News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Wed 14 Oct· 5 articles
-
ROMULUS Turns ClickFix Into a Multi-Campaign Malware Delivery Platform
Cybersecurity researchers have identified ROMULUS as a new, multi-payload delivery platform built on the ClickFix technique, used to disseminate a range of malware via an expanding ecosystem. Investigators from Vedere Labs, part of Forescout Research,…
Infosecurity -
Passkeys Nearly Double, but Few Users Ditch Passwords on Major Sites
Passkeys are becoming more common on login screens, but adoption remains slow, according to Dashlane’s third annual Passkey Power 20 report. Dashlane analysed millions of aggregated, anonymised passkey authentications from July 2025 to June 2026, finding…
Infosecurity -
French Supermarket Refrigeration Attacks Extend to Dixell Devices
French supermarket chains are extending disruptions from a cyber-attack that targeted refrigeration controllers, with fresh indications that the impact reaches beyond Danfoss devices to include Dixell Electronics equipment. The attack is being linked to…
Infosecurity -
Microsoft Fixes Record 1,411 Flaws as Patch Tuesday Strain Grows
Microsoft’s October Patch Tuesday set a new record, fixing 1,411 CVEs and surpassing the total patched in the whole of 2025. The surge is attributed to Microsoft leveraging AI-assisted vulnerability discovery and remediation through its multi-model agentic…
-
Large firms knowingly leave critical vulnerabilities unpatched as AI attacks surge
A Chainguard study released at its Assemble London event on 14 October 2026 found that companies generating more than $1bn in revenue are more than twice as likely as smaller organisations to knowingly leave high or critical vulnerabilities unpatched.…
Infosecurity
Tue 13 Oct· 4 articles
-
Cyber incidents disrupt European retailers as attacks hit key brands
Several European retailers have confirmed cyber incidents disrupting operations. Netherlands-based Ahold Delhaize said on 12 October 2026 that it was experiencing “a security issue” within its networks and had to take certain systems offline, affecting three…
Infosecurity -
Only 25% of Security Teams Use Agentic AI in Active Defence
Defenders are still reluctant to deploy agentic AI as a core cybersecurity tool, even as organisations pour resources into AI for defence. The Enterprise Threat Intelligence Report: 2026 from Flashpoint finds only a quarter (25%) of security teams are…
Infosecurity -
UK to Use Frontier AI to Find Flaws Before Hackers Do
The British government has unveiled a broad set of AI security initiatives aimed at strengthening protection against emerging threats. Speaking at Imperial College London on 12 October, AI minister Kanishka Narayan outlined plans to employ frontier models to…
Infosecurity -
One in Five UK Security Chiefs Avoid Patch Tuesday Overload
One in five UK CISOs, CSOs and heads of IT security surveyed by Socura say they have called in sick or deliberately booked holiday to dodge Patch Tuesday, the monthly security updates from Microsoft, Adobe and others. The poll of 500 senior security leaders…
Infosecurity
Mon 12 Oct· 5 articles
-
Leaked files reveal how Luna Moth scammers trick staff into granting remote access
Check Point researchers have analysed leaked files from an anonymous onion site, “The Luna Moth Files”, which purportedly contain internal documents and chat logs from a major ransomware gang known as Luna Moth, Silent Ransom Group (SIG) and tracked as…
InfosecurityLuna Moth -
Cyber Attack Disrupts Refrigeration Across French Supermarket Chains
Several French supermarket chains have been hit by a cyber-attack that appears to target refrigerated storage across multiple stores. Coopérative U, which operates Hyper U, Super U, U Express and Utile, confirmed on X that production cold‑rooms were affected…
-
FBI Arrests Canadian Cybersecurity Executive Over ShinyHunters Ties
The FBI has arrested Edward Dubrovsky, a Canadian cybersecurity executive, in connection with the ShinyHunters group. Court documents identify Dubrovsky, 54, of Toronto, as charged with conspiracy to threaten to impair the confidentiality of information with…
InfosecurityShinyHunters -
Ransomware gangs exploit Palo Alto VPN flaw months after patch release
Ransomware groups are continuing to target a high‑severity vulnerability in Palo Alto Networks products, CVE-2026-0257, despite a patch released five months ago. ReliaQuest warned on 9 October that multiple groups, including Qilin and Settra, are actively…
-
Supplier Malware Incident May Expose Data of 8.7 Million Karaoke Customers
