News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Today, Mon 2 Nov | 68 so far | 7 |
Developing
Mon 8 Jun74 articles
- Cyberattack closes Evanston Township High School
Evanston Township High School has canceled summer school, sports camps, and on-campus activities due to a ransomware attack that has disrupted access to district systems, internet services, and infrastructure. The attack affects phone systems and Google…
DataBreaches - CVE-2026-3300 flaw in Everest Forms Pro lets attackers run code
A critical vulnerability (CVE-2026-3300) in the Everest Forms Pro WordPress plugin has been actively exploited, allowing remote attackers to inject PHP code on more than 100,000 sites due to improper input handling. This security flaw permits unauthorized…
SecurityWeekCVE-2026-3300 - AI security guide helps firms tackle rising software flaws
The page discusses the rising importance of AI in cybersecurity and highlights the risks associated with software vulnerabilities. It offers resources for understanding and mitigating these risks, including a guide on how to secure against vulnerabilities…
The Hacker News - Lansing Community College breach exposes 174,000 personal records
Lansing Community College (LCC) has notified over 174,000 individuals that their personal information was compromised in a data breach identified in February 2025. Hackers accessed sensitive data, including names, addresses, dates of birth, driver's license…
SecurityWeek - RenEngine Loader malware hits pirated Far Cry, FIFA games
A recent malware campaign targets users of pirated PC games, particularly those related to franchises like Far Cry, Need for Speed, FIFA, and Assassin’s Creed. Over 400,000 devices globally have been infected, with approximately 30,000 cases in the US. The…
Malwarebytes 2 articles this day · SecurityWeek first · 2 outlets
UNC3753 gang uses vishing and USB drops to steal legal data · Silent Ransom Group uses fast flux to hit law firms worldwideShow 2 articlesHide 2 articles
- UNC3753 gang uses vishing and USB drops to steal legal data10:46Security Affairs
- Silent Ransom Group uses fast flux to hit law firms worldwide10:31SecurityWeek
- UNC3753 gang uses vishing and USB drops to steal legal data
- OWASP warns prompt injection flaws persist, risking AI agents
During Infosecurity Europe 2026, OWASP researcher Ariel Fogel warned that prompt injection issues remain unresolved, presenting significant risks for AI development. He emphasized the challenges posed by large language models (LLMs) processing inputs as…
Infosecurity - VerdantBamboo Deploys BSD BRICKSTORM Variant on Linux Appliances
The article discusses VerdantBamboo's deployment of a BSD variant of the BRICKSTORM malware on Linux appliances, marking a notable trend in cyber espionage and malware effectiveness. It emphasizes the increasing threat landscape in cybersecurity, where…
The Hacker NewsVerdantBamboo - Meta Instagram AI flaw leaks 20k accounts, forces password resets
Meta's AI-powered Instagram recovery tool, known as High Touch Support (HTS), had a significant flaw that led to the exposure of over 20,000 accounts, allowing attackers to reset passwords without proper email verification. This vulnerability remained…
Security Affairs - Hackers pilfer exec emails from UK bank in five month spy run
A recent cyber operation targeted a major financial institution, executing a prolonged executive espionage campaign focused on extracting sensitive information from a senior leader's Outlook mailbox over five months. The attackers implemented stealthy…
SecurityOnline - Massive Smishing Error524 Campaign Evades Traditional Security Filters Worldwide
The article discusses a significant cyber threat known as the Smishing Error524 campaign, which has evolved its tactics to exploit mobile users globally. Originally emerging in Latin America in 2025, it now spans 72 countries, impersonating over 267 brands…
SecurityOnline - Open Source Community Lacks Awareness of EU Cyber Resilience Act
A report by OpenSSF reveals that two-thirds of the open source community is unaware of the Cyber Resilience Act (CRA) set for compliance by December 2027. The CRA aims to establish security standards for software and hardware in the EU, requiring…
Infosecurity - OpenAI adds Lockdown Mode and Active Sessions to secure ChatGPT
OpenAI has announced two new security features for ChatGPT: Lockdown Mode and Active Sessions. Lockdown Mode helps protect sensitive data from prompt injection attacks by limiting outbound network requests. It is particularly aimed at users handling highly…
SecurityWeek - Hades Campaign hijacks PyPI ensmallen, steals credentials
The article discusses the Hades Campaign, identified on June 8, 2026, involving a compromised version of the `ensmallen` package on PyPI, along with several others in bioinformatics. The campaign features a multifaceted payload that executes upon package…
StepSecurity - Instagram recovery bug lets attackers hijack 20k accounts
Meta has reported a serious security flaw in Instagram's account recovery system, allowing unauthorized access to user accounts. The vulnerability stemmed from a logic error in the High Touch Support AI tool, which failed to properly verify email addresses…
SecurityOnline - APT28’s PixyNetLoader uses PNG steganography to hide malware
The article details an analysis of the PixyNetLoader malware linked to the APT28 group, which uses steganography to hide payloads in PNG files. The malware is a DLL-based loader that exploits a specific vulnerability to install itself and execute a malicious…
SecurityOnlineAPT28 - UK DSIT Secures Half Million Domains Amid Rising Threats
The UK's Department of Science, Innovation and Technology (DSIT) is responsible for securing over half a million domains across various government organizations, including the National Health Service (NHS). At Infosecurity Europe 2026, Nick Woodcraft from…
Infosecurity - Redis DarkReplica Exploit: Full PoC Code and Technical Details Released
Severe Infrastructure Exposure Discovered A researcher has released the technical mechanics of a critical post-authentication flaw impacting multiple
SecurityOnline - Meta patches bug that sent Instagram reset links to wrong users
