News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Today, Wed 28 Oct | 10 so far | 1 |
Developing
Thu 3 Sep70 articles
- ASCII smuggling crosses over from AI prompt injection to phishing evasion
Microsoft's research highlights a new high-volume phishing campaign that uses invisible Unicode tag characters, a technique known as 'ASCII Smuggling', which was previously associated with AI prompt injection. This campaign started on February 9, 2026,…
Microsoft - Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root
The article discusses a critical vulnerability in Cisco Nexus 9000 switches that allows unauthenticated remote attackers to execute code as root. The vulnerability poses significant risks to network security, emphasizing the need for immediate patching and…
The Hacker News - Manchester Airports Group Data on 8.8 Million People Leaked After Ransom Refusal
The Manchester Airports Group (MAG) announced a significant data breach affecting approximately 8.8 million individuals, involving the theft of personal information such as email addresses, phone numbers, vehicle registrations, and more. The breach occurred…
SecurityWeek - BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory
The article discusses the BraZetsu malware, which has the capability to convert compromised Windows hosts into assets for a criminal marketplace. It highlights the critical security risks posed by this malware, including its use in cybercrime and artificial…
The Hacker News - Pegasus Zero-Click Exploit Infects Serbian Student Activist's iPhone
A Serbian student activist was infected with Pegasus spyware via a zero-click exploit in iMessage, confirmed by Citizen Lab's investigation. The infection occurred between December 2025 and January 2026, with potential for further infections. Notifications…
Infosecurity - Capsule Security Launches ‘AI Circuit Breaker’ to Stop Rogue Agents
Capsule Security has developed an 'AI circuit breaker' to safeguard against rogue autonomous agents operating beyond their intended scope. Founded in 2025 by Naor Paz and Lidan Hazout, the solution enables real-time detection and intervention, preventing…
SecurityWeek - Fewer attacks, more force: Link11’s European Cyber Report finds new DDoS records for the first half of 2026
Link11's European Cyber Report for the first half of 2026 reveals a 42% decrease in DDoS attacks, yet records for attack intensity have soared, marking new highs in bandwidth (2.3 Tbit/s), packet rate (322 million packets/s), and cumulative data volume (705…
SecurityOnline - Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data
Thomson Reuters experienced a significant breach of its court software, potentially compromising sensitive information such as Social Security Numbers (SSNs) and sealed court data. The incident was reported by cybersecurity expert Swati Khandelwal on…
The Hacker News - AI 'Machine Speed' Cuts 2-Week Attack Down to 10 Hours
The article discusses a recent cyberattack where AI agents significantly reduced the attack duration from the typical two weeks to just ten hours. Conducted by a human using frontier AI, this attack demonstrated high efficiency as AI agents worked in…
Dark Reading - Outsider Phishing Kit Survives Takedown With 700 New Pages
A recent report by Group-IB revealed that the Outsider Phishing Kit, a phishing-as-a-service operation run by a threat actor named ChenLun, has continued its malicious activities following a law enforcement takedown. Despite the efforts that included a civil…
Infosecurity 2 articles this day · SecurityWeek first · 2 outlets
Cisco Secure Email S/MIME Flaws Publicly Disclosed · Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch VulnerabilitiesShow 2 articlesHide 2 articles
- Cisco Secure Email S/MIME Flaws Publicly Disclosed13:30SecurityOnline
- Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities10:30SecurityWeek
- Cisco Secure Email S/MIME Flaws Publicly Disclosed
- 412,000 The Town 2025 Ticket Buyers’ Data Hits the Dark Web
A significant data breach involving 412,000 ticket buyers from the São Paulo music festival, The Town 2025, has emerged on a Russian-language forum. The compromised database, which includes sensitive information such as names, email addresses, CPF numbers,…
Security Affairs - CVE-2026-80714 (CVSS 9.8): Linux Root Escalation PoC Out
