News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Mon 2 Nov | 80 | 7 |
| Today, Tue 3 Nov | 5 so far | 0 |
Developing
Wed 3 Jun68 articles
- Microsoft 365 Android apps flaw lets attackers hijack accounts
A coding flaw in several Microsoft 365 Android applications, including Word, PowerPoint, and Excel, inadvertently disabled a security setting designed to protect user authentication, exposing accounts to potential compromise. Researchers at Enclave…
Dark Reading - Attackers siphoned exec email from stock exchange for five months
A cyber espionage campaign targeted a senior executive's Outlook account at a major global stock exchange, allowing attackers to silently steal emails over five months (October 2025 to March 2026). Investigated by Broadcom's Symantec and Carbon Black, the…
Security Affairs - Fake Invoice Scam Lures Victims Into Calling Fraudulent Numbers
A new fake invoice scam has been identified, targeting victims with emails masquerading as legitimate receipts from companies like PayPal and Amazon. These emails incite fear of unexpected charges, prompting individuals to call a provided phone number. The…
Malwarebytes - Coralogix Lands $200M Series F, Valuation Jumps to $1.6B
Coralogix has successfully raised $200 million in Series F funding, enhancing its total funding to $550 million, and reaching a valuation of $1.6 billion. The investment, co-led by Advent, CPPIB, and Greenfield, will aid in product development, expansion of…
SecurityWeek - Google DoubleClick Abused in New Malspam Campaign to Deliver DesckVB RAT
The article discusses a new malspam campaign that exploits Google DoubleClick to deliver the DesckVB Remote Access Trojan (RAT). The campaign showcases the evolving threat landscape in cyber security, emphasizing the importance of robust defenses. Key points…
The Hacker News - Microsoft 365 Android apps leak tokens via forgotten debug flag
The article discusses a significant vulnerability in Microsoft 365 Android apps that allows any application to steal account tokens due to a leftover debug flag. This oversight poses a major risk to user data and security. The piece highlights the increasing…
The Hacker News - Tving apologises after user data leak prompts CEO response
Tving, an OTT platform, faced a significant controversy due to a leak of users' personal information, with CEO Choi Joo-hee issuing a public apology on June 3, 2026. She confirmed that the leak resulted from unauthorized external access and acknowledged that…
DataBreaches - FSB Says Foreign Spy Malware Hit Russian Officials' Phones
On June 2, 2026, Russia's Federal Security Service (FSB) announced a major foreign espionage operation, claiming that malware was installed on senior officials' mobile devices to intercept communications and conduct surveillance. Despite the alarming nature…
Security Affairs - Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)
The article discusses a newly developed autonomous AI tool that has identified a two-year-old remote code execution (RCE) vulnerability in Redis, designated as CVE-2026-23479. This tool represents a significant advancement in cybersecurity, demonstrating how…
The Hacker NewsCVE-2026-23479 - Attackers Hunt Swagger Files for Sensitive Data Urging Dev Checks
The page discusses the ongoing scanning of API documentation files, specifically 'swagger.json', by attackers. It highlights the advantages of REST over SOAP for API design but warns that swagger.json files can inadvertently expose sensitive information. The…
SANS ISC - Infosecurity Europe: Vulnerability Management Innovator Konvu Wins Cyber Startup Award
Konvu, an AI triage management platform, has won the first Infosecurity Europe Cyber Startup Award for its innovative vulnerability management solution. The platform automates investigation and provides exploitability decisions, addressing the gap between…
Infosecurity - Fake Ghidra and dnSpy Sites Spread RemusStealer Malware
The Check Point Research article outlines a large-scale malware distribution operation that uses well-designed impersonation sites for legitimate software, specifically targeting open-source and freeware tools. Key points include: 1. **Impersonation Sites**:…
Check Point - Critical Kirki plugin flaw lets hackers hijack admin accounts
