News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Today, Sat 31 Oct | 14 so far | 3 |
Developing
Tue 14 Jul82 articles
- Dell PowerProtect CVE-2026-53483 lets attackers hijack backups
Dell has disclosed multiple high-severity security vulnerabilities in its PowerProtect Data Domain appliances, allowing unauthenticated attackers to potentially gain complete control over backup systems. The highlighted vulnerabilities include…
SecurityOnlineCVE-2026-53483 2 articles this day · SecurityOnline first · 1 outlet
Linux Kernel Bug Lets Users Gain Root Access via Bad Epoll · Public Exploit and Details Released for Bad Epoll Root Flaw (CVE-2026-46242)Show 2 articlesHide 2 articles
- Linux Kernel Bug Lets Users Gain Root Access via Bad Epoll14:08SecurityOnlineExploited
- Public Exploit and Details Released for Bad Epoll Root Flaw (CVE-2026-46242)13:00SecurityOnline
- Linux Kernel Bug Lets Users Gain Root Access via Bad Epoll
- Critical X.Org flaws patched, CVE‑2026‑56000 scores 9.0
X.Org has released patches for two significant vulnerabilities affecting its server and Xwayland products. The most severe, CVE-2026-56000, is a use-after-free issue rated 9.0 on the CVSS scale, while CVE-2026-55999 is a heap buffer overflow rated 8.5. Both…
SecurityOnlineCVE-2026-56000 2 articles this day · SecurityOnline first · 2 outlets
Broadcom fixes critical VMware Avi LB flaws, CVE-2026-47865 · Broadcom patches Avi Load Balancer auth bypass CVE-2026-47865Show 2 articlesHide 2 articles
- Broadcom fixes critical VMware Avi LB flaws, CVE-2026-4786513:55SecurityWeek
- Broadcom patches Avi Load Balancer auth bypass CVE-2026-4786512:44SecurityOnline
- Broadcom fixes critical VMware Avi LB flaws, CVE-2026-47865
- RabbitMQ flaw leaks OAuth secrets, exposes tenant queue data
The article highlights vulnerabilities in RabbitMQ that could lead to the leakage of OAuth secrets and exposure of cross-tenant queue metadata. These flaws present potential security risks, allowing unauthorized access and information disclosure between…
The Hacker News - Composer fixes CVE-2026-59948 flaw enabling arbitrary file writes
The report highlights a critical security alert regarding PHP Composer, the main dependency manager for PHP. Three vulnerabilities were identified, notably CVE-2026-59948, which allows arbitrary file writes outside the vendor directory with a CVSS score of…
SecurityOnlineCVE-2026-59948 - Cursor IDE flaw lets hackers run code via poisoned repo
A vulnerability in the Cursor IDE allows execution of malicious code from poisoned repositories without users' consent or awareness. Discovered by Mindgard, this security flaw means that if a specific malicious file (named git.exe) is placed in the root of a…
Dark Reading - Claude Chrome Extension Flaw Exposes Gmail to Malicious Scripts
AI security firm Manifold has reported that two vulnerabilities it identified in Anthropic's Claude for Chrome browser extension remain unaddressed in the latest version. These flaws allow malicious extensions to manipulate Claude, enabling unauthorized…
SecurityWeek - Albanian .AL DNSSEC failure prompts Cloudflare to skip validation
On July 3, 2026, the Albanian communications authority (AKEP) experienced a DNSSEC key rollover failure in the .AL TLD, leading to widespread DNS resolution issues. Anyone attempting to access .AL domains via validating DNS resolvers encountered errors. In…
Cloudflare - Old Microsoft signed Linux UEFI shims expose Secure Boot flaw
The article discusses the security risks posed by 11 outdated Microsoft-signed Linux UEFI shims, which may allow attackers to bypass the Secure Boot process. As these vulnerabilities have not been updated for years, they pose significant threats to system…
The Hacker News - Korean Dev Hit by £16.6m Anthropic Billing Error, Card Frozen
A developer named REMY received an erroneous billing email from Anthropic via Stripe, demanding $1.66 million, which he initially dismissed as phishing. Over time, he received additional emails claiming failed transactions, totaling $16.62 million. A bank…
SecurityOnline - Meta's $50B data centre expansion fuels stock debate
Meta is significantly expanding its data center in Richland Parish, Louisiana, with a total investment exceeding $50 billion. This expansion aims to reach a 5GW computing capacity, positioning Meta as a leader in the AI infrastructure race. The investment…
