News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 3 so far | 0 |
Developing
Tue 7 Jul64 articles
- China linked hackers hit US Canada universities via Roundcube
A China-aligned threat group, identified as UNK_MassTraction, has been exploiting vulnerable Roundcube mail servers at universities in the US and Canada. The attackers are targeting physics and engineering departments potentially linked to national security.…
- GitHub’s ‘GitLost’ bug exposes private repo data via Issues
The article discusses a critical flaw named 'GitLost' in GitHub's Agentic Workflows that allows unauthenticated attackers to extract data from private repositories by crafting GitHub Issues in public ones. Researchers from Noma Security discovered that the…
Dark Reading - Attackers can hijack servers via unauthenticated BMC Control M flaw
The content discusses a critical vulnerability in BMC Control-M/Server, identified as CVE-2026-10539. Scoring 9.5 on the CVSSv4 scale, this flaw allows unauthenticated remote command injection, posing a significant risk as it can lead to server takeover and…
SecurityOnlineCVE-2026-10539 - DEBULL tool abuses Microsoft device code flow against M365 accounts
The article titled 'DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts' highlights a new threat targeting Microsoft 365 accounts through an exploitation of Microsoft's device-code flow. The piece emphasizes the importance of identity…
The Hacker News - Public GitHub Issues Flaw Could Leak Private Repo Data
The article discusses a vulnerability related to public GitHub issues that could enable attackers to trick GitHub workflows, potentially leaking private repository data. It highlights the importance of managing security in open-source environments and…
The Hacker News - Critical SharePoint Flaw Lets Low Privilege Users Run Remote Code
CVE-2026-33112 is a high-risk vulnerability (CVSS 8.8) in Microsoft SharePoint Enterprise Server 2016, allowing low-privilege users to execute remote code. No confirmed exploitation has been observed. Microsoft issued patches in May 2026, and users are…
SecurityOnlineCVE-2026-33112 2 articles this day · The Hacker News first · 2 outlets
Scattered Spider’s Structure More Like a Cybercrime Collective Than a Unified Gang · FBI tracks alleged Scattered Spider via Windows Device IDShow 2 articlesHide 2 articles
- Scattered Spider’s Structure More Like a Cybercrime Collective Than a Unified Gang14:00Infosecurity
- FBI tracks alleged Scattered Spider via Windows Device ID13:27The Hacker News
- Scattered Spider’s Structure More Like a Cybercrime Collective Than a Unified Gang
- Attackers Exploit Ghost Certificates in ADFS to Steal SAML Keys
The article discusses the 'Ghost' in the Database, particularly focusing on the vulnerabilities associated with Active Directory Federation Services (ADFS) signing keys through Machine DPAPI. It highlights how threat actors can exploit old certificates,…
Google Cloud - Marketers hit by phishing scam posing as Netflix, Coke job offers
A recent phishing campaign targets marketing professionals by impersonating major companies like Netflix, Coca-Cola, and FIFA. Scammers utilize fake job interview requests and display fraudulent Google sign-in pop-ups within the phishing sites. These attacks…
Malwarebytes - Ubiquiti fixes critical UniFi Connect app RCE flaw
Ubiquiti has issued UniFi Security Advisory Bulletin 066, addressing 25 vulnerabilities across its range of products, including critical flaws in the UniFi Connect app that could allow attackers to execute commands without login. The advisory emphasizes the…
SecurityOnlineCVE-2026-50746 - Writer AI flaw leaks session tokens across tenants
The article discusses a vulnerability in an AI writing tool that may allow session tokens to leak between different tenants, potentially compromising security. This risk highlights the need for robust cyber defenses, especially as AI technologies evolve. The…
The Hacker News - CISA Uses Anthropic’s Mythos AI to Hunt Federal Software Flaws
The US Cybersecurity and Infrastructure Security Agency (CISA) is employing Anthropic's Mythos AI model to audit federal software for security vulnerabilities, aiming to identify and fix potential exploits. The initiative, led by CISA's Attack Surface…
