News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 48 so far |
Mon 5 Oct· 63 articles
-
CISA Tightens Retention Bonus Rules as Staff Loss Risks Grow
The Cybersecurity and Infrastructure Security Agency (CISA) will continue offering the Cybersecurity Retention Incentive (CRI) to help retain skilled technical staff, but eligibility rules are being tightened. Under revised criteria that tie eligibility to…
DataBreaches -
MCP Flaws Let Attackers Cascade Malicious Prompts Between AI Agents
A new class of vulnerability exposed structural weaknesses in the Model Context Protocol (MCP), a standard used by AI agents to communicate within internal networks. In the past five months, Google and four other organisations have acknowledged flaws that…
-
ClingSTUN turns vulnerable IoT devices into proxy nodes using STUN servers
Fortinet’s FortiGuard Labs researchers have uncovered a Linux backdoor, dubbed ClingSTUN, that compromises IoT devices by exploiting at least 24 known vulnerabilities across a broad range of Internet-connected gear from vendors including Realtek, MVPower,…
-
rejetto hfs2 articles this day · SecurityWeek first
Hackers Exploit Rejetto HFS Flaw to Forge Admin Cookies and Run Code · Attackers Exploit Critical Rejetto HFS Flaw to Forge Admin Sessions
-
Hackers Exploit Rejetto HFS Flaw to Forge Admin Cookies and Run Code
Anthropic Mythos-assisted research has highlighted a critical flaw in Rejetto HFS, tracked as CVE-2026-61500, which is now being exploited in the wild. The vulnerability affects Rejetto HTTP File Server (HFS) 3.x and enables an authentication bypass followed…
-
Attackers Exploit Critical Rejetto HFS Flaw to Forge Admin Sessions
SecurityWeek reports a critical vulnerability in Rejetto HTTP File Server (HFS), tracked as CVE-2026-61500 with a CVSS score of 9.3. The flaw arises because HFS discloses outputs of its non-cryptographic session-cookie generator to unauthenticated clients…
-
-
Pwn2Own Ireland 2026 Opens in Cork With $300,000 Exploit Prizes
Pwn2Own Ireland 2026 has kicked off in Cork, with more than 60 entries from leading security researchers. The Zeroday Initiative (ZDI) has published the full schedule for the three-day event, noting that all times are Irish Standard Time (IST) and subject to…
thezdi.com -
Microsoft Patches Exchange Flaw That Exposes Colleagues’ Mailboxes
Microsoft has released out-of-band security updates for Microsoft Exchange Server to fix a high-severity vulnerability that could allow an authenticated attacker to escalate privileges and read other users’ mail within the same organisation. The flaw is…
-
China-Linked Hackers Court US AI Experts Before Stealing Credentials
Researchers from Proofpoint have identified a China-aligned threat actor, TA419, impersonating US policymakers to conduct AI policy-focused cyber-espionage. In July 2026, TA419 established seemingly legitimate professional relationships with AI policy…
Dark ReadingTA419 -
Google Pauses Open Source Bug Bounty Amid AI Report Flood
Google has paused submissions to its open source bug bounty programme, the OSS VRP, after a surge in AI-assisted and other automated reports that are largely invalid. The company says the pause is intended to curb the flood of speculative, duplicated, or…
Malwarebytes -
Apache Struts fixes four flaws, including remote code execution risk
The Apache Struts project has released fixes in Struts 7.4.0 and 6.12.0 that address four vulnerabilities. The most serious is CVE-2026-104711, an OGNL injection flaw that could enable remote code execution in apps using the legacy RESTful action mapper; the…
-
Hackers Claim to Have Stolen Health Data on 11 Million Colombians
Nueva EPS, Colombia’s largest regional health-promoting entity, is the subject of an alleged data incident that has drawn attention to the country’s health information handling. On 4 October, a user on a hacking forum claimed to have posted a database…
DataBreaches -
ClingSTUN Turns Unpatched IoT Devices Into Covert Proxy Nodes
FortiGuard Labs has tracked a Linux proxy backdoor dubbed ClingSTUN, which targets unpatched internet-facing IoT devices and uses legitimate public STUN servers to keep compromised systems reachable as remotely controlled proxy nodes. The campaign unfolded…
-
Google Pauses Open Source Bug Bounty After Invalid Report Surge
Google has paused product vulnerability submissions to its Open Source Software Vulnerability Reward Program (OSS VRP) after a surge of automated reports, most of which were invalid. The pause, announced on X on 1 October 2026, applies only to product…
SecurityWeek -