SecurityOnline - New macOS malware CrashStealer hijacks crash reports to steal data
A new macOS malware, named CrashStealer, is identified as posing a significant security threat by using Apple's legitimate crash-reporting component to deceive users into installing it. This infostealer captures sensitive data, including login credentials…
Infosecurity - Study shows 85 crypto wallets leak addresses, track users
A study of 85 cryptocurrency wallet extensions has highlighted address leaks and cross-site tracking risks, raising concerns about user privacy and security. The research indicates that many popular wallet extensions fail to protect sensitive information,…
The Hacker News - Pentera Uses AI to Turn Workflows Into Validation Engines
The article discusses how Pentera utilizes AI to transform security workflows into effective validation engines. It highlights the importance of leveraging AI in cybersecurity to enhance security measures and accelerate incident response time. Furthermore,…
The Hacker News - OAuth spoof flaw lets hackers verify stolen Entra credentials
The article discusses a security vulnerability related to OAuth Client ID spoofing, which allows attackers to validate stolen Microsoft Entra credentials, posing significant risks to identity and access management systems. It highlights the increasing…
The Hacker News 2 articles this day · SecurityOnline first · 2 outlets
SAP patches memory corruption flaw in NetWeaver after Patch Day · SAP July 2026 Patch Tackles NetWeaver Memory Corruption BugShow 2 articlesHide 2 articles
- SAP patches memory corruption flaw in NetWeaver after Patch Day11:17SecurityWeek
- SAP July 2026 Patch Tackles NetWeaver Memory Corruption Bug07:34SecurityOnline
- SAP patches memory corruption flaw in NetWeaver after Patch Day
- Apple warns of FaceTime scams draining bank accounts and data
Apple warns users of scammers utilizing FaceTime to access personal information and empty bank accounts. Scammers impersonate trusted entities, applying social engineering tactics to induce users into sharing sensitive data or installing harmful software.…
Malwarebytes - Russian APT exploits Cisco router SNMP flaw to hit vital sectors
Russian state-sponsored APT actors are targeting networking devices worldwide to compromise critical infrastructure, as reported by the US and allied countries. The attacks focus on poorly secured routers across sectors like communication, healthcare, and…
- AI crafted PowerShell script aids AD recon on hacked server
The article discusses a recent incident where an attacker utilized AI to create a custom PowerShell script for Active Directory (AD) reconnaissance. The script, identified by Huntress, was found on a compromised Windows Server, and it was uniquely generated…
Security Affairs - Lidl Alerts Customers on Third Party Data Breach in Europe
Lidl has issued a warning to customers in Germany, Belgium, and the Netherlands about a data breach involving personal information stolen from a third-party IT provider. The supermarket chain confirmed that affected data includes names, email addresses,…
Infosecurity - Valarian raises $50m Series A to boost sovereign AI platform
Valarian, a UK-based sovereign infrastructure company, has secured $50 million in Series A funding, following an earlier $20 million in seed capital. The funding, led by New Enterprise Associates and other investors, will support the expansion of Valarian's…
SecurityWeek - Ransomware negotiator jailed for leaking data to BlackCat
The article discusses a significant security breach involving Angelo Martino, a ransomware negotiator at DigitalMint, who betrayed clients by passing confidential information to the BlackCat ransomware gang. Over a seven-month period, from April to September…
MalwarebytesALPHV/BlackCat - Japan's taxi firm Nihon Kotsu hit by malware, services down
Nihon Kotsu, Japan's largest taxi operator, faced a malware attack on July 11, 2026, leading to the shutdown of its systems to mitigate damage. This disruption has rendered its online reservation and telephone dispatch services temporarily unavailable. The…
Security Affairs - Malicious Jscrambler NPM update steals credentials, crypto keys
