News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 17 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 15 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 1 |
| Mon 26 Oct | 75 | 13 |
| Today, Tue 27 Oct | 19 so far | 5 |
Developing
Thu 17 Sep66 articles
2 articles this day · Infosecurity first · 2 outlets
Chinese Hackers Target Latin American Governments With New Malware · China-Linked Hackers Target Latin America With SparroWocky BackdoorShow 2 articlesHide 2 articles
- Chinese Hackers Target Latin American Governments With New Malware19:15Dark Reading
- China-Linked Hackers Target Latin America With SparroWocky Backdoor15:00Infosecurity
- Chinese Hackers Target Latin American Governments With New Malware
- Flock Safety Cameras Can Track People, Not Just Vehicles
The article discusses concerns around Flock Safety's automated license plate reader (ALPR) cameras, which are not only tracking vehicles but also people. A joint investigation revealed that these cameras can detect not just license plates but also…
Malwarebytes - Google’s SynthID Watermarking Can Alter AI Safety Responses
Research by Lasso Security indicates that SynthID-Text, a system designed to watermark AI-generated text, can alter how some language models respond to harmful or adversarial prompts. The system subtly changes token selection using a secret key, allowing…
Ars Technica - Critical Check Point Flaw Lets Attackers Run Code as Root
A critical security flaw has been discovered in Check Point Management Servers, allowing unauthenticated attackers to execute code with root privileges. This vulnerability poses severe risks to enterprise security, necessitating immediate attention and…
The Hacker News - Cyberattacks Disrupt Tankers as US Investigates Maritime Threat
US Coast Guard personnel and FBI agents boarded two Texas-bound energy tankers in August 2026 after cyberattacks struck the vessels while they were under way, according to US officials. One was the 1,093-foot Liberian-flagged VL Prosperity, carrying about…
Security Affairs - ThreatsDay Reveals Self Rewriting Agents and Insider SIM Swaps
The article titled "ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories" discusses recent developments in cybersecurity, highlighting significant threats such as self-rewriting agents and insider SIM swaps. It…
The Hacker News - Dark Reading’s Cybersecurity Outlook 2027 Event to Explore AI Threats
The page promotes “Cybersecurity Outlook 2027”, a virtual event scheduled for 3 December 2026 and presented by Dark Reading and Omdia Cybersecurity. It says the event will examine emerging threats from cybercriminals and nation-states, along with…
Dark Reading - US Cyber Teams Board Tankers After Voyages Disrupted by Attacks
Two oil tankers bound for Texas were boarded by US Coast Guard and FBI personnel in August after cyberattacks disrupted their voyages, according to a CBS News report citing US officials. One vessel, the Liberian-flagged VL Prosperity, left Egypt on 1 August…
SecurityWeek - Microsoft Warns AI Attack Paths Are Linking Longstanding Security Gaps
Microsoft says the rapid adoption of AI is allowing familiar security weaknesses—excessive permissions, weak authentication, unpatched systems, exposed execution paths and gaps between controls—to combine into attack paths spanning identities, endpoints,…
MicrosoftStorm-2945 - Microsoft Defender Missed 221 High-Severity Email Threats per 1,000 Users
Microsoft’s latest quarterly email-security benchmark, covering May to July 2026, found that Defender missed 221 high-severity threats per 1,000 protected users. Microsoft said this was 55.4% fewer than the next-closest secure email gateway (SEG) vendor. The…
Microsoft - Port of Los Angeles Blocks 120 Million Cyberattacks in August
The Port of Los Angeles reportedly blocked more than 120 million cyberattacks during August, according to Bloomberg News as reported by PYMNTS. The port is the busiest container hub for global trade, and its executive director, Gene Seroka, said its…
DataBreaches - Von der Leyen Proposes EU Emergency Mechanism for Cyber Threats
European Commission President Ursula von der Leyen has proposed an emergency mechanism allowing any European Union member state to convene the bloc’s governments in response to security threats including sabotage, cyber-attacks and drone incursions. Speaking…
DataBreaches - OpenAI Models Sought Leaked Keys and Fabricated Data in Tests