Hackers Exploit Citrix NetScaler and FortiMail Zero Days in Attacks
On 05 October 2026, The Hacker News reports ongoing exploitation of two high‑severity zero‑day flaws in enterprise products, highlighted as Threat of the Week. Citrix has disclosed that CVE‑2026‑88779, a memory overflow affecting NetScaler ADC and NetScaler…
The Hacker NewsPaperCut -
US Lawmakers Move to Curb License Plate Surveillance Networks
Two US lawmakers have introduced two privacy-focused bills aimed at automatic license plate reader (ALPR) networks, sparked by concerns that sprawling, interconnected cameras create detailed records of ordinary movement. The Stop Flock Abuse Act would…
Malwarebytes -
Linux Backdoors Masquerade as Email to Infiltrate Asian Telecoms
New stealth Linux backdoors have been disclosed targeting telecoms and network-edge appliances in South Korea and Taiwan, camouflaging their traffic as email and their processes as legitimate services. Rapid7’s October 2 briefing traces a BPFDoor variant and…
Infosecurity -
Hackers Expose CPR Numbers of 8.8 Million Danes Through Vendor Access
Hackers gained access to Denmark’s national population register through a third‑party company that has legal access to the registry, rather than breaking directly into government systems. The breach exposes names, addresses and CPR numbers for 8.8 million…
Security Affairs -
NetScaler ADC2 articles this day · Security Affairs first
Citrix warns attackers are exploiting a NetScaler zero day · CISA Flags Exploited Citrix NetScaler Flaw That Can Take Services Offline
-
Citrix warns attackers are exploiting a NetScaler zero day
Citrix has warned of targeted attacks against its NetScaler ADC and NetScaler Gateway via a new high-severity zero-day vulnerability, CVE-2026-88779, a memory buffer issue that can affect service availability under certain pre-conditions. The CVSS score is…
-
CISA Flags Exploited Citrix NetScaler Flaw That Can Take Services Offline
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Citrix NetScaler flaw to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability, tracked as CVE-2026-88779, is a memory overflow in Citrix NetScaler ADC and NetScaler…
-
-
AI Is Speeding Up Exploits, Forcing Defenders to Act Faster
AI-driven attacks are accelerating security risk, with attackers using automation and large language models to rapid-fire through vulnerabilities after disclosure. The article cites Black Hat USA 2026 discussions and a Dark Reading reader poll showing that…
Dark Reading -
ClingSTUN Linux Backdoor Turns Infected Devices into STUN Proxies
A newly discovered Linux backdoor, named ClingSTUN, converts infected hosts into proxies that abuse the Session Traversal Utilities for NAT (STUN) protocol. FortiGuard Labs reports that it uses a back‑connect proxy model, establishes persistence to survive…
SecurityWeek -
Cloudflare Unveils 46 Updates to Build a More Open, Agentic Internet
Cloudflare marked its 16th birthday with a Week of announcements aimed at opening up the Internet for developers, agents and creators. Over five days—from 28 September to 2 October 2026—the company outlined 46 new or updated offerings across open source,…
Cloudflare -
Cloudflare’s 750 Interns Help Ship Products as AI Speeds Their Work
Cloudflare marks a year since launching its 1.1.1[.]1 interns programme and reports notable progress towards its target of 1,111 interns in 2026. To date, the company has hosted 750 internships across 48 teams in nine offices, including Austin, San…
Cloudflare -
Malicious SubQuery npm Release Steals Credentials and Opens Remote Shells
On 5 October 2026, StepSecurity flagged @subql/common@5.8.3 on npm as suspicious and confirmed a hidden payload that harvests credentials and enables remote shell access. The payload triggers during installation and on import, targeting developer…
StepSecurity -
Social Engineering and Ransomware Expose Data of 265,000 Patients
Clover Health Investments, based in Jersey City, New Jersey, disclosed in July that attackers using social engineering compromised three non-managerial health plan employee accounts, leading to the theft of both personally identifiable information (PII) and…
SecurityWeek -
Hackers Breached Oil Supertanker’s Propulsion System Off Texas Coast
FBI and US Coast Guard investigators have found evidence that hackers accessed the propulsion system of an oil supertanker as it approached the Texas coast this summer. The vessel, the VL Prosperity, was fully laden and bound for Galveston when the breach…
DataBreaches -
Daiwa Securities Says Vendor Breach May Expose 110,000 Clients’ Data
