News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Today, Mon 2 Nov | 39 so far | 6 |
Developing
Mon 15 Jun74 articles
- LiteLLM flaw lets lowpriv users hijack AI gateways
The article discusses a vulnerability within LiteLLM that allows low-privilege users to take over AI gateway servers. Published on June 15, 2026, by Swati Khandelwal, it highlights the security risks associated with this vulnerability, emphasizing the need…
The Hacker News - Cisco SD-WAN Vulnerability Exploited in the Wild: Patch CVE-2026-20262 Now
A critical vulnerability in Cisco's SD-WAN Manager, tracked as CVE-2026-20262, is under active attack, posing significant risks to affected systems. The flaw, stemming from inadequate validation of user input during file uploads, allows authenticated…
3 articles this day · Google Cloud first · 3 outlets
China-Nexus Actor Spied on US Researchers Undetected for a Year · Chinese Hackers Target Medical, Military, and AI Research in North AmericaShow 3 articlesHide 3 articles
- China-Nexus Actor Spied on US Researchers Undetected for a Year16:20Dark Reading
- Chinese Hackers Target Medical, Military, and AI Research in North America14:07SecurityWeek
- Chinese Hackers Use REDCap Flaw to Spy on US Universities and Labs14:00Google Cloud
- China-Nexus Actor Spied on US Researchers Undetected for a Year
- Anubis Ransomware Hits Adriatic Port, Highlights Maritime Risks
Anubis ransomware group targeted the Adriatic Port Authority, resulting in a warning over maritime security vulnerabilities. This cyber-attack, which occurred in December 2025 but was reported in June 2026, compromised about 2% of the port's data, notably…
InfosecurityAnubis - Microsoft Defender beats SEG rivals in email threat detection
Microsoft's quarterly email security benchmarking data reveals key insights about Microsoft Defender's performance compared to secure email gateways (SEG) and integrated cloud email security (ICES) vendors over one year. Key findings include: 1.…
Microsoft - Uncanny Automator hack exposes data, spreads malicious WP update
The Uncanny Automator breach, confirmed by its maker Uncanny Owl on June 12, 2026, exposed customer data and injected a malicious update into WordPress sites via a flawed update channel. Attackers manipulated the Pro update package and accessed the licensing…
SecurityOnline - Mackay Sugar Suffers Gentlemen Ransomware Attack, Mills Halted
Mackay Sugar, Australia's second-largest sugar producer, experienced a ransomware attack on June 10 that affected operations at two of its cane-processing mills in Queensland. The company initiated interim processes to maintain critical business functions…
SecurityWeekThe Gentlemen - Critical flaw in Microsoft 365 Copilot leaks emails and MFA codes
A critical vulnerability in Microsoft 365 Copilot could have enabled attackers to access emails, files, and multi-factor authentication codes with a single click. This flaw raises significant concerns about enterprise security, emphasizing the need for…
The Hacker News - AI Native OSes Shift Social Engineering Defence from Users
The article discusses the rise of AI-native operating systems and their potential to combat social engineering attacks by shifting the responsibility from users to systems. This change is enabled by advancements in authentication methods, context…
Dark Reading - AI Turns CVSS Scores into Clear Business Risk Insights for Firms
The article discusses how AI can enhance vulnerability management by translating technical findings into business risks. Traditionally, cybersecurity data, primarily indicated through CVSS scores, does not adequately reflect the real-world implications of…
Rapid7 - US mandates Anthropic to disable Claude Fable 5 and Mythos 5
The US government has ordered Anthropic to disable its AI models, Claude Fable 5 and Mythos 5, due to national security concerns regarding their potential abuse by adversaries. Anthropic decided to disable these models globally instead of filtering access by…
Malwarebytes - Take It Down Act fuels SF's deepfake porn site takedown
The podcast episode 'Deepfake porn sites are going offline' revisits an interview with David Chiu, San Francisco City Attorney, discussing the legal actions taken against deepfake pornography websites that exploit images without consent. Research indicates a…
Malwarebytes - The Quarry PhaaS operation fuels US IRS and SSA scams nationwide
