News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Mon 2 Nov | 80 | 7 |
| Today, Tue 3 Nov | 22 so far | 2 |
Developing
Sun 31 May12 articles
- Ghost CMS mass hack via CVE-2026-26980 fuels ClickFix attack wave
The 'Security Affairs Malware Newsletter Round 99' compiles significant research and articles on malware activity. Key highlights include: Mass compromises of Ghost CMS via CVE-2026-26980 leading to ClickFix attacks. A TrapDoor crypto stealer targeting…
Security AffairsCVE-2026-26980 - ShinyHunters Leak 5 Million Charter Communications Records
The Security Affairs newsletter Round 579, dated May 31, 2026, highlights significant cyber security developments, including data breaches, malware threats, and phishing campaigns impacting journalists and activists. Key points include: 1. **Data Breaches:**…
Security AffairsShinyHunters - Bombay High Court blocks leak of HDFC AMC ransomware data
The Bombay High Court granted interim relief to HDFC Asset Management Company Ltd (HDFC AMC) concerning a ransomware attack by a group called 'Morpheus', which allegedly stole over 680 GB of sensitive company and investor data. The court issued a John Doe…
DataBreachesMorpheus - Dutch authorities take down 17M device botnet in cybercrime raid
Dutch authorities have successfully dismantled a major botnet comprising 17 million infected devices. This action is part of ongoing efforts to combat cyber threats linked to IoT and network security. The operation targeted a significant network that had…
The Hacker News - CVE-2026-0257 flaw in MCP Toolbox allows site based session hijack
A critical vulnerability (CVE-2026-0257) has been identified in the MCP Toolbox, affecting its integration with enterprise database connectors. This flaw allows malicious websites to bypass security controls, exposing networks to session hijacking risks. The…
- Critical CVE-2026-32999 flaw in Comet Backup permits remote code
A critical vulnerability (CVE-2026-32999) in Comet Backup allows attackers to execute remote code, posing a severe risk to enterprise backup systems with a CVSS score of 9.1. This flaw affects all versions prior to 26.4.3 and 26.5.0, enabling attackers to…
SecurityOnlineCVE-2026-32999 - FBI warns of fake FIFA sites ahead of 2026 World Cup
The FBI has issued a critical warning about FIFA website spoofing scams as the 2026 World Cup approaches. Cybercriminals are utilizing typosquatting techniques, creating fake websites that closely resemble legitimate ones to deceive users seeking information…
SecurityOnline - SolyxImmortal info stealer uses PC registry to steal browser data
A critical alert has been issued regarding the SolyxImmortal info stealer, which targets Windows operating systems to steal sensitive data. This malware establishes persistent access by copying itself to the APPDATA folder, modifying the Windows registry,…
SecurityOnline - Inside a Massive Elderly Lottery Fraud Scam
The article reports on a significant legal case involving Troy Murray, who was sentenced to 121 months in prison for orchestrating a large-scale data-selling operation that facilitated a lottery fraud scam targeting elderly Americans. From 2016 to 2023,…
SecurityOnline - World Cup 2026 fans face fake merch, streaming scams online
The article discusses a surge in football-related scams ahead of the FIFA World Cup 2026, primarily on social media. Cybercriminals are exploiting fans by promoting fake merchandise, illegal streaming services, and phishing schemes. Security researchers have…
SecurityOnline
Sat 30 May13 articles
- ShinyHunters leaks 4.9M Charter records after ransom ignored
A cybercrime group known as ShinyHunters leaked data from Charter Communications after the company allegedly refused to pay a ransom. The leaked records include around 4.9 million unique email addresses, names, phone numbers, and physical addresses, along…
Security AffairsShinyHunters - Russia boosts spy ops to grab Western tech amid Ukraine war
Russia's intelligence agencies are intensifying efforts to acquire Western technology and defense secrets amid sanctions affecting its economy due to the ongoing war in Ukraine. Techniques include establishing fake companies and recruiting intermediaries to…
SecurityWeek - Flowise AI tool hit by critical RCE flaw CVE-2026-40933
