News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 12 so far | 0 |
Developing
Tue 30 Jun80 articles
- Aflac Japan breach leaks 4.38m records, US ops safe
Hackers gained unauthorized access to Aflac Japan's systems from June 15 to June 25, 2026, leading to the theft of personal information from 4.38 million customers and agents. The disclosed data includes names, addresses, phone numbers, dates of birth,…
Security Affairs - Critical Langflow RCE flaw lets attackers mine Monero on AI apps
The article discusses a recent exploitation of a critical vulnerability in Langflow that was used to deploy a Monero miner on unsecured AI application endpoints. This incident highlights the rising trend of cyber threats targeting AI systems, emphasizing the…
The Hacker News - Fake Google Notes addon silently swaps crypto wallet addresses
The article discusses a new method employed by cybercriminals, specifically a silent swap crypto clipper that uses a fake Google Notes extension to replace cryptocurrency wallet addresses. This technique poses significant security risks to users by…
The Hacker News 3 articles this day · SecurityWeek first · 3 outlets
Critical SimpleHelp Vulnerability Exploited For Malware Delivery · Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn StealerShow 3 articlesHide 3 articles
- Critical SimpleHelp Vulnerability Exploited For Malware Delivery15:34Infosecurity
- Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer11:18The Hacker News
- CVE-2026-48558 SimpleHelp flaw lets attackers deploy malware08:43SecurityWeek
- Critical SimpleHelp Vulnerability Exploited For Malware Delivery
- NDSS Symposium Heads to Seoul in 2027 to Expand Global Cybersecurity Collaboration
The 2027 Network and Distributed System Security (NDSS) Symposium will be held from March 22-26, 2027, in Seoul, South Korea, as announced by the Internet Society. As a prestigious cybersecurity research conference, it seeks to enhance global collaboration…
SecurityOnline - Reflectiz and Taboola Talk AI Marketing Script Security
Reflectiz, a web exposure management platform, will host a live webinar with Taboola on July 8, 2026, focused on securing third-party marketing in the context of AI. The discussion highlights the risks posed by third-party scripts that are often unvetted,…
SecurityOnline - North Korean operatives flood US firms with fake job applications
Nisos conducted an investigation into DPRK employment fraud, revealing how North Korean operatives infiltrate US companies. Their findings, presented in a recent newsletter and a podcast, detail the operational methods of a DPRK cell that submitted over…
DataBreaches - Apple fixes two dozen WebKit bugs in iOS, macOS and Safari
Apple has released security updates for iOS, iPadOS, macOS Tahoe, and Safari to address over two dozen vulnerabilities, particularly in the WebKit engine, which affects all browsers on iPhones and iPads. The updates enhance security by fixing vulnerabilities…
Malwarebytes - GuardFall exposes old shell flaws in open source AI coding agents
The article discusses the cybersecurity risks associated with open-source AI coding agents, particularly highlighting how GuardFall has exposed these agents to shell injection vulnerabilities that have existed for decades. It emphasizes the need for enhanced…
The Hacker News - OpenMatter launches cryptographic trust layer for secure AI governance
OpenMatter Network has launched a cryptographically verifiable platform aimed at secure collaboration and AI governance, moving away from traditional trust-based systems. As organizations face challenges with distributed data and autonomous AI, the platform…
SecurityOnline - AppViewX Launches Global Partner Program Amid Rising Demand for Machine and Agent Identity Security
AppViewX has launched its first global Partner Program to enhance partner success amid increasing demand for machine and agent identity security. This program aims to provide resources, infrastructure, and frameworks that support effective engagement with…
SecurityOnline - BlueHammer Defender Flaw Linked to Ransomware Exploits
A Microsoft Defender vulnerability, known as BlueHammer (CVE-2026-33825), is currently being exploited in ransomware attacks, as reported by CISA. This vulnerability was publicly disclosed on April 2, with Microsoft issuing patches on April 14. Despite…
