Skip to content
Sign in

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Articles per day, last 14 days

Most articles on Wed 21 Oct (96); 13–17 on weekend days.

20 Oct9622242628301 NovToday83 so faravg 63
  • On CISA KEV CVEs
  • Other coverage
  • Closed-day average
Show as table
Articles per day, last 14 days
DayArticlesOn CISA KEV CVEs
Tue 20 Oct8616
Wed 21 Oct9618
Thu 22 Oct8411
Fri 23 Oct6816
Sat 24 Oct134
Sun 25 Oct132
Mon 26 Oct7621
Tue 27 Oct9518
Wed 28 Oct8716
Thu 29 Oct7817
Fri 30 Oct6910
Sat 31 Oct143
Sun 1 Nov170
Mon 2 Nov807
Today, Tue 3 Nov83 so far4

Developing

Exploited only
104 articles · 14–16 May

Latest days

Sat 16 May10 articles

  1. PoC Code Published for Critical NGINX Vulnerability

    PoC code targeting a newly patched critical NGINX vulnerability has been published, with technical details and exploitation notes circulating online. The issue, tracked as CVE-2026-42945 and rated at CVSS 9.2, was patched this week in F5’s quarterly patch…

    SecurityWeekCVE-2026-42945
  2. Attackers hit OpenAI with malicious TanStack supply chain breach

    OpenAI was hit by a supply chain attack linked to malicious TanStack packages, with two OpenAI employee devices downloading the compromised packages and exposing credential material from internal source code repositories. According to OpenAI, the TeamPCP…

    Security AffairsTeamPCP

Fri 15 May37 articles

  1. Pwn2Own Berlin 2026, Day Two: $385,750 more, Microsoft Exchange falls, and the running total crosses $900K

    Pwn2Own Berlin 2026, Day Two, saw researchers earn $385,750 after demonstrating 15 unique zero-days, bringing the running total to $908,750 and 39 vulnerabilities disclosed over two days, with one day remaining. Microsoft Exchange and Windows 11 were among…

    Security Affairs
  2. AI coding surge spurs hidden vulnerability flood, warns report

    The Boring Stuff is Dangerous Now argues that AI is reshaping defence expectations as two powerful pressures collide: widespread use of AI coding tools and the potential for AI agents to exploit obscure vulnerabilities. The piece notes that Mandates to use…

    Dark Reading
  3. MicrosoftCVE-2026-42897Exploited

    6 articles this day · The Hacker News first · 5 outlets

    CISA adds Exchange XSS flaw CVE‑2026‑42897 to KEV list · CVE-2026-42897: Microsoft warns of active Exchange XSS flawShow 6 articles
  4. Turla’s Kazuar backdoor now powers stealthy peer to peer botnet

    Turla has transformed its Kazuar backdoor into a modular peer-to-peer botnet designed for stealth and long-term access to compromised hosts, according to Microsoft Threat Intelligence. The group, which is assessed by CISA to be affiliated with Center 16 of…

    The Hacker NewsTurla
  5. NHS staff viewed Southport attack victims' records unlawfully

    An investigation has revealed that nearly 50 staff at a Merseyside hospital group accessed horrific details of the condition of those attacked in Southport. According to HSJ, 48 staff accessed the medical records of a number of victims of the Hart Street…

    DataBreaches
  6. Apple, Meta Warn Canada's Encryption Bill Could Lead to Backdoors

    On 15 May 2026, SecurityWeek reports that Apple and Meta are opposing Canada’s Bill C-22, a law-enforcement access bill that they warn could compel tech firms to build encryption backdoors or install government spyware. Meta points to the Salt Typhoon…

    SecurityWeek
  7. Gremlin Stealer Upgraded with Modular Discord and Crypto Features

    A new version of the Gremlin stealer has evolved from a basic credential harvester into a modular toolkit, according to researchers at Palo Alto Networks’ Unit 42. The threat, which first emerged in April 2025, has rapidly evolved over 12 months with new…

