News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Today, Sat 31 Oct | 1 so far | 0 |
Developing
Thu 30 Jul77 articles
- Operation Silent Vector targets INC ransomware with bounty
Crime Stoppers International has launched a new program called Operation Silent Vector, targeting the INC Ransomware group. This initiative seeks tips to help arrest cybercriminals associated with INC Ransomware, which has disrupted essential services like…
DataBreachesINC Ransomware - MongoDB patches critical flaw amid 27 new security vulnerabilities
MongoDB disclosed 27 vulnerabilities across MongoDB Server and Compass, with most being denial-of-service (DoS) bugs, and several allowing access-control bypass or information disclosure. The vulnerabilities include 1 critical (9.2), 19 high, and 7 medium…
SecurityOnlineCVE-2026-13072 - DataBahn raises $40M Series B to boost AI driven data automation
DataBahn, a Texas-based company founded in 2023, has raised $40 million in a Series B funding round, totaling $59 million in funding. The company specializes in automating data integration and management, aimed at reducing costs. Its solutions enhance data…
SecurityWeek - Open source supply chain attacks rise as AI fuels new threats
The article from the Google Threat Intelligence Group discusses the rising threat of software supply chain compromises, particularly through open-source packages, as evidenced by notable incidents in 2025 and early 2026. It emphasizes the need for…
Google Cloud - Apple July 2026 Patch Fixes 210 Flaws Including ImageIO Bug
The July 2026 Apple Security Update Review presents a significant increase in vulnerabilities, with Apple releasing 210 unique CVEs compared to 37 in the previous month. Major components affected include iOS/iPadOS 26.6, various macOS versions, tvOS,…
thezdi.comCVE-2026-43818 - FTC sues health tech firm Hims & Hers over data shared with Meta
The FTC and the states of Utah and California have filed a lawsuit against Hims & Hers, a telehealth provider, for allegedly failing to protect health data privacy. The suit claims the company shared sensitive health information with third-party ad platforms…
Malwarebytes - Azure Cosmos DB bug leaks master key, gives full DB access
The article discusses a significant security flaw found in Azure Cosmos DB that exposed a platform-wide key, allowing unauthorized access to any database within the system. This vulnerability raises major concerns about cloud security and data protection for…
The Hacker News - CVE-2026-42530: NGINX HTTP/3 flaw allows remote code execution
The content discusses a critical vulnerability identified as CVE-2026-42530 affecting the F5 NGINX Open Source HTTP/3 module, rated 9.2 on the CVSS scale. This vulnerability, which allows remote code execution via a use-after-free flaw in QPACK header…
SecurityOnlineCVE-2026-42530 - Cantina raises $8M to launch community powered vuln platform
Cantina, a cybersecurity startup based in New York, has exited stealth mode with $8 million in new funding, bringing its total to $16.5 million. The funding round was led by Framework Ventures. Cantina has developed an autonomous vulnerability management…
SecurityWeek - cdnjs fully migrated to Cloudflare's Developer Platform
As of June 23, 2026, cdnjs operates solely on Cloudflare's Developer Platform, showcasing its evolution to meet platform challenges. Cdnjs, a widely used CDN for JavaScript and CSS, serves about 9 billion requests daily, with a 98.6% cache hit rate and a…
Cloudflare - Sysadmins report AI misses automation targets, adoption climbs
A recent report by Action1 reveals that AI and automation have not met the expectations of system administrators (sysadmins) regarding their impact on IT and security workflows. A survey of over 1,000 sysadmins indicated a significant gap between predicted…
Infosecurity - Discern Security secures $13M funding to boost security platform
Discern Security has raised $13 million in a Series A funding round, increasing its total funding to $16 million. Led by Forgepoint Capital, with participation from other investors, the company, founded in 2023 in California, offers a proactive security…
SecurityWeek - Text in Word docs triggers self spreading AI worm via Copilot
