News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Today, Sat 31 Oct | 12 so far | 2 |
Developing
Fri 17 Jul56 articles
- Microsoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks
Microsoft's participation in Black Hat USA 2026 focuses on the evolving threat landscape where attackers exploit trust in software and AI systems. The keynote by David Weston addresses the need for security operations to adapt as offensive capabilities…
Microsoft - GoldPickaxe Trojan Steals Biometrics, Logins via KuaiBo Phishing
The GoldPickaxe banking Trojan, attributed to the Chinese-speaking crime group GoldFactory, targets users of mobile banking and finance apps primarily in Southeast Asia. It spreads via phishing sites mimicking the KuaiBo streaming app. Once installed, it…
SecurityOnlineGoldFactory - Ransomware attacks on government agencies up in 2026, study shows
A study by Comparitech reveals that government agencies are increasingly targeted by ransomware attacks, with one incident reported daily. In the first half of 2026, 187 government entities experienced such attacks, marking a 13% rise from the previous six…
Infosecurity 2 articles this day · The Hacker News first · 2 outlets
New North Korean campaign uses fake coding interviews to steal developer credentials · North Korean hackers use fake coding tests to spread OtterCookieShow 2 articlesHide 2 articles
- 23andMe settles $18m breach case with 42 US state lawyers
23andMe has reached an $18 million settlement with 42 US attorneys general following a significant data breach in 2023, which resulted from poor password management rather than an internal breach. Over six million customers' data was compromised. As part of…
Infosecurity - Dutch Telecom Breach Exposes Six Million Users' Data
The SecurityWeek news roundup highlights key cybersecurity developments from the past week, including: 1. **Odido Telecom Breach**: Dutch authorities suspect local cybercriminals in the recent data theft affecting 6 million users. 2. **Lidl Data Breach**: A…
SecurityWeek - North Korean APT37 uses Dropbox phishing to deliver RokRAT malware
A recent report from Genians Security Center highlights a new malware campaign named Operation Capsule Vault, attributed to the North Korean APT37 group. The campaign involves using spear-phishing emails with links to Dropbox disguised as PDF materials for…
SecurityOnlineAPT37 - CVE-2026-54523 (CVSS 9.6): Public PoC Exploit Enables Kyverno Privilege Escalation to Admin in Any Namespace
A critical vulnerability in Kyverno, identified as CVE-2026-54523 with a CVSS score of 9.6, has been disclosed, allowing namespace tenants to escalate privileges to admin across any namespace in Kubernetes clusters. This flaw affects versions 1.18.1 and…
SecurityOnlineCVE-2026-54523 - Citrix Secure Access Vulnerability Lets Local Users Gain SYSTEM Privileges
The content discusses the detection of three active exploits today, focusing primarily on vulnerabilities related to Citrix Secure Access. Key vulnerabilities include CVE-2026-53565, which allows local privilege escalation for low-privileged users to gain…
SecurityOnlineCVE-2026-53565 - White House launches Gold Eagle to counter AI driven flaws
The newly launched Gold Eagle initiative aims to enhance vulnerability coordination in the cybersecurity landscape in response to evolving AI threats. Announced by the White House, it seeks to facilitate faster detection and response to software…
Dark Reading - Shark robot vacuums exposed to remote hijack via AWS flaw
The article discusses a significant security flaw in Shark's cloud-connected robot vacuums, specifically the RV2320EDUS model. A researcher found that a misconfigured AWS IoT policy allows a compromised vacuum to gain control over other devices in the same…
Malwarebytes - How Human Error Fuels Ransomware and What AI Can Do About It
The content highlights a virtual event, the Cloud & Data Security Summit, and features an interview with Clint Bodungen, an industrial cybersecurity expert. The interview discusses failures in traditional governance, the evolution of cybersecurity, and the…
SecurityWeek - Google Cloud rolls out AI powered agentic defence after Wiz deal
