News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 17 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 15 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 1 |
| Mon 26 Oct | 75 | 13 |
| Today, Tue 27 Oct | 55 so far | 12 |
Developing
Tue 15 Sep68 articles
- BambooToken Malware Uses MQTT to Control Windows and Linux Systems
The article discusses the BambooToken malware that utilizes MQTT (Message Queuing Telemetry Transport) protocol to control systems running on both Windows and Linux. This malware presents a growing concern in cybersecurity, as it can bypass traditional…
The Hacker News - Anthropic’s Claude Privacy Rules Prompt Enterprise Restrictions
Anthropic’s recent AI safety report has raised concerns about the privacy of data submitted to its Claude models. The report discusses risks including hacking, surveillance, fraud and the circulation of sensitive data, while indicating that Anthropic has the…
SecurityOnline - Fraudulent Job Candidates Gain Network Access Before Detection, Report Finds
A HYPR report found that most fraudulent job candidates receive corporate credentials and internal network access before being identified. Based on a survey of 500 US HR executives, 42% of fraudulent candidates reportedly pass pre-hire screening and begin…
Infosecurity - Most Firms Missed Their Ransomware Recovery Targets, Report Finds
Only four of more than 800 organisations assessed by incident response firm Fenix24 came close to meeting their own 24- to 48-hour ransomware recovery targets, and only for part of their operations. None regained full operational capacity until several weeks…
Infosecurity 2 articles this day · DataBreaches first · 2 outlets
Five Black Axe Leaders Extradited to US Over Romance Scam Allegations · Five Alleged Black Axe Members Extradited to US Over Romance ScamsShow 2 articlesHide 2 articles
- Five Black Axe Leaders Extradited to US Over Romance Scam Allegations13:45Infosecurity
- Five Alleged Black Axe Members Extradited to US Over Romance Scams11:49DataBreaches
- Five Black Axe Leaders Extradited to US Over Romance Scam Allegations
- Attackers Exploited Fortinet and F5 Flaws to Target Thai ISP 3BB
Threat actors targeted Thai broadband provider 3BB, also known as Triple T Broadband, by exploiting vulnerabilities in Fortinet and F5 products, according to cybersecurity firm Hunt.io. The intrusion was uncovered after the attackers left their tools in an…
2 articles this day · Rapid7 first · 2 outlets
Cisco Secure Email Gateways Hit by Actively Exploited Root Access Zero Day · Cisco Email Gateway Zero Day Let Attackers Gain Root Access RemotelyShow 2 articlesHide 2 articles
- Cloudflare Lets Teams Lock Worker Access to Individual Apps
Cloudflare has introduced Worker-level access controls for all customers, allowing organisations to limit a person, CI/CD system or AI agent to a specific Worker rather than granting access across an entire account. Four roles are available: Metadata…
Cloudflare - AI Leads Cybersecurity Spending as Budgets Stay Flat in 2026
AI has become the leading priority for new cybersecurity spending, despite overall budgets remaining broadly unchanged, according to IANS’ 2026 Security Budget Benchmark Report. The report is based on interviews with 500 US security executives. Some 69%…
Infosecurity - Cloudflare Lets Sites Block AI Training Without Losing Search Traffic
Cloudflare has announced a new “Disallow AI Training” setting for its Bot Management and AI Crawl Control services, allowing website owners to refuse AI training while keeping their content available to search crawlers. The setting publishes the relevant…
Cloudflare - OpenAI Probes AI Agents Linked to RubyGems Attack and RCE
OpenAI is investigating claims that its AI agents were likely involved in a May attack on RubyGems.org, the official Ruby package-hosting service. The incident initially appeared to be a distributed denial-of-service attack but was later described as spam…
SecurityWeek - LiteSpeed Server Flaw Lets Tenants Escape Shared Hosting Accounts
A critical vulnerability in LiteSpeed Web Server Enterprise could allow a low-privilege user on a shared-hosting server to escape their account and gain root-level access, cPanel warned on 14 September 2026. The flaw can bypass account-isolation controls,…
- Iranian Hackers Target Dissidents with Persistent CHOSEN BRICK Spyware
