News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Today, Mon 2 Nov | 31 so far | 5 |
Developing
Tue 16 Jun79 articles
- Rokarolla Android Trojan steals data, spies via fake apps
The Rokarolla Android Trojan is a new malware that combines banking fraud with extensive device surveillance and remote control capabilities. Distributed via fake downloads of benign applications like TikTok and Chrome, it can control infected devices…
Dark Reading - ShapedPlugin breach exposes WordPress sites via CVE-2026-10735
A significant supply chain attack on the ShapedPlugin WordPress plugin, discovered by Wordfence on June 11, 2026, compromised plugins distributed via official channels. Hackers injected malware into premium updates, particularly targeting Easy Digital…
SecurityOnlineCVE-2026-10735 - iRhythm breach exposes patient data after social engineering attack
iRhythm, a health company specializing in cardiac monitoring, disclosed a data breach involving unauthorized access to third-party-hosted business applications. The incident, reported on June 8, included social engineering tactics and resulted in the theft…
SecurityWeek - Aembit Extends IAM for Agentic AI to Microsoft Copilot Studio
Aembit has announced an integration of its identity and access management (IAM) platform with Microsoft’s Copilot Studio, aiming to enhance security for enterprise AI agents. This integration allows security teams to manage access conditions and track…
SecurityOnline - SprySOCKS backdoor gains Windows kernel stealth, hits governments
The article discusses recent developments regarding the SprySOCKS backdoor, which has now expanded from operating solely on Linux to include Windows systems. This expansion, identified by ESET, introduces two Windows variants (WIN_DRV and WIN_PLUS) that…
InfosecurityEarth Lusca - Hacker Conversations: Isira Adithya, the Evolution of an Ethical Hacker
Isira Adithya, a Sri Lankan hacker and ethical hacking expert, showcases a journey driven by curiosity from a young age. He began exploring hacking at 11, initially focusing on game modifications and later transitioning to Wi-Fi hacking with guidance from an…
SecurityWeek - Fortinet warns of active exploits in unpatched FortiSandbox flaws
Fortinet is facing active exploitation of three critical vulnerabilities in its FortiSandbox software, confirmed by cybersecurity firm Defused Cyber. Two of these vulnerabilities were reportedly unpatched for two months, while the third had a patch released…
- Malware group shifts to ClickFix lures on WordPress sites
The campaign linked to the 'Lorem Ipsum' malware has shifted its delivery method from Trojanized Microsoft Teams installers to ClickFix lures hosted on compromised WordPress sites. This change was necessitated by Microsoft's disruption of a malware-signing…
Dark ReadingRapid Brigantine - Magnitude secures $10M to deploy AI agents for third party risk
Cybersecurity startup Magnitude has officially launched after raising $10 million in seed funding led by Ballistic Ventures. Based in San Francisco, it aims to improve third-party risk management (TPRM) using an autonomous AI workforce that continuously…
SecurityWeek - SecurityWeek Report Warns of Shadow AI Risks in Cybersecurity
The report from SecurityWeek provides a comprehensive analysis of the role of artificial intelligence (AI) in cybersecurity through five key topics: Generative AI, Agentic AI, Shadow AI, Machine Learning (ML), and Artificial General Intelligence (AGI). It…
SecurityWeek - Rokarolla Android Trojan Hijacks Devices, Drains Bank Accounts
The article details the Rokarolla trojan, an advanced Android banking malware that not only drains bank accounts but also takes complete control of infected devices. Identified by Zimperium's zLabs, it targets 217 banking and cryptocurrency applications with…
Infosecurity - Android Malware Rokarolla Steals PINs, SMS Codes and Crypto Funds
The article discusses a newly discovered Android malware named Rokarolla, which is capable of stealing sensitive information such as PINs, SMS verification codes, and funds from crypto wallets. Identified by the cybersecurity community, this malware poses…
The Hacker News - AppViewX releases Agent Identity Security for AI agent protection
AppViewX has launched Agent Identity Security, a product designed to govern and secure AI agents within enterprises. This solution addresses the growing challenges posed by ungoverned AI agents and the threats from quantum computing. Key features include…
