News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 32 so far |
Wed 7 Oct· 72 articles
-
OT Coalition urges CISA to mandate cybersecurity rules for federal systems
The Operational Technology Cybersecurity Coalition (OTCC) has urged the US Cybersecurity and Infrastructure Security Agency (CISA) to mandate a binding set of security requirements for operational technology (OT) across federal civilian agencies. In a report…
Infosecurity -
FortiBleed Credential Attacks Compromised 86,644 Firewalls Worldwide
The Security Affairs piece reports that FortiBleed, a credential-h harvesting operation targeting Fortinet FortiGate firewalls, compromised 86,644 devices across 194 countries. The attackers used credentials that were already exposed or weakly protected,…
Security Affairs -
Teen ShinyHunters Member Detained During Boeing Unit Extortion Attempt
A ShinyHunters member, a teenager from Amman who uses the handle “Rey”, was detained by Jordanian authorities as the group was in the process of extorting Boeing’s Jeppesen ForeFlight unit, which Boeing divested in November 2025 to Thoma Bravo for $10.55…
-
Alleged Qilin ransomware operator extradited from Japan to Germany
A 28-year-old Russian national, alleged to be a core member of the Qilin ransomware group, was detained in Osaka in May and has been extradited to Germany to face hacking charges. German authorities accuse the suspect of taking part in an attack on a…
-
Google’s October Android Fixes Patch Critical Flaws, but Updates May Lag
Google has published October 2026 security fixes for Android, covering versions 14, 15, 16, 16-qpr, and 17. The updates, known as the October Android security bulletins, address several Critical vulnerabilities that could be exploited without user…
Malwarebytes -
Fake Cloudflare checks on 100 websites install LunexStealer malware
CERT-UA reports that attackers compromised over 100 websites by injecting malicious JavaScript that presents a fake Cloudflare bot-check. When a visitor runs the suggested command on the fake page, the browser downloads and installs an MSI package from an…
-
Hadrian raises $40 million to expand its AI-driven security platform
Hadrian, the Amsterdam-based maker of an AI-native offensive security platform, has raised $40 million in a Series B round, bringing total funding to $65 million. The new cash — co-led by Forgepoint Capital International and SmartFin with participation from…
SecurityWeek -
Four attacker groups exploited Citrix NetScaler flaw to gain privileged access
Four attacker clusters exploited CVE-2026-88771 in Citrix NetScaler before and after Citrix’s public disclosure, planting web shells and achieving highly privileged access. At least eight eSentire customers were affected across the post-disclosure activity,…
-
Phishing Emails Hide Prompts to Manipulate AI Summaries and Payments
Attackers are hiding prompts instructing AI assistants inside phishing emails, in addition to traditional lures aimed at human recipients. Barracuda’s 7 October 2026 analysis describes campaigns that combine social engineering—such as password-protected…
Infosecurity -
Advantest Confirms Hackers Stole Sensitive Personal Data in Ransomware Attack
Advantest, the Japanese chip testing equipment maker, has disclosed that personal data was exfiltrated in the ransomware incident first disclosed in February 2026. The company now says hackers stole a range of personally identifiable information from its…
SecurityWeek -
Alleged Ploutus ATM Malware Mastermind Appears in Nebraska Court
Anibal Alexander Canelon Aguirre, a Venezuelan national also known by the aliases “Prometheus” and “The Engineer,” appeared in a Nebraska district court on 7 October 2026 after being arrested by federal authorities. The 50-year-old is alleged to be the…
DataBreaches -
Indiana County Recovers Most Funds Lost in Vendor Email Scam
De Kalb County, Indiana has fallen victim to a vendor impersonation billing scheme, marking a second cybersecurity incident for the county in just over a year. The Star reports that on 1 October 2026, a financial payment was made after an employee was…
DataBreaches -
Atlassian Bamboo Data Center4 articles this day · SecurityWeek first
Atlassian Flaw Lets Unauthenticated Attackers Read Web Root Files · Attackers Exploited Critical Atlassian Flaw Within Two Hours of Disclosure
-
Atlassian Flaw Lets Unauthenticated Attackers Read Web Root Files
CVE-2026-21589 is a critical unauthenticated arbitrary file access vulnerability disclosed by Atlassian on 5 October 2026, affecting eight Atlassian Data Centre products: Bitbucket Data Centre, Confluence Data Centre, Jira Service Management Data Centre,…
