News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 10 so far | 0 |
Developing
Thu 2 Jul66 articles
- PamStealer macOS malware hides in fake Maccy app to steal logins
Researchers have discovered a new macOS malware named PamStealer that cleverly combines various techniques to steal credentials stealthily. It is delivered in two stages: first as a disk image masquerading as an application called Maccy, followed by a second…
Ars Technica - Apple Shifts to Frequent Security Updates Amid AI Driven Threats
Apple has revised its security patching policy to combat rising threats from AI-assisted cyberattacks, moving towards more frequent updates instead of bundling fixes into major OS releases. This shift comes as attackers now exploit vulnerabilities faster,…
Dark Reading - FBI and Google seize NetNut domains tied to Popa botnet
The FBI, in collaboration with industry partners, has seized hundreds of domains associated with NetNut, a residential proxy service run by Alarum Technologies. This action follows revelations linking NetNut to the Popa botnet, comprising over two million…
Krebs on Security 2 articles this day · Security Affairs first · 2 outlets
FortiBleed breach fuels ransomware risk for Inc and Lynx gangs · FortiBleed Campaign Fuels Ransomware on 430k FortiGate DevicesShow 2 articlesHide 2 articles
- FortiBleed breach fuels ransomware risk for Inc and Lynx gangs19:11Dark Reading
- FortiBleed Campaign Fuels Ransomware on 430k FortiGate Devices10:37Security Affairs
- FortiBleed breach fuels ransomware risk for Inc and Lynx gangs
- Google Takes Down NetNut Proxy Network Powering Cybercrime
Google has disrupted the NetNut residential proxy network, which comprised around 2 million home devices used primarily for cybercrime and botnet activities. The operation targeted various illegal online activities, making it a significant move in the fight…
The Hacker News - Ransomware groups use Citrix Bleed 2, BYOVD, supply chain flaws
The article discusses the growing tactics of ransomware groups, specifically their utilization of weaknesses in Citrix Bleed 2, Bring Your Own Vulnerable Driver (BYOVD) methods, and compromised supply chain credentials. It highlights recent cyber attack…
The Hacker News - Global Schools Holdings Cites Two Injunctions in a Bid to Chill Our Reporting. It Won’t Work.
The author of DataBreaches.net discusses their firm’s experience with legal threats, particularly in light of recent injunctions issued by the High Court of Singapore regarding a data breach involving Global Schools Holdings Pte. Ltd. DataBreaches was put…
DataBreaches - Ransomware Thugs Masquerade as Interpol to Entice Small Biz
A current ransomware campaign is targeting small businesses by using fake Interpol notices to entice victims into downloading malware disguised as evidence of criminal activity. This campaign spans multiple regions, including the US, Europe, and the Middle…
Dark Reading - EU Court Confirms €4.1bn Fine on Google Over Android Practices
The Court of Justice of the European Union upheld a €4.1 billion fine against Google for abusing its dominant position in the Android market through restrictive licensing practices. The ruling confirmed that Google coerced device manufacturers into…
Security Affairs 2 articles this day · SecurityWeek first · 2 outlets
Citrix NetScaler CVE-2026-8451 exploited, patch now urged · Citrix NetScaler flaw CVE-2026-8451 exploited within hoursShow 2 articlesHide 2 articles
- Citrix NetScaler CVE-2026-8451 exploited, patch now urged17:12SecurityOnline
- Citrix NetScaler flaw CVE-2026-8451 exploited within hours15:04SecurityWeek
- Citrix NetScaler CVE-2026-8451 exploited, patch now urged
- Apple's Hide My Email bug leaks real user emails risking privacy
A vulnerability has been discovered in Apple's 'Hide My Email' feature, which is intended to protect users' real email addresses by generating unique, random addresses for online use. The flaw allows certain individuals to uncover users' actual email…
Malwarebytes - Apache HttpComponents Core Patches Two DoS Vulnerabilities in HTTP Parsers
The Apache Software Foundation has reported two vulnerabilities in the Apache HttpComponents Core: CVE-2026-54399 and CVE-2026-54428, both rated as High severity (CVSS 7.5). They can potentially allow remote denial-of-service attacks through memory…
