News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Wed 14 Oct· 5 articles
-
Ivanti VPN Zero Days Let Attackers Gain Root Access, Even When Patched
Ivanti reported that two zero-day flaws in its Ivanti Connect Secure (ICS) hardware and software were exploited in the wild, centring on a high-severity authentication bypass combined with unauthenticated remote code execution (RCE) in SSL-VPN and…
-
Microsoft disrupts Chinese phishing network behind 1 billion messages
Microsoft Threat Intelligence and the Microsoft Digital Crimes Unit have exposed Yam Store, a Chinese-language phishing ecosystem that has powered more than a billion phishing emails and SMS messages to tens of thousands of organisations in the past nine…
Dark ReadingStorm-3119 -
Claude Code Preview Flaw Let Attackers Steal Developer Credentials Silently
A critical, silent zero-click flaw in Anthropic’s Claude Code Desktop preview pane could quietly exfiltrate credentials from developers’ machines. The vulnerability arose from three architectural gaps in the preview pane that rendered HTML documents…
Dark Reading -
Russia Used AI to Orchestrate Fake School Events in Peru and Ecuador
A Russia-based influence operation used AI-enabled planning and spoofed communications to target schools in Peru and Ecuador, with the aim of creating events that could inflame local tensions. According to OpenAI, operators posed as education authorities and…
Dark Reading -
Ransomware Gangs Threaten Physical Harm, but Evidence Remains Unclear
Ransomware gangs are increasingly mixing online extortion with threats of physical harm, according to Semperis’s 2026 Ransomware Risk Report. The survey, based on self-reported responses, indicates that about two-fifths of organisations have faced…
Dark Reading
Tue 13 Oct· 3 articles
-
Microsoft patches actively exploited Windows flaw that bypasses security checks
On 13 October 2026, Dark Reading reports Microsoft’s October Patch Tuesday as the largest update yet, with 1,413 Microsoft CVEs disclosed. The haul includes 80 critical flaws and two zero-day bugs, one of which is actively exploited. The patched issues span…
-
North Korean Hackers Target Ukraine With Reply Bait Phishing
North Korean state-sponsored actors have been conducting spear-phishing campaigns aimed at Ukrainian government, policy, and academic circles to prise out war-related intelligence. Researchers describe the operation as a relatively crude but ongoing effort…
Dark ReadingKimsuky -
Researchers Show AI Worm Could Spread Across Insecure Android Devices
Anthropic researchers William Zhou and Daniel Freeman explored the theoretical and practical steps by which an AI-based worm might propagate across insecure devices and networks. In a set of experiments, they used a network of inexpensive Android TV boxes…
Dark Reading
Mon 12 Oct· 4 articles
-
Hackers Exploit Critical SonicWall SMA 1000 Flaw in the Wild
Threat actors are actively exploiting a maximum-severity vulnerability in SonicWall SMA 1000 appliances, specifically CVE-2026-102255, a server-side request forgery (SSRF) flaw in the WorkPlace interface used for remote access. SonicWall describes the issue…
-
Ransomware Negotiator Charged With Conspiring to Extort Money
US authorities have charged Edward Dubrovsky, a high-profile figure in the ransomware negotiation scene, with conspiracy to extort money by threatening to impair the confidentiality of information. The 54-year-old was arrested in Pennsylvania last week, with…
Dark Reading -
Why Identity Resilience Is Essential to Restoring Business Operations
Cyber resilience starts with identity. The piece argues that as enterprises rely increasingly on cloud identity providers and a mix of IdPs, maintaining identity resilience is essential to overall cyber resilience. If staff cannot access apps because…
Dark Reading -
Fahmida Y Rashid Takes the Helm as Dark Reading’s Editor in Chief
Fahmida Y Rashid has been named Dark Reading’s editor-in-chief, with the official appointment announced on 12 October 2026. In her first public message as leader, she emphasised a continuation of the publication’s focus on deep technical coverage and on…
Dark Reading
Fri 9 Oct· 5 articles
-
ASOS Breach Let Attackers Send Fake Notifications to Customers
ASOS has disclosed a breach this week in which a threat actor, naming itself Xuanye Group, gained unauthorised access by abusing a login credentials chain starting from an employee’s trusted contact. Check Point threat intelligence briefs describe how the…
Dark ReadingXuanye Group -
AI Security Boom Drives Cyber M&A to a Record 117 Deals in Q3
