Skip to content
Sign in

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Articles per day, last 14 days

Most articles on Wed 21 Oct (96); 13–17 on weekend days.

20 Oct9622242628301 NovToday64 so faravg 63
  • On CISA KEV CVEs
  • Other coverage
  • Closed-day average
Show as table
Articles per day, last 14 days
DayArticlesOn CISA KEV CVEs
Tue 20 Oct8616
Wed 21 Oct9618
Thu 22 Oct8411
Fri 23 Oct6816
Sat 24 Oct134
Sun 25 Oct132
Mon 26 Oct7621
Tue 27 Oct9518
Wed 28 Oct8716
Thu 29 Oct7817
Fri 30 Oct6910
Sat 31 Oct143
Sun 1 Nov170
Mon 2 Nov807
Today, Tue 3 Nov64 so far3

Developing

Exploited only
57 articles

Latest days

Wed 20 May57 articles

  1. Google posts exploit code for unpatched Chromium Fetch API bug

    Google has published exploit code for a critical vulnerability in its Chromium codebase that affects millions of users across various browsers, including Chrome and Microsoft Edge. The proof-of-concept exploits the Browser Fetch API, enabling attackers to…

    Ars Technica
  2. Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft

    Microsoft has reported a supply chain attack targeting the _@antv_ npm packages, where a compromised maintainer account published malicious versions of popular data-visualization libraries. This led to credential theft in CI/CD environments, impacting…

    Microsoft
  3. Processes and Culture Top Reasons Behind Data Breaches

    The article examines the persistence of data breaches, highlighted by a study focused on Massachusetts incidents in 2024. Key issues include underreporting of breaches, particularly in private sectors like finance and healthcare. Panelists at the…

    Dark Reading
  4. Microsoft releases RAMPART and Clarity to test AI agent security

    Microsoft has unveiled two open-source tools, RAMPART and Clarity, to help developers test the security of AI agents during development. RAMPART, short for Risk Assessment and Measurement Platform for Agentic Red Teaming, is a Pytest-native framework for…

    The Hacker News
  5. CVE-2026-8153 lets attackers hijack Universal Robots cobot OS

    A critical command injection vulnerability in Universal Robots’ PolyScope 5 OS could allow an unauthenticated attacker to execute commands on the robot’s operating system, potentially compromising the controller and disrupting environments where cobots…

    Dark ReadingCVE-2026-8153
  6. Microsoft calls for wider gaming security beyond accounts and IP

    Microsoft’s Aaron Zollman argues that gaming is a “culture of cultures,” with more than 500 million monthly active players across Xbox consoles, PC, handheld devices, and Xbox cloud gaming, while globally over 3 billion people engage with gaming. He…

    Microsoft
  7. Quantum Bridge raises $8M Series A for quantum safe key tech

    Quantum Bridge, a Toronto, Canada-based startup, has announced an $8 million Series A funding round, taking its total funding to $16 million. According to SecurityWeek News, the round was led by a group including Wayra (Telefónica), Cadenza VC, Club degli…

    SecurityWeek
  8. Microsoft Windows 11 Version 24H2CVE-2026-45585

    3 articles this day · The Hacker News first · 3 outlets

    Microsoft Rolls Out Mitigations for ‘YellowKey’ BitLocker Bypass · Microsoft flags BitLocker flaw CVE-2026-45585, urges mitigationsShow 3 articles
  9. Microsoft takes down Fox Tempest malware signing service

    Microsoft says it dismantled a malware-signing-as-a-service operation called Fox Tempest, which helped cybercriminals make malware appear legitimate. The service let customers submit malicious files to be digitally signed with short-lived Microsoft-issued…

    Malwarebytes
  10. Android malware uses fake apps to hijack premium SMS billing

    According to new analysis from Zimperium's zLabs research team, Android malware campaign used hundreds of fake apps to silently sign users up to premium services on their mobile bills, with hardcoded operator targeting for Malaysia, Thailand, Romania and…