A recent report from SecurityWeek warns that hundreds of thousands of websites are vulnerable to attacks due to two critical vulnerabilities in the Kirki and Burst Statistics WordPress plugins. The Kirki plugin, used for website design enhancements, has an…
SecurityWeekCVE-2026-8206 - Most Powerful AI Agents Lack Basic Defences, Study Finds
Adversa AI's analysis of 100 AI agents reveals concerning security issues, where only 11 agents are deemed 'capable well-defended.' A ‘lethal trifecta’ of private data access, exposure to untrusted content, and outbound action abilities poses significant…
SecurityWeek - GitHub flaw lets attackers steal OAuth tokens in one click
The article discusses a newly identified vulnerability in GitHub that allows attackers to perform a one-click attack to steal OAuth tokens. This exposes users to significant risks, particularly in software development where such tokens are regularly used for…
The Hacker News - Hackers Target Global Stock Exchange in Espionage Operation
Hackers infiltrated the email account of a senior executive at a major global stock exchange, gaining access from October 2025 to March 2026. The attack, which lasted approximately 150 days, aimed at espionage, allowing attackers to collect sensitive…
SecurityWeek - GreyVibe Hackers Use AI Enhanced Phishing to Spy on Ukraine
The content details the GREYVIBE threat actor group's cyber espionage activities targeting Ukraine, particularly since August 2025. Their operations involve complex social engineering tactics, with multi-vector attacks leveraging deceptive emails and fake…
SecurityOnlineGreyVibe - Malwarebytes launches Scam Number Check tool to fight phone fraud
The article introduces the "Scam Number Check" tool by Malwarebytes, designed to help users identify suspicious phone calls. Scammers caused over $21 billion in losses in the U.S. last year, highlighting the danger of such calls. The tool allows users to…
Malwarebytes - IMA Diligence Services Data Breach Impacts 525,000 People
IMA Diligence Services has reported a data breach affecting over 525,000 individuals after unauthorized access to a legacy server. The breach, identified in December, revealed that sensitive personal and financial information, including names, Social…
SecurityWeekXiaoqiying - Google Gemini voice flaw lets hackers hide commands
A new vulnerability in Google Gemini's voice assistant allows attackers to exploit prompt injection through notifications, enabling social engineering attacks. SafeBreach's research highlights how malicious commands can be concealed in foreign languages or…
Dark Reading - AI Boosts Identity Visibility, Shrinking IAM Attack Surface
The article discusses the importance of reducing the Attack Surface in Identity and Access Management (IAM) through Identity Visibility and Intelligence Platforms (IVIP). Key points include leveraging AI to enhance cybersecurity, improving visibility into…
The Hacker News 2 articles this day · Security Affairs first · 2 outlets
CISA warns of active Linux kernel flaw enabling container escapes · CISA Adds Critical Linux and Android Flaws to KEV CatalogShow 2 articlesHide 2 articles
- CISA warns of active Linux kernel flaw enabling container escapes11:56SecurityWeek
- CISA Adds Critical Linux and Android Flaws to KEV Catalog10:43Security Affairs
- CISA warns of active Linux kernel flaw enabling container escapes
2 articles this day · Security Affairs first · 2 outlets
Android Local Privilege Flaw CVE-2025-48595 Exploited in the Wild · Google fixes 124 Android bugs, patches active CVE-2025-48595Show 2 articlesHide 2 articles
- Android Local Privilege Flaw CVE-2025-48595 Exploited in the Wild11:38SOCRadar
- Google fixes 124 Android bugs, patches active CVE-2025-4859509:44Security Affairs
- Android Local Privilege Flaw CVE-2025-48595 Exploited in the Wild
- HD Moore shares ways to spot threats beyond zero day flaws
The article discusses a cybersecurity webinar titled "Beyond the Zero-Day: See Your Network Like an Attacker" featuring HD Moore, the creator of Metasploit. It focuses on practical strategies to enhance threat detection and network defense against cyber…
The Hacker News - US govt launches voluntary AI model cybersecurity review program
On June 2, 2026, President Donald Trump signed an executive order inviting developers of advanced AI models to voluntarily submit their models for cybersecurity review by the US government prior to release. This order establishes a framework that allows…