Obsidian Security has disclosed a remote code execution (RCE) vulnerability in Flowise (CVE-2026-40933), with a high severity rating (CVSS 9.9). Flowise is an open-source platform that aids in AI development. The vulnerability stems from a systemic command…
SecurityWeekCVE-2026-40933 - Apache Ignite Vulnerability Fixes Critical Security Loophole
The Apache Software Foundation has released a critical patch for Apache Ignite, addressing a severe vulnerability (CVE-2025-48977) that enables unauthorized data access via the application's default web interface. This flaw could allow attackers to read…
SecurityOnlineCVE-2025-48977 - Microsoft slammed over criminalising PoC exploit disclosures
Microsoft has faced backlash from the research community for suggesting that the public release of proof-of-concept exploits for undisclosed vulnerabilities constitutes criminal activity. Kevin Beaumont discusses the conflict involving a user named Nightmare…
DataBreaches - Signal phishing scam targets journalists for backup keys
A phishing campaign is targeting Signal users, particularly journalists and activists, by impersonating Signal Support and urging them to provide their backup recovery keys via text messages. The attackers exploit the urgency of potential data loss to…
Security Affairs - Dutch police take down 17 million device botnet linked to ASOCKS
Dutch authorities have dismantled a massive botnet comprising at least 17 million devices, seizing over 200 servers linked to the operation. The botnet, connected to ASOCKS—a residential proxy service—was identified after a security researcher reported it to…
Security Affairs 2 articles this day · SecurityOnline first · 2 outlets
PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation · Critical PANOS Flaw Lets Attackers Bypass AuthenticationShow 2 articlesHide 2 articles
- PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation06:41The Hacker News
- Critical PANOS Flaw Lets Attackers Bypass Authentication01:34SecurityOnline
- PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation
- Bulletproof Hosts Drive Global Phishing Targeting Finance, Energy
The article discusses recent cybersecurity findings regarding abusive bulletproof hosting networks that facilitate global phishing campaigns. Researchers from Intrinsec identified multiple campaigns distributing malicious JavaScript payloads, leveraging…
SecurityOnline - IBM flags critical WebSphere CVE-2026-8633 flaw in versions
IBM has issued a critical security bulletin regarding a remote code execution vulnerability in its WebSphere application server software, specifically affecting versions 8.5 and 9.0. This vulnerability, tracked as CVE-2026-8633, has a CVSS score of 9.8,…
SecurityOnlineCVE-2026-8633 - Fake npm Packages Hit Corporate Builds via Dependency Confusion
Microsoft Threat Intelligence has identified a significant npm dependency confusion attack targeting corporate software development pipelines. The attack involved a threat actor using multiple fake accounts to publish malicious packages that impersonated…
SecurityOnline - Microsoft warns of supply chain attack via malicious npm packages
Microsoft Threat Intelligence has revealed a supply chain attack exploiting malicious npm packages using dependency confusion techniques. On May 28-29, 2026, a threat actor published malicious packages mimicking real corporate namespaces, executing an…
Microsoft
Fri 29 May51 articles
- Thousands of Oregon prison files accessed by prison worker
A former employee of Snake River Correctional Institution accessed thousands of files from the Oregon Department of Corrections over a six-month period, leading to a data breach discovery in January during a misconduct investigation. The unnamed employee was…
DataBreaches - Dark Reading's 20 year journey: AI budget limits security gains
The content reflects on the 20th anniversary of Dark Reading, which has covered significant changes in cybersecurity since its inception in 2006. It highlights the industry's evolution from traditional defenses like antivirus software and firewalls to the…
Dark Reading 2 articles this day · Rapid7 first · 2 outlets
CISA KEV Catalog flags Palo Alto PAN-OS auth bypass flaw · Rapid7 flags active CVE-2026-0257 exploits in PAN-OS GlobalProtectShow 2 articlesHide 2 articles