    Infosecurity
  8. UNC6671’s BlackFile Uses Vishing and AiTM to Bypass MFA

    The article discusses an extortion campaign led by the threat actor UNC6671, operating under the name "BlackFile", which primarily targets organizations through voice phishing (vishing) and single sign-on (SSO) compromise. Key tactics include sophisticated…

    Google CloudUNC6671
  9. OpenClaw chain lets attackers hijack config and steal data

    OpenClaw researchers disclosed four chainable flaws that could enable data theft, privilege escalation, and persistence, collectively dubbed Claw Chain by Cyera. The vulnerabilities span CVE-2026-44112 (TOCTOU race condition in OpenShell that bypasses…

    The Hacker NewsCVE-2026-44112
  10. JDownloader Installers Hijacked, Deploy Python RAT on Windows

    Attackers replaced the JDownloader installer downloads with malware during a compromise window on May 6-7, 2026. The Windows “Download Alternative Installer” links and the Linux shell installer were affected, while other options such as macOS, JAR files,…

    Malwarebytes
  11. New Chat boosts WhatsApp privacy as Instagram DMs lose encryption

    Meta’s latest chat privacy moves appear to pull in opposite directions: WhatsApp’s new Incognito Chat, built on a Private Processing baseline, promises chats that are “truly private” and not readable by Meta, while Instagram has removed end‑to‑end encryption…

    Malwarebytes
  12. Dark Reading’s 20‑Year Lookback: Experts Share Key Lessons

    As part of Dark Reading’s 20th Anniversary celebrations, the site invited high-profile cybersecurity leaders to pick their favourite Dark Reading column and reflect on it through the lens of history, featuring Robert Hansen (RSnake), Katie Moussouris, Rich…

    Dark Reading
  13. Gentlemen Ransomware Group Suffers Leak After Internal Breach

    The Gentlemen, a RaaS group active since mid-2025, suffered a breach of its own backend in early May 2026, exposing internal chat logs, affiliate rosters, ransom negotiation transcripts, operational tooling discussions, and server credentials. The leak…

    SOCRadarThe Gentlemen
  14. American Lending Center Ransomware Breach Exposes 123k Borrowers

    According to SecurityWeek, American Lending Center, a California-based non-bank lender that manages a $3 billion portfolio of government-guaranteed small business loans, disclosed that a data breach discovered last year has affected more than 123,000…

    SecurityWeek
  15. Bitdefender tool cuts enterprise attack surface by 30% in weeks

    According to Bitdefender's analysis, Bitdefender’s Internal Attack Surface Assessment is a 45-day, low-effort engagement designed for organisations with 250 or more employees, delivering a precise, prioritized map of users, endpoints and tools you can safely…

    The Hacker News
  16. OpenAI renews macOS signing keys after Mini Shai Hulud hack

    OpenAI disclosed that two of its employee devices in its corporate environment were affected by the Mini Shai-Hulud supply chain attack on TanStack, with no user data, production systems, or intellectual property compromised or modified in an unauthorized…

    The Hacker News
  17. Cisco Catalyst SD-WANCVE-2026-20182Exploited

    3 articles this day · The Hacker News first · 3 outlets

    CVE-2026-20182 Cisco SD WAN flaw grants remote admin access · Cisco patches SDWAN zero day CVE-2026-20182 exploited by UAT8616Show 3 articles
  18. TeamPCP

    2 articles this day · SecurityWeek first · 1 outlet

    OpenAI staff devices compromised in TanStack supply chain breach · TeamPCP releases Shai Hulud worm code, fuels supply chain attacksShow 2 articles
  19. Ghostwriter Attack Hits Ukrainian Govt With JS Loader

    ESET researchers have uncovered fresh Ghostwriter (aka FrostyNeighbor) activity targeting Ukrainian governmental organisations, active since at least March 2026. The campaign begins with a spear-phishing email carrying a PDF attachment impersonating…

