News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Today, Wed 28 Oct | 80 so far | 15 |
Developing
Mon 24 Aug68 articles
- Fake Minecraft clients spread Weedhack malware via SEO tricks
The article discusses the spread of Weedhack malware through fake Minecraft clients and SEO poisoning techniques. It highlights the risks associated with downloading malicious software disguised as legitimate applications and emphasizes the importance of…
The Hacker News 2 articles this day · DataBreaches first · 2 outlets
ReliaQuest blocks ShinyHunters phishing, confirms no data breach · ReliaQuest refutes ShinyHunters leak, says fake login was usedShow 2 articlesHide 2 articles
- ReliaQuest blocks ShinyHunters phishing, confirms no data breach17:38SecurityWeek
- ReliaQuest refutes ShinyHunters leak, says fake login was used11:36DataBreaches
- ReliaQuest blocks ShinyHunters phishing, confirms no data breach
- Fake GTA VI Downloads Embed Malware Awaiting November Release
Cybercriminals are exploiting the hype surrounding GTA VI by circulating fake downloads that contain malware. A purported 113GB file, claimed to be a playable version of the game, was found to be mostly empty data with only a 50KB virus embedded. Researchers…
Security Affairs - Fake GTA 6 demo sites trick users into downloading info stealer
The article discusses the emergence of fake websites posing as Rockstar Games to exploit the hype surrounding the upcoming release of Grand Theft Auto VI (GTA 6). Cybercriminals have created convincing sites offering a supposed demo of the game, which…
Malwarebytes - Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Rapid7's analysis of CVE-2026-63520 highlights a significant remote code execution (RCE) vulnerability in Microsoft SharePoint. This flaw, disclosed on August 11, 2026, allows an authenticated attacker to execute arbitrary code with the privileges of the…
Rapid7CVE-2026-63520 - TCG Issues New Guidance on Quantum Safe TPM Certification
The Trusted Computing Group (TCG) has released new guidance to help organizations verify the quantum-safety of trusted platform modules (TPMs). This comes as concerns rise around safeguarding systems against quantum-enabled attacks. The guidance includes a…
Infosecurity - NIST warns of 23 multi cloud security challenges, seeks input
The NIST has issued a warning regarding unique cybersecurity risks in multi-cloud environments, stressing the challenges organizations face in maintaining consistent security across various cloud service providers (CSPs). Key points include difficulties in…
Infosecurity - CVE-2026-19874: Metal Gear Online 3 RCE Flaw
The article discusses a critical remote code execution (RCE) vulnerability (CVE-2026-19874) in Konami's Metal Gear Online 3, allowing attackers to gain control of client systems through a heap-based buffer overflow linked to the game's Steam matchmaking…
SecurityOnlineCVE-2026-19874 - Expel Finds SynkLoader Malware Using Fake Windows Lock Screen
The article details the emergence of a sophisticated malware family called SynkLoader, which employs advanced techniques to infiltrate corporate systems as a precursor to potential ransomware attacks. Discovered by researchers at Expel, SynkLoader utilizes a…
Dark Reading - Fake Codex macOS lures via Google Sites to deliver hidden malware
A fake Codex download campaign has exploited sponsored search results and Google Sites to deliver macOS malware, tricking users into executing it. Researchers from Cato Networks found that the campaign redirected users from queries like 'codex macos…
Infosecurity - Fake SysScan Security Scan Pushes Users to Uninstall Antivirus
A new wave of scams involves fake Microsoft security scans claiming to check antivirus software effectiveness. These sites, branded as **SysScan**, falsely assert that third-party antivirus software is unsupported by Windows, urging victims to uninstall…
Malwarebytes - What Happens to Your Digital Afterlife After Death?