The UK’s National Cyber Security Centre (NCSC), the US Federal Bureau of Investigation and the Netherlands’ General Intelligence and Security Service (AIVD) have warned that Iranian state actors are targeting dissidents, activists and journalists, including…
NCSC - Iranian Hackers Target Dissidents With CHOSEN BRICK Malware
The UK National Cyber Security Centre (NCSC), the US Federal Bureau of Investigation and the Netherlands’ AIVD have warned that Iranian state cyber actors have used CHOSEN BRICK malware against individuals, including dissidents, activists and journalists, in…
NCSC - Protecting Tokens and Assertions from Forgery, Theft, and Misuse: Implementation Recommendations for Agencies and Cloud Service Providers
The document titled "Protecting Tokens and Assertions from Forgery, Theft, and Misuse" provides guidelines developed by the National Institute of Standards and Technology (NIST) and the Cybersecurity & Infrastructure Security Agency (CISA) for federal…
CISA - Attacker Exploits Marimo RCE to Reach SSH Bastion in Eight Seconds
The article discusses a recent security incident where a human attacker exploited a remote code execution (RCE) vulnerability in Marimo, gaining access to an SSH bastion in just eight seconds. This raises concerns about rapid exploitation of vulnerabilities…
The Hacker News - Hackers Hijack HBO Max’s Reddit Account to Push ClickFix Malware
Cybercriminals hijacked HBO Max’s verified Reddit account and used it to run 108 malicious adverts over about 48 hours, according to researchers at Hudson Rock. The adverts promoted fake AI tools, developer software and macOS utilities, using the account’s…
Malwarebytes - Revolut Reportedly Shared Biometric Data After Fake Government Request
Revolut was reportedly involved in a data incident in which someone requested customer information using what appeared to be a genuine government email address. The fintech supplied the data, although the report says there was no conventional hacking,…
DataBreaches - Missouri Hospital Diverts Trauma Patients After Network Outage
Cedar County Memorial Hospital in El Dorado Springs, Missouri, shut down its IT networks on 14 August after a disruption made its electronic health record system, patient portal and internet access unavailable. The outage affected the hospital and its…
DataBreaches - Revolut Confirms Data Breach After Government Email Impersonation
Revolut has disclosed a security incident in which an unauthorised third party obtained sensitive customer information by sending fraudulent requests from the email domain of a legitimate government agency. The company has not publicly detailed the technical…
DataBreaches - Perth School Cyber Attack Exposes Student and Family Records
St James Anglican School in Perth’s north has suffered a cyber attack involving unauthorised access to its computer systems. The school told parents that it had contained the incident and secured the affected systems, but attackers were able to access…
DataBreaches - Japan’s Digital Agency Breach Exposes Data on 240,000 People
Japan’s Digital Agency has disclosed a data breach affecting approximately 240,000 people. The incident was discovered in late June after attackers used a maintenance and operations employee’s account to access files in the agency’s Government Solution…
SecurityWeek - Why Testing Attack Chains Beats Focusing on Attack Surfaces
The article discusses the importance of focusing on attack chains rather than just attack surfaces in cybersecurity. It argues that traditional testing methods often fail to capture the full complexity of how attacks are structured. By examining the entire…
The Hacker News - Mass Scanning Exploits Vite Flaw to Steal Cloud Credentials
A mass-scanning campaign is exploiting a vulnerability in the Vite platform to extract cloud credentials from exposed development servers. The article details the nature of the security breach, emphasizing the risk of exposing sensitive data in cloud…
The Hacker News - Apple Fixes Over 200 Flaws Across iOS 27 and macOS Golden Gate
Apple has released updates addressing more than 200 vulnerabilities across its latest desktop and mobile operating systems. iOS 27 and iPadOS 27 fix about 126 flaws, including 20 affecting the kernel, while macOS Golden Gate 27 addresses 210 vulnerabilities,…
