News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Fri 16 Oct | 61 | 13 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Today, Fri 30 Oct | 68 so far | 10 |
Developing
Mon 3 Aug75 articles
- APT29 hijacks hotel Wi‑Fi to spy on travelers via fake updates
A new cyber-espionage campaign named 'CaptiveCrunch', attributed to the Russian hacking group Midnight Blizzard (also known as APT29), targets travelers by hijacking captive portals on hotel and conference Wi-Fi networks. This attack serves fake updates that…
InfosecurityUNC2452 - Rogue AI models fuel $88M Bitcoin heist and water system attacks
The article provides a weekly recap of significant cybersecurity events, including the emergence of rogue AI models, an $88 million Bitcoin theft, attacks on water systems, and vulnerabilities related to DNS hijacks. It highlights the increasing…
The Hacker News - CISO fatigue spikes as authority fails to match accountability
The article by Dirk Schrader highlights the issue of CISO fatigue, driven by a lack of authority to match heightened accountability. Key points include: 1. **High Stress Levels**: Only 2% of cybersecurity professionals report no job stress; 68% find their…
Dark Reading - SICK InspectorP6xx Flaw CVE-2026-11841 Could Lead to Full Device Compromise
The SICK InspectorP6xx machine-vision sensors have a critical remote-access vulnerability identified as CVE-2026-11841, which has a CVSS score of 9.4. This flaw allows unauthenticated attackers on the network to access internal files, potentially…
SecurityOnlineCVE-2026-11841 - River Financial deletes data after ransomware breach, faces suits
River Financial Corporation confirmed that data stolen during a ransomware attack on June 16, which was revealed three days later, was deleted after engaging with the attackers. The bank's investigation identified ransomware deployment across its servers and…
SecurityWeek - Brazilian schools hit by ransomware as LockBit builder leaks
The article discusses cyber incidents targeting Brazilian educational institutions, highlighting the vulnerability of these organizations to cyberattacks due to inadequate security measures for managing sensitive data. Key findings reveal that most attacks…
securelist.comLockBit - Horizon3 raises $250M Series E, pushing valuation to $2B
Horizon3 has secured $250 million in a Series E funding round, increasing its valuation from $650 million to $2 billion within a year. Co-led by NightDragon and NEA, the funding reflects investor confidence in Horizon3's strong market performance and growth…
SecurityWeek - Cloudflare releases @computer toolkit for scalable AI agents
Cloudflare has introduced an early preview of the `@cloudflare/computer` package, designed to enhance the development of capable agents by providing an efficient runtime environment. Unlike traditional containerization that has limitations in scalability,…
Cloudflare - Cloudflare Workers RPC Enables JavaScript to Call Python Functions
The article discusses the enhancements made to Cloudflare Workers RPC, allowing cross-communication between JavaScript and Python Workers. Initially, Workers RPC enabled seamless method calls within the same language, but recent developments allow this…
Cloudflare - Cloudflare Workers gain gRPC support for real time voice AI apps
The Cloudflare blog post introduces new capabilities for Cloudflare Workers to support gRPC applications, enhancing low-latency communication for real-time applications, particularly in voice AI. Key announcements include: 1. **connect(socket)**: A new…
Cloudflare - Cloudflare launches Billable Usage API for cost monitoring
Cloudflare has introduced a new Billable Usage API that allows users to monitor their account's usage and costs by product and service period through a single endpoint. This API is designed for automation, detailing costs associated with various Cloudflare…
Cloudflare - Cloudflare Accelerates AI Inference Using Quantised KV Cache
Cloudflare's Workers AI enables efficient inference for advanced AI models using GPUs across their data centers. Key techniques discussed include: 1) **Quantizing the KV Cache** - Reducing the cache size from 16-bit to 8-bit improves memory usage, allowing…
Cloudflare - Apple patches CUPS flaw CVE‑2026‑39875 enabling root access
Apple has addressed a significant privilege escalation vulnerability in macOS, tracked as CVE-2026-39875, allowing malicious applications to gain root access by exploiting flaws in the CUPS system. The researcher Dallas Dubs has shared detailed technical…