    Infosecurity
  11. Mini Shai-Hulud worm hits npm AntV packages in hour long burst

    The Mini Shai-Hulud worm has resurfaced in one of its largest single-registry waves to date, hitting hundreds of npm packages tied to the AntV data visualization ecosystem in a coordinated burst lasting around an hour. According to new analysis by Socket's…

    Infosecurity
  12. Microsoft releases AI safety tools RAMPART and Clarity

    Microsoft has open-sourced two tools designed to bring safety into the agent development workflow: RAMPART and Clarity. RAMPART is described as an open-source testing framework that brings red-teaming techniques directly into the development process and is…

    Microsoft
  13. AI powered agents close app security gap, attacks jump to 87%

    SecurityWeek reports that AI, and in particular agentic AI, is reshaping attack and defence in app security, with no clear distinction between emerging and primary targets. Digital[.]ai’s 2026 App Security Threat Report notes that the share of client-facing…

    SecurityWeek
  14. Microsoft shuts down Fox Tempest malware signing service

    Microsoft said it disrupted a malware-signing-as-a-service operation that used the Artifact Signing system to deliver malicious code and enable ransomware attacks, compromising thousands of machines and networks worldwide. The activity is attributed to a…

    The Hacker NewsFox Tempest
  15. Infosecurity Europe 2026 Expands Programme, Returns to London

    According to Dark Reading, Infosecurity Europe is the leading gathering for the cybersecurity industry in Europe, bringing the community together to share the latest innovations, learn from one another, and test and benchmark solutions. The event is…

    Dark Reading
  16. 1Password teams with OpenAI to stop secret leaks in AI coding

    According to SecurityWeek, 1Password has partnered with OpenAI to address credentials leakage risks from AI coding agents, introducing a just-in-time credential model for OpenAI Codex designed to keep secrets out of prompts, code, repositories, terminals,…

    SecurityWeek
  17. Anthropic Silently Patches Claude Code Sandbox Bypass

    Anthropic has quietly patched a vulnerability that could have allowed an attacker to bypass Claude Code’s network sandbox and exfiltrate data, according to SecurityWeek. The researcher who found it said two sandbox bypasses were identified, with one tracked…

    SecurityWeekCVE-2025-66479
  18. Webworm

    2 articles this day · Infosecurity first · 2 outlets

    Webworm Deploys EchoCreep and GraphWorm Backdoors Using Discord and MS Graph API · Webworm APT targets Europe with new Discord, OneDrive backdoorsShow 2 articles
  19. B1ack’s Stash dumps 4.6M stolen cards after seller rule breach

    Carding site B1ack’s Stash has released 4.6 million stolen credit and debit card records for free, not due to a law enforcement action but as a disciplinary measure after sellers on its marketplace were found reselling data on competing platforms. Each…

    Security AffairsB1ack’s Stash
  20. CISA adds seven KEV flaws, including 2026 Microsoft Defender bugs

    CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation, released on 20 May 2026. The newly listed CVEs are CVE-2008-4250 (Microsoft Windows Buffer Overflow Vulnerability),…

    CISAExploitedCVE-2008-4250
  21. Agent AI adoption reveals hidden identities, 57% risk in IAM

    According to Orchid Security, the Identity Gap Snapshot 2026 released on 19 May 2026 highlights growing concerns as enterprises adopt Agent AI, with identity dark matter now accounting for 57% of identity and visible elements 43%. The findings underline that…

    The Hacker News
  22. Firefox 151 Adds Anti Fingerprinting, Local Network Prompts

    Firefox 151 packs big privacy upgrades into a small update, with Mozilla outlining several meaningful privacy and security improvements in version 151.0 released on 20 May 2026, including stronger anti-fingerprinting, broader protection for local network…

