News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Mon 2 Nov | 80 | 7 |
| Tue 3 Nov | 94 | 4 |
| Today, Wed 4 Nov | 26 so far | 5 |
Developing
Fri 1 May43 articles
- Vishing Trick Fuels Swift SaaS Breach by Cordial & Snarky Spiders
Two cybercrime groups, Cordial Spider (aka BlackFile, CL-CRI-1116, O-UNC-045, and UNC6671) and Snarky Spider (aka O-UNC-025 and UNC6661), have been linked to rapid, high‑impact extortion campaigns that operate largely inside trusted SaaS environments.…
The Hacker NewsLightBasin - China-Linked Hackers Target Asian Governments, NATO State, Journalists, and Activists
According to Trend Micro, researchers have disclosed a China-aligned espionage campaign dubbed SHADOW-EARTH-053 that targets government and defence sectors across South, East and Southeast Asia, plus one NATO country. The group is described as active since…
- Jerry’s Store leaks 345,000 stolen cards after Cursor AI code flaw
According to CyberNews, Jerry’s Store, a card-checking service used by cybercriminals, exposed 345,000 stolen payment cards after leaving its server open. The leak occurred because Cursor AI generated flawed code without authentication, leaving an…
Security Affairs - Introducing Dynamic Workflows: durable execution that follows the tenant
Dynamic Workflows combines durably executing workflows with dynamic tenant-specific deployment, enabling a single Worker to dispatch runs to each tenant’s own code while preserving state across hours, days or deploys. The feature sits on top of Cloudflare…
Cloudflare - Remembering Ayrton Senna: F1 Legend Lost in Imola Crash 1994
Never forgotten. In memoriam, Ayrton Senna, the greatest Formula One driver of all times, lost to this world on 1 May 1994 in a terrible crash at Imola. In the years following his death, some have matched or exceeded his record, but none of them could hold a…
DataBreaches - Dark Reading turns 20, launches cartoon caption contest for fans
Dark Reading turned 20 on May 1, and it is celebrating by reviving the Name That Toon contest. According to Dark Reading, the cartoon by John Klossner invites readers to caption the 2006–2026 contrast scene, with a May 26 deadline for submissions. A panel of…
Dark Reading - Dark Reading Marks 20 Years with Multimedia Anniversary Series
According to Dark Reading, the publication marks 20 years of cyber coverage with a month-long programme of anniversary content. On this day in 2006, Dark Reading went live, and editor-in-chief Kelly Jackson Higgins explains that the aim has always been to…
Dark Reading - Anthropic launches Claude Security beta to scan enterprise code
Anthropic has launched Claude Security in public beta for its Claude Enterprise customers, expanding from its previous Claude Code Security tool. Built on Claude Opus 4.7, it scans codebases to find and patch software vulnerabilities, offering scheduled and…
Infosecurity - CISA releases agentic AI security guide for safer adoption
The guidance on careful adoption of agentic AI services was published on 1 May 2026 by CISA, in collaboration with the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) and other international and U.S. partners. According to…
CISA 3 articles this day · The Hacker News first · 3 outlets
US cyber experts jailed in BlackCat ransomware plot · US cybersecurity duo jailed for aiding BlackCat ransomware gangShow 3 articlesHide 3 articles
- US cyber experts jailed in BlackCat ransomware plot11:37SecurityWeek
- US cybersecurity duo jailed for aiding BlackCat ransomware gang11:30Infosecurity
- Cybersecurity Experts Jailed Over BlackCat Ransomware Scheme09:56The Hacker News
- US cyber experts jailed in BlackCat ransomware plot
- Bain Capital May Be Liable for PowerSchool Pre Acquisition Breach
According to JDSupra, a California federal judge allowed claims against Bain Capital to proceed based on a data breach at its subsidiary PowerSchool, a case that suggests private equity firms may be held liable for cybersecurity failures at portfolio…
DataBreaches - Stealthy Python backdoor Deep#Door spies on Windows PCs
