News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Today, Sat 31 Oct | 3 so far | 0 |
Developing
Tue 28 Jul71 articles
- OpenWrt DHCPv6 flaw lets hackers gain root access remotely
The article discusses a critical vulnerability in OpenWrt's DHCPv6 service that could allow unauthenticated attackers to execute code with root privileges. The flaw affects numerous devices running OpenWrt, a popular Linux distribution for routers. Security…
The Hacker News - Linux kernel UDPv6 flaw CVE-2026-53362 lets local users gain root
The content discusses the Linux kernel vulnerability CVE-2026-53362, also known as Fraggap, which allows local privilege escalation due to an out-of-bounds write in the UDPv6 code path. The CVSS score is 7.8, indicating high severity. The vulnerability can…
- Microsoft rolls out AI security tools, unveils Project Perception
On July 27, 2026, Microsoft introduced several AI-driven security initiatives aimed at combating AI-enabled threats. Key announcements included: 1. **Project Perception**: A new security system utilizing three types of agents (Red, Blue, Green) to identify…
Infosecurity - Malwarebytes upgrades Mobile Security to fight daily scam threats
Malwarebytes has revamped its Mobile Security application to combat rising mobile scams, revealing that nearly half of users encounter scams daily. Key features include: **Scam Guard**: An AI-powered tool for vetting suspicious messages. **Text and Call…
Malwarebytes - Claude AI Chat Shares Expose Private Data in Google Search Results
This article discusses the discovery by Reddit users that shared Claude AI chatbot conversations were exposed in Google search results, revealing sensitive information such as crypto wallet keys and personal details. The issue stemmed from Claude's Share…
Malwarebytes - Ex Bank CISO Blauner Urges Business Centric Cyber Resilience
Charles Blauner, former CISO at major banks, discusses the evolution of the CISO role, emphasizing the need for resilience, communication, and business acumen in today's cybersecurity landscape. His insights highlight the importance of mentorship and…
Dark Reading - Iran Linked Handala Hits US Water Utilities, Warns More Attacks
On June 16, it was reported that the Iran-linked hacking group Handala attacked Cal Water, although there was no evidence of water supply tampering. Handala subsequently warned of increased attacks on U.S. critical infrastructure, specifically targeting…
DataBreachesHandala - NightLedger Malware Hijacks Victim PCs as Covert Espionage Relays
The article discusses the cybersecurity threat posed by Nimbus Manticore's deployment of NightLedger, which turns victim systems into covert relays for cyber espionage. It highlights the malware's capabilities and its implications for security frameworks,…
The Hacker NewsUNC1549 - Apple patches ImageIO flaw CVE-2026-43818 in July OS updates
Apple has released significant July security updates for iOS/iPadOS (26.6), macOS Tahoe (26.6), macOS Sequoia (15.7.8), macOS Sonoma (14.8.8), tvOS (26.6), watchOS (26.6), visionOS (26.6), and Safari (26.6), focusing on fixing vulnerabilities across multiple…
MalwarebytesCVE-2026-43818 - JetBrains patches critical unauthenticated code flaw in TeamCity
JetBrains has issued patches for a critical vulnerability in TeamCity, identified as CVE-2026-63077, which allows unauthenticated code execution on affected on-premise servers, posing severe security risks. The flaw has a CVSS score of 9.8 and impacts all…
- Linux systems face OVSwrap flaw CVE-2026-64531, root risk
The OVSwrap local root vulnerability, identified as CVE-2026-64531, allows unprivileged users to gain root access on various Linux systems through the Open vSwitch (OVS) datapath. The flaw exploits a change in action stream limits, enabling crafted CLONE…
SecurityOnlineCVE-2026-64531 - Microsoft launches MAI Cyber 1 Flash AI model beating rivals
Microsoft has introduced its first AI cybersecurity model, MAI-Cyber-1-Flash, which reportedly outperforms competitors in detecting vulnerabilities. Integrated within Microsoft's MDASH platform, it utilizes over 100 AI agents for effective vulnerability…
SecurityWeek - Vatican prayer app leaked 700k users' data for months
The Vatican's Click To Pray app, launched by Pope Francis in 2019, exposed personal data of over 700,000 users due to security flaws discovered by researcher BobDaHacker in January 2026. These included an API vulnerability that allowed unauthorized access to…
