CYBERSIXT
Signal Over Noise
Live threat intelligence
Latest Cybersecurity News
Breaking threat intelligence, CVE analysis, and active-threat coverage.
95
Articles · 24h
368
KEV CVEs tracked
Filters
All publications
Newest
Oldest
Favourites
This box filters the last 24h — search the full archive →
Live
DARKREADING.COM — Marvell, Microsoft and Oracle plan open in server HSM specification work
DARKREADING.COM — Survey finds DLP blocked just 16% of major data loss incidents
SECURITYAFFAIRS.COM — OpenAI Says Coding Agents Disabled Monitoring During Internal Tasks
DARKREADING.COM — Critical PHP Flaws Enable Unauthenticated Code Execution on Servers
THEHACKERNEWS.COM — GitLab patches critical flaw enabling unauthenticated code execution
MALWAREBYTES.COM — WhatsApp AI Hid Privacy Regulator Advice from Users Seeking Help
MICROSOFT.COM — AI-powered Storm-0940 attacks breached cloud environments in under…
THEHACKERNEWS.COM — Compromised LiteLLM release steals developer credentials and installs a…
SECURITYWEEK.COM — Chrome adds new scam warnings and blocks deceptive ClickFix tricks
SECURITYWEEK.COM — PHP Patches PHP2Shell Flaws After Attack Attempts Target Servers
DARKREADING.COM — OVHcloud GitHub Attack Replaced CLI Releases with Malware for 93 Minutes
SECURITYONLINE.INFO — Dormant AI Agents Keep Working Credentials and Unsecured Triggers
THEHACKERNEWS.COM — OpenAI Reveals AI Agents Disabled Misalignment Monitoring During Coding…
MALWAREBYTES.COM — Critical PHP Flaws Trigger Emergency Patches as Attacks Begin
DARKREADING.COM — Marvell, Microsoft and Oracle plan open in server HSM specification work
DARKREADING.COM — Survey finds DLP blocked just 16% of major data loss incidents
SECURITYAFFAIRS.COM — OpenAI Says Coding Agents Disabled Monitoring During Internal Tasks
DARKREADING.COM — Critical PHP Flaws Enable Unauthenticated Code Execution on Servers
THEHACKERNEWS.COM — GitLab patches critical flaw enabling unauthenticated code execution
MALWAREBYTES.COM — WhatsApp AI Hid Privacy Regulator Advice from Users Seeking Help
MICROSOFT.COM — AI-powered Storm-0940 attacks breached cloud environments in under…
THEHACKERNEWS.COM — Compromised LiteLLM release steals developer credentials and installs a…
SECURITYWEEK.COM — Chrome adds new scam warnings and blocks deceptive ClickFix tricks
SECURITYWEEK.COM — PHP Patches PHP2Shell Flaws After Attack Attempts Target Servers
DARKREADING.COM — OVHcloud GitHub Attack Replaced CLI Releases with Malware for 93 Minutes
SECURITYONLINE.INFO — Dormant AI Agents Keep Working Credentials and Unsecured Triggers
THEHACKERNEWS.COM — OpenAI Reveals AI Agents Disabled Misalignment Monitoring During Coding…
MALWAREBYTES.COM — Critical PHP Flaws Trigger Emergency Patches as Attacks Begin
Daily Briefing
loading…
Read the full briefing
→
Latest analysis
Marvell, Microsoft and Oracle plan open in server HSM specification work
Survey finds DLP blocked just 16% of major data loss incidents
OpenAI Says Coding Agents Disabled Monitoring During Internal Tasks
Critical PHP Flaws Enable Unauthenticated Code Execution on Servers
GitLab patches critical flaw enabling unauthenticated code execution
WhatsApp AI Hid Privacy Regulator Advice from Users Seeking Help
AI-powered Storm-0940 attacks breached cloud environments in under three hours
Compromised LiteLLM release steals developer credentials and installs a backdoor
Chrome adds new scam warnings and blocks deceptive ClickFix tricks
PHP Patches PHP2Shell Flaws After Attack Attempts Target Servers
OVHcloud GitHub Attack Replaced CLI Releases with Malware for 93 Minutes
Dormant AI Agents Keep Working Credentials and Unsecured Triggers
OpenAI Reveals AI Agents Disabled Misalignment Monitoring During Coding Tasks
Critical PHP Flaws Trigger Emergency Patches as Attacks Begin
ISC Patches Four BIND 9 Flaws, Including a Remote Code Execution Risk
Node.js fixes Brotli flaw that could enable remote code execution
Optiv Launches Free Cybersecurity Lessons for Schools and Communities
Security Leaders Warn Digital Exposure Is Putting Executives at Risk
PHP Zero Days Put Millions of Websites at Risk of Remote Takeover
Critical PHP Flaws Enable Remote Code Execution Without Login
Critical PHP flaws enable unauthenticated remote code execution across versions 5 to 8
Malicious LiteLLM Release Steals Cloud, AI and Developer Credentials
Critical PHP flaws enable remote code execution as exploit PoCs emerge
Tracebit’s Context Bombs Trick AI Attack Agents Into Abandoning Targets
AI Powered Athena Phishing Platform Uses Cloaking to Evade Detection
Ransomware attackers exploit severe flaws within three days, Rapid7 warns
Weak eMudhra CA Keys Let Attackers Forge Trusted TLS Certificates
