News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Today, Mon 2 Nov | 24 so far | 4 |
Developing
Wed 17 Jun83 articles
- AI Powered Attacks Surge, Identity Security Turns Critical
The blog post discusses how AI is accelerating cyberattacks and emphasizes the importance of identity security in mitigating risks. Key points include: 1. **AI's Role in Cyberattacks**: AI enables faster and more personalized attacks, enhancing capabilities…
techcommunity.microsoft.com - Critical LDAP injection flaw found in Apache Shiro framework
A critical vulnerability, tracked as CVE-2026-49268, has been discovered in the Apache Shiro framework, specifically within the DefaultLdapRealm class. This LDAP injection flaw poses a significant risk, allowing attackers to manipulate Distinguished Names…
SecurityOnlineCVE-2026-49268 - London Clinic staff charged over Princess Kate record breach
A hospital worker at The London Clinic, where the Princess of Wales had abdominal surgery, is facing criminal prosecution for allegedly accessing her medical records. Three trusted employees have been dismissed after an investigation revealed they attempted…
DataBreaches - The browser blind spot: Why your security tool may not be blocking what you think it is [Guest Diary], (Wed, Jun 17th)
This guest diary by Varun Murdula discusses the enforcement gap in Cloud Access Security Brokers (CASBs) due to the QUIC protocol, which runs over UDP and is not visible to traditional CASB traffic inspection, primarily designed for TCP. The article…
SANS ISC - Hacker Leverages Tailscale and OpenSSH to Keep C2 Access Alive
A recent article discusses a case involving a junior hacker who successfully maintained access to their command and control (C2) infrastructure using Tailscale and OpenSSH after the initial connection was lost. This incident highlights the evolving…
The Hacker News 2 articles this day · SecurityWeek first · 2 outlets
DragonForce hides malware in Microsoft Teams via custom backdoor · DragonForce ransomware leverages Teams for new Backdoor.Turn C2Show 2 articlesHide 2 articles
- DragonForce hides malware in Microsoft Teams via custom backdoor15:55Security Affairs
- DragonForce ransomware leverages Teams for new Backdoor.Turn C210:38SecurityWeek
- DragonForce hides malware in Microsoft Teams via custom backdoor
- Rokarolla malware steals bank, crypto logins via fake overlays
The article discusses a new Android malware named Rokarolla, which can completely take over devices and steal sensitive banking and cryptocurrency login details from over 200 apps. It uses deceptive overlay screens to capture user information, including PINs…
Malwarebytes - CISA flags critical Joomla JCE bug enabling remote code execution
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw in the Widget Factory Joomla Content Editor (JCE), identified as CVE-2026-48907 with a CVSS score of 10.0, to its Known Exploited Vulnerabilities catalog. This…
- North Korean Fake IT Workers Uncovered in US Laptop Farm Scheme
A North Korean scheme to implant fake IT workers in Western firms has been uncovered, with one operative attempting to infiltrate a company that tracks such fraud. The investigation by Nisos revealed a suspicious job application mirroring a job posting and a…
Infosecurity - SecurityWeek webinar reveals how attackers log in to bypass MFA
The SecurityWeek Network hosts a live webinar on June 17, 2026, focusing on modern identity attacks. It highlights how attackers now log in rather than break in, utilizing social engineering, MFA fatigue, session hijacking, and more to bypass security…
SecurityWeek - GitBait Phishing Uses GitHub Pages to Hit Mexican Banks
A phishing operation called GitBait has been targeting customers of Mexican banks by utilizing GitHub Pages and SheetBest, a cloud service, to avoid traditional server infrastructure. Over the last three years, the initiative has affected at least 12…
Infosecurity - Rust clipboard hijacker steals crypto through fake GitHub apps
The report discusses a sophisticated campaign involving a Rust-based clipboard hijacker that targets cryptocurrency users. The campaign employs various deceptive tactics to create a false sense of legitimacy, including fake engagement through GitHub,…
