News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Today, Mon 2 Nov | 7 so far | 1 |
Developing
Tue 23 Jun68 articles
- Trump orders agencies to shift to quantum safe encryption by 2030
On June 22, 2026, President Trump signed Executive Order 14409 to ensure federal systems transition to post-quantum encryption by December 31, 2030, and post-quantum authentication by December 31, 2031. This EO addresses the urgency posed by advancements in…
Cloudflare - FortiBleed steals 110m credentials from FortiGate firewalls
The article discusses a recent cybersecurity incident known as 'FortiBleed', which targeted FortiGate firewalls and was part of a massive credential harvesting operation involving 110 million credentials. The attack highlights the vulnerabilities in firewall…
The Hacker News - Dragos rolls out EmberAI OT security tool with decade of data
Dragos has launched EmberAI, an artificial intelligence module specifically designed for operational technology (OT) cybersecurity. Built on the Intelligence Fabric, EmberAI utilizes a decade's worth of data on adversary tracking, vulnerabilities, and…
SecurityWeek - DifyTap flaws expose AI platform data, let attackers steal files
Researchers from Zafran Labs have identified four vulnerabilities in Dify, an open-source AI platform used by major companies to support over a million applications. The vulnerabilities, collectively referred to as 'DifyTap,' include: 1. CVE-2026-41947 (CVSS…
Security AffairsCVE-2026-41947 2 articles this day · Infosecurity first · 2 outlets
UK duo plead guilty to Scattered Spider TfL and health hacks · UK Teens Admit Hacking TfL, Causing £29m Losses Across LondonShow 2 articlesHide 2 articles
- UK duo plead guilty to Scattered Spider TfL and health hacks16:12Krebs on Security
- UK Teens Admit Hacking TfL, Causing £29m Losses Across London09:29Infosecurity
- UK duo plead guilty to Scattered Spider TfL and health hacks
- Dark web fuels cybercrime as 8.4bn records leak in 2026
The article from Malwarebytes explores the dark web, detailing both its legitimate uses and its thriving criminal underbelly. Key findings from a 48-hour investigation include: 1. The dark web supports privacy for journalists and activists but is also home…
Malwarebytes - Critical flaws in Dify AI expose tenant data to attackers
Zafran Security has identified four critical vulnerabilities in the open-source AI platform Dify, potentially allowing attackers to access sensitive data from other users in multi-tenant configurations. The vulnerabilities include issues with Dify’s tracing…
SecurityWeek - Fake AI Agent Skills Evade Scans, Spread to 26k Agents
A recent report highlights the alarming rise of fake AI agent skills that have passed security scans and proliferated to approximately 26,000 agents. This raises significant concerns regarding the security vulnerabilities in AI chatbots and the potential…
The Hacker News - Trump Orders US Agencies to Shift to Quantum Safe Crypto by 2030
The content discusses the recent order from former President Trump setting a deadline for federal agencies to transition to post-quantum cryptographic algorithms by 2030. This initiative is driven by the need to enhance cybersecurity measures against future…
The Hacker News - Fake npm package steals Chrome passwords using Windows RAT
A malicious npm package, named 'postcss-minify-selector-parser', impersonated a widely used build tool, embedding a multi-stage Windows remote access trojan (RAT) in a supply chain attack. The attack was revealed by JFrog, which noted the package's deceptive…
Infosecurity - GitHub updates actions/checkout to stop Pwn request attacks
GitHub has updated its actions/checkout feature to prevent common patterns of Pwn requests, a significant step in enhancing workflow security within software supply chains. This update aims to block specific attack vectors that threaten GitHub workflows,…
The Hacker News - OpenAI Expands Daybreak to Help Defenders Patch Flaws
OpenAI has expanded its cyber-defense program, Daybreak, which aims to streamline patch automation for software vulnerabilities. The newly released GPT-5.5-Cyber model has shown improved capabilities in identifying and fixing flaws, scoring a record 85.6% in…
Infosecurity - Trump orders US agencies to shift to quantum safe crypto by 2031