- Dutch police seize 17 million device botnet linked to ASOCKS
Authorities in the Netherlands dismantled a massive botnet consisting of over 17 million devices, managed via 200 servers. This operation was initiated following a report from a security researcher. The botnet was taken offline after being linked to ASOCKS,…
Ars Technica - GREYVIBE Deploys AI Malware on Ukraine, Reveals Operational Slip
The report discusses GREYVIBE, a Russian-linked hacking group active since 2025, targeting Ukrainian entities through AI-assisted malware across multiple attack vectors. Despite using sophisticated tactics, GREYVIBE exhibits notable operational mistakes that…
Security AffairsGreyVibe - ChatGPhish flaw lets attackers weaponise AI summaries for phishing
The article discusses the emergence of a vulnerability known as 'ChatGPhish,' which exploits ChatGPT's web summaries to create opportunities for phishing attacks. It emphasizes the potential risks associated with AI-generated content, highlighting how…
The Hacker News - Trump Mobile Data Leak Exposes Thousands of Customer Records
SecurityWeek's cybersecurity news roundup highlights critical developments, including the Trump Mobile data breach exposing customer information, Russian hackers accessing Treasury emails, a vulnerability in the Visual Studio Code Remote-SSH extension, and…
SecurityWeek - Microsoft Named Gartner Leader for Endpoint Protection 7th Year
Microsoft has been recognized as a Leader in the 2026 Gartner Magic Quadrant for Endpoint Protection for the seventh consecutive time. This accolade highlights the effectiveness of Microsoft Defender, which combines advanced Endpoint Detection and Response…
Microsoft - ShinyHunters claims Charter data leak, HIBP notes 4.9M affected
The ShinyHunters extortion group has allegedly leaked data from Charter Communications, including over 42 million customer records available on a Tor site. However, only 4.9 million individuals are likely affected according to data breach notification site…
SecurityWeekShinyHunters - Attackers Deploy AI LLM Agent After Marimo CVE-2026-39987 Breach
The article titled "Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit" discusses the emergence of attackers utilizing Large Language Model (LLM) agents to exploit vulnerabilities identified in software, specifically…
- APAC cyber insurance poised to more than double by 2025
The article discusses the evolution of the cyber insurance market in the Asia-Pacific (APAC) region, which has traditionally seen low adoption rates compared to its global counterparts. While organizations in APAC, including developed economies like Japan…
Dark Reading - MokN raises $15M Series A to expand identity honeypot platform
French cybersecurity startup MokN has successfully raised $15 million in a Series A funding round, increasing its total investment to $18 million. Founded in 2023, MokN aims to transform identity protection by using innovative honeypots to lure attackers and…
SecurityWeek - Flaw in Zapier integrations lets attackers inject malicious code
Research from Token Security reveals that complex integrations in low-code automation services like Zapier can lead to significant security vulnerabilities due to over-permissions and mismanagement of roles. An exploit chain was demonstrated that could have…
Dark Reading - Ransomware gang poses as IT staff to hit US law firms
The Silent Ransom Group (SRG) has intensified its tactics by impersonating IT staff to breach systems, particularly targeting US law firms since 2023. This group employs social engineering techniques, including phone calls and in-person interactions, to gain…
InfosecurityLuna Moth - Attackers exploit Gogs zero day to run code via pull requests
The open-source self-hosted Git service Gogs has a critical zero-day vulnerability, rated 9.4 on the CVSS scale, allowing remote code execution (RCE) via authenticated attackers exploiting an argument injection flaw through malicious pull requests. The flaw…
SecurityWeek - Almerys breach exposes French health users' social security data
A major breach at Almerys, a French health-care payment processor, has been confirmed, potentially exposing sensitive personal data such as Social Security equivalents. The intrusion affected a system for approving medical coverage requests, prompting the…
DataBreaches