Check Point - Enterprise AI app data leaks jump 93%, sparking DLP violations
The amount of sensitive enterprise data uploaded to AI applications has nearly doubled, with a 93% increase in data transfers reported by Zscaler in their 2026 AI Threat Report. Key findings include that over half of the data transfers were attributed to…
Infosecurity - AI driven phishing surge exposes 86% of Fortune 100 firms data
A recent report from SpyCloud reveals a significant rise in phishing attacks targeting enterprises, driven by advancements in AI and phishing-as-a-service (PhaaS) platforms. Key findings include: 78% of organizations reported increased phishing volumes, with…
SecurityOnline - Cloudflare One stack eases Zero Trust migration for firms
The Cloudflare One stack is a newly launched toolkit aimed at simplifying the adoption of Zero Trust network architectures. It helps organizations automate the deployment and management of security workflows by providing agents with contextual knowledge…
Cloudflare - FortiSandbox CVE-2026-39813 lets hackers bypass auth, run code
FortiSandbox has critical vulnerabilities (CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089) affecting its API and Web UI components, allowing attackers to bypass authentication, escalate privileges, and execute commands without valid credentials. These…
- 1Password Buys Apono for Up to $300M to Boost Access Security
1Password has acquired Israel-based Apono, a company focused on just-in-time access governance for human, machine, and AI use. The acquisition is valued between $250 million and $300 million. Apono's technology dynamically grants temporary permissions based…
SecurityWeek - AI driven attacks worry pros as alert fatigue hits security teams
A recent study at Infosecurity Europe 2026 highlights that AI-powered attacks are the primary security concern for cybersecurity professionals, with 41% citing them as a top challenge. A significant issue for security teams is alert fatigue, where 26% of…
Infosecurity - AI confidence gap: Executives feel safe while staff warn of risks
A recent report by Heimdal reveals a significant confidence gap regarding AI risk management, with 29% of US executives feeling that AI risk is under control, compared to only 7% of the practitioners responsible for daily AI operations. In the UK, the…
SecurityOnline - Tenet Security raises $6 million to stop rogue AI agents
Tenet Security, founded by Barak Sternberg and Nevo Poran and headquartered in the US after originating from Israel, focuses on real-time detection and prevention of dangerous AI agent behavior. Their patent-pending technology addresses threats from both…
SecurityWeek - NCSC CEO: Hostile states linked to three-quarters of cyber attacks affecting UK's critical systems
Dr. Richard Horne, CEO of the NCSC, indicated that 75% of cyber attacks on the UK's critical infrastructure in the past year are attributed to hostile state actors, such as Russia, China, and Iran. During his speech at RUSI’s Annual Security Lecture, he…
NCSC - Exposure Validation Boosts Threat Prioritisation for Firms
The article discusses Adversarial Exposure Validation (AEV), a new approach in cybersecurity that enhances security visibility and prioritization for organizations. AEV allows companies to identify and manage security vulnerabilities more effectively by…
The Hacker News 2 articles this day · Security Affairs first · 2 outlets
Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise · EdTech firms hit by ShinyHunters and FulcrumSec cyberattacksShow 2 articlesHide 2 articles
- Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise11:48DataBreaches
- EdTech firms hit by ShinyHunters and FulcrumSec cyberattacks09:16Security Affairs
- Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise
- GitHub ignores alerts on ShaiHulud worm threatening dev supply
GitHub rejected two vulnerability reports from Deep Specter Research concerning design flaws that may allow variants of the Shai-Hulud supply-chain worm to compromise numerous software packages and developer accounts globally. These reports were deemed…
DataBreachesTeamPCP - IE: HSE fined €300,000 after Tullamore hospital data breach
We couldn't load analysis for this article. Use the referenced report link below.