On June 22, 2026, President Trump signed an executive order mandating US federal agencies to complete their migration to post-quantum cryptography (PQC) by 2030 or 2031. This order aims to protect sensitive data and critical infrastructure against future…
Infosecurity - Global raid dismantles SocGholish malware used by ransomware
The article discusses the recent takedown of the SocGholish malware framework, known for exploiting traffic distribution systems (TDS) to infiltrate networks. An international law enforcement operation led to the seizure of 106 servers and remediation of…
Dark Reading - Meta Stops Employee Tracking Scheme After Data Leak Fears Surface
Meta has halted a controversial employee-tracking program after a security review revealed that sensitive data collected, including keystrokes and screen content, was more accessible internally than intended. The program, part of Meta's Model Capability…
Malwarebytes - Eight Year Old Samsung KNOX Flaw CVE-2026-20971 Patched
Researchers identified a high-severity, eight-year-old vulnerability in the KNOX kernel of Samsung devices, affecting models from Galaxy S9 to S25 (CVE-2026-20971, CVSS 7.8). The flaw arises from a race condition that could be exploited via an untrusted app,…
SecurityWeekCVE-2026-20971 - Scammers set up GTA 6 preorder sites demanding crypto payments
As Rockstar Games prepares to open pre-orders for Grand Theft Auto VI (GTA 6) on June 25, 2026, scammers have begun to create fake websites offering early access for a fee in cryptocurrency. Experts warn that these sites are unauthorized and fraudulent, as…
Infosecurity - Fake Shop Scams Surge Across Europe, Impersonating Top Brands
A Bitdefender Labs investigation identified over 55 fake-shop campaigns targeting consumers across 12 European countries from March to May 2026, impersonating major brands like Samsung, Nike, and Adidas. These campaigns utilized various channels, including…
bitdefender.com - Deep Instinct CISO/CIO Carl Froggett Warns of AI Misuse Threat
Carl Froggett serves as both CISO and CIO at Deep Instinct, highlighting the synergy between technology and security in business. He believes the combination of these roles can enhance collaboration, although it risks losing impartiality. Froggett's…
SecurityWeek - FortiBleed hits 430k firewalls, stealing 110m credentials
The FortiBleed attack campaign targets over 430,000 FortiGate firewalls globally, compromising them to harvest credentials through a Golang-based tool called FortigateSniffer. This tool captures authentication data across 24 protocols, resulting in the theft…
Dark Reading - Overfocus on Hackers Obscures Real Cybersecurity Weaknesses
Marco A. De Felice discusses the overemphasis on identifying threat actors in cybersecurity, while neglecting root causes and incident response strategies. He highlights "structural fragility," where organizations fail to secure the vast amounts of sensitive…
DataBreaches - Algerian Extradited to US Over $900k Bank Fraud Marketplace
Abdellah Belmili, a 26-year-old Algerian, was arrested in Spain and extradited to the US for allegedly operating two cybercrime marketplaces, including Market0Day and Spoxy, between 2020 and 2023. The US Justice Department reported that Belmili used phishing…
SecurityWeek - FFmpeg PixelSmash flaw lets hackers run code via crafted media
A critical vulnerability, tracked as CVE-2026-8461, has been identified in the FFmpeg media processing framework, allowing attackers to remotely crash applications and execute arbitrary code. The flaw exists within the MagicYUV decoder of FFmpeg's libavcodec…
SecurityWeekCVE-2026-8461 - Agentic AI Turns Autonomous Weapons Into Silent Cyber Threats
The article titled "Agentic AI: The Weapon That No Longer Needs a Warrior" discusses the evolution of offensive artificial intelligence (AI) in cybersecurity. It highlights how agentic AI technologies are capable of executing tasks without human…
The Hacker News - OpenAI Enhances Daybreak Initiative with AI Patch Tools
OpenAI has enhanced its Daybreak cybersecurity initiative with new tools aimed at reducing the bottleneck in patch deployment, which has become critical due to the increased speed of vulnerability discovery driven by AI models. The updated Codex Security…
SecurityWeek - Texas Parks vendor breach exposes data of 3 million Texans
In a recent data breach, hackers accessed the personal information of over three million Texans through a third-party vendor for the Texas Parks and Wildlife Department (TPWD). The compromised data may include passport numbers, driver's license information,…