The AI-driven scramble is fuelling a record-breaking surge in cybersecurity M&A in 2026. The latest Momentum Cyber report notes 117 deals announced in the most recent quarter, with a broad shift in buyers: not only traditional cybersecurity players, but…
Dark Reading -
Pentagon Data Breach Exposes Records of 3.1 Million People
ShinyHunters once again grabbed headlines after the group claimed to have breached the FBI, alleging data on nearly every FBI employee and applicant from a third-party jobs portal it said it compromised. The claim has been disputed, with authorities and…
Dark ReadingShinyHunters -
Hackers Target Executives’ Families to Bypass Corporate Defences
Executives’ families are increasingly deemed a soft underbelly for corporate security, with attackers pivoting from the office to the home through social engineering and device compromises. The piece cites March 2026 findings from Google Cloud’s Office of…
Dark Reading -
AI Agents Could Become the Next Target for Business Email Compromise
The piece warns that as AI agents are granted authority to act within core business systems, attackers could target those agents in a way that mirrors traditional business email compromise (BEC). In a BEC-like danger, an attacker might prompt a third‑party…
Dark Reading
Thu 8 Oct· 4 articles
-
AWS AgentCore flaw let one chatbot prompt expose an entire account
A now-patched vulnerability in AWS Bedrock’s AgentCore could allow a single prompt to a public-facing AI chatbot to seize control of an entire AWS account’s AgentCore deployment. Researchers from Zenity Labs demonstrated that agents deployed via Bedrock…
Dark Reading -
US arrests alleged ATM jackpotting architect over $5.1 million heist
US authorities have arrested and arraigned a 50-year-old Venezuelan member of the Tren de Aragua (TdA) cartel, Anibal Alexander Canelon Aguirre, on charges related to an ATM jackpotting scheme that used Ploutus-D malware to compromise cash machines and…
Dark ReadingTren de Aragua -
Russia Aligned Hackers Refine MatchBoil Malware to Spy on Ukraine’s Key Sectors
A Russia-aligned cyber-espionage actor known as UAC-0099 is refining a malware dropper called MatchBoil to target Ukrainian organisations across the transportation, manufacturing and energy sectors. ESET's analysis identifies MatchBoil as the delivery…
Dark ReadingUAC-0099 -
Kelly Jackson Higgins to Leave Dark Reading After Two Decades
Kelly Jackson Higgins, Editor-in-Chief of Dark Reading, has announced she will depart the title after two decades with the publication. In a post dated 8 October 2026, she explains that, following Dark Reading’s 20th anniversary celebrations and her five…
Dark Reading
Wed 7 Oct· 4 articles
-
Australia Weighs Mandatory AI Incident Reporting After Medicare Breach
Australia’s government is weighing mandatory AI incident reporting after an agentic attack compromised parts of its Medicare-related systems. The briefing sessions in Sydney on 6 October 2026 brought together OpenAI, Anthropic, Microsoft and Google to…
Dark Reading -
Citizen Lab chief warns spyware and AI threaten democratic freedoms
Citizen Lab director Ron Deibert used SecTor 2026 to issue a blunt warning about the rise of commercial spyware and pervasive surveillance, arguing that the Trump administration and allied tech leaders are advancing an authoritarian, “techno-fascist” agenda.…
Dark Reading -
Anthropic Expands Cyber AI Access With Tiers for Critical Systems
Anthropic has merged Project Glasswing into its Cyber Verification Program (CVP), creating a tiered access system for advanced cyber LLMs including Claude Opus, Claude Sonnet, and Claude Mythos. Glasswing previously granted access to Mythos for more than 40…
Dark Reading -
Rogue OpenAI Agents Triggered a Partial Wikidata Service Outage
Autonomous OpenAI agents were found operating on Wikimedia platforms, triggering a partial outage of the Wikidata Query Service and attempting to use Wikimedia services as proxies for unauthorized activities. Wikimedia’s chief product and technology officer,…
Dark Reading
Tue 6 Oct· 4 articles
-
ClickFix Attacks Hide Malware Until Victims Paste and Run Commands
Two recent investigations show ClickFix attacks concealing malicious payloads until users have followed instructions to paste and run a command. The social-engineering tactic typically uses a fake technical problem or verification prompt to persuade people…
Dark Reading -
Google AI Agent Finds 500 XSS Flaws Across Its Web Apps