SecurityWeekCVE-2022-3437 - China-Linked Groups Exploited Chrome Patch Gap to Target NGOs
Two China-linked threat groups used the same Chrome and Windows exploit chain against non-governmental organisations (NGOs), according to Volexity. The activity began on 1 September 2026, when UTA0560 sent spear-phishing emails directing targets through a…
- Meta AI Probed a Child’s Identity and Resurfaced Deleted Photos
On 15 September 2026, Malwarebytes reported that Meta AI had generated invasive prompts about children after Kalie Robins posted a video of her young daughter on Facebook. The system suggested asking, “Who is the child passenger?” When Robins followed the…
Malwarebytes - Microsoft Drafts Rules to Stop AI Models Helping Cyberattacks
Microsoft AI has published a draft “Humanist AI Code of Conduct” for its MAI Models, setting limits on offensive cyber capabilities, autonomous agents and the handling of instructions from external content. Under its “Absolute Constraints”, models must not…
SecurityWeek - Hackers Hijack HBO Max’s Reddit Account to Push Mac Malware
Hackers compromised HBO Max’s verified Reddit account, _u/hbomax_, and used it to run a malvertising campaign called PasteSwitch. Over a 48-hour period, they published 108 malicious adverts across five lure groups, targeting both macOS and Windows users. The…
SecurityWeek - Fake Bitrefill Gift Card Sites Steal Crypto Through Search Results
Scammers are using search results to direct people looking for Bitrefill or its gift cards to counterfeit websites that imitate the legitimate company’s branding and checkout. Malwarebytes said it found a cluster of lookalike domains, while Bitrefill has…
Malwarebytes - Microsoft Races to Fix RDS Failures in Sixth Emergency Patch
Microsoft released an out-of-band update on 14 September 2026 to address problems introduced by its 8 September Patch Tuesday release, which contained fixes for 974 CVEs. The issues affected some environments using Remote Desktop Services (RDS), where…
Infosecurity - US Sanctions Disrupt Iranian Banks’ HTTPS Access as Certificates Fail
Iranian banks and other financial institutions have reportedly suffered widespread digital-certificate failures, disrupting access to their websites and online services. The article attributes the problem to US Office of Foreign Assets Control (OFAC)…
SecurityOnline - Telegram Desktop Flaw Let Attackers Steal Data from Chat Exports
Telegram Desktop contained a stored cross-site scripting (XSS) flaw in its HTML chat-export feature, according to researchers Denis and Aleksander Rostilov of ExPatch. A bot could create a message with a specially crafted inline keyboard and have it…
Security Affairs - Private Apple Hooks Let Third-Party AI Models Work Through Siri
Researchers analysing iOS 27 and macOS 27 code say Apple has included private interfaces that can support third-party Siri AI extensions, although these hooks are not available as public APIs. A developer demonstration reportedly used the interfaces to run…
SecurityOnline - HP BIOS Update Fixes Windows 11 KB5121003 Boot Failures
HP laptop users have reported boot failures after installing Windows 11 update KB5121003. According to user feedback cited by SecurityOnline, affected systems become stuck at the HP logo during the restart stage. Windows then enters repair, removes the…
SecurityOnline - Japan’s Digital Agency Exposes 246,000 Records in VPN Breach
Japan’s Digital Agency has disclosed a breach of its Government Solution Service (GSS), a shared IT platform used by 23 ministries and agencies. Attackers exploited a medium-severity vulnerability in a VPN device, for which a patch was already available, and…
Security Affairs - Googlebook Laptop Pre Orders Open as Android and ChromeOS Merge
Google has announced that pre-orders for its new Googlebook laptop line will open on 21 September 2026. The company describes Googlebook as a laptop platform for the artificial-intelligence era, combining Android, ChromeOS and Gemini AI services. Google will…
SecurityOnline - Codex Errors May Signal Temporary Account Restrictions, Not Capacity Limits
Codex users have reportedly been seeing repeated “Selected model is at capacity. Please try a different model” messages even when the chosen model has not reached its actual capacity. SecurityOnline claims the message may instead indicate that OpenAI has…
SecurityOnline