Malwarebytes - IAB hijacks 430k FortiGate firewalls in FortiBleed credential grab
A Russian initial access broker (IAB) is targeting over 430,000 FortiGate firewalls in the FortiBleed credential-harvesting campaign, as reported by SOCRadar. This multi-vendor operation, ongoing since at least February, compromises exposed firewalls to…
SecurityWeek - Xsolis Confirms Phishing Breach Exposes 1.4 Million Health Records
Xsolis, a healthcare technology company, reported a major data breach impacting 1.4 million individuals after a phishing attack on January 20, 2026. The breach exposed sensitive personal and health information, prompting the company to investigate and…
Security Affairs - London Hydro breach exposes data of 170,000 customers
London Hydro, a Canadian electricity provider, is investigating a data breach that potentially affected the personal and account information of its approximately 170,000 customers. The breach, announced on June 20, likely involved unauthorized access to…
SecurityWeek - Fake GTA 6 early access sites trick gamers into crypto payments
The article discusses the rise of scams claiming to offer early access to Grand Theft Auto VI (GTA 6), emphasizing that these are fraudulent sites not authorized by Rockstar Games. Scammers use enticing offers requiring cryptocurrency payments, which are…
Malwarebytes - GitBait phishing hits Mexican banks via fake GitHub Pages login
The GitBait phishing campaign targets at least 12 financial institutions in Mexico, utilizing GitHub Pages and the SheetBest API to harvest banking credentials. Unattributed financially motivated operators have been active for approximately three years,…
SecurityOnline - Trump signs order to protect US data from quantum attacks by 2030
President Trump signed Executive Order 14409 to enhance data protection against quantum computing threats, notably addressing the 'harvest now, decrypt later' strategy by cyber adversaries. The order assigns federal agencies, including OMB, NIST, and NSA, to…
SecurityWeek - Five Eyes Warn AI Boosts Cyber Threats, Urges Firms to Act
The Five Eyes cybersecurity agencies have issued an urgent statement addressing the threats posed by frontier AI, noting its potential to transform cyber offensive and defensive capabilities quickly. They called on businesses to enhance cyber resilience to…
Infosecurity - Meow macOS ClickFix Stealer Targets Global Tech, Media Firms
The macOS ClickFix AppleScript stealer, identified by Netskope Threat Labs as part of the Meow malware family, is an infostealer and remote access trojan targeting macOS users in technology, media, and business sectors across Asia, North America, and…
SecurityOnline - Attackers inject backdoor into ShapedPlugin WordPress Pro updates
A recent supply chain attack targeted ShapedPlugin, a WordPress plugin vendor, whereby attackers compromised its build and distribution pipeline, injecting backdoor malware into Pro plugin updates. Users who installed or updated any ShapedPlugin Pro products…
Security Affairs - Dropping Elephant hits Asian energy firms via fileless LNK attack
The Dropping Elephant malware utilizes advanced fileless techniques to launch attacks on primarily Asian energy-sector entities. This campaign leverages a China-themed decoy document to deliver a remote access trojan (RAT) directly into system memory,…
SecurityOnlineQUILTED TIGER - Squidbleed flaw leaks user data via memory leak in proxy
A newly discovered vulnerability in the Squid Proxy, named 'Squidbleed', allows attackers to leak user credentials and sensitive data due to a memory leak flaw present since 1997. This issue, identified as CVE-2026-47729, stems from improper handling of…
Security AffairsCVE-2026-47729 - AryStinger malware hijacks over 4,300 outdated routers in Asia
Security researchers at QiAnXin XLab have uncovered AryStinger malware infecting over 4,300 outdated routers worldwide, particularly targeting RTL819X series devices. This malware exploits vulnerabilities such as CVE-2013-3307 and CVE-2016-5681 to create a…
SecurityOnlineCVE-2013-3307 - Xsolis Data Breach Exposes 1.4M Patients After Phishing Attack
Xsolis, a healthcare technology company, has reported a data breach impacting approximately 1.4 million individuals due to a targeted phishing attack. The unauthorized activity was detected on January 22, following a phishing incident two days prior. The…
SecurityWeek