- Ukrainian and French police seize Russian XSS cybercrime forum
Ransomnews provides an in-depth analysis of the XSS Forum, a significant Russian-language cybercrime hub, detailing its history and eventual seizure in 2025 due to law enforcement actions in Ukraine and France. XSS Forum, with over 50,000 members, served as…
DataBreaches - 282 iOS apps expose API keys and OpenAI proxy via network traffic
A recent study identified that 282 iOS applications are leaking vital information such as API keys and OpenAI proxy access through network traffic. This poses a significant risk to user security and privacy. The article emphasizes the importance of securing…
The Hacker News - AI Generated Teams Workflow Leaks HR Data After Misconfiguration
The article discusses the hidden security risks associated with AI-generated workflows in organizations. It highlights a case where sensitive HR documents were mistakenly shared due to a misconfigured Microsoft Teams Power Automate workflow created by a…
Dark Reading - GuardFall flaw exposes AI coding agents to Bash command hacks
A recent study by Adversa AI highlights a critical security vulnerability, named 'GuardFall', affecting popular open-source AI coding agents due to weaknesses in handling Bash shell commands. Out of eleven agents tested, only one effectively blocked…
SecurityWeek - Aflac Japan breach exposes personal data of 4.38M customers
Aflac Life Insurance Japan announced a data breach on June 15, affecting 4.38 million customers. Hackers accessed the company’s systems multiple times until the breach was detected on June 25. No US business systems were compromised. The breach involved…
SecurityWeek - Aflac Japan breach exposes customers' personal, bank data
Aflac, an American insurance provider, has reported a data breach involving its Japan subsidiary, where attackers accessed personal and bank account information. This incident, revealed in a filing with the U.S. SEC, indicates that the breach occurred…
DataBreaches - NLnet Labs fixes critical NSD DNS server flaws in new release
NLnet Labs has released version 4.14.3 of the Name Server Daemon (NSD) to address four critical security vulnerabilities. These vulnerabilities, identified as CVE-2026-12244, CVE-2026-12245, CVE-2026-12246, and CVE-2026-12490, have high severity scores (up…
SecurityOnlineCVE-2026-12244 - From Teen Hacker to Red Team CEO: Chris Thompson on AI Threats
Chris Thompson's journey from a teenage game hacker to an elite professional in cybersecurity highlights the evolution of his career and the impact of offensive AI in the field. He founded IBM's first dedicated red team and is now CEO at RemoteThreat, aiming…
SecurityWeek - How ClickFix tricks users into pasting malware commands on macOS
The article discusses the rise of the 'ClickFix' technique as a key method for cybercriminals to deliver malware. Analysis by ReliaQuest reveals that ClickFix's popularity stems from its effectiveness in tricking users into executing malicious commands in…
Infosecurity - Supreme Court Rules Constitutional Privacy Protections Apply to Cellphone Users’ Location History
The Supreme Court ruled that constitutional privacy protections extend to cellphone location data, affirming that users do not lose their privacy rights even when using Google’s location services. The case involved Okello Chatrie, a bank robber whose…
SecurityWeek - Apple rolls out WebKit patches after AI tools uncover four flaws
Apple has released security updates for iOS, iPadOS, macOS, and Safari, addressing multiple WebKit vulnerabilities, with four of these flaws discovered using AI tools like Claude and Codex. The updates include fixes for issues that could cause crashes when…
Security Affairs - FIFA 2026 Approaches as Phishing Threats Rise, Zero Trust Urged
The article discusses cybersecurity risks associated with the FIFA 2026 event, particularly focusing on phishing and impersonation threats. It emphasizes the importance of addressing these threats proactively, highlighting potential statistics and indicators…
The Hacker News 2 articles this day · Security Affairs first · 2 outlets
Exploitation of Recent Oracle E-Business Suite Vulnerability Begins · Attackers actively exploit the Oracle E-Business Suite flaw CVE-2026-46817Show 2 articlesHide 2 articles