In this episode of Malwarebytes' Lock and Code podcast, host David Ruiz interviews Tamara Kneese, exploring the implications of data's afterlife following a person's death. The conversation highlights the evolving digital landscape where online accounts and…
Malwarebytes - ToxicPanda 2.0 expands to 349 finance apps via Android debug
The latest update on the ToxicPanda banking Trojan reveals an evolution into a more sophisticated threat targeting both individual users and enterprise systems. ToxicPanda 2.0 introduces 167 new remote commands, expanding its target from 16 banking…
Dark Reading - AI driven PLC attacks rise amid GitLab breaches, Stripe key leaks
The article discusses recent developments in cybersecurity, focusing on threats linked to AI, such as AI-powered PLC attacks, GitLab breaches, and the leakage of Stripe keys. It highlights the increasing cost of phishing and resources for improving AI…
The Hacker News - AliExpress Tracks Users via Silent Audio Fingerprinting
AliExpress has been reported for using silent audio to fingerprint visitors' browsers, a method that allows tracking without relying on cookies. This technique involves generating inaudible sound signals and analyzing how different devices and browsers…
Malwarebytes - CVE-2026-75616: TP-Link Archer C20 Command Injection Risks Full Device Compromise
TP-Link has addressed a critical command injection vulnerability in the Archer C20 v6 router, identified as CVE-2026-75616, which has a CVSS score of 8.5. The flaw allows authenticated administrators to execute arbitrary commands, leading to potential full…
SecurityOnlineCVE-2026-75616 - CISOs Urged to Tie Security Wins to Business Growth and Trust
The article discusses the challenges faced by Chief Information Security Officers (CISOs) in communicating the value of security measures to executive boards. It highlights that while CISOs' expertise is in technical skills and compliance, boards prioritize…
SecurityWeek - AI speeds bug detection, but patches lag, widening the gap
The article discusses the increasing speed of discovering vulnerabilities in cybersecurity, thanks to advanced AI technology, which has significantly reduced the time needed to identify flaws from weeks to hours. However, the remediation process has not kept…
Dark Reading - ToxicPanda 2.0 can take over your Android phone and banking apps
ToxicPanda 2.0 is a newly discovered Android banking Trojan and remote-access tool capable of taking over devices and stealing banking credentials. It significantly expands its targeting capabilities and employs tactics such as phishing and abusing Android's…
Malwarebytes - IBM fixes critical Power Systems flaws enabling full control
IBM has patched two critical vulnerabilities in Power Systems Firmware, CVE-2026-16687 and CVE-2026-16835, both rated 9.6 on the CVSS scale. These flaws allow unauthenticated attackers to gain full control of managed systems, posing a significant risk to…
SecurityOnlineCVE-2026-16687 - Doubloon Dredger uses malicious PDFs to steal Notion tokens
A financial threat actor, identified as 'Doubloon Dredger,' has been exploiting free Notion accounts and malicious PDFs to harvest authentication tokens from organizations. The campaign, uncovered by Sublime's Threat Intelligence team, involves fake accounts…
InfosecurityDoubloon Dredger - PostgreSQL Issues Fix for Critical CVE-2026-14669 Remote Code Bug
PostgreSQL addressed a critical vulnerability (CVE-2026-14669) identified as a heap overflow in the to_char() function, allowing for potential remote code execution (RCE). The vulnerability, which has a CVSS score of 8.8, affects various versions before…
SecurityOnlineCVE-2026-14669 - Dutch DPA fines Uber €825m for automated driver suspensions
The Dutch Data Protection Authority has fined Uber nearly $1 billion for violating the EU's General Data Protection Regulation (GDPR) by using automated software to suspend driver accounts without human oversight. The fine amounts to 825 million euros ($964…
SecurityWeek - New Amatera malware uses ClickFix to steal Windows passwords
The article discusses the delivery of a new malware, Amatera, via WordlistLoader, which exploits ClickFix to phish for Windows passwords. It highlights the increasing sophistication of cyber threats and the need for improved endpoint security to combat such…
The Hacker News - Apollo Global Management Hit by Social Engineering Data Breach
Apollo Global Management has reported a data breach resulting from a social engineering attack, which exposed sensitive personal information such as names, contact details, and Social Security Numbers (SSNs) between July 6 and 10. An investigation is…