Google Cloud has launched an 'agentic defense' strategy following its acquisition of Wiz for $32 billion, focusing on automated threat detection and remediation to counteract AI-driven cyberattacks. This approach integrates advanced AI security agents within…
Dark Reading - EU forces Google to open Android mic, cam, screen to rival AI
The article discusses the European Union's directive requiring Google to grant rival AI assistants access to Android's microphone, camera, and screen functionalities. This move aims to enhance competition among AI technologies while addressing concerns over…
The Hacker News - Beacon Security bags $13M seed round to boost AI threat defence
Beacon Security raised $13 million in seed funding, led by Notable Capital, with participation from several other investors. The startup, founded by Israeli Defense Forces veterans, offers a security data platform aimed at enhancing threat detection and…
SecurityWeek - Military AI push needs trusted data and Zero Trust security
The article discusses the urgent need for a trusted information infrastructure to keep pace with the military's race towards automation and autonomous technologies. It emphasizes challenges regarding cybersecurity, particularly in the context of artificial…
The Hacker News - Pentagon halts CMMC third party audits citing scalability, cost
The Pentagon has temporarily suspended the mandatory third-party assessments for CMMC Phase 2 due to concerns about the scalability of the assessor ecosystem and high compliance costs affecting small and mid-sized defense contractors. The CMMC Reform Task…
SecurityWeek - US REvil warrant leads to arrest of Russian tourist in Armenia
The article discusses the detention of a Russian tourist in Armenia based on a U.S. warrant connected to the notorious REvil hacking group. Lawyers for the detained individual argue that he is not the intended target of the warrant. The implications of this…
The Hacker NewsREvil - Home users warned of Trojan code in fake GitHub repos
The article explains how to use GitHub safely, emphasizing its risks for home users who may encounter malicious code. GitHub, a platform primarily for developers to share code, is not regulated like an app store, resulting in potential security threats from…
Malwarebytes - Siemens ROX II OT Switch Zero Day Flaw Lets Attackers Gain Root
The report discusses three critical zero-day vulnerabilities discovered in Siemens ROX II OT switches (CVE-2025-40948, CVE-2025-40947, CVE-2025-40949). These vulnerabilities form a chained exploit allowing attackers to achieve full privilege escalation and…
Unit 42CVE-2025-40948 - CISA Mandates Urgent Patch for Actively Exploited Critical Fortinet Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has mandated urgent patches for two critical vulnerabilities in Fortinet's FortiSandbox, identified as CVE-2026-39808 and CVE-2026-25089, both rated 9.1 on the CVSS scale. These vulnerabilities…
- Russian hackers use fake Webex, Zoom installers to steal crypto
A new malware campaign attributed to Russian-speaking threat actor UAT-11795 has been discovered, targeting users in the U.S. and Europe since mid-2025. This operation involves the distribution of trojanized installers for widely-used software like Webex,…
Security AffairsUAT-11795 - Nichirei resumes ops after cyberattack hit frozen food logistics
Nichirei, a leading Japanese frozen food producer, has reported that it is starting to restore operations affected by a cyberattack on July 13, which forced the company to disconnect its systems. The attack disrupted various services, including logistics and…
SecurityWeek - Gentlemen Ransomware Surpasses Qilin After 300 Reported Attacks
The article discusses the rise of The Gentlemen ransomware group, which has recently surpassed the Qilin group to become the most prolific ransomware threat, with 300 attacks reported over three months. This shift was highlighted by a cybersecurity analysis…
InfosecurityThe Gentlemen - ACR Stealer Leverages ClickFix to Steal Tokens and M365 Files
The article discusses the ACR Stealer malware that employs ClickFix lures to steal browser tokens and Microsoft 365 files. It highlights the growing cybersecurity threat posed by ACR Stealer, particularly its techniques for phishing and extracting sensitive…