    Malwarebytes
  23. Supply chain attack spreads via hacked atoolt NPM account

    A fresh Mini Shai-Hulud supply chain attack has hit over 320 NPM packages, with the compromised maintainer account ‘atool’ publishing malicious versions across the @antv namespace, including timeago[.]js used by many projects. The incident also extended to…

    SecurityWeek
  24. Enterprises Deploy AI Fast While Security Struggles to Keep Pace

    As enterprises rush AI projects into production, security teams are increasingly forced into a reactive mode, with defence often lagging behind deployment. According to SecurityWeek, the shift from experimentation to production has left many organisations…

    SecurityWeek
  25. TeamPCP

    4 articles this day · SOCRadar first · 4 outlets

    GitHub Breach Exposes 3,800 Repos After VS Code Extension Attack · GitHub Confirms Hack Impacting 3,800 Internal RepositoriesShow 4 articles
  26. AI fuels typosquatting supply chain attacks, CSP can't stop them

    Typosquatting is no longer a user problem but a supply chain issue, with attackers embedding lookalike domains inside legitimate third‑party scripts used by web properties. AI has changed the economics: thousands of convincing domain variants can be…

    The Hacker News
  27. Real World ICS Breaches Highlight IT OT Gaps and APT Threats

    SecurityWeek surveys real-world ICS security tales from a cross-section of practitioners, with John Simmons of FortiGuard Incident Response recounting an Iranian-linked APT attempting to move from IT to OT in the Middle East, using new malware and fresh…

    SecurityWeek
  28. TamperedChef malware spreads via malicious ads, hitting thousands

    According to Unit 42, researchers track TamperedChef-style activity in two main clusters, CL-CRI-1089 and CL-UNK-1090, with CL-CRI-1089 active since early 2023 and CL-UNK-1090 linked to Israeli infrastructure and code signing entities. They identified over…

    Unit 42
  29. Today’s Threat Detection Summit Explores AI, Alert Fatigue Fixes

    SecurityWeek is hosting a virtual event today, the Threat Detection & Incident Response Summit, aimed at helping organisations cut through alert fatigue, leverage AI and unified platforms to speed investigations, and apply actionable threat intelligence. The…

    SecurityWeek
  30. CypherLoc scareware locks browsers, fuels 2.8M tech support scams

    Security researchers have sounded the alarm over CypherLoc, a browser-based scareware campaign that locks users’ browsers and pushes them towards fraudulent tech support. Since the start of 2026, Barracuda researchers said they have observed around 2.8…

    Infosecurity
  31. How an image could compromise your Mac: understanding an ExifTool vulnerability (CVE-2026-3102)

    ExifTool’s CVE-2026-3102 vulnerability could allow an attacker on macOS to run arbitrary commands by hiding instructions inside an image’s metadata, affecting ExifTool 13.49 and earlier. Discovered by Kaspersky’s GReAT in February 2026 and patched by the…

    securelist.comCVE-2026-3102
  32. Vulnerability exploits now lead breach entry, DBIR shows 31% rise

    Vulnerability exploitation has overtaken compromised credentials as the most common initial access vector for data breaches for the first time in nearly two decades, according to Verizon. The latest DBIR report shows that 31% of breaches started with…

    Infosecurity
  33. DirtyDecrypt PoC Triggers LPE Flaw in Fedora, Arch, openSUSE

    DirtyDecrypt (CVE-2026-31635) is a working PoC for a Linux kernel local privilege escalation flaw centered on a missing COW guard in rxgk_decrypt_skb, allowing writes to shared page-cache memory and potentially root access. The flaw was discovered and…

    Security AffairsCVE-2026-31635
  34. Interpol’s Operation Ramz nets 200 arrests in 13 MENA states

    Interpol’s Operation Ramz marks the first cross-region collaboration in the Middle East, with law-enforcement from 13 MENA countries working alongside Interpol and private partners to conduct a five‑month series of investigations. The operation led to the…

    Dark Reading
Show older articles
CyberSIXTSignal over noise
Updated AboutDevelopersSign in