The content discusses the critical vulnerability CVE-2026-80714 in the Linux kernel, which has a CVSS score of 9.8. This vulnerability affects the IPVS netfilter component and allows local users to escalate privileges to root. The flaw is a use-after-free…
SecurityOnlineCVE-2026-80714 - CREST Onboards First Cohort for AI-Enabled Pentesting Accreditation
The article discusses CREST's introduction of an AI-Enabled Penetration Testing accreditation for 10 companies, aimed at promoting responsible AI use in penetration testing services. This module, introduced in July 2026, is an addition to their existing…
Infosecurity - JFrog Artifactory CVE-2026-82329 Exploited
The article discusses a critical authentication bypass vulnerability in JFrog Artifactory, known as CVE-2026-82329. This vulnerability, which has a CVSS score of 9.8, allows unauthenticated attackers to gain full administrative control over self-managed…
- HiddenLayer Raises $100 Million for AI Runtime Security
HiddenLayer, an AI security company based in Austin, has raised $100 million in a Series B funding round, reaching a total of over $155 million raised since its inception in 2022. The company secures the lifecycle of AI applications by providing enterprise…
SecurityWeek - 'Breeze Comet' Tears Into Brazilian & Global Financial Systems
Breeze Comet, a sophisticated cybercrime group in Brazil, is exploiting the country's financial systems to enact fraudulent transactions. This group targets a variety of organizations, including banks and fintech companies, using advanced techniques such as…
Dark ReadingBREEZE COMET - US and Canadian Court Records Breached Following Thomson Reuters Incident
Thomson Reuters reported a cybersecurity incident affecting its C-Track court management software, resulting in the breach of sensitive case data in Canada and the US. Unauthorized access was detected on June 30, affecting records from Ontario courts and 11…
Infosecurity - AI Agent Firewall Startup AIR Security Emerges From Stealth With $50 Million
AIR Security has emerged with $50 million in funding to provide a new type of firewall specifically designed for AI agents, acknowledging the increasing complexity and risks of AI add-ons. The company, co-founded by Yair Saban and Niv Hoffman, aims to ensure…
SecurityWeek - Preparing for the Post-Quantum Era: A Call to Action
The CISA and the G7 Cyber Security Working Group released a publication titled 'Preparing for the Post-Quantum Era: A Call to Action' highlighting the urgent need for organizations and governments to transition to post-quantum cryptography (PQC) to protect…
CISA - US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries
The article discusses a large-scale Remote Monitoring and Management (RMM) phishing campaign that has made the United States its primary target, affecting 46 countries globally. It emphasizes the growing sophistication of phishing attacks, particularly…
The Hacker News - Russian National Indicted For Exploiting Online Platform Used For Freelance Employment And Distributing Malware To Thousands Of Victims
A federal grand jury indicted Searzhudin Tamirlanovich Aktulaev on charges including conspiracy and aggravated identity theft after his arrest in Cyprus. The indictment, unsealed recently, alleges he exploited a freelance employment platform to distribute…
DataBreaches - North Dakota Supreme Court impacted by third-party data breach that has affected dozens of states
A criminal investigation has been initiated after a data breach linked to C-Track, a third-party vendor for the North Dakota Supreme Court, affected the court's information. The North Dakota Court System was notified in late July about the breach that may…
DataBreaches - SonicWall CVE-2026-83548 Leads to CISA Alert
SonicWall disclosed two critical vulnerabilities in its SMA1000 series appliances, specifically **CVE-2026-83548** (a pre-authentication SSRF flaw) and **CVE-2026-83549** (a post-authentication OS command injection flaw). These vulnerabilities are actively…
- 153 Million Driver License Images Offered on Dark Web
A threat actor has begun offering digital scans of over 153 million US and Canadian driver’s licenses on a dark web identity theft service called Nexus. Alongside the driver's licenses, there's also access to more than 10 million ID cards and other…
SecurityWeek - Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks
Attackers are exploiting the trusted Node.js runtime to deliver malware in targeted attacks, posing a significant threat to web security. This trend underscores the vulnerabilities within commonly trusted platforms that can be manipulated. Organizations are…