Malwarebytes - Act Security raises $60M to curb AI fueled cloud access sprawl
Act Security, a Tel-Aviv startup founded in 2025, has raised $60 million to address the challenging landscape of cyber vulnerabilities exacerbated by AI. The firm focuses on minimizing 'access sprawl' in cloud environments, where excessive permissions create…
SecurityWeek - Fairlife Hit by Anubis Ransomware, Exposes HR and Tech Data
Coca-Cola's subsidiary Fairlife reported a data breach and production outages following a ransomware attack in July 2026, attributed to the group Anubis. The unauthorized access occurred on July 16, and while most production has resumed, the breach exposed…
InfosecurityAnubis - From Teen Hacker to Cyber Defender: Tal Kollander’s Journey
Tal Kollander, a hacker-turned-cybersecurity expert from Tel Aviv, emphasizes the moral distinctions among hackers: 'white hats' report vulnerabilities ethically, 'black hats' exploit them for personal gain, and 'grey hats' oscillate between both. Growing…
SecurityWeek - Hush Security raises $30m to secure AI agents for enterprises
Hush Security, a cybersecurity startup based in Tel Aviv, has raised $30 million in Series A funding, totaling $41 million since its inception in 2024. The funding comes from Akamai Technologies, Battery Ventures, and YL Ventures. The company focuses on a…
SecurityWeek - NVIDIA forms Open Secure AI Alliance, Google, OpenAI absent
NVIDIA has launched the Open Secure AI Alliance with nearly 40 companies, aiming to create open-source security tools for AI. Notably absent from the coalition are prominent AI players like Google, Anthropic, and OpenAI, raising concerns about the…
Infosecurity - Proofpoint Unveils Cruciferra Crypter Service Powering Malware
Proofpoint's research has unveiled Cruciferra, a sophisticated crypter-as-a-service enabling hackers to effectively avoid antivirus detection and carry out diverse malware campaigns worldwide. Designed with advanced techniques such as indirect system calls…
Security Affairs - New CREST AI Standards to Deliver AI-Enabled Pentesting Accreditation
CREST, a cybersecurity accreditation body, has introduced new AI-Enabled Penetration Testing standards aimed at accrediting services that responsibly utilize AI in cybersecurity. Launched on July 28, 2026, these optional standards enhance existing…
Infosecurity - Microsoft Unveils Project Perception, an Agentic Security System
Microsoft has unveiled Project Perception, an innovative security framework designed to counter AI-based attacks. Set to enter public preview on August 3, it features a multi-agent system with Red, Blue, and Green Teams that continuously learn and adapt to…
SecurityOnline - Google introduces two word names for threat actors renaming APT44
Google Threat Intelligence Group (GTIG) is transitioning to a new cryptonym-based naming convention for identifying threat actors. This method replaces sequential identifiers with memorable two-word combinations: the first word represents the threat actor,…
SecurityWeek - U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities related to Arista VeloCloud Orchestrator and Fortinet FortiOS to its Known Exploited Vulnerabilities catalog. Two notable flaws include CVE-2025-68686, affecting…
- TeamCity flaw lets attackers run OS commands without login
A critical vulnerability in TeamCity has been identified, allowing attackers to execute OS commands without needing to log in. This flaw, highlighted by Ravie Lakshmanan on July 28, 2026, poses significant risks to enterprise security and underscores the…
The Hacker News - AI Finds Linux Traffic Control Race That Leads to Root Exploit
A researcher claims that AI played a significant role in developing a Linux traffic-control race that leads to a root exploit. The findings raise concerns over the security of Linux systems, highlighting how AI can accelerate vulnerability discovery in…
The Hacker News - Golden Chickens Deploys New Malware via Fake Security Pages
The page discusses recent findings by Insikt Group regarding the TAG-195 malware group, also known as Golden Chickens, which includes new malware families: TinyEgg, ChonkyChicken, a modular ChonkyChicken variant, and ChromEggscalator. These tools are used…
SecurityOnlineGC01 - Mirage Kitten APT Deploys NightLedger on Aerospace & Telecom
The article discusses the Mirage Kitten APT group, detailing its focus on cyber-espionage in sectors like aerospace and telecommunications, particularly in the Middle East and Europe. It highlights newly identified malware tools, including the NightLedger…