Daiwa Securities Group, Japan’s second-largest brokerage, said that information on as many as 110,000 clients may have been leaked in a breach at an external vendor. The incident was triggered by unauthorised access to the vendor’s servers, according to a…
DataBreaches -
Ransomware Gang Threatens to Leak Data from South African Insurers
The ransomware-as-a-service group The Gentlemen has threatened to leak data belonging to South African insurers LegalWise and Samwumed, suggesting more local firms may be affected. The report notes that The Gentlemen is highly active globally, accounting for…
DataBreachesThe Gentlemen -
Credential sprawl is outpacing security teams’ ability to see it
The Credential Layer Is Expanding Faster Than Security Teams Can See It reviews how credentials now sit across humans, systems, and AI, and why visibility into this “credential layer” is critical. GitGuardian’s three-part security approach—Detect, Remediate,…
-
Cling botnet exploits Realtek flaw and hides C2 in STUN traffic
Threat researchers have observed renewed attempts to exploit a now-patched critical vulnerability in Realtek Jungle SDK to deploy a botnet known as Cling. Nozomi Networks notes that Cling repurposes STUN (Session Traversal Utilities for NAT) traffic as a…
-
US Senate Passes Bill to Strengthen Healthcare Against Ransomware
The US Senate has passed the bipartisan Health Care Cybersecurity and Resilience Act, introduced by Senators Bill Cassidy, Maggie Hassan, Jon Cornyn and Mark Warner. Having cleared the chamber by unanimous consent, the bill now moves to the House of…
SecurityWeek -
Apple Tightens macOS Privacy Controls Over AI Agent Risks
Apple has said it will tighten macOS Full Disk Access (FDA) controls amid security concerns related to AI agents that operate with elevated system access. The company warns that some developers use FDA in ways that can reveal user data—files, mail, messages…
-
Google Pauses Open Source Bug Bounty Programme Until 2027
Google has halted its Open Source Vulnerability Rewards Program (OSS VRP) until 2027, after noting a surge in automated submissions that are largely invalid. The pause was announced via a social media post dated 1 October 2026. The move aims to curb the…
Infosecurity -
Google locks down Android against USB attacks and app abuse
Google has tightened its Android Advanced Protection framework, introducing a unified mode that limits USB data transmission, blocks access to accessibility features in unsafe contexts, disables WebGPU within Chrome, and securely archives security logs for…
SecurityOnline -
Jordan Detains ShinyHunters Suspect Said to Be Helping FBI
Authorities in Jordan have detained a man linked to the ShinyHunters collective, Saif al-Din Khader, who is believed to be cooperating with the FBI. Reportedly, Khader is assisting investigators by providing access to devices and messages and helping to…
SecurityOnlineShinyHunters -
UK Schools Recover Faster From Cyber Incidents Despite Persistent Gaps
UK schools are recovering from cyber incidents more quickly, according to new Ofqual figures released on 1 October in line with Cyber Security Awareness Month. The share of schools experiencing a cyber incident has fallen from 34% in 2023-24 to 29% in…
Infosecurity -
Perforce P4 Search Flaws Let Attackers Seize Unprotected Services
Perforce has released fixes for six vulnerabilities in P4 Search, all part of the 2026.4.2 release. The standout flaw, CVE-2026-100103, scores 10.0 on CVSSv4 and involves an authentication token that resets to a publicly documented default value in P4 Search…
-
Microsoft Releases Windows 11 26H2 With Extended Support Lifecycles
Microsoft has released the Windows 11 2026 Update, known as version 26H2. For most compatible PCs, the update requires no full reinstall; a small enablement package simply switches on components already present in earlier updates, usually with a single…
SecurityOnline -
MI5 Warns UK Universities Over Chinese Espionage Research Funding
MI5 has issued a formal warning to UK universities about Chinese funding linked to the China General Technology Research Institute (CGTRI), also known as CAGT in some translations. The agency states that CGTRI exists largely to fund academic research that…
Security AffairsMSS -
Danish CPR Data Misused to Expose Personal Details of 8.8 Million
Unknown actors misused a private Danish company’s lawful access to the national CPR register to pull personal data for about 8.8 million people. The Central Person Register (CPR) holds roughly 11 million records, including current residents, deceased…
SecurityOnline