Meta disclosed a vulnerability in its AI-powered High Touch Support (HTS) tool that exposed over 20,000 Instagram accounts to unauthorized access. The flaw allowed third parties to exploit the system, receiving password reset links meant for the actual…
Infosecurity - Anthropic calls for global pause on advanced AI development
Anthropic, the company behind the Claude chatbot, has proposed a coordinated pause in the development of advanced AI systems due to concerns over rapid advancements potentially leading to a loss of human control. They emphasize the need for a global…
SecurityWeek 4 articles this day · SecurityOnline first · 2 outlets
CISA warns of DoS risk in SolarWinds Serv-U flaw CVE-2026-28318 · Verizon VoLTE flaw CVE-2026-28318 exposes calls to interceptionShow 4 articlesHide 4 articles
- CISA warns of DoS risk in SolarWinds Serv-U flaw CVE-2026-2831807:52SecurityWeek
- Verizon VoLTE flaw CVE-2026-28318 exposes calls to interception02:45SecurityOnline
- Attackers exploit CVE-2026-28318 and Zip Slip in Collibra Agent01:52SecurityOnline
- SolarWinds ServU bug lets attackers drain system resources01:36SecurityOnline
- CISA warns of DoS risk in SolarWinds Serv-U flaw CVE-2026-28318
- Broadcom patches VMware Cloud Foundation XSS bugs after alert
Broadcom has announced critical patches for its VMware Cloud Foundation due to multiple stored XSS vulnerabilities found in its management applications, affecting systems like VMware Aria Operations and VMware Telco Cloud Platform. The vulnerabilities, rated…
SecurityOnline - UNC3753 gang uses vishing and break ins for US data theft
The article discusses the UNC3753 group, known for using vishing and physical intrusions as part of a data theft extortion campaign in the U.S. This cybercriminal organization highlights the dangers of social engineering and its implications for…
The Hacker NewsUNC3753 - GitHub users face mystery outage as firm investigates status lag
GitHub is currently experiencing an unidentified technical outage affecting many users. Although access to the main homepage and individual repositories remains functional, connectivity issues were first noted approximately twenty-five minutes prior,…
SecurityOnline - Operation FlutterBridge: macOS malware hijacks ads to steal data.
The article discusses a new malware campaign named Operation FlutterBridge targeting macOS systems, evolving from basic adware to sophisticated backdoor implementations. The malware exploits legitimate advertising platforms to distribute rogue software that…
SecurityOnline - Meta Support Bot Gives Hackers Access to Instagram Accounts
The report from Malwarebytes Labs for the week of June 1 to June 7, 2026, highlights several significant cybersecurity issues. Key topics include: 1. Mobile device security, urging users to clean their phones. 2. A fake BlueWallet targeting Mac users to…
Malwarebytes - New Gafgyt Botnet Variant C0XMO Hijacks DDWRT Routers for DDoS
The article discusses the emergence of C0XMO, a new variant of the Gafgyt botnet, which exploits unpatched vulnerabilities in IoT devices. Discovered in March 2026, C0XMO spreads through a specific flaw (CVE-2021-27137) found in DD-WRT router firmware,…
- Gemini caching flaw on Google Cloud drives $200/hr bills
The content discusses a significant billing issue related to the Gemini platform on Google Cloud, specifically tied to a persistent caching defect causing excessive resource consumption and financial drain. Developers report an hourly cost of $200 due to…
SecurityOnline - Google Password Manager adds passkey import/export support
The article discusses a critical security update regarding the Google Password Manager, specifically its new ability to support import and export of passkeys via the Credential Exchange Protocol (CXP). Traditionally, users could easily manage alphanumeric…
SecurityOnline - Meta shuts AI recovery tool after 20k Instagram accounts hacked
Meta recently reported that approximately 20,000 Instagram accounts were hacked due to an exploitation of an AI-powered account recovery tool. Hackers could reset account passwords by manipulating this tool, which allowed them to link their email addresses…
SecurityWeek - WeedHack malware targets Minecraft players via fake videos
The article discusses a dangerous malware campaign called WeedHack that is targeting online gaming communities, particularly Minecraft players. McAfee Labs has identified this campaign utilizing malware as a service, distributed through deceptive video…
SecurityOnline - VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks
VS Code has introduced a two-hour delay for automatic updates of extensions in response to increasing concerns about supply chain attacks and malware risks. This measure aims to provide additional time for testing and vetting of updates before they are…
The Hacker News - The Fractured Evolution of Wireless Connectivity: Stagnant Wi-Fi 7 Adoption and the Emergence of Wi-Fi 8
The article discusses the current state and future prospects of Wi-Fi technologies, specifically focusing on Wi-Fi 7's adoption and the upcoming Wi-Fi 8. Key points include: 1. **Wi-Fi 7** adoption is below 2% globally as of 2026, with Wi-Fi 6 and Wi-Fi 5…
SecurityOnline - CVE-2026-47744 flaw lets attackers hijack Laravel Shopper admin
A critical vulnerability (CVE-2026-47744) has been found in the Shopper Laravel e-commerce platform, allowing unauthorized access to online store admin panels with a CVSS score of 9.9. The flaw involves an authorization bypass in the settings, which could…
SecurityOnlineCVE-2026-47744 - Critical Sitefinity Vulnerabilities: CVSS 10.0 Security Alert
A critical security alert has been issued for Progress Sitefinity due to multiple high-priority vulnerabilities. Notably, CVE-2026-7312, rated 10.0 on the CVSS scale, allows unauthorized remote access to plain-text credentials. Other significant…
SecurityOnlineCVE-2026-7312 - ISC Stormcast June 8 2026: Xavier Mertens Sees Green Threat Level
The content presents information about an ISC Stormcast for Monday, June 8th, 2026, including details about handler Xavier Mertens and the current threat level, which is green. It provides various links to relevant resources, including classes taught by…
SANS ISC