A supply chain attack has compromised multiple versions of Jscrambler's NPM package, involving the unauthorized publication of malicious code that executes harmful binaries during installation. The initial incident began on July 11, with malicious versions…
SecurityWeek - Grok AI uploads full Git repos, sparking data privacy fears
The article discusses the recent behavior of the Grok AI tool, which has made headlines for uploading entire Git repositories to xAI storage rather than just the files it processes. This raises concerns regarding data privacy and security within artificial…
The Hacker News - Malicious npm packages breach AsyncAPI CI/CD, drop IPFS malware
On July 14, 2026, three packages from the AsyncAPI generator monorepo were published to npm with a malicious obfuscated dropper that executes when the library is loaded. The attack was facilitated through the project's legitimate GitHub Actions release…
StepSecurity - Five Charged in “Russian Coms” Fraud Platform Case
Five individuals from London have been charged in connection with a fraud platform known as "Russian Coms," which is linked to millions of scam calls. The charges include conspiracy to aid fraud and acquiring criminal property. The platform, operational…
Infosecurity - Grok Build secretly uploads dev repos, privacy switch fails
The article discusses a significant privacy issue with Grok Build, a tool used by developers that was found to upload entire local repositories to cloud storage without explicit permission. Security researcher @Cereblab revealed that this behavior…
SecurityOnline - US Sanctions Target VPN and Cryptor Seller Linked to Ransomware
The article discusses the recent U.S. sanctions against a VPN service and malware cryptor seller involved in facilitating ransomware attacks. This marks a significant step in the U.S. government's efforts to combat cybercrime, particularly in the ransomware…
The Hacker News - Lurking Lizard spreads fake 7Zip malware to build proxy botnet
Lurking Lizard, a suspected Chinese cybercriminal group, is engaging in malicious activities such as malware distribution and botnet creation by tricking users into downloading fake software, like a trojanized version of the 7-Zip utility. This operation has…
SecurityOnlineLurking Lizard - CrashStealer: New macOS Infostealer Uses Signed Apps to Evade Gatekeeper
CrashStealer is a new macOS infostealer identified by Jamf Threat Labs, first detected in May 2026 and observed in active deployment by July. The malware cleverly uses a signed application named Werkbit.app, which bypasses Apple's Gatekeeper security. Upon…
Security Affairs - Canadian Cyber Zone strengthens Korea ties at Web Summit 2026
The Canadian Cyber Zone successfully participated in Web Summit Vancouver 2026, enhancing international collaboration, particularly with South Korea. Held from May 11-14, the event showcased Canadian cybersecurity firms, allowing them to network, display…
SecurityOnline - CrowdStrike warns of 18 new prompt injection attacks on AI agents
CrowdStrike has identified 18 new methods of prompt injection attacks targeting AI agents through hidden instructions and delayed triggers. These attacks can lead to unauthorized data access and severe system damage. Techniques include Trigger-Activated Rule…
SecurityOnline - 148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet
The article discusses the emergence of 148 npm packages masquerading as student proxies that were found to turn browsers into a DDoS botnet. This incident highlights the vulnerabilities present within software dependencies commonly used in web development.…
The Hacker News - Pentagon pauses CMMC Phase Two rollout for 60 day review
The Pentagon has suspended the implementation of the Cybersecurity Maturity Model Certification (CMMC) phase two requirements, originally scheduled for November, pending a 60-day review. This decision aims to simplify processes for contractors while…
SecurityWeek - Microsoft probes Salesforce data theft by ShinyHunters gang
The article discusses a significant data theft incident involving Salesforce linked to the ShinyHunters hacker group, which occurred over the course of a year. It highlights the methods used by the hackers, the impact of the breach on user data, and…
The Hacker NewsShinyHunters