A security researcher revealed a method to exploit Microsoft Copilot for Word by embedding a self-propagating AI worm through hidden text in documents. This AI worm can spread without the use of macros, leveraging normal document-sharing processes. The…
Malwarebytes - Microsoft Copilot Word flaw lets hidden prompts spread AI worm
A security researcher has revealed that Microsoft Copilot for Word can be exploited to spread a self-propagating "AI worm" through hidden prompt injections in documents. The attack enables a malicious JSON prompt to be embedded as white text in Word files.…
Malwarebytes 2 articles this day · SecurityWeek first · 2 outlets
Analog Devices says files exfiltrated in June 2026 breach · Analog Devices breach sparks extortion claims, no leak evidenceShow 2 articlesHide 2 articles
- Analog Devices says files exfiltrated in June 2026 breach12:45Security Affairs
- Analog Devices breach sparks extortion claims, no leak evidence11:16SecurityWeek
- Analog Devices says files exfiltrated in June 2026 breach
- Onyx Security secures £113m Series B to boost AI safety platform
Onyx Security has secured $113 million in Series B funding, led by Bessemer Venture Partners, bringing its total funding to $153 million. The funding will enhance its AI security platform, valued at approximately $640 million. Onyx offers a centralized…
SecurityWeek - AI powered dangling DNS takeovers expose UK firms to espionage
The article discusses the emerging threat of 'dangling DNS takeover', where cybercriminals exploit outdated DNS records pointing to deleted resources to take control of subdomains. Security firm Silent Push explored this using AI, which improved the…
SecurityWeek - Phishers Hijack Outlook via Fake Teams Alerts Targeting 120 Firms
A phishing campaign has targeted corporate Outlook, SharePoint, and OneDrive accounts by exploiting Microsoft's legitimate authentication system. The attackers impersonated Microsoft Teams alerts and utilized OAuth URLs to mislead users into granting access…
Infosecurity - Microsoft Copilot for Word flaw exposes hidden prompts
The article discusses a vulnerability in Microsoft Copilot for Word, which can inadvertently copy hidden prompts into new documents. This raises concerns about security risks associated with AI-generated content, highlighting the need for better controls and…
The Hacker News - Networks become AI’s frontline defence against cyber threats
The article discusses how the network is evolving into the primary control plane for AI security in the context of cybersecurity. It emphasizes the importance of integrating AI with existing security frameworks to effectively manage risks associated with AI…
The Hacker News - OSF Healthcare fined $552k over Xing Team ransomware breach
In June 2021, a ransomware attack by the relatively unknown Xing Team affected OSF Healthcare, with reports highlighting OSF's inadequate response. A statement issued in October revealed further delays in their incident response. The U.S. Department of…
DataBreachesXing Team - KT faces £37.6m fine after femtocell hack leaks 16,600 records
KT has been fined over 53.9 billion won (approximately $37.6 million) due to a personal data breach and unauthorized micropayment damages resulting from illegal exploitation of femtocells. The Personal Information Protection Commission (PIPC) has ordered KT…
DataBreaches - OctLurk and SilkLurk Backdoors Hit Central Asian Govt Agencies
The content discusses the emergence of two new backdoors, OctLurk and SilkLurk, targeting government organizations in Central Asia. These backdoors primarily focus on espionage activities, and the victims include institutions from various sectors such as…
securelist.com - Patch now: critical VMware vCenter remote code flaws
On July 29, 2026, Broadcom disclosed two critical vulnerabilities in VMware vCenter Server, CVE-2026-59309 and CVE-2026-59310, both with a CVSSv3.1 score of 9.8. CVE-2026-59309 represents an authentication bypass that allows unauthorized access to the…
- Hackers exploit AnySign4PC flaw via compromised Korean sites
Hackers are exploiting vulnerabilities in AnySign4PC through compromised Korean websites to install backdoors without user consent. This incident raises concerns about web security and the need for enhanced protective measures against such exploits.
