News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 12 so far | 0 |
Developing
Wed 1 Jul78 articles
- AI hallucinations spawn phantom squatting domains for phishing
The article discusses a novel cybersecurity threat known as 'phantom squatting', where cybercriminals exploit large language models (LLMs) that generate fictitious web domains for legitimate brands. These domains can be registered by attackers to potentially…
Dark Reading - Apple patches 37 WebKit kernel flaws, including sandbox escapes
In June 2026, Apple released a security update addressing 37 unique CVEs across iOS, iPadOS, macOS, and Safari, primarily targeting WebKit/WebRTC vulnerabilities. The majority (31 of 37) focus on crash/DoS bugs rather than code execution risks, with notable…
thezdi.comCVE-2026-43724 - Cursor flaws enable prompt injection to break AI sandbox defence
The article discusses critical vulnerabilities in AI systems that allow prompt injection attacks to bypass security sandboxes and execute commands. Key points include the nature of the vulnerabilities, potential impacts such as unauthorized command…
The Hacker News - Veil#Drop fileless malware uses Blogspot to drop PureLog Stealer
A fileless malware framework, dubbed Veil#Drop, has exploited Google's Blogspot to deploy the PureLog Stealer entirely in memory, enabling attackers to steal credentials without leaving conventional traces on disk. According to Securonix Threat Research, the…
Infosecurity - Criminal IP Partners with OpenCTI to Enhance Threat Intelligence
The content discusses the integration of Criminal IP with OpenCTI, enhancing cyber threat intelligence by providing enriched context to IP addresses, domains, and URLs. This integration offers reputation scoring, vulnerability data, and behavioral signals,…
SecurityOnline - Attackers Exploit Progress Kemp LoadMaster RCE Flaw, Urge Patches
The article highlights an active exploitation attempt against a vulnerability in Progress Kemp LoadMaster that allows unauthorized remote code execution (RCE). The flaw is being targeted, prompting urgency for users to apply security patches. It provides…
The Hacker News - Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs
A password spray attack against Microsoft Azure CLI environments has been detected, targeting 64 organizations with over 81 million login attempts and resulting in 78 compromised accounts within just two weeks. The attackers utilized common password…
Security Affairs - Ousaban Trojan Targets Spain, Portugal Banks with Fake Tax PDFs
A banking trojan called Ousaban, previously targeting Brazil, has been adapted to attack banking customers in Spain and Portugal since May 2026. The malware employs phishing tactics through disguised PDFs, steganography, and geofencing techniques to evade…
Infosecurity - StepSecurity Offers Free Maintained GitHub Actions for Repos
StepSecurity has announced that its Maintained Actions are now free for public repositories, offering secure, actively maintained alternatives to risky third-party GitHub Actions. This change aims to enhance security in CI/CD workflows across the open-source…
StepSecurity - StepSecurity's Secure Registry Traces Malicious npm/PyPI Installs
The article discusses the new feature of StepSecurity's Secure Registry that allows users to trace npm and PyPI package installs back to the specific developer machine or CI pipeline responsible for pulling a compromised package. This capability arose after…
StepSecurity - Early digital spotting halts cyber threats before major events
In her article, Olga Polishchuk discusses the importance of integrating threat intelligence and digital security in the planning of major events to mitigate cyber threats. She emphasizes that premeditated threats often manifest digitally before becoming…
Dark Reading - AI Search Shift Spurs New Pay Per Use Model for Creators
The article discusses the evolving landscape of AI search and its impact on content creators. It highlights how traditional search models are being disrupted by AI answer engines that summarize content, leading to decreased traffic and revenue for creators.…
Cloudflare - New AI bot defaults block Agent, Training crawlers on ad pages
The article discusses new AI traffic management options for website owners, reflecting on changes that have occurred since the initial declaration of 'Content Independence Day'. It introduces a more nuanced taxonomy of bots, classifying them into three main…
Cloudflare - Cloudflare launches Monetization Gateway for stablecoin billing