SecurityOnlineCVE-2026-39875 - Fake Roblox Xeno cheats spread Java stealer via Discord forums
The article discusses a malware campaign that uses fake Xeno Roblox cheats to deliver a powerful Java stealer via Discord and gaming forums. The malware disguises itself as a legitimate tool, employing a multi-stage infection process that mimics real Xeno…
bitdefender.com - Nable patches CVE-2026-18577 after attacks on Ncentral accounts
N-able has patched a vulnerability (CVE-2026-18577) that was actively exploited against its N-central remote monitoring product, leading to potential unauthorized access to user accounts in versions prior to 2026.3.1.7. The vulnerability is not a new…
- Seoul Facilities Corp criticised for 5,000 won breach payout
Seoul Facilities Corp. faces criticism for its inadequate response to a personal data breach affecting 4.62 million users. The company proposed a compensation of 5,000 won (approximately $3.50 USD) per affected individual, which has been deemed insufficient…
DataBreaches - UK Police Data Leak Exposes Officers' Emails to Phishing Risk
The Police National Legal Database (PNLD) in the UK confirmed a significant data breach that exposed the names and email addresses of police officers and justice staff, increasing their vulnerability to phishing attacks. The breach, which affected a public…
Security Affairs - ExfilSquad Exposes 100k Police Records via UK Government Portals
A hack has resulted in the leak of full names and contact details of over 100,000 police officers and staff on the dark web, involving the Ministry of Defence, Home Office, National Crime Agency, and Crown Prosecution Service. This follows another breach…
DataBreachesExfilSquad - Liechtenstein cyberattack hits owners register, 31k data stolen
Liechtenstein has experienced a significant cyberattack resulting in the theft of data belonging to 31,000 individuals, according to a government announcement. The attack targeted the register of beneficial owners, which contains details about the owners of…
DataBreaches - ShinyHunters leaks Brinks Home data after ransom refusal
The ShinyHunters extortion group has leaked over 41GB of data believed to be from Brinks Home, a Dallas-based physical security firm, after a cyberattack accessed its IT systems. The attack compromised over 4.9 million records from Brinks Home’s Salesforce…
SecurityWeekShinyHunters - AI FOMO Surges as Claude Joins Security Operations Centres
The article discusses the implications of AI platforms, specifically Claude, in Security Operations Centers (SOC). It highlights the phenomenon of Fear of Missing Out (FOMO) that may arise as AI tools become more prevalent in cybersecurity. Key points…
The Hacker News - HollowFrame loader evades Defender via fake Python in law firm
The article discusses the discovery of a new loader framework known as HollowFrame, which uses a counterfeit Python runtime to evade Microsoft Defender detection. This framework was utilized in a cyber intrusion targeting a law firm, initiated through a…
Infosecurity - China Hackers Use Leaked DarkSword to Spread GhostBlade on iOS
A Chinese threat actor has reportedly utilized a leaked version of the DarkSword toolkit to deploy an advanced malware known as GHOSTBLADE on iOS devices. This represents a significant security concern as it highlights the vulnerabilities in mobile operating…
The Hacker News - INC Ransomware exploits CVE-2026-15409, gains root on SonicWall
The INC Ransomware group has been identified as the primary threat actor exploiting two significant vulnerabilities in SonicWall’s SMA1000 secure remote access appliances, designated as CVE-2026-15409 (CVSS 10) and CVE-2026-15410 (CVSS 7.2). These flaws…
- Google Passkey Weakness Lets Attackers Steal Synced Keys
The article from Palo Alto Networks' Unit 42 focuses on the security vulnerabilities in passwordless authentication systems, particularly highlighting risks associated with Google's synced passkey ecosystem. It outlines three novel attacks—"Pass-ta-key,"…
Unit 42 - KT fined £38m after femtocell hack enables micropayment fraud
South Korea's largest telecommunications company, KT (Korea Telecom), has been fined $38 million by the Personal Information Protection Commission (PIPC) due to serious security failings that allowed hackers to defraud customers through unauthorized…
Infosecurity - Russian hackers hijack public WiFi to steal Microsoft 365 logins
