News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Mon 2 Nov | 80 | 7 |
| Tue 3 Nov | 94 | 4 |
| Today, Wed 4 Nov | 62 so far | 7 |
Developing
Thu 23 Apr55 articles
- Rituals Data Leak Exposes Member Names, Emails and Addresses
Rituals, the luxury cosmetics brand, disclosed a data breach in which attackers gained unauthorised access to its systems and downloaded part of the My Rituals member database. The incident is said to have occurred earlier this month, with Rituals confirming…
Security Affairs - South Korea fines Duo $830k over 427k member data leak
Duo Info, South Korea’s leading matchmaking service, was fined $830,000 by the Personal Information Protection Commission (PIPC) after authorities said the personal data of 430,000 members was leaked. According to the PIPC, a work PC belonging to an employee…
DataBreaches - Tempus AI Faces Class Actions Over Unauthorised Genetic Data Use
Tempus AI, a publicly traded healthcare artificial intelligence company, is facing multiple class action lawsuits over the alleged unauthorized collection and disclosure of genetic testing results derived from genetic testing by Ambry Genetics Corporation.…
DataBreaches - Trigona affiliates roll out custom data exfiltration tool
DataBreaches[.]Net reports that Trigona affiliates have deployed a custom exfiltration tool to streamline data theft, marking a shift from using off‑the‑shelf utilities to a tool that offers granular control over the theft process. The attacks occurred in…
DataBreachesRhantus - Google Cloud chooses Gemini 3.1 Pro over a separate cyber AI
Google Cloud’s operations chief has signalled that Google does not plan to release a separate cyber‑focused frontier model, instead favouring high‑quality generalist AI like Gemini3.1 Pro for security needs, the article reports. According to Infosecurity…
Infosecurity - Microsoft patches IKEv2 flaw allowing SYSTEM code execution
CVE-2026-33824 describes a remote code execution flaw in the Windows Internet Key Exchange (IKE) service (IKEv2) that centres on a double free vulnerability during IKEv2 fragment reassembly. An unauthenticated, remote attacker could exploit the issue by…
- UK Faces Four Major Cyberattacks Weekly, Putting Public at Risk
Cyberattacks on companies ripple far beyond the breached organisation, with the fallout often landing on ordinary people. The article notes that stolen customer data can lead to identity theft, tax fraud, and credit card fraud, while the ensuing cleanup can…
Malwarebytes - Bitwarden CLI npm package hijacked to steal developer secrets
According to StepSecurity, @bitwarden/cli@2026.4.0, the official Bitwarden CLI, was found compromised on npm, with a malicious preinstall hook that silently bootstraps the Bun runtime and launches a 9.7 MB obfuscated credential stealer targeting developer…
StepSecurity - Cloudsmith raises $72M Series C to tackle AI driven supply risks
Cloudsmith raised $72 million in a Series C funding round, bringing the company’s total funding to $124 million, announced on 23 April 2026. The round was led by TCV, with additional support from Insight Partners and other previous investors. Founded in 2016…
SecurityWeek 2 articles this day · The Hacker News first · 2 outlets
Chinese APT Abuses Multiple Cloud Tools to Spy on Mongolia · APT GopherWhisper hits Mongolian govt with Go based backdoorsShow 2 articlesHide 2 articles
- Chinese APT Abuses Multiple Cloud Tools to Spy on Mongolia14:46Dark Reading
- APT GopherWhisper hits Mongolian govt with Go based backdoors09:04The Hacker News
- Chinese APT Abuses Multiple Cloud Tools to Spy on Mongolia
- Claude Code memory files vulnerable to poisoning, Cisco warns
Bad Memories Still Haunt AI Agents, as researchers warn that mishandled memory files remain a persistent weakness in AI security. In March, Cisco researchers discovered they could compromise the memory files of Anthropic's Claude Code and maintain…
Dark Reading 4 articles this day · SANS ISC first · 4 outlets
iOS Flaw Let Deleted Notifications Linger, Apple Issues Fix · Apple patches CVE-2026-28950 bug that kept deleted messagesShow 4 articlesHide 4 articles