Cloudflare has launched the Monetization Gateway, enabling customers to charge for digital assets like web pages and APIs through usage-based pricing. This platform integrates payment handling at the network edge, protecting origins from payment processing…
Cloudflare - One Year On, AI Reshapes Internet Traffic and Publisher Revenue
The article discusses the evolution of the Internet one year after the declaration of Content Independence Day, emphasizing the rapid adoption of AI technologies and their impact on content consumption and business models. Key points include: 1. **Shift in…
Cloudflare - AI powered ransomware hits Chromium browsers on Windows, Android
The article discusses the rise of AI-generated browser ransomware that exploits the Chromium API on both Windows and Android platforms. This form of ransomware employs AI to enhance its capabilities, making it more challenging to detect and mitigate. The…
The Hacker News - AI Agents Tricked by BioShocking Attack to Reveal User Passwords
The article discusses a new attack technique known as "BioShocking," devised by researcher Roy Paz, which exploits AI agents by convincing them to abandon their safety protocols through fictional scenarios. This manipulation merges prompt injection with goal…
Malwarebytes - Link11 launches AI driven DDoS protection with fast response
Link11 has launched its redesigned Layer 3/4 DDoS mitigation solution to address advanced cyber threats. The new system utilizes AI-driven detection and offers full IPv4 and IPv6 support. It can cope with complex attack patterns, reducing false positives and…
SecurityOnline - Google Chrome Fixes 382 Bugs, Including Critical Sandbox Escape
In July 2026, Google released a significant update for Chrome, fixing 382 security vulnerabilities, including 15 rated as critical. The update was part of a broader trend following Microsoft’s large patch and addresses weaknesses that could allow attackers…
MalwarebytesCVE-2026-13789 - Awareness lags behind resilience, says 2026 cybersecurity report
The article discusses the findings of the 2026 Cybersecurity Assessment, highlighting the significant gap between awareness of cybersecurity threats and the actual resilience of organizations to counter these threats. Key points include: 1. The necessity for…
The Hacker News - Adobe fixes ColdFusion Campaign Classic bugs, urges patch
Adobe has released security updates for ColdFusion and Campaign Classic addressing multiple critical vulnerabilities. The Campaign Classic update resolves CVE-2026-48286 (CVSS 10), allowing potential arbitrary code execution. ColdFusion updates address 11…
SecurityWeekCVE-2026-48286 - CISA warns BlueHammer flaw now used in ransomware attacks
CISA has confirmed that the vulnerability known as BlueHammer (CVE-2026-33825) is now being exploited in ransomware attacks, allowing attackers to gain SYSTEM privileges through Microsoft Defender. Originally a proof-of-concept, it has transitioned to active…
- Citrix fixes critical NetScaler flaws after HTTP/2 Bomb alert
On October 3, 2023, Citrix announced critical security updates for its NetScaler ADC and NetScaler Gateway products addressing six vulnerabilities, including the severe HTTP/2 Bomb flaw. Notable issues include four high-severity vulnerabilities related to…
- Anthropic Relaunches Claude Models with New Safety Measures
Anthropic has reintroduced its large language models (LLMs) Claude Mythos 5 and Claude Fable 5, with added security measures following a temporary suspension due to U.S. export controls. Both models are now available globally, but with enhancements to…
Infosecurity - Android 17 tightens PIN attempt limits to thwart thief attacks
Google's Android engineering team has introduced a significant security update in Android 17, instituting stricter rate limits on how many PIN entry attempts a user can make. Previously, Android 16 allowed up to ten attempts in a minute and gradually…
SecurityOnline - Microsoft to complete postquantum crypto shift by 2029
Microsoft is accelerating its transition to post-quantum cryptography with plans to complete this shift by 2029. This move is critical as quantum computing poses a significant threat to current encryption methods. The urgency is underscored by the need to…
The Hacker News - RustDuck botnet shifts to Rust, evades detection, grows fast
The article discusses RustDuck, an emerging DDoS botnet that is evolving rapidly and migrating its codebase from C to Rust. Tracking began in February 2026, revealing that RustDuck targets various devices, including routers and cameras, exploiting known…
