Skip to content
Sign in

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Articles per day, last 14 days

Most articles on Wed 21 Oct (96); 13–17 on weekend days.

19 Oct21962325272931Today50 so faravg 61
  • On CISA KEV CVEs
  • Other coverage
  • Closed-day average
Show as table
Articles per day, last 14 days
DayArticlesOn CISA KEV CVEs
Mon 19 Oct6012
Tue 20 Oct8616
Wed 21 Oct9618
Thu 22 Oct8411
Fri 23 Oct6816
Sat 24 Oct134
Sun 25 Oct132
Mon 26 Oct7621
Tue 27 Oct9518
Wed 28 Oct8716
Thu 29 Oct7817
Fri 30 Oct6910
Sat 31 Oct143
Sun 1 Nov170
Today, Mon 2 Nov50 so far7

Developing

Exploited only
67 articles · 12–13 Jun

Latest days

Sat 13 Jun14 articles

  1. Chrome live wallpaper extensions used to fake ad traffic

    Recent cybersecurity research unveiled a significant ad-fraud campaign involving 152 malicious Chrome extensions masquerading as benign "live wallpaper" apps. These extensions, dispersed over 38 publisher accounts, logged user data and generated fake web…

    SecurityOnline
  2. Apple focuses AI on practical Siri and privacy at WWDC 2026

    At WWDC 2026, Apple executives Craig Federighi and Greg Joswiak discussed the company's AI philosophy, emphasizing that Apple develops AI tools based on genuine user needs rather than for technology's sake. They highlighted improvements in Siri, which…

    SecurityOnline
  3. Apple debuts Container 1.0.0 to run containers on Apple Silicon

    Apple has released Container 1.0.0, a command-line tool designed for its Apple Silicon Macs, enabling the running of Linux containers as lightweight virtual machines. This release introduces several key features: state preservation for container machines,…

    SecurityOnline
  4. Important Apache CXF Vulnerabilities Demand Immediate Action

    Several critical vulnerabilities have been identified in the Apache CXF framework, affecting numerous applications. The vulnerabilities include: 1. **JNDI Injection Vulnerability (CVE-2026-50633)**: This allows unauthorized code execution by manipulating the…

    SecurityOnlineCVE-2026-50633

Fri 12 Jun53 articles

  1. New macOS Tahoe 26 artefact logs menu choices for forensic probes

    The article discusses a newly discovered artifact called App.MenuItem in macOS Tahoe 26, highlighting its significance for forensic investigations. This artifact logs user actions, providing insights into menu selections across the system, which can…

    Unit 42
  2. Handala

    2 articles this day · SecurityWeek first · 2 outlets

    Handala hackers breach Cal Water, leak 2M customers' data · Handala hackers leak 5GB Cal Water data, expose customer PIIShow 2 articles
  3. Oracle PeopleSoft Enterprise PeopleToolsCVE-2026-35273Exploited

    7 articles this day · Security Affairs first · 6 outlets

    CISA Adds Oracle PeopleSoft Flaw CVE-2026-35273 to KEV Catalog · ShinyHunters Uses Oracle Zero-Day to Rampage Higher EdShow 7 articles
  4. Arch Linux AUR breach hijacks 400+ packages to deliver malware

    The article reports that over 400 Arch Linux AUR packages have been hijacked to distribute infostealer malware and an eBPF rootkit. This incident highlights significant vulnerabilities in software supply chains and the increasing sophistication of cyber…

    The Hacker News
  5. Conti

    2 articles this day · SecurityOnline first · 2 outlets

    Ukrainian admits Conti ransomware conspiracy after US extradition · Ukrainian hacker pleads guilty to Conti ransomware role worldwideShow 2 articles
  6. LabCorp Settles Lawsuits Stemming from 2019 AMCA Breach

    In 2019, the American Medical Collection Agency (AMCA) breach impacted LabCorp and led to the exposure of personal data for over 10 million patients, including names, Social Security numbers, and health information. Due to the fallout, AMCA filed for Chapter…

    DataBreaches
  7. Over 400 Arch Linux AUR Packages Hijacked in Supply Chain Attack

    Over 400 Arch Linux AUR packages have been hijacked to deliver an infostealer and an eBPF rootkit, highlighting vulnerabilities within supply chain security. The article discusses the implications of such cyberattacks on user security and the integrity of…

    The Hacker News
  8. Google sues Chinese smishing gang using Gemini AI for phishing

    Google has initiated a lawsuit against a Chinese smishing network that allegedly utilized Gemini AI for phishing attacks. The suit highlights concerns over the increasing integration of AI technologies in cybercrime, especially in crafting sophisticated…

    The Hacker News
  9. Ivanti SentryCVE-2026-10520Exploited

    2 articles this day · SecurityWeek first · 2 outlets

    CISA urges immediate patch for Ivanti Sentry CVE-2026-10520 flaw · Ivanti Sentry Exploitation Attempts Hitting HoneypotsShow 2 articles
  10. China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade

    China-linked hackers have reportedly compromised Linux login software, embedding backdoors that allowed them to remain undetected for nearly a decade. The sophisticated attack demonstrates the ongoing threat posed by state-backed cyber operatives and…

    The Hacker News
  11. Police dismantle AudiA6 crypto laundering ring after EUR336m bust