SecurityOnline - Free World Cup streams hide malware traps and fake virus alerts
The article warns against "free World Cup stream" sites that seem to offer live football matches but are actually scams promoting malware, ads, and fraudulent downloads. These sites often replicate identical templates, using deceptive ads and hidden…
Malwarebytes - Cloudflare releases new DMARC manager to simplify email security
Cloudflare's DMARC Management feature is now generally available, offering a redesigned user experience aimed at simplifying email authentication for all customers. This tool emphasizes the importance of proper email authentication protocols like SPF, DKIM,…
Cloudflare - Ent lands $100M seed round to advance AI driven endpoint security
Ent, a new endpoint security company, has raised $100 million in seed funding to enhance workspace security by analyzing user and AI agent behaviors in real-time to prevent potential risks before they escalate. Founded by cybersecurity experts Elias Manousos…
SecurityWeek - Cardiac patients’ medical data stolen and held to ransom
The article discusses a data breach affecting iRhythm, a cardiac monitoring provider, where sensitive patient data, including personal health information (PHI), was stolen and held for ransom. The breach was reported to the SEC after iRhythm was contacted by…
Malwarebytes - FulcrumSec Claims Novo Nordisk Hack, Steals 1.3TB of Trial Data
FulcrumSec has claimed responsibility for a cyber attack on Novo Nordisk, a leading Danish pharmaceutical company. The company disclosed that hackers accessed internal IT systems and exfiltrated data related to clinical trials, including pseudonymized…
SecurityWeekFulcrumSec - Hackers Capitalize on AI Hype With Sophisticated Attacks
As AI gains prominence, cybercriminals are leveraging AI-related themes for social engineering attacks. A report from Microsoft highlights a rise in phishing and malvertising tactics that exploit popular platforms like ChatGPT and Claude to trick users into…
SecurityOnline - TrustCloud Automates Trust Assessments for CISOs Today
The article discusses the challenges faced by CISOs in assessing the trustworthiness of production applications, emphasizing the manual and time-consuming nature of questionnaires currently in use. TrustCloud aims to offer a solution through its Application…
SecurityWeek - GitGuardian debuts endpoint protection for developer secrets
GitGuardian has launched Developer Endpoint Protection to secure developer workstations amid increasing attacks on credentials stored there. After a year of incidents where attackers harvested credentials from developer machines, the focus has shifted to…
SecurityOnline - Over Two-Thirds of Security Pros Say Cyber Is Getting Harder
A recent report, _The Life and Times of Cybersecurity Professionals, Volume VIII_, reveals that 68% of cybersecurity professionals believe their job has become more challenging over the past two years. Key findings from the survey of 380 practitioners…
Infosecurity - Rockwell CompactLogix flaws leak data, allow DoS attacks
The advisory details vulnerabilities in Rockwell Automation's CompactLogix series, specifically the 5370 L1, L2, and L3 versions. The identified issues could allow attackers to cause denial-of-service conditions due to improper validation checks. The…
CISACVE-2025-11694 - Rockwell Logix Controllers Flaw Causes Denial-of-Service
The advisory from CISA (ICSA-26-167-03) addresses a vulnerability affecting Rockwell Automation Logix 5370 and 5570 Controllers that could lead to a denial-of-service (DoS) condition, resulting in a major nonrecoverable fault (MNRF). Versions impacted…
CISA - Handala Claims Data Breach at California Water Utility, No Outage
California Water Service (Cal Water) is investigating hacking claims made by the Iran-linked group Handala, which alleges to have stolen several gigabytes of data from the utility's systems. The group claimed it could have disrupted water supply operations…
SecurityWeekHandala - Trump signs NSPM-12 to harden national security cybersecurity
President Trump signed National Security Presidential Memorandum-12 (NSPM-12) aimed at enhancing the cybersecurity of National Security Systems (NSS), which are crucial for processing classified information. The memorandum introduces a governance structure…
SecurityWeek - Survey shows 94% of attacks rely on anonymous infrastructure