Security Affairs - AI Powered Ransomware Exploits Chrome File Access on Android
The article discusses a new type of browser-native ransomware utilizing the File System Access API, which allows web applications to access local files with user permission. Key points include: 1. AI models can create novel attack techniques, demonstrated…
Check Point - Attackers misuse ScreenConnect to spread AsyncRAT via fake sites
The article investigates a cyber attack using the legitimate remote access tool ScreenConnect, which was exploited to deploy the AsyncRAT remote access Trojan (RAT). The threat actors utilized spoofed software websites to distribute malicious installers,…
securelist.com - Enterprises urged to scrutinise Frontier AI vendor claims
The article discusses the implications of Frontier AI on enterprise security, emphasizing two primary concerns: the ability of enterprises to manage vulnerabilities in their applications and the need for understanding product security impacts from vendors…
SecurityWeek - Microsoft pushes postquantum crypto shift ahead of 2029 deadline
Microsoft is accelerating its transition to post-quantum cryptography (PQC) due to advancements in quantum research which suggest that quantum computers capable of breaking asymmetric encryption are imminent. The company plans to move critical products and…
Infosecurity - US Lifts Export Ban on Anthropic’s Mythos and Fable AI Models
Anthropic AI has received authorization from the U.S. Department of Commerce to lift export restrictions on its AI models, Mythos and Fable, effective July 1. This follows a previous embargo imposed due to national security concerns regarding vulnerabilities…
SecurityOnline - Apple Patches Dozens of Vulnerabilities Across iOS, macOS, and Safari
Apple has released security updates for iOS, iPadOS, macOS Tahoe, and Safari, which address 37 vulnerabilities, including 26 in WebKit. These updates could prevent potential exploitation through malicious websites that might compromise user data and system…
SecurityWeek - UNC1151 Phishing Campaign Targets Belarus and Ukraine
The UNC1151 phishing campaign, allegedly directed by the Ghostwriter threat actor, targets political figures in Eastern Europe, particularly Belarusian politicians and Ukrainian web portals. The attacks involve spear-phishing emails that impersonate Google…
SecurityOnlineGhostwriter - Researchers trick ChatGPT into producing graphic violent images
The article discusses a concerning incident where researchers from the AI security firm Mindgard were able to manipulate ChatGPT into generating graphic and violent images by altering a benign prompt. This exploit led to the production of disturbing imagery,…
Malwarebytes - Aflac Japan breach leaks 4.4M customers' personal data
Aflac, a major US insurance company, announced a significant data breach affecting approximately 4.4 million customers in Japan. The breach occurred from June 15 to June 25, with unauthorized access to sensitive personal and financial information, including…
Infosecurity - Dawnguard Raises $6.3 Million for Security Architecture Automation Platform
Dawnguard, a cybersecurity startup based in Amsterdam, has raised an additional $3.3 million in pre-seed funding, bringing its total to over $6.3 million. This investment, led by BNVT Capital along with Curiosity VC and eCAPITAL, will enhance product…
SecurityWeek - Claude Code Telemetry Rollback: Anthropic Responds to Backdoor Allegations
The article discusses a critical vulnerability (CVE-2026-48558) linked to a hidden surveillance feature in Claude Code that specifically targets Chinese developers and AI corporations. This feature monitors system time zones and API endpoints, potentially…
- Anthropic rolls out Claude Sonnet 5 AI to cut enterprise costs
The content discusses the launch of Anthropic's Claude Sonnet 5, a new generative AI model designed for Agentic AI systems. This model aims to offer enterprises cost-effective automation solutions amidst rising token consumption challenges associated with AI…
SecurityOnline - GuardFall flaw exposes coding agents to shell injection attacks
A recent survey by Adversa AI has revealed a significant security vulnerability called GuardFall affecting 10 of the 11 popular open-source AI agents, which allows attackers to bypass command filters via shell injection. The flaw arises from a mismatch…
Security Affairs