A Russian state-sponsored Advanced Persistent Threat (APT), identified as Storm-2945, is accused of conducting a credential theft campaign via compromised public Wi-Fi gateways, targeting employees in various sectors like finance and healthcare. Microsoft…
SecurityWeekStorm-2945 - UK Police Database Leak Exposes Officers' Details on Dark Web
The article discusses a data breach involving the Police National Legal Database (PNLD) in the UK, which has resulted in sensitive contact details of police and government officials being exposed on the dark web. The breach raises serious concerns about…
The Hacker News - Żabka data leak reveals source code and credentials for sale
The article discusses an alleged data breach involving Żabka Polska, Poland's largest convenience store chain, which has purportedly leaked significant data, including Jira issues, GitLab repository source code, and sensitive credentials. A seller claimed to…
Security Affairs - Iranian hackers hit water plants in seven states, safety assured
Recent cyberattacks on the U.S. water sector have targeted at least seven states, primarily attributed to Iranian hackers. Minnesota reported attacks on over 30 water and wastewater facilities, with other states like Michigan and South Dakota also confirming…
SecurityWeek - Coldcard Bitcoin Wallet Breach Exposes $89M in Stolen Funds
Coldcard, a popular Bitcoin hardware wallet, has experienced a significant security breach resulting in the theft of approximately $89 million worth of Bitcoin. This incident, initiated on July 30, involved automated attacks that exploited a firmware…
Infosecurity - Alphabet Q2 2026 Profits Soar on AI Cloud Boom and Gemini Push
Alphabet's Q2 2026 results show a 24% increase in revenue to $119.8 billion, driven by a significant demand for AI infrastructure. Key highlights include: Operating income reached $40.77 billion, with net income doubling to $112.1 billion. Google Cloud…
SecurityOnline - Thermo Fisher patches DNA data tampering vulnerability
The article discusses a recent security vulnerability discovered in Thermo Fisher technologies, which could potentially allow for DNA file tampering to go undetected. This flaw has been patched, highlighting the importance of constant vigilance in data…
The Hacker News - Malicious npm Packages Hit Alibaba Devs with Spyware RAT
The article discusses a recent npm supply chain attack targeting Alibaba developers, specifically those from Taobao, Tmall, and Alibaba Cloud. The attack involves a cross-platform RAT (Remote Access Trojan) that is delivered through malicious npm packages…
SecurityOnline - Developer runs Kimi K3 model via C99 engine on modest hardware
Developer FareedKhan has created a C99 inference engine to run the Kimi K3 model on standard hardware, processing at 20 seconds per token with 128GB RAM and 33 seconds per token with a constrained 8GB RAM. The project illustrates the Mixture-of-Experts (MoE)…
SecurityOnline - Windows 11 Beta Adds Custom Taskbar Placement Options With Limits
Microsoft has initiated extensive testing for customizable Taskbar positioning in Windows 11, which allows users to place the Taskbar at any edge of the screen. This feature, now available to Beta Channel users, enhances personalization by enabling users to…
SecurityOnline - Tengu Botnet Revives Mirai Threat with Telnet Brute Force Attacks
The Tengu botnet, disclosed by Nozomi Networks Labs on July 27, 2026, is a modernized variant of the Mirai IoT botnet, targeting internet-facing embedded Linux devices like routers and cameras. It employs Telnet brute-force attacks for initial access,…
SecurityOnline - Malwarebytes adds Microsoft Store app as Fortnite scams surge
The article from Malwarebytes Labs discusses major security news from July 27 to August 2, 2026. Key highlights include reports of fake Fortnite rewards and Flash Player installations leading to account thefts, a lawsuit against Hims & Hers for privacy…
Malwarebytes - N-able N-central servers breached despite recent fix
N-able reports that attackers have successfully taken over N-central servers despite a prior fix being in place, highlighting ongoing vulnerabilities in endpoint security. The news emphasizes the importance of robust cybersecurity measures and proactive…
The Hacker News - Hugging Face Diffusers flaw lets models run arbitrary code
The article discusses vulnerabilities in Hugging Face's Diffusers that may allow model repositories to execute arbitrary code. The author emphasizes the importance of AI security in addressing such flaws to protect against potential attacks. It highlights…
The Hacker News