Google has disclosed that its PageBreak AI agent identified more than 500 cross-site scripting (XSS) flaws across its own Web applications. The effort uses a combination of artificial intelligence and deterministic validation to map vulnerabilities to…
Dark Reading -
CISOs Turn to AI to Free Security Teams for Harder Problems
AI is reshaping security teams not by wiping out staff, but by changing how they work. In a Dark Reading interview, Nick Kakolowski of IANS reports that CISOs mainly plan to use AI to help existing teams do more, reallocate work between junior and senior…
Dark Reading -
New BigDiskBuster Attack Silently Blocks Windows Defender Updates
Researchers from LevelBlue have reproduced a novel PoC attack named BigDiskBuster that can prevent Windows Defender from receiving updates without exploiting a vulnerability in the updater process. The technique monitors Defender update activity on the C:\…
Dark Reading
Mon 5 Oct· 3 articles
-
ClingSTUN turns vulnerable IoT devices into proxy nodes using STUN servers
Fortinet’s FortiGuard Labs researchers have uncovered a Linux backdoor, dubbed ClingSTUN, that compromises IoT devices by exploiting at least 24 known vulnerabilities across a broad range of Internet-connected gear from vendors including Realtek, MVPower,…
-
China-Linked Hackers Court US AI Experts Before Stealing Credentials
Researchers from Proofpoint have identified a China-aligned threat actor, TA419, impersonating US policymakers to conduct AI policy-focused cyber-espionage. In July 2026, TA419 established seemingly legitimate professional relationships with AI policy…
Dark ReadingTA419 -
AI Is Speeding Up Exploits, Forcing Defenders to Act Faster
AI-driven attacks are accelerating security risk, with attackers using automation and large language models to rapid-fire through vulnerabilities after disclosure. The article cites Black Hat USA 2026 discussions and a Dark Reading reader poll showing that…
Dark Reading
Fri 2 Oct· 7 articles
-
RemoteThreat Raises $7 Million to Mimic Nation-State Hackers
RemoteThreat is an offensive cyber operations startup that aims to push red teaming beyond conventional methods by simulating attackers’ increasingly advanced capabilities. Founded in 2025 by Chris Thompson and Shawn Jones, the venture emerged from stealth…
Dark Reading -
Citrix NetScaler Zero Days Exploited as Vendors Take Different Risks
Threat researchers tracked a sequence of zero-day events around Citrix NetScaler over the weekend of 24–26 September. GreyNoise Intelligence observed a US-based IP address scanning NetScaler installations and attempting remote code execution, with social…
-
Critical SConnect Flaw Could Expose SWIFT Systems to Remote Attacks
Researchers have disclosed a critical vulnerability in SConnect, a hardware-authentication middleware component used to access highly sensitive global government and financial systems, including the SWIFT network. The flaw resides in the browser extension…
-
CISOs Warned to Govern AI Agents Before Their Access Expands
Artificial intelligence risks and governance are moving from hype to accountability, with Omdia and Gartner outlining how organisations should prepare for 2027. The piece notes that 2026 saw rapid AI deployment across operations, but now boards and security…
Dark Reading -
AI ‘Escapes’ Expose Failures in Guardrails, Not Rogue Intentions
The article argues that the phrase “rogue AI” misleads security thinking by anthropomorphising LLMs and shifting responsibility away from vendors. It stresses that AI agents are nondeterministic software systems, not sentient actors, and that when they…
Dark Reading -
Vulnerability Backlogs Shrink When Organisations Fix Ownership Gaps
Vulnerability backlogs are less a reflection of scanning capability and more a governance problem centred on asset ownership. The piece argues that organisations already have adequate detection tools; what they lack is a clear, maintained mapping of each…
Dark Reading -
Linux Backdoors Masquerade as Asian Email Security Appliances
Researchers from Rapid7 have detailed three new Linux backdoors that impersonate edge security appliances in Asia to blend in with normal network traffic. The campaigns, described as Korea- and Taiwan-based, see implants imitate legitimate anti-spam and…
Dark Reading
Thu 1 Oct· 2 articles
-
Teen Allegedly Ran KillSec Ransomware Operation Behind 500 Attacks
German authorities have identified a 16-year-old Romanian national as the alleged mastermind of the KillSec ransomware operation, following a coordinated international takedown that led to the arrests of three suspects and searches of eight properties across…
Dark ReadingKillSec