The Hacker News - Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability
A high-severity vulnerability (CVE-2026-19949) in the All-in-One WP Migration and Backup WordPress plugin poses a major risk to over 3 million websites, allowing remote code execution (RCE) attacks. The issue, described as a second-order SQL injection in the…
SecurityWeekCVE-2026-19949 - Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means
The article discusses the expansion of Shai-Hulud, a cyber threat entity, which has increased its reach to 469 credential locations. This development emphasizes the growing risk of credential theft, highlighting the need for enhanced cybersecurity practices.…
The Hacker News - Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America
The report from Palo Alto Networks details two sophisticated cyberattack campaigns targeting organizations in Latin America, using artificial intelligence (AI) to enhance their operations. The campaigns are classified into two clusters: the Mexican…
Unit 42 - Chaotic Eclipse Releases Crowdstrike Falcon ZeroDay FalconFlank
Chaotic Eclipse has released a Proof of Concept (PoC) exploit named FalconFlank targeting a zero-day vulnerability in the Crowdstrike Falcon cybersecurity platform, specifically exploiting a privilege escalation flaw related to the Microsoft Office malicious…
Security Affairs - FBI Probes Possible Breach of 153 Million Driver’s Licenses
The FBI is investigating a significant data breach potentially involving the personal details of 170 million North Americans. The breach was tied to a service called "Nexus," which advertised access to digital scans of identity documents on a Russian…
Infosecurity - CVE-2026-59346 (CVSS 9.3): VMware Flaw Allows Runnin Code on the Host
Broadcom addressed two vulnerabilities in VMware Workstation and Fusion on September 3, 2026. The critical CVE-2026-59346 vulnerability, scoring 9.3 on the CVSS scale, allows attackers with admin rights on a guest VM to execute code on the host system,…
SecurityOnlineCVE-2026-59346 - Cisco Fixes Critical Cisco IOS XR Vulnerabilities
Cisco has released critical security patches addressing multiple vulnerabilities in its IOS XR operating system, with a maximum CVSS score of 9.8 for two flaws. Network operators are urged to apply Software Maintenance Updates immediately to secure carrier…
SecurityOnlineCVE-2026-20274 - Microsoft to Require Windows Driver SBOM and VEX Statements from March 2027
The article highlights 7 critical vulnerabilities detected today in various software, including improper authentication and SQL injection issues across platforms like BerriAI and SonicWall. Additionally, it discusses Microsoft's upcoming requirement for…
SecurityOnline - Your phone or computer may soon ask how old you are
California has implemented the Digital Age Assurance Act (DAAA), requiring operating systems like Windows, macOS, iOS, and Android to collect users' ages during setup starting January 1, 2027. This measure, aimed at protecting children from accessing harmful…
Malwarebytes - Microsoft Warns of TerminalFix Campaign Deploying Reverse Tunnels
A critical alert has been issued regarding seven active exploits detected today, including vulnerabilities in BerriAI LiteLLM and Kludex Starlette among others. The primary focus is on an identified TerminalFix campaign, which employs fake Cloudflare CAPTCHA…
SecurityOnline - Court Upholds Edge Gatekeeper Exemption
The page details that the European Union's General Court has dismissed Opera's lawsuit against the European Commission regarding Microsoft's Edge browser and its classification under the Digital Markets Act (DMA). The court confirmed that Microsoft Edge does…
SecurityOnline - Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone
The article discusses the recent infection of a Serbian student movement member's iPhone by the Pegasus zero-click spyware exploit. This incident highlights ongoing cybersecurity threats and the capabilities of advanced spyware in targeting individuals…
The Hacker News - International Operation Disrupts Sality P2P Botnet
A recent international law enforcement operation, led by the US, has significantly disrupted the Sality P2P botnet, which has been active for over 20 years. The operation, conducted on August 31, involved collaboration between authorities from Bulgaria,…
Infosecurity