DataBreaches - Rockwell Automation Patches Vulnerabilities in ICS Controllers and Software
Rockwell Automation has released patches for multiple vulnerabilities impacting its ICS products, including Logix and CompactLogix controllers, RSLinx software, and FactoryTalk suite. Key issues include: Three critical vulnerabilities in FactoryTalk…
SecurityWeek - Rokarolla Android Trojan hits banks via fake TikTok, Chrome apps
The article discusses the Rokarolla Android Trojan, which targets 217 banking and crypto applications, stealing user credentials and interfering with device functionality. This malware spreads through malicious sites disguised as popular apps like TikTok and…
Security Affairs - Fortinet devices breached worldwide as hackers leak credentials
A significant cyber attack targeting over 30,000 Fortinet devices across nearly 200 countries has been uncovered. Researchers from SOCRadar discovered the operation, believed to be orchestrated by Russian-speaking threat actors, through an exposed server.…
Dark Reading - Windows and Linux users: The deadline to update Secure Boot keys is near
Windows and Linux users are urged to update cryptographic keys that secure systems against UEFI firmware-based malware, with a deadline of June 24. The expiring Microsoft-signed certificates are essential for Secure Boot, which prevents bootkit attacks by…
Ars Technica - 24 Billion Record Leak Exposes Telegram Users’ Passwords Online
A massive data breach involving 24 billion stolen records has been identified, highlighting ongoing issues with the illegal circulation of personal information. The database was briefly exposed online and consists of records from various sources, including…
Malwarebytes - Attack surface threats set to surge in 2026, experts warn
The article from The Hacker News discusses the top 10 attack surface exposures anticipated in 2026. It highlights the growing importance of attack surface management in cybersecurity as threats evolve and organizations increasingly rely on digital…
The Hacker News - Ukraine gains EU cyber defence aid via new Security Reserve
The Ukrainian government can now access EU cyber support against cyber-attacks after being included in the EU Cybersecurity Reserve, approved by the EU Council. Despite not being an EU member, this allows Ukraine to utilize services from 47 trusted private…
Infosecurity - Malwarebytes Wins AV TEST Top Product Award with 17.5/18 Score
Malwarebytes has been awarded the AV-TEST Top Product award for achieving 17.5 out of 18 points in a recent Windows security test. The test evaluated 14 security applications based on their ability to protect against malware, system performance impact, and…
Malwarebytes - Microsoft Defender bug CVE-2026-50656 allows admin takeover
Microsoft recently acknowledged a vulnerability in its Defender software, tracked as CVE-2026-50656, which could allow for privilege escalation, with a CVSS score of 7.8. This vulnerability, called 'RoguePlanet', was disclosed by researcher Nightmare…
SecurityWeekCVE-2026-50656 - JetBrains Plugins Steal AI API Keys via Chrome Extensions
The article discusses a cybersecurity threat involving malicious JetBrains plugins that steal AI API keys. These plugins operate as Chrome extensions, allowing hackers to capture user conversations with AI chatbots. The threat highlights vulnerabilities in…
The Hacker News - JetBrains plugins leak API keys, 70k installs since 2025
Security researchers from Aikido Security discovered 15 malicious plugins on the JetBrains Marketplace that have been stealing API keys from developers. These plugins, posing as AI coding assistants, have been installed approximately 70,000 times since their…
Infosecurity - Oracle June 2026 Patch Fixes 245 Flaws, Including 120 Critical
Oracle released its June 2026 Critical Security Patch Update (CSPU), adding 245 new patches to address severe vulnerabilities across multiple products, including Communications and MySQL. Approximately 120 vulnerabilities are classified as critical, and…
SecurityWeek - GoFlateLoader Malware Bypasses AV Using Oversized Files
The article discusses a newly detected loader malware known as GoFlateLoader, which is designed to deliver information-stealing payloads globally. Since April 2026, it has protected over 33,000 users from threats primarily in Brazil, India, and Argentina.…
SecurityOnline