A newly identified stealthy Python-based backdoor framework provides attackers with persistent remote command execution and surveillance capabilities on Windows computers, according to Securonix. The malware’s infection chain starts with a batch script that…
SecurityWeek - Critical cPanel WHM bypass lets attackers hijack admin access
Security researchers have identified a critical authentication-bypass vulnerability (CVE-2026-41940) in cPanel and WebHost Manager (WHM) affecting millions of websites. Attackers can exploit this flaw to gain administrative access without credentials, posing…
- Student sparks WiFi outage across Michigan schools
Kentwood Public Schools said districtwide Wi‑Fi was disrupted after a student used malicious software designed to interfere with the school system’s network. Outside experts helped isolate the issue, which affected Wi‑Fi connectivity across its 16 schools in…
DataBreaches - AI tool finds 2017 Linux kernel zero day CVE-2026-31431
A new high-security zero-day vulnerability that has lurked in the Linux kernel since 2017 has just been found with the help of AI, in a discovery by Taeyang Lee, a vulnerability researcher at offensive security firm Theori. Lee used Xint Code, a source code…
- MSPs Struggle to Sell Cybersecurity Amid Low Client Urgency
The Hacker News outlines five core go-to-market challenges that MSPs face when selling cybersecurity, with Cynomi’s GTM Academy framing the fixes. Data shows that 77% of MSPs identify a lack of client urgency as a major obstacle, highlighting how technical…
The Hacker News - Cisco launches open source tool to trace AI model origins
Cisco has released an open source tool called Model Provenance Kit to help organisations manage risks around third‑party AI models, including poisoned or vulnerable models and regulatory and supply chain issues. The Python‑based toolkit and command‑line…
SecurityWeek - Prompt Injection Via Email Surges, Darktrace Warns
Prompt injection via email is a newly emerging risk where malicious or manipulative instructions are hidden in content AI systems will process, such as emails, documents and chat histories. Darktrace notes a 90% increase in signals of potential prompt…
darktrace.com - Supply chain attack hits RubyGems, Go modules to steal credentials
A new software supply chain campaign has been observed using sleeper packages in RubyGems and Go modules to push malicious payloads that enable credential theft, GitHub Actions tampering and SSH persistence. The activity has been attributed to the GitHub…
The Hacker News - Anthropic Launches Claude Security to Fight AI Cyber Threats
Anthropic has launched Claude Security to help defenders keep pace with a surge in AI-powered cyberattacks, saying that rapid tooling like Mythos can drastically shorten the window from discovery to exploitation. Claude Security is currently in public beta…
Security Affairs - SonicWall patches three SonicOS flaws in Gen 6, 7 and 8 firewalls. Patch them now
SonicWall has released urgent firmware updates to fix three SonicOS vulnerabilities in Gen 6, Gen 7, and Gen 8 firewalls, with attackers potentially bypassing security controls, accessing restricted services, or crashing devices. The most severe flaw is…
Security AffairsCVE-2026-0204 - AI Model Repos on Hugging Face and ClawHub Host Trojans
Threat actors are using trojanized shared files to distribute malware via AI distribution platforms such as Hugging Face and ClawHub, according to Acronis. The campaign involves social engineering to trick users into downloading files that execute commands,…
SecurityWeek - FBI Warns of Rising Hacker Enabled Cargo Theft Costing $700M
According to the FBI, there is a surge in hacker-enabled cargo theft, with criminal enterprises targeting both brokers and carriers in sophisticated attacks. The alert notes that cargo theft caused more than $700 million in losses in 2025, a 60% increase…
SecurityWeek - Over 1,800 Developers Hit by Mini Shai Hulud Supply Chain Attack
SecurityWeek reports that over 1,800 developers were affected in the Mini Shai-Hulud supply chain attack targeting the PyPi, NPM and PHP ecosystems, with the Lightning and Intercom packages bearing the impact and together generating almost 10 million monthly…
SecurityWeekTeamPCP - ISC Stormcast For Friday, May 1st, 2026 https://isc.sans.edu/podcastdetail/9914, (Fri, May 1st)