The Hacker News - GoSerpent malware spies on Southeast Asian officials
The article discusses the emergence of 'GoSerpent' malware, which is specifically targeting government officials and diplomats in Southeast Asia for espionage purposes. The malware's capabilities demonstrate advanced stealth and infiltration techniques,…
The Hacker News - Budapest server leak fuels Evilginx phishing on Microsoft 365
A recent security report reveals a critical exposure linked to three phishing operators utilizing the Evilginx framework to bypass multi-factor authentication (MFA) on Microsoft 365 accounts. The report, based on LEXFO's investigation, details how a…
SecurityOnline - Risk Ledger raises £24M Series B for AI supply chain security
Risk Ledger, a UK-based supply chain security firm, has raised £24 million ($32.3 million) in a Series B funding round, bringing its total funding to £33.8 million ($45 million). The round was led by Axiom Equity, supported by Mercia Ventures. Founded in…
SecurityWeek 3 articles this day · The Hacker News first · 3 outlets
292 Fake GitHub Repositories Deliver BoryptGrab Infostealer to Windows Users · Critical SharePoint Flaw Exploited, CISA Urges Immediate PatchingShow 3 articlesHide 3 articles
- 292 Fake GitHub Repositories Deliver BoryptGrab Infostealer to Windows Users08:21SecurityOnline
- Critical SharePoint Flaw Exploited, CISA Urges Immediate Patching07:15SecurityWeek
- CISA Adds SharePoint Zero Day Exploit CVE-2026-58644 to KEV Catalog06:42The Hacker News
- 292 Fake GitHub Repositories Deliver BoryptGrab Infostealer to Windows Users
- U.S. CISA adds KNX Association KNX Protocol Connection Authorization Option 1 and Oracle flaws to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2023-4346 related to the KNX Protocol and CVE-2026-46817 affecting Oracle E-Business Suite. The KNX…
- EU Orders Google to Share Android Search Data and AI Assistant Access
The European Commission has mandated Google to open its Android operating system to competing AI assistants and share its search data, significantly impacting the competitive landscape. Under the Digital Markets Act, Google must grant equal access to…
SecurityOnline - CVE-2026-59208 Flaw Lets Attackers Impersonate n8n Users
The article addresses CVE-2026-59208, a vulnerability in n8n Enterprise that allows for cross-issuer impersonation due to improper authentication in token exchanges. The vulnerability arises when a valid token from one issuer can be used to impersonate a…
SOCRadarCVE-2026-59208 - Google Renames NotebookLM to Gemini Notebook
Google has rebranded its AI note-taking tool, NotebookLM, as Gemini Notebook, reflecting a shift to unify its AI product names. This update introduces native code execution, allowing users to write and execute code directly within the platform, enhancing…
SecurityOnline - Google Chrome 150 patches three critical Use After Free flaws
On July 16, 2026, Google released Chrome version 150.0.7871.128/.129, addressing seven vulnerabilities, three of which are rated as Critical. The critical vulnerabilities relate to Use-After-Free issues in CameraCapture, GPU, and Network components, and…
SecurityOnline - Coca Cola Stops Fairlife Production Following Ransomware Attack
Coca-Cola has temporarily suspended production at its dairy subsidiary Fairlife following a ransomware attack that affected part of its systems, including production-related ones. The company activated incident response protocols and is collaborating with…
SecurityWeek - Doctor Web discovers multi‑stage trojan in C++ developers' builds
The article discusses a multi-stage supply chain trojan identified by Doctor Web that targets software developers, specifically those working with C++ and C#. The malware infects project files and spreads through poisoned builds, leading to data theft,…
SecurityOnline - ISC Handler Manuel Santander Pelaez Sees Green Threat Level
The content provides information about the Incident Security Center (ISC), detailing the handler on duty, Manuel Humberto Santander Pelaez, and a current threat level classified as green. It includes links to previous diaries and the ISC Stormcast podcast…
SANS ISC