    International law enforcement agencies have dismantled a major cryptocurrency laundering service known as 'AudiA6'. This platform was involved in laundering over EUR 336 million for cybercriminals from 2022 to 2025, serving as a key financial conduit for…

    SecurityOnline
  12. US authorities seize deepfake porn sites CFAKE.com, SOCFAKE.com

    Recently, U.S. federal authorities seized deepfake porn websites CFAKE.com and SOCFAKE.com, marking a significant enforcement action under the TAKE IT DOWN Act, which criminalizes the unauthorized publication of sexually explicit digital forgeries. Acting…

    SecurityOnline
  13. Whistleblower sues IBM, AT&T over hidden foreign hacks

    SecurityWeek's weekly roundup highlights critical cybersecurity developments: 1. **IBM and AT&T Lawsuit**: A whistleblower claims the companies covered up foreign hacks to retain federal contracts. 2. **University of Oxford Data Breach**: Access to alumni…

    SecurityWeek
  14. UK Police and Apple team up to cut iPhone thefts by 18%

    The UK Metropolitan Police and Apple have collaborated to enhance security measures for stolen iPhones, making them less appealing to thieves. Key initiatives include improved technical protections in iOS that require biometric authentication for critical…

    Malwarebytes
  15. FBI and Europol bust crypto laundering ring AudiA6, arrest two

    An international law enforcement operation led by the FBI and Europol dismantled 'AudiA6', a cryptocurrency laundering service suspected of laundering over €336 million ($389 million) for cybercriminals between 2022 and 2025. The operation, involving…

    Infosecurity
  16. FulcrumSec Breach Exposes 4.8TB of Data from Global Schools Group

    The Global Schools Foundation (GSF), a non-profit K-12 education organization based in Singapore, experienced a significant data breach in April 2026, perpetrated by a group known as FulcrumSec. They accessed sensitive data from the Global Schools Group…

    DataBreachesFulcrumSec
  17. Anthropic launches Claude models, experts warn of exploit risks

    Anthropic has launched the Claude Fable 5 and Mythos 5 models, emphasizing enhanced capabilities yet maintaining existing cybersecurity concerns. Mythos 5, an upgrade from the previous Preview model, can potentially identify critical exploits, prompting…

    Dark Reading
  18. GitHub to Update npm to Thwart Software Supply Chain Attacks

    GitHub is set to release version 12 of its npm package manager, introducing three critical security changes aimed at preventing software supply chain attacks. These changes, effective from July 2026, will block certain installation scripts, prevent Git…

    Infosecurity
  19. Anthropic’s Claude Fable 5 Sparks Dual Use Debate in AI

    Anthropic recently launched Claude Fable 5, a Mythos-class AI model designed with safeguards for high-risk domains like cybersecurity and bioweapons. Concerns arise over its dual-use potential in both offense and defense, demanding proactive AI governance.…

    SecurityWeek
  20. ISC Stormcast June 12 2026: Jan Kopriva Green Threat Level

    The page features an ISC Stormcast for June 12th, 2026, presented by handler Jan Kopriva. The current threat level is indicated as green. There are links to previous diaries, discussions, and educational classes taught by Dr. Johannes Ullrich. It also…

    SANS ISC
  21. Hackers Trick AI Coding Agents Into Running Malicious Code

    The article discusses the emerging threat known as 'Agentjacking,' where attackers manipulate AI coding agents into executing harmful code. This method exploits the advanced capabilities of AI, posing significant cybersecurity risks. By tricking AI into…

    The Hacker News
  22. Former Iowa school IT worker jailed for sabotage after departure

    Ezekiel Dean Potter, a former IT worker for Saydel Community School District in Iowa, was sentenced to 21 months in federal prison for disrupting technology systems after leaving the district. His actions affected classroom technology and staff accounts. He…

    DataBreaches
  23. How AI Is Changing Managed Detection and Response Services

    The article "Rethinking MDR as Attackers and Defenders Embrace AI" discusses the evolving landscape of Managed Detection and Response (MDR) services in the context of increasing AI utilization by both attackers and defenders. It emphasizes the importance of…

    The Hacker News
  24. Darktrace finds 80% of sports firms hit by cyber attacks last year

    Over 80% of professional sports organizations were targeted by cyber-attacks in the past year, with 57% experiencing multiple incidents. Researchers from Darktrace report that these organizations are appealing targets due to high-profile events, sensitive…

    Infosecurity
  25. LangGraph flaw lets attackers run code on self hosted AI agents

    The article discusses a significant vulnerability in LangGraph, revealing that a flaw chain can potentially lead to remote code execution in self-hosted AI agents. It addresses the implications of this weakness for AI security, highlighting the need for…

    The Hacker News
  26. Steam gamers warned of fake FACEIT verification credential scam

    The article highlights a scam targeting Steam users, particularly gamers on the FACEIT platform, which involves fake verification pages designed to steal account credentials. Cybercriminals create convincing pages that mimic legitimate FACEIT branding and…

    Malwarebytes
  27. Chrome 149 patches 28 flaws, five critical, amid rising bug count

    Google released the Chrome 149 update, addressing 28 high and critical vulnerabilities, including five classified as critical. Key issues include various use-after-free bugs and validation flaws, which pose risks for remote code execution (RCE) and data…

    SecurityWeek
Show older articles
CyberSIXTSignal over noise
Updated AboutDevelopersSign in