PHP Fixes Two Critical Flaws That Could Let Attackers Run Code
Cloudflare WAF Now Blocks Responses That Reveal Successful Exploits
Backdoored LiteLLM release steals credentials and enables remote code execution
AI-assisted cybercriminal used DeepSeek to steal university data and credentials
AI Agent Ran 100,000 Autonomous Actions in Cyber-Attack Campaign
PHP Patches Critical Unauthenticated Flaws That Expose Web Servers
Cloudflare blocked php2shell attacks before PHP flaws were disclosed
Critical PHP Flaws Enable Remote Code Execution Across Web Servers
Asymptote Labs raises $5.5 million to secure AI agents in real time
Chrome Adds ClickFix Defences to Stop Malicious Commands Before They Run
Fake Amazon CAPTCHA Uses Windows Finger Tool to Install Malware
Cloudflare Brings AI Shopping Tools to Nearly 100,000 Online Stores
Chrome 156 patches 353 flaws, including six critical vulnerabilities
Fake Amazon Music Deal Targets YouTube Creators’ Google Logins
OpenAI Coding Agents Disabled Misalignment Monitoring During Tasks
US Bars Federal Agencies from Using DeepSeek AI Over Security Risks
China Aligned Bronze Sandcastle Uses DLL Sideloading to Spy on Organisations
Ransomware attacks surge 50% as groups shift to data theft attacks
AI Erases Phishing Tells as Attackers Personalise BEC at Scale
Signal Flaw Could Keep Calls Listening After Users Hang Up
Weak eMudhra keys let attackers forge trusted HTTPS certificates
SafePay Ransomware Hits 600 Critical Infrastructure Organisations
US Orders Federal Agencies to Remove DeepSeek AI Tools Over Security Concerns
PHP2Shell Flaws Put PHP Servers at Risk of Remote Code Execution
PHP Warns Two Critical PHP2Shell Flaws Need Patching, Not Workarounds
AI Pentesting Is Only as Safe as Its Security Harness
Attackers Hijacked 333 Tor Relays to Steal SSH Passwords
Atlassian patches 176 flaws across Jira and Confluence products
PHP2Shell flaws threaten remote code execution across PHP websites
NCSC urges PHP users to patch flaws that could enable server takeover
PHP Prepares Emergency Fix for Critical php2shell RCE Flaws
Study Finds Qwen3 Coder Wrote Riskier Apps for US Defence Firms
Chrome Adds Scam Warnings and ClickFix Protection for Users
Lazarus Targets South Korean Firms Through Fake CV Websites
Oracle Patches Critical E-Business Suite Flaw That Could Enable Takeover
cURL to Publish Low-Risk Vulnerability Reports as GitHub Issues
Ransomware Attack Exposed Welsh Children’s Data Through ‘Password1’ Test Account
Updraft Breach Exposed Keys That Could Install WordPress Backdoors
Apple Blocks WebKit Identity Tracking, Forcing Advertisers to Rethink Targeting
Hackers Hijacked 333 Tor Exit Nodes to Steal SSH Credentials
UK Watchdog Moves to Open iPhone Payments to Rival Wallets
Perplexity brings its Computer AI workflows to Apple Silicon Macs
US Orders Civilian Agencies to Remove DeepSeek From IT Systems
Aoki Infostealer Targets Credentials for AI Coding Tools and Cloud Services
State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web
CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws
Hackers targeted government Linux servers to steal passwords and hijack official accounts
Critical PHP2Shell flaws could expose servers to remote code execution
ConnectWise Backup Breach Exposed More Than 300 Microsoft Tenants
Belarusian Hackers Hid in Russian Healthcare Network for Two Years
Compromised GitHub account slipped secret stealer into OVHcloud CLI releases
Pegasus Spyware Infected Serbian Rector’s iPhone Before Election
PHP Prepares Emergency Fixes for Two Critical RCE Flaws
Accenture, Dragos and SANS launch $10m cyber fund for US utilities
Critical CouchDB Flaw Lets Admins Run Shell Commands, Apache Warns
Oracle Patches 203 Fusion Middleware Flaws, Including Four Critical Bugs
PHP Warns of Critical Flaws That Could Expose 1.3 Million Hosts
Lazarus Group abuses South Korean security software in FlashHole campaign
eMudhra Revokes Eight CAs After Private Keys Were Created One Byte Long
Mozilla Blocks Weak eMudhra Keys That Could Enable Website Impersonation
Industrial Defender Adds Network Monitoring to Help Utilities Meet NERC CIP Rules
Google Chrome 156 Fixes 353 Security Flaws, Including Six Critical Bugs
Apache Tomcat fixes authentication bypass and data leaks in key releases
MariaDB fixes seven flaws, including a file access bug that could enable code execution
Oracle’s October Patch Fixes 1,209 CVEs, Including Six Critical Flaws
30 Flaws Threaten Advantech Industrial Units, Enabling Remote Attacks
PHP Prepares Critical RCE Fixes as Leaked Flaws Raise Alarm
Cloudflare Warns Compromised Certificate Keys Could Enable Server Impersonation
The Feed
Last 24 hours
Load more
X