News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 0 so far | 0 |
Developing
Mon 13 Jul72 articles
- Fake Freeware Sites Spread AsyncRAT via SEO Poisoning and Hijack
The article discusses a significant malware campaign utilizing the AsyncRAT, orchestrated by unknown cybercriminals targeting individual and corporate networks. They employ SEO poisoning and fake freeware portals to deliver their malware, which includes…
SecurityOnline - EU sanctions FSB linked hackers for 15 year cyberespionage
The European Union has imposed new sanctions on nine individuals and four entities linked to Russia's FSB due to a 15-year campaign of cyberespionage and sabotage. These sanctions target military intelligence officers, hackers, and companies involved in…
Security Affairs - Cybersecurity M&A Roundup: 37 Deals Announced in June 2026
In June 2026, thirty-seven cybersecurity-related mergers and acquisitions (M&A) were announced. Key deals include: 1. **1Password acquires Apono** - For approximately $250M-$300M to enhance identity security. 2. **A10 Networks acquires TrojAI** - Details…
SecurityWeek - Progress Software Warns of "External Security Threat" to ShareFile
Progress Software has reported a credible external security threat to its ShareFile Storage Zone Controllers, prompting the company to warn users and temporarily disable access to accounts. Although there have been no confirmed instances of unauthorized…
Infosecurity - RabbitMQ Vulnerability Threatens Enterprise Systems
A significant vulnerability in RabbitMQ, tracked as CVE-2026-5721, poses a critical risk by allowing attackers to access the broker's OAuth secret without authentication. The flaw, revealed by cybersecurity firm Miggo, affects configurations where the…
SecurityWeekCVE-2026-5721 - Meta files patent for AI that constantly listens to emotions
Meta has filed a patent for an AI capable of continuously listening and tracking user emotions. The AI aims to enhance user interactions by adapting to emotional cues. Concerns about privacy and data security are significant, as perpetual listening raises…
The Hacker News - EU and UK sanction Russia for FSB cyberattacks targeting Europe
The European Union and the United Kingdom have jointly imposed sanctions on Russia due to cyberattacks attributed to the Federal Security Service (FSB). This decision follows increasing warnings from Western officials about Russia's intensified hybrid…
DataBreachesFederal Security Service (FSB) - German ZEGO textile firm files insolvency after March cyberattack
ZEGO Textilveredelungszentrum GmbH has officially filed for insolvency following a severe cyberattack on March 29, 2026, which caused nearly six weeks of production downtime and significant financial strain. Despite their efforts to stabilize the company,…
DataBreaches - ShareFile users told to halt Storage Zone Controllers over threat
Progress Software has alerted ShareFile customers using Storage Zone Controllers to shut down their servers due to a credible external security threat affecting their on-premises secure file-sharing software. ShareFile, which allows file hosting in its cloud…
DataBreaches - AI and Human Analysts Team Up to Boost SOC Threat Response
The article discusses the integration of autonomous AI with security analysts in Security Operations Centers (SOCs). It emphasizes the effectiveness of combining rapid AI response capabilities with human judgment. Key points include: Enhanced speed and…
The Hacker News - Fake crypto gift card sites trick users with realistic fakes
The article discusses the rising sophistication of fake cryptocurrency gift card websites, which mimic legitimate platforms to deceive users. These scams often feature polished designs, trust badges, and appealing prices, making them hard to distinguish from…
Malwarebytes - AI Generated PowerShell Script Used to Map Active Directory
The article discusses a recent incident where an attacker utilized a suspected AI-generated PowerShell script to map an Active Directory. This incident illustrates the growing threat of AI in cybersecurity, as malicious actors increasingly leverage AI…
The Hacker News - Krybit Ransomware Sparks Double Extortion Threats in 43 Countries
Krybit Ransomware is a new player in the Ransomware-as-a-Service (RaaS) landscape, first detected in March 2026, employing a double-extortion strategy to target organizations for financial gain. Following its launch, Krybit was involved in a notable public…
SOCRadar0APT - UK, EU sanction Russian hackers using weak SNMP router passwords