DataBreaches - Spring patches 91 bugs, fixing critical LDAP flaw CVE-2026-59270
Broadcom's Spring application development framework has released updates addressing 91 vulnerabilities, including a critical one (CVE-2026-59270) that allows potential unauthorized access through its embedded LDAP server. The vulnerabilities, which number…
SecurityWeekCVE-2026-59270 - Firms must secure AI driven development amid rapid code shipments
The article discusses a recent webinar on managing AI-related security risks as organizations increasingly ship more code at faster rates (10-50 times quicker). It emphasizes the importance of maintaining security control amid this rapid development. Key…
The Hacker News - Keycloak flaw lets attackers reset passwords and hijack accounts
A critical security flaw in Keycloak allows unauthenticated attackers to reset passwords and take over accounts, posing significant risks to identity security. The article emphasizes swift updates and patches to prevent unauthorized access, highlighting the…
The Hacker News - QUICAgent fuels cyber espionage on Myanmar government systems
The article discusses 'Operation QUICSILVER,' a cyber espionage initiative targeting the Myanmar government and IT sectors using a malware known as QUICAgent. It highlights the significance of this operation in the context of increasing cyber threats and…
The Hacker News - PavinLoader malware spreads via ClickFix and fake download scams
The article "Tracking PavinLoader across ClickFix and fake download campaigns" details the operations of the PavinLoader malware across various malicious campaigns, including ClickFix and fake software downloads. Key points include: 1. **PavinLoader** is a…
Malwarebytes - Only 5% of AI Users Cause Most Security Threats, Study Shows
The article discusses the significant security risks posed by a small percentage (5%) of AI users, highlighting that this group can disproportionately impact organizational security. It emphasizes the importance of addressing the vulnerabilities associated…
The Hacker News - TP Link patches three flaws in TL MR6400 routers, urges update
TP-Link has released patches for three high-severity vulnerabilities in the TL-MR6400 router (version 7 hardware), which could allow remote code execution or denial of service. Users are urged to update to firmware version 1.9.0 Build 260714 immediately. The…
SecurityOnlineCVE-2026-17250 - Venezuelan sentenced to 8 years for $3.5M ATM jackpotting scheme
Juan Manuel Gouveia-Aguilera, a 27-year-old Venezuelan national, was sentenced to 8 years in prison for his involvement in an ATM jackpotting scheme that caused over $3.5 million in losses. This sentence is reportedly the longest federal term for such…
SecurityWeek - Apollo breach exposes SSNs after social engineering attack
Apollo Global Management has reported a data breach resulting from a social engineering attack that exposed sensitive personal information, including names, contact details, and Social Security Numbers (SSNs). The breach occurred between July 6 and 10, 2026,…
SecurityWeekBlackFile - Time to Weaponise Vulnerabilities Could Fall to Four Hours by 2026
The article discusses the rapid evolution of cybersecurity threats due to advancements in AI, highlighting that the time taken to weaponize vulnerabilities is projected to decrease from a range of months to just 4 hours by 2026. It outlines several…
SecurityWeek - British power plant shut down for four days by Iranian hackers
In July 2026, Iranian-linked hackers successfully shut down a British power plant for four days, a situation made public when it was reported by the Telegraph on August 22, 2026. This incident highlighted vulnerabilities in cybersecurity, raising concerns…
SecurityWeek - TikTok settles $400m children's privacy lawsuit with US DOJ
TikTok has settled a $400 million lawsuit with the U.S. Department of Justice (DOJ) concerning violations of children's privacy laws. The settlement includes an immediate payment of $300 million and an additional $100 million contingent upon vacating a…
SecurityWeek - Iran linked hackers hit UK power plant, raising CNI fears
The article reports on a serious cyber attack carried out by Iranian hackers that disrupted a UK power plant for several days. Experts express alarm over the vulnerabilities in the UK’s critical national infrastructure (CNI), emphasizing that if such an…
Infosecurity - Slovakia warns Russian Croatian speedcam poses cybersecurity risk
Slovakia's National Security Authority (NBÚ) has issued a warning regarding vulnerabilities in road speed cameras, identifying them as significant cyber threats. The alert stems from concerns that these devices, which collect vehicle data and have potential…
Security Affairs
