News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Mon 12 Jan· 50 articles
-
The Soviet Ghost: How Carding Markets Survive on Legacy Domains
A new analysis by Team Cymru researchers sheds light on the infrastructure powering carding bands, showing a network that relies heavily on bulletproof offshore hosting and legacy domains from countries that no longer exist. Between July and December 2025,…
SecurityOnline -
The XML Trap: Critical Struts 2 Flaw CVE-2025-68493 Exposes Data
A new vulnerability in Apache Struts 2, tracked as CVE-2025-68493, targets the XWork component and could allow attackers to steal data or launch Denial-of-Service attacks by exploiting improper handling of XML configurations and XML External Entity…
SecurityOnline -
CVE-2025-68637: Critical Apache Uniffle Flaw Exposes Clusters to Eavesdropping
CVE-2025-68637 is a high-severity flaw in Apache Uniffle, the remote shuffle service that underpins data movement for large distributed computing engines, with a CVSS score of 9.1 and implications for Apache Spark, Hadoop MapReduce and Tez clusters. The…
SecurityOnline -
“Boto Cor-de-Rosa”: Banking Malware Astaroth Pivots to WhatsApp in New Campaign
The Brazilian banking malware Astaroth has evolved again, turning WhatsApp into a tool for its latest campaign dubbed “Boto Cor-de-Rosa,” with researchers from the Acronis Threat Research Unit uncovering the move to exploit WhatsApp Web to spread itself by…
SecurityOnline -
Pig Butchering-as-a-Service: How “Penguin” Industrialized Global Fraud
The world of pig butchering scams has evolved into a streamlined, automated service economy, with Pig Butchering-as-a-Service (PBaaS) enabling criminal operations to scale like software subscriptions. According to Infoblox, specialized service providers now…
SecurityOnline -
CVE-2026-22184 (CVSS 9.3): Critical zlib Flaw Opens Door to Global Buffer Overflow
CVE-2026-22184 (CVSS 9.3) is a critical flaw in zlib that opens the door to a global buffer overflow, risking DoS or remote code execution on systems using the library’s untgz utility. The vulnerability stems from a memory management error in TGZfname(),…
SecurityOnline -
RustyWater Rising: MuddyWater Drops PowerShell for Stealthy Rust Implants
The MuddyWater APT group has overhauled its arsenal, abandoning traditional scripting tools in favour of a stealthier Rust-based implant, as outlined in a CloudSEK TRIAD report. The operation targets diplomatic, maritime, financial, and telecom entities in…
SecurityOnlineMuddyWater -
Unpatched & Exposed: Legacy Vivotek Cameras Broadcast Live Video to All
Legacy Vivotek IP7137 cameras are described as having four critical vulnerabilities disclosed by CERT Polska, with no patch expected due to the product being End-Of-Life. According to CERT Polska, the flaws range from unauthorised video streaming to remote…
SecurityOnline -
China-Nexus Actor UAT-7290 Caught Targeting Telecoms in South Asia and Europe
Cisco Talos has pulled back the curtain on UAT-7290, a threat actor operating out of the China-nexus since at least 2022. Specialising in stealth and persistence, the group has been systematically dismantling the networks of critical infrastructure entities,…
SecurityOnlineDAGGER PANDA -
Game Over? Critical InputPlumber Flaws Expose Linux Gamers to Hijacking
A Linux gaming utility called InputPlumber has been found to harbour critical vulnerabilities that could let local attackers hijack sessions or crash systems, according to SUSE Security Team. The flaws, tracked as CVE-2025-66005 and CVE-2025-14338, arise…
SecurityOnline