Infosecurity - New HTTP/2 Bomb Exploit Disables Thousands of Web Servers
A new exploit known as 'HTTP/2 Bomb' has been discovered by cybersecurity firm Calif, which combines old denial-of-service techniques to disable major web servers. This exploit affects over 880,000 websites utilizing HTTP/2 with default configurations in…
SecurityWeek - Brazil faces surge in ransomware as top threat actors target 2026
The article outlines the top 10 cyber threat actors targeting Brazil in 2026, highlighting the country's vulnerability as Latin America's primary target for cybercrime. Key actors include LockBit 5.0, Qilin, and Akira, with significant impacts observed…
SOCRadarStorm-1567 - SideCopy XenoRAT Uses Pashto Lures in Afghan Gov Espionage
Security researchers identified a cyber espionage campaign involving a SideCopy XenoRAT malware attack targeting Afghan government networks. The campaign employs spear-phishing emails with localized Pashto filenames to deliver a malicious shortcut. This…
SecurityOnlineSideCopy - Windows Search flaw lets attackers steal NTLMv2 hashes remotely
The article discusses an unpatched vulnerability in the Windows Search feature that allows attackers to steal NTLMv2 password hashes. This issue poses a significant risk, as it can be exploited remotely, compromising network security. Organizations are urged…
The Hacker News - Boards Use Cyber Risk Quantification to Show Financial Impact
The article discusses strategies for boards to prioritize Cyber Risk Quantification (CRQ) to enhance cybersecurity management. Key points include: 1. Focusing on monetary aspects of cybersecurity risks can facilitate board support, as demonstrated by BP's…
Infosecurity - Finance exec at stock exchange breached via Outlook email attack
A recent cyberattack targeted a senior finance executive at a global stock exchange, allowing hackers to access months of sensitive email communications. The attackers used legitimate Windows tools to infiltrate Microsoft Outlook and exfiltrate data, raising…
Dark Reading - Microsoft Warns Researcher Following Zero Day Disclosure Threat
Microsoft faced backlash after threatening legal action against researchers disclosing zero-day vulnerabilities. One researcher, "Nightmare Eclipse," released details of several unpatched vulnerabilities affecting Microsoft products, prompting a dispute over…
SecurityWeek - Critical flaws in Acer Wave 7 leak credentials, enable backdoors
Critical vulnerabilities have been discovered in Acer Wave 7 devices, specifically impacting access control and cryptographic defenses. Two notable flaws are highlighted: CVE-2026-49200, which exposes cleartext credential logs vulnerable to unauthorized…
SecurityOnlineCVE-2026-49200 - Anthropic adds 150 partners to Claude Mythos amid flaw surge
Anthropic has expanded access to its AI model, Claude Mythos, to 150 additional organizations, enhancing its Project Glasswing initiative aimed at uncovering vulnerabilities in critical software. Originally limited to about 50 partners, the new organizations…
Infosecurity - Argamal RAT infects hentai gamers via malicious game downloads
The Argamal RAT (Remote Access Trojan) is a newly discovered malware that specifically targets players of hentai games. Once infected, the malware compromises the user's system and provides attackers with broad remote control capabilities. The initial…
securelist.com - Infosecurity Europe: Patch Responsibility Remains Up for Grabs as AI Unearths Decades of Flaws
The article discusses the evolving landscape of patch management in cybersecurity, driven by advancements in AI technologies, specifically referencing the developments by OpenAI and Anthropic. Key points include: 1) The patching lifecycle is accelerating,…
Infosecurity - Infostealers bypass MFA by stealing cookies in phishing attacks
The article discusses the evolving threats posed by infostealers in phishing schemes. Cybercriminals increasingly favor infostealers over traditional phishing methods, as these malware programs silently collect sensitive data from infected devices without…
Malwarebytes - New HTTP/2 Bomb Flaw Lets Attackers Crash Major Web Servers
The article discusses a newly discovered vulnerability, termed the HTTP/2 bomb, which enables remote denial-of-service (DoS) attacks on popular web servers including NGINX, Apache, IIS, Envoy, and Cloudflare. This vulnerability can potentially disrupt web…
The Hacker News