    Security AffairsGhostwriter
  20. Gremlin Stealer Hides .NET Payloads to Bypass Security Checks

    Gremlin Stealer’s evolution is examined as the malware moves to hide payloads inside embedded resources, with the latest variant prioritising stealth to evade static analysis. According to Unit 42, the malicious payload is now stored in the .NET Resource…

    Unit 42
  21. Cato CTRL discovers China linked TencShell malware in India

    An undocumented malware implant suspected to be associated with a China‑linked actor has been identified by researchers at Cato Networks’ Cyber Threats Research Lab (CTRL). Their discovery followed an intrusion attempt affecting the Indian branch of an…

    Infosecurity
  22. Pwn2Own Berlin 2026 - Day Two Results

    According to Zero Day Initiative, Day Two of Pwn2Own Berlin 2026 is underway as the stakes rise and security researchers push enterprise systems to their limits. The piece notes that yesterday $523,000 was awarded for 24 unique 0-days, with DEVCORE holding a…

    thezdi.com
  23. Chrome 148 fixes 79 flaws, two critical bugs earn $68k bounties.

    Google’s Chrome 148 update patches 79 vulnerabilities, including 14 critical-severity flaws across multiple components, in a release that now shows as version 148.0.7778.167 for Linux and 148.0.7778.167/168 for Windows and macOS. The two highlighted critical…

    SecurityWeekCVE-2026-8509
  24. Windows Zero Days YellowKey & GreenPlasma Expose BitLocker Bypass

    Security researchers disclosed two Windows zero-day vulnerabilities named YellowKey and GreenPlasma, affecting BitLocker and the Windows CTFMON framework, in a report published on 15 May 2026. The flaws were exposed by a security researcher known as Chaotic…

    Security AffairsExploitedCVE-2026-33825
  25. Outlaw Campaign Updates Libssh Client, Drives SSH Key Hijack

    This ISC diary notes that the April 2026 activity relates to the existing mdrfckr Outlaw/Dota campaign rather than a new campaign, with a new libssh client version observed between 14 and 21 April 2026. Between 2026-04-14 01:23:41 UTC and 2026-04-21 02:22:56…

    SANS ISC
  26. Pwn2Own Berlin 2026 Day One Sees 24 Zero Days and $523k in Awards

    Pwn2Own Berlin 2026, Day One saw 22 entries targeting browsers, operating systems, AI platforms and NVIDIA infrastructure, with researchers unlocking 24 zero‑days and earning a total of $523,000 in rewards, according to Zero Day Initiative. Orange Tsai of…

    Security Affairs
  27. SANS ISC Stormcast Holds Green Level Amid Training Resources

    According to SANS™ Internet Storm Center, ISC Stormcast for Friday, 15 May 2026, shares the usual briefing with the threat level listed as green. The diary page identifies Jan Kopriva as Handler on Duty, continuing the ISC practice of appointing rotating…

    SANS ISC
  28. Student spoofs rail radio signal, halts Taiwan bullet trains

    A Taiwanese student experimenting with software-defined radio shut down three high-speed bullet trains for nearly an hour, prompting an anti-terrorism response. On 5 April, a 23-year-old train enthusiast used a radio set-up and hardware bought online to…

    Dark Reading
  29. Law Firm DSD Law Leaks 110k Files in Repeated AWS Bucket Error

    Dalbir Singh & Associates, P.C. Law Firm—known as DSD Law—had a misconfigured Amazon bucket that exposed client files, with the bucket reportedly containing more than 110,000 files before it was secured again. DataBreaches[.]net first flagged the exposed…

    DataBreaches

Thu 14 May57 articles

  1. SecurityScorecard Acquires UK Threat Intel Startup Driftnet

    SecurityScorecard has acquired Driftnet, LTD., adding another layer of threat intelligence to its third-party risk management platform. Driftnet is a UK-based internet scanning and search engine startup that aims to provide organisations with real time…

    Dark Reading
Show older articles
CyberSIXTSignal over noise
Updated AboutDevelopersSign in