One of Japan’s largest karaoke groups, Daiichi Kosho, disclosed a potential data breach stemming from a supplier incident that may have exposed personal information for up to about 8.7 million customers. The breach source is an incident at Nippon Columbia…
Infosecurity
Fri 9 Oct· 5 articles
-
Wikimedia Links AI Agents to Data Probes and API Traffic Surge
Wikimedia Foundation has disclosed that rogue AI agents were active on its platforms, including Wikipedia and related open-knowledge sites, after an investigation triggered by recent reports of agent-driven activity. In a blog post dated 5 October, Chief…
InfosecurityOpenAI agents -
Ransomware attacks hit record high as groups turn to triple extortion
Ransomware activity hit an all‑time high in the third quarter of 2026, with Comparitech documenting 2,627 claimed attacks between July and September. The figure marks a 27% rise on Q2 2026 and a 61% increase year over year. The analysis notes pronounced…
InfosecurityEverest -
Allies expose how Chinese firm Integrity Tech enabled global cyber espionage attacks
A joint warning from the US, UK and allied countries outlines the tactics, techniques and procedures attributed to a sanctioned Chinese organisation known as Integrity Technology Group. The advisory connects Integrity Tech to Beijing-linked cyber operations…
InfosecurityIntegrity Technology Group -
ISACA Plans 2027 AI Governance Certification Amid Training Gap
ISACA is accelerating governance work around AI by planning to launch an AI governance certification in early 2027, in beta now. The new credential sits within a family of AI-focused qualifications designed to help professionals manage AI securely and…
Infosecurity -
Ten AI giants pledge stronger UK data protections after ICO warning
Ten major AI firms, including Amazon, Anthropic, Apple, Cohere, DeepSeek, Google, Meta, Microsoft, OpenAI and Stability AI, have pledged or committed to strengthen data protection policies in the UK after the ICO urged clearer transparency around how…
Infosecurity
Thu 8 Oct· 7 articles
-
DNS hijacks of three country domains enabled unauthorised HTTPS certificates
Attacker activity targeted three country-code top-level domain registries, hijacking the namespaces for .gh (Ghana), .sl (Sierra Leone) and .as (American Samoa). By altering authoritative DNS records, the attackers created conditions whereby HTTPS…
Infosecurity -
ASOS Confirms Customer Data Breach After Employee Impersonation Attack
ASOS has confirmed a data breach affecting customer personal data, disclosed in an email to customers on 8 October 2026. The retailer said the attacker gained access by impersonating a trusted contact to obtain login credentials for an employee account,…
Infosecurity -
Russia Aligned UAC-0099 Refines MATCHBOIL Malware to Target Ukraine
A Russia-aligned cyber espionage group known as UAC-0099 has been steadily evolving its MATCHBOIL downloader over a two-year period, according to ESET research published on 8 October 2026. The analysis covers MATCHBOIL samples observed between April 2024 and…
InfosecurityUAC-0099 -
AI Powered Attackers Breach South Korean Banks Using ARTEX Tool
A suspected China-based threat actor used AI-assisted tooling in a campaign that successfully exfiltrated data from South Korean financial organisations, researchers at CrowdStrike disclosed. The attacker leveraged ARTEX, a new open-source pentesting agent,…
Infosecurity -
Hackers Exploit Critical Atlassian Flaw to Steal Sensitive Files
A critical vulnerability in Atlassian Data Center products, tracked as CVE-2026-21589, is reportedly being exploited in the wild. Atlassian’s advisory describes it as an arbitrary file access flaw with a CVSS score of 9.3, affecting eight Data Center…
-
Europol and US watchdog warn agencies to prepare for quantum threats
Europol and the US Government Accountability Office have issued alerts this week highlighting the growing urgency of post-quantum cryptography (PQC) and the risks posed by quantum computers to current cryptographic protections. The US GAO published a…
Infosecurity -
FortiBleed attacks persist as hackers abuse stolen Fortinet credentials
US authorities warn that the FortiBleed campaign against Fortinet FortiGate firewalls and SSL VPN gateways remains active, with widespread credential abuse enabling unauthorised access. An FBI and US Secret Service notice on 6 October cites SOCRadar data…
Infosecurity
Wed 7 Oct· 6 articles
-
OT Coalition urges CISA to mandate cybersecurity rules for federal systems