Cybersecurity agencies from 12 countries have warned that a Russian state-sponsored cyber unit, known as FSB Center 16 or by various names like Berserk Bear, is targeting vulnerable routers globally. This advisory focuses on the use of weak SNMP passwords…
InfosecurityENERGETIC BEAR - Critical CVE-2026-44963 Flaw Lets Attackers Run Arbitrary Code
The page discusses a critical vulnerability in Veeam Backup & Replication tracked as CVE-2026-44963, which has a CVSS score of 9.4. This flaw allows authenticated domain users to execute arbitrary code on the backup server. It affects versions prior to…
SecurityOnlineCVE-2026-44963 - UK and Allies urge critical sectors to improve defences against Russian intelligence targeting
The UK and its international allies have issued an urgent advisory to critical infrastructure sectors, emphasizing the need to bolster defenses against Russian state intelligence targeting. The advisory highlights the exploitation of poorly configured…
NCSCCentre 16 - Zimbra XSS flaw lets attackers take over accounts with zero click
A critical vulnerability has been discovered in Zimbra, a widely-used collaboration tool, that allows for zero-click code execution through specially crafted emails. Zimbra announced patches for this stored cross-site scripting (XSS) flaw affecting its…
SecurityWeek - EU Targets Russian Intelligence Officers Accused of Running a Yearslong Cyber Spying Campaign
The European Union has imposed sanctions on Russian military intelligence officers, hackers, and companies over a long-running cyber espionage campaign aimed at destabilizing the EU. Targeting nine individuals and four entities, the EU accused them of…
SecurityWeek - StatCounter corrects Windows market share after data error
StatCounter's June 2026 report inaccurately claimed a significant drop in Windows' market share from 79% to 56%. This prompted speculation about the rise of Linux among observers. However, subsequent investigations revealed that these statistics were…
SecurityOnline - Armenian national pleads guilty in US Ryuk ransomware fraud case
An Armenian national, Karen Serobovich Vardanyan, extradited from Ukraine, pleaded guilty to conspiracy and computer fraud associated with the Ryuk ransomware gang in a U.S. federal court. He illegally accessed various organizations' computers between…
InfosecurityRyuk - FSB Center 16 Targets Routers Across Critical Sectors
The FSB Center 16, linked to Russian state actors, is exploiting vulnerable routers worldwide by using weak SNMP configurations and default credentials. Over 20 cybersecurity agencies, including NSA, CISA, and FBI, issued a warning detailing the ongoing…
SecurityOnlineFSB Center 16 - Dutch police seek local hackers in Odido breach affecting 6M
Dutch police suspect local hackers are involved in the Odido breach, where data from over six million customers was stolen. The breach occurred after a phishing attack by the cybercrime group ShinyHunters. The stolen data includes personal information such…
Security AffairsShinyHunters - Unauthenticated RCE Flaws Hit Joomla Extensions Balbooa, iCagenda
Recent vulnerabilities affecting Joomla extensions Balbooa Forms and iCagenda have been exploited by threat actors, allowing unauthenticated remote code execution (RCE). The Balbooa flaw (CVE-2026-56291) enables file uploads without authentication, with a…
- ACSC warns of CMS flaws driving webshell attacks on Aussie SMBs
Australia's cyber agency, ASD’s ACSC, has issued a warning about a large-scale campaign exploiting vulnerabilities in content management systems (CMS) like WordPress. Unattributed malicious actors are scanning websites for known plugin flaws, leading to the…
SecurityOnline - Australian watchdog warns of CMS flaw wave hitting local SMEs
The Australian Cyber Security Centre (ACSC) has issued a warning regarding a global campaign targeting vulnerabilities in content management systems (CMS). The campaign, affecting many small and medium-sized businesses in Australia, involves malicious actors…
Infosecurity - Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns
Progress Software has advised ShareFile customers to temporarily shut down their Storage Zone Controller servers due to a credible external security threat. This controller serves as a secure data storage solution for ShareFile users. Access to affected…
SecurityWeekCVE-2026-2699 - WorldLeaks hack exposes 540k patients' data at Centers Lab
