18 December, with SecurityWeek reporting that the…
Security Affairs -
When the Cloud Rains on Everyone's IoT Parade
Cloud outages disrupted a wide range of IoT and daily life, with outages to Amazon Web Services, Cloudflare and Azure illustrating how integral cloud services have become to connected devices. The AWS outage in mid-October lasted nearly 15 hours, triggering…
Dark Reading -
Singapore CSA warns of maximun severity SmarterMail RCE flaw
Singapore’s Cyber Security Agency of Singapore (CSA) warns of CVE-2025-52691, a maximum severity flaw in SmarterMail that enables unauthenticated remote code execution via arbitrary file upload. According to CSA’s advisory, the vulnerability has a CVSS score…
Security Affairs -
Identity Security 2026: Four Predictions and Recommendations
Identity Security 2026 predicts that hackers will target AI agents as agentic AI moves from experimentation to production, with some high‑profile data breaches and fraud stemming from AI agents as core business processes are touched in 2026. It also foresees…
Dark Reading -
Contrarians No More: AI Skepticism Is on the Rise
According to Dark Reading, as 31 December 2025 draws near, scepticism about AI has gained momentum amid fears of an AI bubble and disappointing returns on GenAI pilots. The piece notes that threat actors have continued to exploit GenAI platforms, while…
Dark Reading -
Two Cybersecurity Professionals Plead Guilty to Targeting Multiple U.S. Victims Using ALPHV BlackCat Ransomware
A federal district court in the Southern District of Florida has accepted the guilty pleas of two men to conspiring to obstruct, delay, or affect commerce through extortion in connection with ransomware attacks in 2023. According to court documents, Ryan…
DataBreaches -
IBM Warns of Critical API Connect Bug Allowing Remote Authentication Bypass
IBM has disclosed a critical security flaw in API Connect that could allow a remote attacker to bypass authentication and gain unauthorized access to the application, tracked as CVE-2025-13915. The vulnerability is rated 9.8 out of 10 on CVSS and affects IBM…
The Hacker News -
Researchers Spot Modified Shai-Hulud Worm Testing Payload on npm Registry
Cybersecurity researchers have disclosed a new Shai-Hulud variant found on the npm registry, embedded in the package "@vietmoney/react-big-calendar" which was uploaded in March 2021 by user "hoquocdat" and updated on 28 December 2025 to version 0.26.2. The…
The Hacker News -
Supply chains, AI, and the cloud: The biggest failures (and one success) of 2025
The Ars Technica year-in-review highlights a troubling convergence of supply chains, AI, and cloud outages as 2025’s defining security story. A cascade of supply-chain attacks and incidents—ranging from typosquatted packages in Go to the NPM flood of 126…
Ars Technica -
Shai-Hulud Supply Chain Attack Led to $8.5 Million Trust Wallet Heist
SecurityWeek reports that the Shai-Hulud 2.0 self-replicating worm, which initially hit the NPM registry in late November, is linked to an $8.5 million heist from Trust Wallet. Trust Wallet disclosed that hackers targeted users on version 2.68 of its Chrome…
SecurityWeek -
In 2025, age checks started locking people out of the internet
In 2025, across parts of Europe and the US, age checks for certain websites turned long‑running child‑protection debates into real‑world access controls, with users finding entire categories of sites locked behind ID checks and platforms geo‑blocking whole…
Malwarebytes -
European Space Agency Confirms Breach After Hacker Offers to Sell Data
The European Space Agency has confirmed that some of its systems were breached and that external science servers have been compromised, with the agency conducting a forensic investigation and securing affected devices. According to SecurityWeek, the ESA…
SecurityWeek -
MongoBleed (CVE-2025-14847): the US, China, and the EU are among the top exploited GEOs
MongoBleed (CVE-2025-14847) is a critical vulnerability that lets attackers remotely leak memory from MongoDB Server instances using zlib compression, without authentication. The flaw affects MongoDB deployments using zlib network compression and is…
Security Affairs -
The $41 Billion Golden Ticket: SoftBank Seals Historic OpenAI Stake
SoftBank Group has completed the payment of an additional $22.5 billion investment into OpenAI last Friday, 26 December 2025, bringing the group’s total capital injection to about $41 billion. Following the transaction, SoftBank will hold roughly 11% of…
SecurityOnline -
The Christmas Heist: How Shai-Hulud Hijacked Trust Wallet for an $8.5M Score
The Christmas Heist reveals that Trust Wallet, a Binance-owned non-custodial wallet, was compromised through an NPM supply-chain attack orchestrated by a hacking group known as Shai-Hulud. Attackers replaced the Trust Wallet listing in the Google Chrome Web…
SecurityOnline -
U.S. Treasury Lifts Sanctions on Three Individuals Linked to Intellexa and Predator Spyware
The U.S. Treasury’s Office of Foreign Assets Control (OFAC) has removed three individuals linked to the Intellexa consortium and its Predator spyware from the specially designated nationals list, according to OFAC. The individuals named are Merom Harpaz,…
The Hacker News -
CVE-2025-47411: Critical Apache StreamPipes Flaw Allows Standard Users to Seize Admin Control
CVE-2025-47411 is a newly disclosed, critical flaw in Apache StreamPipes that lets standard users seize total administrative control. The vulnerability, rated as Important, affects StreamPipes installations from versions 0.69.0 through 0.97.0. It exploits a…
SecurityOnline -
“RondoDoX” Strikes Back: Exposed Logs Reveal Massive 9-Month Campaign Targeting Next.js and IoT
RondoDoX has resurfaced with a potent new arsenal, shifting its focus from routers to enterprise-grade web frameworks, according to a CloudSEK intelligence report that details a sprawling nine-month campaign. The attackers reportedly weaponised cutting-edge…
SecurityOnline -
Cybersecurity Pros Admit to Moonlighting as BlackCat Ransomware Affiliates
Two cybersecurity professionals have admitted moonlighting as ransomware affiliates, using their technical expertise to extort and profit. Ryan Goldberg, 40, of Georgia, and Kevin Martin, 36, of Texas, pleaded guilty in a federal district court in the…
SecurityOnline -
The $2 Billion Bet: Why Meta Just Bought the World’s Fastest-Growing AI Startup
Meta has confirmed the acquisition of Manus, a Singapore-headquartered AI startup that rose to prominence after eight months on the market, surpassing $100 million in annual recurring revenue. The company behind Manus is affiliated with Beijing Butterfly…
SecurityOnline -
Bixby’s Revenge: Samsung Pairs with Perplexity AI to Outsmart Google Gemini
Samsung is reportedly upgrading Bixby by integrating Perplexity AI, moving beyond its previous reliance on Google Gemini as part of the One UI 8.5 beta. When users pose more complex questions, Bixby is described as quietly invoking Perplexity’s API to fetch…
SecurityOnline -
The Insider Crisis: How Bribed Outsourced Staff Sold Out Ubisoft’s Crown Jewels
According to VX-underground, outsourced Ubisoft staff in India and South Africa were bribed to provide attackers with access paths into Ubisoft’s internal network, enabling a shadow insider-for-hire ecosystem that predates the latest incidents by several…
SecurityOnline -
The Mole in the Machine: New Arrests in Coinbase’s $400M Insider Data Scandal
The Mole in the Machine: New Arrests in Coinbase’s $400M Insider Data Scandal reports that Coinbase disclosed Indian police have arrested a former employee from Coinbase’s vendor TaskUs who helped hand over customer records to hackers in exchange for bribes.…
SecurityOnline