SecurityOnlineCVE-2026-54399 - GISEC GLOBAL 2026 – The Middle East & Africa’s Largest Cybersecurity Event
according to GISEC GLOBAL 2026 – The Middle East & Africa’s Largest Cybersecurity Event, the Middle East and Africa’s premier gathering, GISEC GLOBAL 2026 runs from 5 May 2026 to 7 May 2026 at Expo City, Dubai. The event is described as the most influential…
Dark Reading - ClickFix Attacks Use Fake Google Pages to Drop Malware via Franz
The article discusses the ongoing ClickFix attacks that utilize fake Google and Cloudflare verification pages to spread various malware families. Attackers trick victims into running malicious commands themselves, leading to infections that can steal…
Malwarebytes - Microsoft boosts cloud partner security to shield customer data
The article discusses Microsoft's efforts to improve security within its partner ecosystem, particularly focusing on Cloud Solution Providers (CSPs). It outlines risks such as cyberattacks targeting CSPs that could affect downstream customers. Microsoft…
Microsoft 2 articles this day · SecurityWeek first · 2 outlets
CISA urges SharePoint patch for CVE-2026-45659 before July 4 · CISA warns of active SharePoint flaw CVE-2026-45659Show 2 articlesHide 2 articles
- CISA urges SharePoint patch for CVE-2026-45659 before July 415:56Security Affairs
- CISA warns of active SharePoint flaw CVE-2026-4565910:30SecurityWeek
- CISA urges SharePoint patch for CVE-2026-45659 before July 4
- ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories
The article covers the latest in cybersecurity threats, focusing on topics such as AI compute hijacking, vulnerabilities in Apple email, and BlueHammer ransomware. It includes a compilation of 14 notable stories in the cybersecurity landscape. Additionally,…
The Hacker News - Google, FBI shut down NetNut proxy, removing millions of devices
On July 2, 2026, Google, in collaboration with the FBI and Lumen, disrupted the NetNut residential proxy network, which poses significant cybersecurity risks by hijacking home devices for malicious activities. Key actions taken included disabling Google…
Google Cloud - CISOs Urged to Audit AI Generated Code Amid Rising Security Risks
The article emphasizes the need for comprehensive audits in software development, particularly regarding the integration of AI and large language models (LLMs) in the software development lifecycle (SDLC). With a significant rise in security incidents linked…
SecurityWeek - Fake Perplexity Chrome Extension Hijacks Searches, Logs Keystrokes
A malicious Chrome extension mimicking Perplexity AI has been discovered and removed by Google after it hijacked user searches and captured keystrokes. The extension was designed to look like the legitimate Perplexity extension, using a look-alike domain and…
SecurityOnline - Umbrij Malware Hijacks Gmail via OAuth, Raising Security Fears
The article discusses the ToddyCat-linked Umbrij malware, which exploits OAuth to access Gmail via the Google API, raising concerns about API security and cyberespionage. It highlights the growing threat posed by advanced malware tactics, particularly using…
The Hacker NewsToddyCat - Researcher Behind 'Exploitarium' Explains Release of Undisclosed Zero-Day Exploits
A pseudonymous security researcher, known as 'bikini,' has publicly released over 30 proof-of-concept zero-day exploits targeting various open-source projects, including widely used software like the Linux kernel and FFmpeg, through a GitHub repository called…
Infosecurity - WinRAR flaw CVE-2026-14191 lets attackers run remote code
A security vulnerability has been discovered in WinRAR that may allow attackers to execute remote code on users' computers. The flaw, identified as CVE-2026-14191, involves the handling of RAR5 recovery-volume files. It can lead to corruption of memory…
MalwarebytesCVE-2026-14191 - FortiBleed Exploits FortiGate, Triggers Worldwide Ransomware Wave
The FortiBleed operation, targeting over 430,000 FortiGate firewalls in 150 countries, is linked to the INC Ransom and Lynx ransomware families, according to SOCRadar. This large-scale credential-harvesting operation has been ongoing since February,…