SecurityWeek - Cloudflare proudly joins the UK government's Cyber Resilience Pledge
Cloudflare has joined the UK government's Cyber Resilience Pledge, a voluntary initiative aimed at improving cybersecurity governance and accountability among organizations. This pledge focuses on democratizing security, leadership accountability, and…
Cloudflare - Judge revives Bojangles breach lawsuit tied to Russian hackers
Chase Jordan reports on a class-action lawsuit regarding a 2024 data breach affecting Bojangles employees, linked to Russian hackers. A North Carolina Business Court judge has allowed the case to proceed after it was previously dismissed in federal court.…
DataBreaches - Jacksonville, Texas Takes Systems Offline After Cyber Incident
Jacksonville, Texas, took several city systems offline on July 3 after detecting suspicious network activity, indicating a cybersecurity incident. As a result, some online services remained unavailable as officials began investigating the issue.…
DataBreaches 2 articles this day · Infosecurity first · 2 outlets
Adobe ColdFusion flaw CVE-2026-48282 exploited hours after patch · Adobe ColdFusion Users Warned to Patch Critical CVE-2026-48282 FlawShow 2 articlesHide 2 articles
- Adobe ColdFusion flaw CVE-2026-48282 exploited hours after patch12:38SecurityWeek
- Adobe ColdFusion Users Warned to Patch Critical CVE-2026-48282 Flaw08:20Infosecurity
- Adobe ColdFusion flaw CVE-2026-48282 exploited hours after patch
- Cavern Manticore Uses SysAid Exploit to Target Israeli Firms
An Iran-linked APT actor, tracked as Cavern Manticore, has been utilizing a modular command-and-control (C&C) framework in recent cyberattacks on Israeli organizations. This group appears to have connections to Iran's Ministry of Intelligence and Security…
SecurityWeekCavern Manticore - Tarah Wheeler’s Journey from Social Science to CISO Role
Tarah Wheeler, CISO at TPO Group and a seasoned cybersecurity professional, discusses her unconventional path into the industry, emphasizing her background in social science and writing. She transitioned through various roles, acquiring experience in red…
SecurityWeek - AI boosts dev speed but opens supply chain to new threats
The article discusses the implications of incorporating AI in the software supply chain. Key points include the potential for increased efficiency and speed in code development, alongside significant security risks. It emphasizes the need for robust…
The Hacker News - Anthropic’s Claude Code secretly logged users time zone data
Anthropic's Claude Code was found to have a hidden tracking marker embedded within its code, which was described as an "experiment" aimed at preventing account abuse from unauthorized resellers and understanding Chinese distillation attacks. The marker…
Malwarebytes - Q1 2026 ICS malware infections fall to 19.6%, three year low
The Q1 2026 Industrial Threat Report reveals a decrease in the percentage of Industrial Control System (ICS) computers affected by malicious objects, dropping to 19.6%, the lowest in three years. Regional variations show 9.1% in Northern Europe to 27.4% in…
securelist.com - UK Launches Cyber Resilience Pledge With 60+ Companies Signed
The UK government has launched a Cyber Resilience Pledge with over 60 businesses signing up, including notable companies like Marks & Spencer, Microsoft UK, and Vodafone. This initiative aims to enhance cybersecurity within organizations by introducing…
Infosecurity 2 articles this day · Security Affairs first · 2 outlets
CVE-2026-53359 Flaw Lets Attackers Break Out of Linux VMs · Key KVM Flaw CVE-2026-53359 Lets Guest VMs Hijack Host MemoryShow 2 articlesHide 2 articles
- CVE-2026-53359 Flaw Lets Attackers Break Out of Linux VMs10:00SecurityWeek
- Key KVM Flaw CVE-2026-53359 Lets Guest VMs Hijack Host Memory07:07Security Affairs
- CVE-2026-53359 Flaw Lets Attackers Break Out of Linux VMs
- Hidden Tenda Router Backdoor Grants Admin Access, No Patch Available
CERT/CC has issued a warning about an unpatched backdoor vulnerability found in multiple versions of Tenda routers, identified as CVE-2026-11405. The flaw allows attackers to bypass login credentials and gain full administrative access to the router's web…