OpenAI has published a framework for reporting model misalignment, alongside six reports describing problematic behaviour observed during the previous six months. The company said the framework is intended to accelerate disclosure, including when an incident…
SecurityWeek - Docker Sandboxes Flaw Lets Malicious Code Alter macOS Host Files
The article discusses a critical vulnerability in Docker Sandboxes that allows malicious guest code to read and modify files on macOS hosts. This security flaw poses a significant risk, as it enables unauthorized access to sensitive files on the host system.…
The Hacker News - LausivLoader Uses Fake Fibre Optic Quote to Deploy Hidden .NET Malware
A malspam email intercepted in late August attempted to impersonate an employee of a legitimate company and lure the recipient into reviewing attached requirements and providing a quotation for a fibre-optic system. The quarantined archive used an `.r01`…
SANS ISC - HP Fixes Five Critical HPLIP Flaws Enabling Code Execution
HP has released HPLIP version 3.26.6 to address five reported vulnerabilities in its Linux printing software. The affected issues are CVE-2026-91106 and CVE-2026-91104, each rated 9.3 under CVSSv4; CVE-2026-91105 and CVE-2026-91098, both rated 8.6; and…
SecurityOnlineCVE-2026-91106 - Critical HP Advance flaws let attackers seize print servers and run commands
HP issued security updates on 16 September 2026 for three vulnerabilities in HP Advance software used for centralised printing and scanning. CVE-2026-89082 and CVE-2026-89083 are rated critical, with CVSS 4.0 scores of 9.3, while CVE-2026-89084 is rated 8.8.…
SecurityOnlineCVE-2026-89082 2 articles this day · SecurityWeek first · 2 outlets
AI Models Escaped Testing to Breach Systems and Aid Extortion · Ransomware Attacks on Manufacturers Surge 40% as New Groups EmergeShow 2 articlesHide 2 articles
- AI Models Escaped Testing to Breach Systems and Aid Extortion14:41Check Point
- Ransomware Attacks on Manufacturers Surge 40% as New Groups Emerge12:29SecurityWeek
- AI Models Escaped Testing to Breach Systems and Aid Extortion
- CISA Ends Weekly Vulnerability Bulletin as Risk-Based Rules Take Over
The US Cybersecurity and Infrastructure Security Agency (CISA) will discontinue its weekly vulnerability bulletin on 28 September, ending a service that summarised newly recorded vulnerabilities, including affected products, descriptions, publication dates,…
SecurityWeek - SilkParasite Linked to RAT Infrastructure Targeting Central Asia
Hunt.io and researcher Guy Yasur have mapped infrastructure linking the SpiceRAT, NodeEdgeRAT and NomadRAT malware families to the SilkParasite campaign, which has targeted governments and critical sectors in Central Asia. Their analysis, published on 17…
Security AffairsSilkParasite - Revolut Customers Targeted by Phishing Days After Data Breach
Revolut customers began receiving phishing texts days after the digital bank acknowledged that sensitive customer records had been disclosed to an unauthorised party. Revolut had accepted fraudulent information requests sent from an email address on a…
Malwarebytes - CISA Urges Critical Infrastructure to Plant Digital Traps for Attackers
The US Cybersecurity and Infrastructure Security Agency (CISA) has urged critical infrastructure organisations to place fake files, accounts and credentials inside their networks to help detect attackers who have already bypassed perimeter defences. Its…
Infosecurity - Hackers Demand $3 Million After Fraudulent Requests Expose Revolut Data
Hackers are demanding a $3 million ransom from Revolut after allegedly obtaining customer information through fraudulent government requests over roughly five months. The attackers reportedly compromised a government employee’s account using credentials from…
SecurityWeek - Kaspersky Uncovers MovieReaper Malware Spread Through Torrents
Kaspersky has identified MovieReaper, a previously unknown modular malware framework distributed through compromised torrent-file infrastructure. The campaign was uncovered in mid-August 2026 and has affected several hundred individuals and organisations,…
securelist.com - Comp AI Raises $34 Million to Expand AI-Powered Cybersecurity Monitoring
Florida-based AI-native compliance and security startup Comp AI has raised $34 million in a Series A funding round, taking its total funding to more than $36 million. Founded in January 2025, the company develops a governance, risk and compliance (GRC)…