SecurityWeek - IBM and Red Hat Unveil $5bn Lightwell for Open Source Patching
IBM and Red Hat have launched Project Lightwell, committing $5 billion and 20,000 engineers to enhance open-source software supply chain security. This initiative follows Anthropic's AI model, Mythos, which has revealed numerous vulnerabilities, prompting a…
Dark Reading - Cybercriminals Pose as Interpol in Phishing Emails to Infect Victims With Ransomware
Cybercriminals are impersonating Interpol in a phishing campaign aimed at small businesses across Europe, Asia, the Middle East, and North America. These scams involve emails claiming to be from the 'Cybercrime Investigation Unit' at Interpol, suggesting the…
Infosecurity - Gardyn IoT Hub bugs expose smart gardens to remote hijack
The CISA advisory ICSA-26-183-03, released on July 2, 2026, highlights critical vulnerabilities in the Gardyn IoT Hub that allow unauthorized access and control over managed devices. Affected versions include Gardyn Home Firmware, Studio Firmware, and Cloud…
CISACVE-2026-13768 - ST Engineering iDirect iQ-Series Terminals
The advisory ICSA-26-183-01 from CISA details vulnerabilities in the ST Engineering iDirect iQ-Series Terminals, specifically versions up to 4.5.2.1, which could allow unauthorized access to sensitive device information or lead to denial-of-service…
CISA - CubeSpace Reaction Wheel Flaw Allows Malicious Firmware Upload
The ICS Advisory for the CubeSpace CW0057 Reaction Wheel, released on July 2, 2026, highlights a critical vulnerability that allows attackers to upload malicious firmware due to improper verification of cryptographic signatures. The affected firmware…
CISA - Legacy identity tools struggle to secure AI agents in enterprises
The article "Identity Lifecycle Management Wasn't Built for AI Agents" discusses the inadequacies of current identity lifecycle management frameworks in addressing the complexities posed by AI agents. It emphasizes the need for updated governance and security…
The Hacker News - Trump admin lifts AI model ban, curbs access to US firms
The Trump administration has lifted restrictions on Anthropic's AI models, Claude Fable 5 and Mythos 5, after earlier bans related to cybersecurity concerns. The Commerce Department had blocked foreign nationals from accessing these models due to…
SecurityWeek - Cisco Warns of Exploit in Manager SSRF Flaw CVE-2026-20230
Cisco has confirmed that a critical vulnerability, CVE-2026-20230, in its Unified Communications Manager and its session management edition has been exploited in the wild. The vulnerability, which has a CVSS score of 8.6, is due to improper validation of…
- BioShocking trick lets browsers steal SSH credentials via game
Researchers from cybersecurity firm LayerX have alerted that multiple agentic browsers can be exploited to bypass security measures and execute harmful actions. They conducted an experiment using a puzzle inspired by the BioShock game, leading to a threat…
SecurityWeek - NCSC Urges Firms to Harden Defences Against Pen Testing Attacks
The National Cyber Security Centre (NCSC) shared insights from penetration testers on enhancing organizational resilience against cyber threats. Key strategies include implementing secure-by-design systems that integrate threat modeling, strong…
Infosecurity - Cloudflare launches x402 gateway to charge AI bots for web access
Cloudflare has launched the Monetization Gateway, which allows websites hosted on its platform to charge for access to digital assets using the x402 payment protocol with crypto stablecoins. This new feature expands on their previous pay-per-crawl model to a…
SecurityOnline - Google Unveils Gemini Spark AI Assistant for macOS Professionals
Google has launched 'Gemini Spark', an advanced AI assistant for macOS aimed at enhancing productivity for users. Unlike traditional chatbots, Gemini Spark can execute tasks like organizing files and generating reports directly on local devices. Currently in…
SecurityOnline - Adobe Fixes ColdFusion, Campaign Classic Bugs Rated CVSS 10.0
Adobe has released critical updates for ColdFusion and Campaign Classic, addressing multiple maximum-severity vulnerabilities that could lead to remote code execution. Seven vulnerabilities were highlighted, with a CVSS score of 10.0, allowing attackers to…