Security AffairsCVE-2026-11405 - AI crafted fake flower seeds dupe shoppers on major marketplaces
Scammers are exploiting AI to market fictitious seeds for flowers that do not exist, featuring bizarre designs like cat heads and butterflies. These scams, appearing on eBay, Amazon, and Etsy, entice buyers with unrealistic visuals generated by AI,…
Malwarebytes - Keyfactor gets $1bn boost to curb machine identity sprawl
Keyfactor, a company specializing in cryptographic security for organizations, has received over $1 billion in strategic investment to enhance its operations and technology. This funding comes amid growing concerns about 'identity sprawl', where machine…
SecurityWeek - Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities
The article discusses recent cybersecurity threats linked to suspected China-aligned hackers exploiting vulnerabilities in Roundcube, a webmail client. Universities have been notably affected by these attacks, prompting increased urgency in addressing email…
The Hacker News - SpaceXAI: Elon Musk’s Orbital Data Centers Vision
Elon Musk's xAI has been rebranded as SpaceXAI, integrating AI technologies into SpaceX's operations. The merger aims to address global electricity demands through plans for orbital data centers, supported by a proposed network of up to one million…
SecurityOnline - ARToken phishing kit targets M365 users via device code
The ARToken phishing platform, linked to EvilTokens, is targeting Microsoft 365 users, particularly in finance, HR, and logistics, using phishing-as-a-service (PhaaS). Cisco Talos revealed this platform, which employs device code phishing to bypass…
SecurityOnline - IBM patches critical HMC flaw letting hackers run system commands
IBM has disclosed a critical vulnerability (CVE-2026-12943) in its Power Hardware Management Console (HMC), rated CVSS 9.8. This vulnerability allows unauthenticated attackers to execute arbitrary OS commands due to improper input validation. Affected…
SecurityOnlineCVE-2026-12943 - Armored Likho Deploys AI Crafted Malware on Govt and Power Targets
The report details the activities of a new advanced persistent threat (APT) group, Armored Likho (also known as Eagle Werewolf), which employs AI-generated malware to execute campaigns against governments and electric power infrastructures in Russia,…
Security AffairsArmored Likho - RustDuck botnet switches to Rust, exploits weak IoT logins
The RustDuck botnet is a newly identified DDoS malware that utilizes a two-stage loader-and-core design and is notable for shifting its development language from C to Rust. This transition enhances the code's complexity and security, making it harder to…
SecurityOnline - Microsoft tests cloud based Windows 11 rebuild to revive dead PCs
Microsoft is developing a new cloud rebuild feature in Windows 11 aimed at assisting users in recovery after a system failure. This feature, currently in testing with Windows Insider Preview builds, allows users to download and reinstall the OS image and…
SecurityOnline - Linux Kernel Vulnerability CVE-2024-26582: Public PoC Reaches Root Shell
TL;DR Researchers have published full technical details and proof-of-concept exploit code for a Linux kernel vulnerability tracked as
SecurityOnline - AI driven ransomware hides in Chrome via DeepSeek Flask trick
The content discusses a new form of ransomware leveraging AI, particularly through the tool DeepSeek, which operates directly within browsers like Chrome. This attack can impact users of Android and Chromium desktop browsers by encrypting their files without…
SecurityOnline - CERT/CC warns of hidden admin backdoor in Tenda router firmware
The CERT/CC has issued a warning regarding a hidden administrative backdoor in the firmware of certain Tenda routers, posing significant cybersecurity risks. This vulnerability may allow unauthorized access to devices and potentially compromise user data.…
The Hacker News - BeyondTrust patches critical auth bypass in Remote Support
BeyondTrust has released critical patches addressing authentication bypass vulnerabilities in its Remote Support and PRA products. These flaws could allow attackers to exploit systems without proper authorization, raising serious security concerns.…
The Hacker News