The blog article from SOCRadar provides an in-depth analysis of a cybercrime operation named "The Quarry," which is a Phishing-as-a-Service (PhaaS) ecosystem. The operation, led by a threat actor known as RockyBelling, sells phishing toolkits to nearly 200…
SOCRadarRockyBelling - Chrome zero day, UniFi exploits, macOS malware top weekly threats
The article from The Hacker News presents a weekly recap on significant cybersecurity developments. Key topics include a critical 0-day vulnerability in Chrome, exploits targeting UniFi systems, new malware stealing data from macOS, and a notable security…
The Hacker News - Novo Nordisk breach exposes trial data and provider contacts
Novo Nordisk confirmed a data breach affecting its IT systems, leading to unauthorized access and the theft of personal data. The attack targeted clinical trial data, which included pseudonymized information such as patient IDs, participation details,…
Security Affairs - NewCore secures $66M seed funding for AI ready identity platform
Israeli cybersecurity startup NewCore has raised $66 million in seed funding from major investors including Cyberstarts and Index Ventures. The company, founded by veterans of Israeli intelligence, has developed a security-first identity platform aimed at…
SecurityWeek - US Blocks Foreign Access to Anthropic's Fable 5 and Mythos 5 AI
The US government has issued a ban preventing foreign nationals from accessing Anthropic's latest AI models, Fable 5 and Mythos 5, due to concerns over their use in cyberattacks. The directive follows reports of adversaries utilizing AI models to generate…
Dark Reading - UC San Diego turns 2000 old Pixel phones into eco cloud data centre
A research team at UC San Diego is developing a low-carbon cloud data center using 2,000 retired Google Pixel smartphones, launching in autumn 2026. This initiative, called "phone cluster computing," aims to tackle the issue of embodied carbon from hardware…
SecurityOnline - Fox Kitten Hackers Mix Espionage with Ransomware Profit
The article provides a comprehensive profile of the Iranian threat actor group named Fox Kitten, known for its dual role of collecting intelligence for the Iranian regime and facilitating ransomware attacks for profit. Active since 2017, this state-sponsored…
SOCRadarFox Kitten - Ukrainian admits guilt in Conti ransomware case, faces 20 years
A Ukrainian national, Oleksii Oleksiyovych Lytvynenko, pleaded guilty in a US court to charges related to the Conti ransomware group. Arrested in Ireland in 2023 and extradited to the US in 2025, he admitted to joining the group in September 2021 and…
SecurityWeekConti - JLR Orders 30,000 Staff to Reset Passwords In Person After Breach
Jaguar Land Rover (JLR) mandated all 30,000 employees to perform in-person password resets following a cybersecurity incident that raised concerns about potential credential compromises. Ashish Shrestha, the former chief information security officer of JLR,…
DataBreaches - Onboarding Password Mistakes Leave Firms Open to Cyber Attacks
The article discusses common onboarding password mistakes that lead to cybersecurity risks. It emphasizes the importance of setting secure password policies during employee onboarding processes. Key points include the need for multi-factor authentication,…
The Hacker News - Novo Nordisk breach exposes trial patient and staff data
Novo Nordisk, a major pharmaceutical company, reported a cybersecurity incident where unauthorized access to internal IT systems occurred, leading to potential exposure of personal data of patients involved in clinical trials. Although the data comprised…
SecurityWeek - Attackers Leverage CVE-2026-0257 to Bypass GlobalProtect VPN Auth
Palo Alto Networks has issued a warning regarding an active exploitation of CVE-2026-0257, a vulnerability in PAN-OS that allows unauthorized users to bypass authentication and establish VPN connections. The flaw affects GlobalProtect portals and gateways…
- French Government Messaging Platform Breached by Mysterious ‘Misere’ Hacker
On June 8, 2026, the French government's secure messaging platform, Tchap, was reported breached, affecting 73,467 out of 825,000 registered employees. A threat actor named 'misere' claimed responsibility, alleging theft of over 13.5GB of data, including…