- iOS Flaw Let Deleted Notifications Linger, Apple Issues Fix14:05Security Affairs
- Apple patches CVE-2026-28950 bug that kept deleted messages13:00Infosecurity
- Apple patches iOS bug CVE-2026-28950 exposing deleted alerts10:27Malwarebytes
- Apple fixes iOS notification bug that exposed Signal chats to FBI10:18SANS ISC
- iOS Flaw Let Deleted Notifications Linger, Apple Issues Fix
- UNC6692 Uses Fake Teams Invite to Deploy Snowmalware Suite
The article discusses a recent cyber intrusion campaign by a newly identified threat group, UNC6692, which used social engineering tactics to deploy a custom malware suite. The group impersonated IT personnel via Microsoft Teams to lure victims into…
Google CloudUNC6692 - Bitwarden CLI supply chain attack spreads via malicious bw1.js
Bitwarden’s CLI has been compromised as part of the ongoing Checkmarx supply chain campaign, with the affected package identified as @bitwarden/cli@2026.4.0 and the malicious code published in bw1[.]js, a file included in the package contents. According to…
The Hacker NewsTeamPCP - Half a million Britons’ medical data were offered for sale on Alibaba in major UK Biobank breach
A breach affecting UK Biobank exposed medical data from 500,000 volunteers, with the information offered for sale on Alibaba, according to DataBreaches[.]Net.
DataBreaches - North Korean hackers steal $290m via LayerZero KelpDAO breach
ThreatsDay Bulletin highlights a week of cybercrime and threat activity, opening with a $290 million DeFi hack on KelpDAO that LayerZero described as an attack on its RPC infrastructure. According to LayerZero, North Korean threat actors tracked as…
The Hacker NewsTraderTraitor - Leaked RAMP data reveals Russia ransomware marketplace operations
A DataBreaches[.]Net post delves into RAMP, describing how Russia’s ransomware marketplace operated as a structured, commercial platform rather than a collection of isolated hackers. The leak covers activity from November 2021 to January 2024 and includes…
DataBreaches - Mile Bluff Medical Centre hit by cyberattack, phones down
According to DysruptionHub, Mile Bluff Medical Center in Mauston, Wisconsin, said a security incident involving data encryption disrupted some phone and computer functions, prompting clinical teams to switch to downtime procedures while patient care…
DataBreaches - Chinese firm claims AI finds nearly half of Tianfu Cup flaws
A Chinese cybersecurity firm has claimed AI-driven vulnerability discovery capabilities that approach the scale of those attributed to Anthropic’s Claude Mythos, according to Eugenio Benincasa, an ETH Zurich cybersecurity researcher focusing on China. 360…
SecurityWeekCVE-2026-32190 - AI Speed Exploits Shrink Patch Window: Webinar Offers Blueprint
The Hacker News promotes a webinar titled Mythos Reality Check: Beating Automated Exploitation at AI Speed, published on 23 April 2026. The piece argues that AI-enabled attackers are launching automated, large‑scale exploits at unprecedented speed, shrinking…
The Hacker News - Google launches secure AI agent IDs with threat detection tools
Google has launched unique AI agent identities as part of its Gemini Enterprise Agent Platform, a hub to manage agentic AI workflows for both Google-made and external agents. Each agent can be assigned a unique cryptographic ID that is mapped back to defined…
Infosecurity - UK NCSC warns of China linked botnet using 200k compromised devices
Defending Against China-Nexus Covert Networks of Compromised Devices explains the growing use by China-nexus actors of large-scale networks of compromised devices, or botnets, to route cyber activity. These covert networks are primarily built from…
CISAFlax Typhoon - NCSC Warns China linked Hackers Use Router Botnets for Covert Ops
The advisory from the National Cyber Security Centre (NCSC-UK) and international partners highlights a significant shift in the tactics of China-nexus cyber actors, who are increasingly using large-scale networks of compromised devices (covert networks) for…
NCSC - UK NCSC releases advisory on China linked covert cyber networks