The Centers Laboratory (Centers Lab NJ LLC), a healthcare diagnostics company, reported a data breach affecting over 540,000 individuals due to an intrusion discovered in August 2025. The breach, which involved limited access to the organization's IT…
SecurityWeekWorld Leaks - Cavern Manticore APT Deploys Modular C2 Framework
The Cavern Manticore APT, suspected to be linked to Iran, is engaged in cyber-espionage targeting Israeli government and IT sectors via a modular command and control (C2) framework. This versatile system allows for undetected intrusions by abusing legitimate…
SecurityOnlineCavern Manticore - Attackers can exploit WAGO I/O flaw via CVE-2026-4769
A critical vulnerability, identified as CVE-2026-4769, has been discovered in WAGO System I/O field devices, rated with a CVSS score of 9.8, indicating severe security risks due to unauthenticated access to internal diagnostic interfaces. This flaw allows…
SecurityOnlineCVE-2026-4769 - Australia Alerts Organizations to Ongoing CMS Exploitation Attacks
Australia's Signals Directorate has issued a warning about a large-scale exploitation campaign targeting content management systems (CMS) like WordPress and Joomla. Attackers are exploiting vulnerabilities to deploy webshells on affected websites, allowing…
Security Affairs - Misconfigured Server Leaks Evilginx Phishing at Microsoft 365
The article discusses how a misconfigured server led to the exposure of three phishing campaigns orchestrated by Evilginx, specifically targeting Microsoft 365 users. This security incident was uncovered during a routine review, highlighting the…
The Hacker News - Armored Likho uses AI phishing to spread BusySnake Stealer
The report discusses a new phishing campaign attributed to the Armored Likho APT group, targeting government agencies and the electric power sector across Russia, Brazil, and Kazakhstan using the BusySnake Stealer malware. This campaign utilizes…
SecurityOnlineArmored Likho - New Windows malware GigaWiper can remotely wipe user systems
The article provides a summary of cybersecurity news from July 6 to July 12, 2026. Key points include: A new Windows malware named GigaWiper that can remotely wipe users' systems. Recruitment tactics of mule betting scams targeting ordinary individuals. Two…
Malwarebytes - AI agents fooled by SEO poison to steal crypto and site rankings
This article discusses the Indirect Prompt Injection (IPI) cyber attack targeting autonomous AI agents and large language models (LLMs). It details how threat actors manipulate web content through SEO poisoning and typosquatting to deceive AI systems into…
SecurityOnline - Zero day flaws hit Joomla iCagenda and Balbooa Forms extensions
On July 13, 2026, it was reported that vulnerabilities in the iCagenda and Balbooa Forms Joomla extensions are being exploited as zero-day attacks, posing serious risks to users. The flaws enable unauthorized access and potential data breaches, highlighting…
The Hacker News - Internetwide scan targets AI assistant configs and MCP servers
The article discusses recent findings from scanning logs, revealing systematic probing for Model Context Protocol (MCP) servers, AI assistant configurations, and local LLM endpoints. Over a two-week analysis, unauthorized requests for these components were…
SANS ISC - Hackers Use SpaceX, Starlink Accounts to Push Fake $SCATMAN Token
A recent breach of the SpaceX and Starlink social media accounts was orchestrated by a cryptocurrency syndicate during a public dispute involving Elon Musk and Sam Altman. The attackers compromised these accounts, hijacking them to promote a fraudulent…
SecurityOnline - Cursor shifts to AI agent after Musk buyout, targets daily work
Cursor, an AI code editor acquired by Elon Musk for $60 billion, is transitioning from its developer roots to create a general-purpose AI agent, competing with Anthropic's Claude Cowork. The new agent aims to assist everyday knowledge work beyond coding,…
SecurityOnline - Didier Stevens Handles Low Risk ISC Update, Points to SANS Class
The content outlines a post from the Internet Storm Center (ISC) for July 13, 2026, featuring Didier Stevens as the handler on duty. The current threat level is set to green, indicating low risk.
SANS ISC - CISA Adds Six KEV Flaws, Including Joomla Extensions and AI Bugs
The weekly CVE report for July 6-12, 2026, highlights a total of 1,571 new vulnerabilities, including 125 critical and 510 high-rated issues. Six actively exploited vulnerabilities were added to the CISA Known Exploited Vulnerabilities (KEV) catalog, all…