A recent survey indicates that 94% of cybersecurity incidents involve anonymized infrastructure, highlighting a reactive approach among security teams. The need for proactive measures and a shift towards frameworks like Zero Trust is emphasized to better…
The Hacker News - DragonForce Ransomware Exploited Microsoft Teams to Hide in Attack Against Major Company
A ransomware group, DragonForce, exploited Microsoft Teams to infiltrate a major U.S. services firm undetected for two months. They used a Go-based Remote Access Trojan (RAT), dubbed Backdoor.Turn, to hide command and control (C&C) traffic by masquerading as…
InfosecurityDragonForce - Microsoft patches critical Copilot AI flaw that leaked 2FA codes
Microsoft recently patched a critical vulnerability in its M365 Copilot AI platform, which allowed hackers to extract two-factor authentication (2FA) codes and other sensitive data from user emails. Researchers from Varonis demonstrated a proof-of-concept…
Ars Technica - Chainguard launches Athena to guard open source from AI threats
Chainguard, an open-source security firm, has launched a coalition called Athena with partners including JPMorgan, BNY, and Cisco to protect open-source software from AI threats. This initiative aims to share vulnerability intelligence and create solutions…
Infosecurity - Cisco SD WAN manager flaw lets attackers write files, patch urged
Cisco's Catalyst SD-WAN Manager has a vulnerability identified as CVE-2026-20262, which allows for arbitrary file writes, and is currently being exploited in the wild. This flaw has a CVSS score of 6.5 and stems from improper validation of user inputs during…
- Arch Linux halts AUR signups after 1500 package supply attack
Arch Linux has suspended new account registrations on the Arch User Repository (AUR) due to a significant supply chain attack, known as Atomic Arch, which involves over 1,500 malicious packages. The attack began with modifications to abandoned packages that…
SecurityWeek - US seizes CFake.com and SOCFake.com under TAKE IT DOWN Act
The U.S. Departments of Justice and Homeland Security have seized the domains CFake.com and SOCFake.com under the TAKE IT DOWN Act, which criminalizes the publication of nonconsensual intimate imagery, including deepfakes. The act mandates content removal…
Malwarebytes - US seizes deepfake sites CFake.com, SOCFake.com under new law
The U.S. Departments of Justice and Homeland Security have seized the domains CFake.com and SOCFake.com due to their involvement in nonconsensual intimate deepfakes, as enforced under the TAKE IT DOWN Act, which criminalizes such publications. The seizure…
Malwarebytes - Fortinet FortiSandbox flaws exploited after recent patch
The article discusses three recently exploited vulnerabilities in Fortinet's FortiSandbox, underscoring one that was patched just a week before the exploitation. It highlights the importance of timely updates and vigilance in cybersecurity to protect against…
The Hacker News - Tech chiefs urge US to lift curbs on Anthropic's Fable 5 AI
A group of over 100 cybersecurity leaders, including executives from Adobe and Nvidia, is urging the Trump administration to remove export restrictions on Anthropic's latest AI models, Fable 5 and Mythos 5. They argue that the restrictions could…
SecurityWeek - US bars export of Claude Fable 5 AI over jailbreak security flaws
The U.S. government has implemented an emergency export control directive banning the Claude Fable 5 AI model from being offered to non-U.S. citizens due to critical security vulnerabilities. Anthropic, the model's developer, is in negotiations with the…
SecurityOnline - Vertex AI SDK bug enables model hijack via bucket squatting
The Palo Alto Networks report discusses a vulnerability in the Google Cloud Vertex AI SDK for Python, which potentially allows attackers to hijack and poison model uploads via a technique known as 'bucket squatting.' This exploit enables remote code…
Unit 42 - Chinese SprySOCKS backdoor gains Windows driver stealth capability
The article discusses the expansion of the SprySOCKS backdoor associated with Chinese cyber espionage, now targeting Windows systems through driver-based stealth techniques. It highlights malware trends, the importance of cybersecurity measures, and ongoing…
The Hacker News - Fintech firms launch Athena to guard open source from AI hacks
A coalition named Athena has been formed by over two dozen fintech and tech organizations to safeguard open source software (OSS) from AI-driven cyber exploitation. Key members include BNY, Cisco, and JPMorgan Chase. Athena aims to identify and mitigate…
SecurityWeek