ISC Stormcast For Friday, May 1st, 2026 is posted, continuing the series with calendar details and site navigation reminders. The page shows Threat Level: green and directs readers to the usual ISC sections and resources. Handler on Duty is Guy Bruneau, with…
SANS ISC
Thu 30 Apr53 articles
- Two US cyber pros jailed for BlackCat ransomware extortion scheme
According to the DOJ’s press release, two American cybersecurity professionals, Ryan Goldberg and Kevin Martin, were sentenced today to four years in prison each for their role in a conspiracy to extort through ransomware in 2023. The court documents state…
DataBreachesALPHV/BlackCat - US Extradites German Over Dark Web Marketplace Versus Project
The article reports that a German national living in Colombia has been extradited to the United States on charges of owning and operating “The Versus Project,” a dark web marketplace. According to the Department of Justice, Versus Project operated from about…
DataBreaches - “to recover your files, kindly send 0.1 BTC to…” ransom note appears on websites
A ransom note demanding 0.1 BTC appeared on Naturalsciences[.]org, with the site briefly down for construction and later returning online. The attack is described as linked to the CPanel/WHM vulnerability identified as CVE-2026-41940, though not all victims…
- Fake AI Browser Extensions Steal Data and Deploy RATs
Unit 42’s analysis identifies 18 AI browser extensions marketed as productivity tools that are not as they seem, including ones that surveil emails, intercept prompts and exfiltrate passwords. The report shows these high‑risk extensions can deliver remote…
Unit 42 - SAP npm Packages Compromised to Steal Cloud Secrets
TeamPCP’s latest supply chain campaign targets SAP’s cloud development ecosystem by compromising four SAP npm packages within the Cloud Application Programming Model (CAP) and Cloud MTA Build Tool (MBT). The four packages—@cap-js/sqlite v2.2.2,…
Dark ReadingTeamPCP 3 articles this day · Security Affairs first · 3 outlets
Nine year old Linux bug CVE-2026-31431 lets users gain root · CopyFail Exploit Goes Public, Puts Linux Systems at Root RiskShow 3 articlesHide 3 articles
- Nine year old Linux bug CVE-2026-31431 lets users gain root20:41Dark Reading
- CopyFail Exploit Goes Public, Puts Linux Systems at Root Risk20:20Ars Technica
- Linux Kernel Bug CVE-2026-31431 Lets Users Gain Root18:23Security Affairs
- Nine year old Linux bug CVE-2026-31431 lets users gain root
- Scammers hijack PayPal emails to push fake tech support calls
Scammers are exploiting PayPal's email system to deliver tech support scams. They manipulate the subject lines of legitimate PayPal notifications to mislead users into believing a significant charge is pending, prompting them to call the number listed, which…
Malwarebytes - Claude Mythos AI can find zero day bugs, experts warn
On 7 April, Anthropic announced that its latest large language model, Claude Mythos, could identify and exploit software vulnerabilities at machine speed, raising alarms about an AI red teamer accessible to potential threat actors. According to Anthropic,…
Dark Reading - Anthropic launches Claude Security to speed AI flaw detection
Anthropic has introduced Claude Security to counter the rapid rise of AI-powered exploitation, with the company stating Mythos means attackers could reach exploit times in minutes. The product is now available in public beta to Claude Enterprise customers,…
SecurityWeek - AI driven cybercrime cuts exploit time to 48h, warns study
Industrialized cybercrime is accelerating attacks through AI, automation and rapid data sharing, with defenders urged to match pace using similarly swift defensive tools. FortiGuard’s Global Threat Landscape Report notes that time-to-exploit has collapsed…
SecurityWeek - North Korean IT Worker Fraud Becomes a Growing Insider Threat
Posted on 30 April 2026, this piece notes that last month, our research on DPRK IT worker fraud made headlines on NBC News. It emphasises that this is not a traditional cyber threat but a human one, and that these operations will continue to evolve, scale,…
DataBreaches