securelist.comBohrium - Fake bank email spreads AutoIT keylogger via PowerShell
The content discusses a recent wave of malware utilizing AutoIT, specifically a technique involving an 'AutoIT Payload Injector'. The attack begins with a fake bank email containing a RAR archive that holds a VBS script. This script decodes a Base64 payload,…
SANS ISC - Fastjson RCE flaw lets hackers run code on Java servers
A critical remote code execution (RCE) vulnerability in the Fastjson library (CVE-2026-16723) has been exploited, impacting all versions from 1.2.68 to 1.2.83. Designed for JSON processing in Java, Fastjson allows attackers to execute arbitrary code without…
SecurityWeekCVE-2026-16723 - JadeProx spies on Asian, Latin American hospitals and ministries
The article details a cybersecurity report on the JadeProx cluster, linked to espionage-type intrusions targeting various entities in Asia and Latin America, including a Vietnamese public hospital and Malaysia's foreign ministry. The report by Group-IB…
SecurityOnlineCVE-2018-11511 - Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day
Arista Networks released patches for a critical OS injection vulnerability (CVE-2026-16812) in its VeloCloud Orchestrator (VCO) management platform, which has a CVSS score of 10 and is being exploited as a zero-day. The flaw allows remote attackers to access…
- Fake Job Interviews Deliver PylangGhost and GolangGhost RATs to Crypto Workers
The ClickFake Interview campaign, attributed to the North Korean group Famous Chollima, targets crypto professionals through social engineering tactics. Attackers pose as recruiters on platforms like LinkedIn and email, inviting targets to fake skill…
SecurityOnlineWageMole - Microsoft AI model boosts threat detection to 95.95% accuracy
Microsoft has introduced a new AI-based cybersecurity model that significantly enhances threat detection, achieving a 95.95% accuracy rate while reducing costs to half. This improvement indicates a major leap in cybersecurity technology, leveraging AI's…
The Hacker News - Origin Energy data breach hits 900k customers, ransom claimed
Origin Energy, a major Australian power company, reported a data breach affecting 900,000 current and former customers, potentially exposing personal and financial information. The company began investigating the incident in early July 2026 after initially…
SecurityWeek - Attackers Exploit Command Injection Flaw in Arista VeloCloud
The article discusses a critical command injection vulnerability in the Arista VeloCloud Orchestrator, which cyber attackers are exploiting. It highlights the nature of the vulnerability, its implications for security, and the potential risks for…
The Hacker News - Moonshot AI unveils 2.8T parameter Kimi K3 with AgentENV sandbox
Moonshot AI has released the open weights for its Kimi K3 model, marking it as the first 3T-class open-weight model with 2.8T total parameters using a mixture-of-experts (MoE) architecture. The K3 supports native vision, a 1M context window, and excels in…
SecurityOnline - Windows 11 preview builds hit expiry time bomb, force restarts
Windows 10 and 11 preview builds have a built-in digital certificate that controls their expiry date, leading to a 'time bomb' scenario when they expire. Users running the Windows 11 Experimental Future Platforms must upgrade to the latest build (29634.1000)…
SecurityOnline - Google silently rolls out Chrome for Raspberry Pi Arm64
Google has released a native Chrome build for Linux Arm64, catering to users running Raspberry Pi OS. This new version enables account data synchronization and Widevine DRM support, allowing users to stream video content from platforms like Netflix. The…
SecurityOnline - Debian votes on AI code contributions amid community disagreement
Debian is currently debating whether to allow AI-assisted code contributions, with a voting discussion that started on July 24, 2026. Four proposals are being considered: 1. **Proposal A: Total Ban** - Prohibits any contributions from AI tools, citing…
SecurityOnline - NVIDIA leads new AI security alliance after Hugging Face breach
NVIDIA, alongside Microsoft and 25 other founding members, has launched the Open Secure AI Alliance to enhance cybersecurity following the Hugging Face AI incident. The coalition’s goal is to utilize open technologies to address and disclose vulnerabilities…
SecurityOnline