International cyber agencies, including the UK's National Cyber Security Centre (NCSC), in cooperation with 15 global partners, have released a new advisory to help organizations defend against cyber threats from covert networks linked to China. These…
NCSC - China linked router botnet threat rises for UK firms
The executive summary discusses the growing threat posed by China-nexus cyber actors, who are utilizing sophisticated covert networks made up of compromised devices such as routers. These botnets facilitate a range of malicious activities including…
NCSC - AI security startup Rilian raises $17.5M to expand platform
Rilian today announced that it has raised 17.5 million in combined seed and seed extension funding, in a round led by 8VC, First In, and Tamarack Global, with additional support from 8090 Industries, Liquid 2 Ventures, Perot Jain, and Protego Ventures,…
SecurityWeek - Anthropic AI discovers 27-year-old OpenBSD flaw, alerts big tech
The Hacker News reports that Anthropic announced Project Glasswing, an AI model so effective at discovering software vulnerabilities that its public release was postponed and access was given to Apple, Microsoft, Google, Amazon, and others to find and patch…
The Hacker News - Attackers exploit trusted workflows, phishing remains top threat
The SecurityWeek piece, published on 23 April 2026, reports that new analysis from Abnormal AI shows attackers have shifted away from technical exploits toward weaponising trusted relationships and routine workflows. Phishing remains the primary method,…
SecurityWeek - Rituals Reports Data Breach Affecting My Rituals Members
Rituals has disclosed a data breach affecting its My Rituals members, with the incident disclosed on 23 April 2026 and the company saying it occurred earlier this month. The breach involved unauthorized access to and download of some members’ data, and the…
SecurityWeek - Universities See 63% Rise in Cyber Attacks Globally
Schools and universities worldwide saw a sharp rise in cyber incidents last year, driven by geopolitical tensions, ransomware and hacktivism, according to Quorum Cyber. The company’s 2026 Global Cyber Risk Outlook for Higher Education, compiled from…
Infosecurity - RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace explains that a leaked database from RAMP covers activity from November 2021 to January 2024 and includes user records, forum threads, private messages, IP logs, and admin activity. The data reveal…
Security Affairs - AI pen test agent Zealot hacks GCP, steals data autonomously
Palo Alto Networks has developed Zealot, a multi-agent penetration testing proof-of-concept designed to test whether an AI system can autonomously hack a cloud environment. Zealot was tested against an isolated Google Cloud Platform environment with…
SecurityWeek - AI agents autonomously breach Google Cloud in Zealot PoC test
According to Unit 42, researchers built a multi-agent penetration testing PoC to test autonomous AI offensive capabilities in cloud environments, naming the agent Zealot and coordinating three specialist agents: Infrastructure, Application Security and Cloud…
Unit 42 - AI agents exploit cloud misconfigurations in rapid Zealot PoC test
The Zealot PoC from Palo Alto Networks’ Unit 42 demonstrates AI agents carrying out end-to-end cloud attacks with minimal human direction, exploiting common misconfigurations in a deliberately set up Google Cloud Platform environment. The researchers built…
Dark Reading - Indirect prompt injection attacks hijack AI agents for fraud
Security researchers have unveiled 10 new indirect prompt injection (IPI) payloads targeting AI agents, designed to enable financial fraud, data destruction, API key theft and more, according to Infosecurity Magazine. The attack chain involves poisoning web…
Infosecurity - CISA urges patch Microsoft Defender flaw CVE-2026-33825 by May 6
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a flaw in Microsoft Defender to its Known Exploited Vulnerabilities (KEV) catalog, tracked as CVE-2026-33825 with a CVSS score of 7.8. The flaw can be exploited to achieve privilege…