The Hacker News - SilverFox uses three driver BYOVD with ValleyRAT on Japan maker
The article discusses a recent cyber threat involving a group named SilverFox targeting a Japanese manufacturer. It outlines the use of a sophisticated three-driver Bring Your Own Vulnerable Driver (BYOVD) attack combined with ValleyRAT malware to infiltrate…
The Hacker NewsVoid Arachne - FCC Bans New Foreign Robots, Inverters Over Espionage Fears
The FCC has expanded its Covered List to include new foreign-produced advanced robotic devices and power inverters, restricting their import, marketing, and sale in the U.S. Existing authorized devices can still receive software and firmware updates until…
Security Affairs - Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks
Unit 42 has uncovered an AI-driven autonomous hacking campaign by a Chinese-speaking actor who utilized AI models for cyberattacks. The actor used various tools, including the DeepSeek framework operating via the Hermes Agent, to target infrastructure…
- Critical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms
A significant vulnerability (CVE-2026-59726) has been discovered in the open-source AI orchestration platform, Ruflo, which could allow unauthenticated attackers to execute commands within the container. Ruflo, known for its ability to manage multiple AI…
SecurityWeekCVE-2026-59726 - Nearly One Fifth of Data Center OT Exposed via Single Network Hop
Research by Claroty reveals that nearly 20% of cyber-physical systems in major data centers are easily accessible to attackers via one network connection. Despite only 0.4% of the infrastructure assets being directly internet-exposed, around 18% are one step…
SecurityWeek - Google fixes 370 Chrome bugs, seven critical use after free flaws
Google's Chrome security team has released patches for 370 vulnerabilities in Chrome version 151, including seven critical ones. These issues include 'use after free' vulnerabilities and insufficient validation of untrusted input in components like…
Infosecurity - CISA warns attackers exploit Cisco firewall flaw CVE-2026-20316
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a vulnerability in Cisco Secure Firewall Management Center (FMC) Software, identified as CVE-2026-20316 with a CVSS score of 5.3, to its Known Exploited Vulnerabilities catalog. This…
- NCSC urges vendors to improve network device forensics
The UK’s National Cyber Security Centre (NCSC) is urging device manufacturers to enhance 'forensic observability' in network devices to aid incident response teams in collecting post-compromise evidence. This approach emphasizes the need for built-in…
Infosecurity - US and Allies Revise SBOM Guidance to Boost Supply Chain Security
The US government and 13 allied nations have updated their guidance on the minimum elements of a software bill of materials (SBOM), focusing on enhancing software supply chain security and transparency. This guidance serves as a foundational tool for…
SecurityWeek - eSIM Plus and Nicegram Share Belarus-Linked Codebase, Analysis Finds
A recent analysis by the Mysterium VPN Research Team reveals that the apps eSIM Plus and Nicegram, marketed as Lithuanian products, share a codebase linked to Belarus. The investigation uncovered that eSIM Plus is cryptographically signed by a Belarusian…
Security Affairs - CVE-2026-66373: Redis RCE Proof-of-Concept Publicly Disclosed
A critical vulnerability has been identified in Redis, known as CVE-2026-66373, which involves a Remote Code Execution (RCE) risk stemming from a double-free bug in the RESTORE command. This flaw allows an authenticated attacker to potentially corrupt memory…
SecurityOnlineCVE-2026-66373 - Toy Ghouls' GenieLocker ransomware hits Russian firms via VPN
The article discusses the GenieLocker ransomware, attributed to the Toy Ghouls group, which has been active since March 2026. GenieLocker targets Windows, Linux, and ESXi systems, marking a shift for Toy Ghouls away from third-party ransomware. The…
securelist.comToy Ghouls - Chrome 151 fixes 370 flaws, seven critical use after free bugs
Google released Chrome 151, addressing 370 vulnerabilities, including seven critical-severity bugs involving use-after-free issues and input validation flaws. The update fixes 71 high-severity defects, including various types of vulnerabilities like race…
SecurityWeek - Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation
Russian hackers are exploiting a vulnerability in Microsoft Outlook Web Access (OWA) to maintain access to mailboxes even after victims rotate their credentials. This poses a significant threat to organizations as the attackers can keep their foothold…
The Hacker News