SecurityWeekmisere - Adware hits over 100k users via Chrome wallpaper extensions
The article discusses the discovery of 152 Chrome wallpaper extensions with 105,000 installs that are linked to adware and fake traffic. Published on June 15, 2026, by Ravie Lakshmanan, it highlights concerns over browser security and the prevalence of…
The Hacker News - Australian regulator orders Amex to fix insider threat data flaws
The Australian Privacy Commissioner has ordered American Express to address security weaknesses in five data systems to mitigate insider threats and restrict employee access to sensitive customer information, especially for vulnerable and high-profile…
DataBreaches - ShinyHunters says it breached Council of Europe, stole 300 GB
The hacking group ShinyHunters claims to have breached the Council of Europe, exfiltrating nearly 300 GB of sensitive data, including payroll information for over 10,000 employees, along with various personal records. The group threatens to publish this data…
SecurityWeekShinyHunters - Experts urge US to reverse ban on Anthropic AI models
Over 50 cybersecurity professionals are urging the US government to reverse its ban on two AI models, Mythos 5 and Fable 5, from Anthropic, which were prohibited due to alleged national security concerns. Anthropic announced the suspension of these models’…
Infosecurity - Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Sites
The article discusses cybersecurity threats, specifically focusing on a recent supply chain attack where popular WordPress plugin scripts were tampered with to introduce hidden backdoors in websites. The implications of such vulnerabilities are significant,…
The Hacker News - Iran Hajj Organisation data leak exposes 168m records on dark web
The SOCRadar Dark Web Team reported several concerning developments concerning the sale of sensitive data. Key findings include: 1. **Iran's Hajj Organization Data**: A breach allegedly impacting 168 million records related to travel and personal details was…
SOCRadarEverest - FBI, Google shut down China phishing service tied to $1.9bn loss
The FBI and Google have taken down Outsider Enterprise, a major phishing-as-a-service platform based in China that resulted in billions in losses. The operation, involving the distribution of phishing kits through Telegram, led to attacks affecting hundreds…
SecurityWeek - UK govt AI hackathon finds 400+ serious flaws in public code
The UK government has identified over 400 vulnerabilities through internal hackathons utilizing frontier AI models. Organized by the Government Cyber Coordination Centre, these hackathons aimed to scan public code repositories across nine government…
Infosecurity - Attackers exploit Jenkins flaw to execute code through config.xml
A critical vulnerability affecting Jenkins, tracked as CVE-2026-53435, allows attackers to execute arbitrary code on Jenkins controllers by exploiting how config.xml files are handled. This flaw has a CVSS score of 8.8 and has been actively exploited within…
SecurityOnlineCVE-2026-53435 - Maine takes breach portal down after fake VRChat, Discord filings
Maine has temporarily taken its breach reporting portal offline due to the submission of two false data breach reports that impersonated companies such as VRChat and Discord. The Attorney General's office noted that these false reports, claiming severe…
Infosecurity - Maine AG halts breach portal after VRChat, Discord claims
The Maine Attorney General's Office has temporarily disabled its data breach portal due to fraudulent submissions related to reported data breaches. This system, which cataloged nearly 6,000 incidents since mid-2020, required organizations to report the…
SecurityWeek - Supply Chain Attack Hits WordPress Plugins via Awesome Motive CDN
A supply chain attack has compromised popular WordPress plugins (OptinMonster, TrustPulse, and PushEngage) through Awesome Motive's CDN, allowing attackers to inject malicious JavaScript into the plugins' files. This attack mimics previous supply chain…
Security Affairs - X VPN users hit by trojanized installer delivering STX RAT
The ongoing cyber threat campaign attributed to the actor Leda Elacoate involves a trojanized software distribution operation targeting cryptocurrency users and VPN clients, notably X-VPN. The attack began in January 2026 with malicious installers for…
SecurityOnlineLeda Elacoate