The Operational Technology Cybersecurity Coalition (OTCC) has urged the US Cybersecurity and Infrastructure Security Agency (CISA) to mandate a binding set of security requirements for operational technology (OT) across federal civilian agencies. In a report…
Infosecurity -
Phishing Emails Hide Prompts to Manipulate AI Summaries and Payments
Attackers are hiding prompts instructing AI assistants inside phishing emails, in addition to traditional lures aimed at human recipients. Barracuda’s 7 October 2026 analysis describes campaigns that combine social engineering—such as password-protected…
Infosecurity -
Group IB warns Telegram claim does not prove ASOS customer data was stolen
Group-IB researchers have traced the Telegram account used in the alleged ASOS incident to a channel formerly active in gaming-item trading. The account behind the claimed “Xuanyewen” label appears to have been newly created on 6 October 2026, with prior…
Infosecurity -
Cybersecurity Pros Still Rely on Passwords as AI Phishing Surges
A recent study by Yubico and Okta finds that around half of cybersecurity professionals still rely on usernames and passwords for both personal and work accounts, despite viewing this method as among the least secure forms of authentication. Specifically,…
Infosecurity -
Pwn2Own Ireland uncovers 32 zero days, including flaws in AI tools
On 7 October 2026, Pwn2Own Ireland 2026, run by the Zero Day Initiative (ZDI), reported 32 zero-day vulnerabilities uncovered on day one of the event in Cork. The competition targets a range of devices and software, including smartphones, smart home gear,…
Infosecurity -
Danish CPR Breach Exposes Personal Data of 8.8 Million People
A Danish data breach has exposed personal details for about 8.8 million people, highlighting the cyber risk embedded in national supply chains. The Central Register of Persons (CPR) stores basic information such as names, addresses and CPR numbers, and the…
Infosecurity
Tue 6 Oct· 7 articles
-
ClickFix Attack Hides VBScript in Browser Cache to Steal Credentials
On 6 October 2026, Infosecurity reported a ClickFix campaign that hides a VBScript payload inside the browser cache, masquerading as an image so the script is already present on the victim’s device when they are tricked into running a command through Windows…
Infosecurity -
Nikkei Says Compromised Microsoft 365 Account Sent 9,000 Phishing Emails
Nikkei has disclosed unauthorized access to two employee cloud accounts, one of which was used to send around 9,000 phishing emails to staff and contacts. In a statement published on 4 October, the company said a Google Workspace account had been accessed…
Infosecurity -
Red Hat’s Lightwell Clears 400 Hidden Flaws in Java Libraries
Red Hat’s Lightwell initiative has disclosed that it has remediated more than 400 novel vulnerabilities across foundational Java libraries since its launch in June, as it announced general availability of the Lightwell Clearinghouse after a pilot phase. The…
Infosecurity -
Most Medical Devices Cannot Be Upgraded to Quantum Safe Encryption
An investigation by Forescout has found that the majority of critical medical devices cannot be upgraded to post-quantum cryptography (PQC), leaving patient data potentially vulnerable to future quantum-enabled attacks. The analysis covered more than 2.5…
Infosecurity -
ASOS Customers Sent Hack Claim in Push Notification Linking to Telegram
ASOS customers received a curious mobile notification on 6 October 2026 claiming the retailer had been hacked via a Snowflake compromise. The message, appearing as a legitimate ASOS push notification and signed by “xuanyewengateway,” directed recipients to a…
Infosecurity -
UK Fraud Reports Surge as Officials Urge Users to Switch to Passkeys
The UK’s Report Fraud service has launched a public awareness push urging people to switch to passkeys after reporting a sharp rise in cybercrime profits tied to account takeovers. In 2025/6, scams involving compromised emails and social media accounts…
Infosecurity -
RaaS Insider Stole Ransom Payments From More Than 25 Victims
A Russian-speaking cybercriminal known as Azazel turned on his ransomware-as-a-service (RaaS) partners to steal the extorted funds from more than two dozen victims worldwide, according to CloudSEK’s new report, The Gentlemen Files, published on 5 October.…
InfosecurityAzazel
Mon 5 Oct· 6 articles
-
ClingSTUN Turns Unpatched IoT Devices Into Covert Proxy Nodes
FortiGuard Labs has tracked a Linux proxy backdoor dubbed ClingSTUN, which targets unpatched internet-facing IoT devices and uses legitimate public STUN servers to keep compromised systems reachable as remotely controlled proxy nodes. The campaign unfolded…