- Exploitation of Recent Oracle E-Business Suite Vulnerability Begins11:29SecurityWeek
- Attackers actively exploit the Oracle E-Business Suite flaw CVE-2026-4681709:01Security Affairs
- Exploitation of Recent Oracle E-Business Suite Vulnerability Begins
- TrendAI alerts on Booking.com hotel phishing with TONResolver RAT
Cybercriminals are targeting Booking.com partner hotels in Japan through phishing emails that impersonate guest complaints. The campaign, detected by TrendAI in May 2026, utilizes malware named TONResolver, hosted on The Open Network (TON) blockchain. This…
Infosecurity - NVIDIA patches critical AIStore auth bypass flaw rated 9.8 CVSS
NVIDIA has issued critical security updates to address several severe vulnerabilities in its AI platforms, including an authentication bypass flaw rated 9.8 CVSS in AIStore. This flaw poses significant risks as it can allow attackers unauthorized access,…
SecurityOnline - ToddyCat APT’s Umbrij Tool Steals Corporate Gmail via Google API
The report details a new tool, Umbrij, developed by the ToddyCat APT group to exploit corporate email accounts through the Google API. This tool automates the acquisition of OAuth tokens by utilizing a technique called Shadow Token via Remote Debug (STRD),…
securelist.comToddyCat - AI powered security faces rising costs with token based pricing
The article discusses the rising costs associated with AI integration in cybersecurity platforms, highlighting a shift from fixed software licensing to a token-based consumption model. As organizations increasingly utilize AI for security functions, they…
SecurityWeek - Apple patches 28 flaws in iOS, macOS and Safari updates
On June 30, 2026, Apple released updates for iOS/iPadOS, macOS, and Safari, addressing several vulnerabilities. Most updates target web browser components such as WebKit, while a few relate to the kernel and IOGPUFamily. None of the vulnerabilities are…
SANS ISC - UK healthcare sees cyber attacks jump tenfold due to legacy flaws
A report from SonicWall reveals that the UK healthcare sector has faced a tenfold increase in cyber-attacks from January to May 2026, compared to the entire year of 2025. The data indicates 264,000 cyber events during the first five months of 2026, making it…
Infosecurity - AirDrop and Quick Share flaws let nearby attackers crash devices
Recent flaws in AirDrop and Quick Share have been identified, allowing nearby attackers to trigger crashes and bypass security checks. The vulnerabilities pose significant risks to wireless communication systems, highlighting the need for enhanced security…
The Hacker News - Nissan Employee Data Breached in Oracle PeopleSoft Hack
Nissan disclosed a data breach resulting from a zero-day vulnerability in Oracle PeopleSoft, which may have compromised employee data across the US, Canada, Mexico, and Brazil. The breach could involve sensitive information, including Social Security Numbers…
SecurityWeekShinyHunters - INC Ransomware Hits APAC Factories, Japanese Food Firms via GPO
The article discusses recent developments in a cyber threat involving the INC Ransomware, which has been detected actively exploiting APAC manufacturing sectors and Japanese food companies. The malware employs a sophisticated toolkit designed for various CPU…
SecurityOnlineINC Ransomware - Sports Venues Face Rising Cyber Threats Ahead of 2026 World Cup
In 2026, 84% of sports organizations reported cyber incidents, indicating a heightened risk for the digitized sports sector. The analysis highlights that sports are attractive targets due to their visibility, valuable data, and dependencies on third-party…
darktrace.com - Anthropic’s Claude Fable 5 to Require ID Checks and Paid Credits
The article discusses recent developments regarding Anthropic's upcoming Claude Fable 5 model, which reportedly will require users to purchase separate credits for access and undergo strict identity verification checks. Hidden text in the app indicates that…
SecurityOnline - Google rolls out Gemini AI image tool using Gmail, Photos
Google has expanded its Gemini app's 'Personalized Intelligence' feature, now available for free to eligible users in the U.S. This allows the app to generate custom AI images using personal data from Gmail and Google Photos. Users can request personalized…
SecurityOnline