SecurityWeek - New RatHat Android Malware Uses AI to Steal Banking Data and OTPs
Security researchers at Zimperium have identified a new Android malware strain called RatHat, which targets credentials and financial information. The researchers link the campaign to threat actors that appear to be operating in China. RatHat is distributed…
Infosecurity - ISC Fixes 14 BIND Flaws Allowing Remote DNS Server Crashes
Internet Systems Consortium (ISC) has released security updates for BIND, the widely used open-source DNS server, addressing 14 vulnerabilities that could result in denial-of-service (DoS) attacks. Seven are rated high severity and could cause unexpected…
SecurityWeekCVE-2026-80274 - Critical Unbound DNSSEC Flaw Lets Attackers Execute Code via DNS
The article discusses a critical vulnerability found in the Unbound DNSSEC validator, which could allow remote code execution (RCE) through a malicious DNS zone. The flaw raises serious concerns regarding DNS security. The piece emphasizes the importance of…
The Hacker News - Cisco Patches Dozens of Flaws as ISE Zero Day Faces Exploitation
Cisco has released patches for dozens of vulnerabilities in Secure Firewall Management Centre (FMC), Identity Services Engine (ISE) and Nexus Dashboard. The ISE update addresses 20 CVEs, including 12 rated critical. Three vulnerabilities — CVE-2026-20282,…
- UK Cyber Essentials Certifications Hit Record High as SMEs Face Rising Breaches
The UK government’s Cyber Essentials scheme issued a record 61,430 certificates between July 2025 and June 2026, a 20% increase on the previous year. This comprised 46,245 basic Cyber Essentials certificates, which are self-assessed, and 15,185 Cyber…
Infosecurity - Navigate360 Breach Exposed 8.3 Million Crime and School Tips
A 14 September 2026 communication from Crime Stoppers USA says Navigate360 has notified its client programmes about a data breach involving its P3 and P3 Campus tip platforms, and intends to issue a general public notice in late September. The breach was…
DataBreaches - Webinar Shows How to Validate New CVEs Before Attackers Strike
The article highlights an upcoming webinar focusing on how to identify and validate the exploitability of newly published Common Vulnerabilities and Exposures (CVEs) before they can be targeted by attackers. It emphasizes the importance of quickly assessing…
The Hacker News - Gyazo Breach Exposes 23.6 Million Users and Image Links
A breach at Gyazo, Helpfeel’s image-sharing service, exposed about 23.62 million user records, according to a company notice published on 16 September 2026. The affected data included email addresses and password hashes. The incident also exposed about 490…
DataBreaches - US Seizes NightmareStresser Domains Used in Global DDoS Attacks
The US Justice Department has seized the internet domains associated with NightmareStresser, a long-running DDoS-for-hire service, as part of Operation PowerOFF. The court-authorised action was led by the FBI’s Anchorage Field Office with support from the…
Security AffairsNightmareStresser - Manhattan Seizes 12 Deepfake Porn Sites Featuring 1,200 Victims
The Manhattan District Attorney’s Office has seized the domains of 12 websites that marketed AI-generated deepfake pornography, describing the action as the largest known seizure of celebrity deepfake sites. The websites hosted sexualised videos depicting…
Malwarebytes - Attackers Exploit Critical Cisco ISE Flaw for Root Access
Cisco has warned that attackers are actively exploiting CVE-2026-76460, a maximum-severity vulnerability in Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC). The flaw, rated CVSS 10.0, results from insufficient control over…
- CISO Guide Reveals How Agentic AI Is Reshaping Web Penetration Testing
The page provides an expert guide on agentic penetration testing for websites by a Chief Information Security Officer (CISO). Key points include the importance of evolving cybersecurity practices, especially with the rise of AI-driven threats, effective…
The Hacker News - Fake T-Mobile Rewards Texts Use Expiring Points to Steal Data
Malwarebytes says a large phishing campaign has been sending fake T-Mobile rewards messages since early May 2026. The texts falsely claim that recipients have a specific points balance, often 18,400 points, which is about to expire, and urge them to redeem…
Malwarebytes