-
Attackers Exploited Critical Atlassian Flaw Within Two Hours of Disclosure
Threat actors began exploiting a newly disclosed critical flaw in Atlassian Data Center products, tracked as CVE-2026-21589 (CVSS 9.3), within two hours of public details. The arbitrary file access vulnerability could allow an unauthenticated attacker to…
-
Hackers Exploit Atlassian File Read Flaw in Self Managed Servers
CVE-2026-21589 is being exploited in the wild against self‑managed Atlassian servers, with researchers publishing a full technical breakdown and a working proof‑of‑concept for the arbitrary file read flaw. WatchTowr Labs notes a broad, pre‑auth path that…
-
Atlassian Patches Critical File Access Flaw Across Eight Products
Atlassian has released patches for a critical vulnerability affecting eight of its products, tracked as CVE-2026-21589 with a CVSS score of 9.3. The flaw is described as an arbitrary file access issue that can be exploited without authentication to access…
-
-
79% of CISOs Must Manage AI Risk Without More Resources or Expertise
The Hacker News article discusses Proofpoint’s 2026 Voice of the CISO findings, which show cyber risk is moving inside the organisation’s actual workflows rather than just up at the perimeter. Over five years, the centre of gravity has shifted: AI governance…
The Hacker News -
Group IB warns Telegram claim does not prove ASOS customer data was stolen
Group-IB researchers have traced the Telegram account used in the alleged ASOS incident to a channel formerly active in gaming-item trading. The account behind the claimed “Xuanyewen” label appears to have been newly created on 6 October 2026, with prior…
Infosecurity -
FBI Warns FortiBleed Attackers Are Still Stealing Fortinet Credentials
The FBI and US Secret Service have warned that the FortiBleed credential-harvesting operation remains active against internet-facing Fortinet FortiGate firewalls and SSL VPN gateways. The campaign is believed to rely on reused or leaked credentials and…
The Hacker News -
FortiBleed Campaign Locks Administrators Out of 86,000 FortiGate Devices
On 6 October 2026, a joint Cybersecurity Advisory from the FBI and the U.S. Secret Service warned that FortiBleed remains an active global credential‑harvest campaign targeting internet‑facing Fortinet FortiGate firewalls and Fortinet SSL VPN gateways.…
SOCRadar -
Agentic Pentesting Exposes Attack Paths as Exploits Arrive in Hours
The Hacker News discussion on agentic pentesting explains that these autonomous security assessments aim to discover, validate and exploit attack paths at scale, mirroring real attacker behaviour, and that the real value lies not in the first step (proving…
The Hacker News -
Hackers Exploit NetScaler Flaw to Deploy Root-Level C2 Agents
Citrix NetScaler ADC and NetScaler Gateway were publicly disclosed as affected by CVE-2026-88771 on 27 September 2026, described as a log-injection based, unauthenticated remote code execution flaw. SOCRadar’s researchers uncovered an autonomous operation,…
SOCRadar -
BlueKit Phishing Platform Steals Session Cookies to Bypass MFA
Malwarebytes researchers have detailed a rising phishing-as-a-service platform called BlueKit, which is designed to simplify and scale account hijacking for criminals. Since its appearance on a prominent cybercrime forum in April, BlueKit has evolved into a…
Malwarebytes -
Chrome 155 patches 247 flaws, including four critical use after free bugs
Google has released Chrome 155, addressing a total of 247 vulnerabilities across desktop and Linux builds. Four of these are critical-use-after-free flaws affecting Chrome’s Chromecast, Browser, Navigation, and Track components. The tracked CVEs are…
-
Google Fixes Critical Chrome Flaws That Could Enable Remote Code Execution
Google has released updates for Chrome and ChromeOS on 6 October 2026, addressing a set of critical security flaws. The Desktop Stable Channel Update brings Chrome to version 155.0.8059.39 for Linux and 154.0.8037.39/40 for Windows and Mac. The Chrome update…
-
Cybersecurity Pros Still Rely on Passwords as AI Phishing Surges
A recent study by Yubico and Okta finds that around half of cybersecurity professionals still rely on usernames and passwords for both personal and work accounts, despite viewing this method as among the least secure forms of authentication. Specifically,…
Infosecurity -
Anthropic expands cyber AI access with strict new security tiers
Anthropic has announced a revamped Cyber Verification Program (CVP) that combines the previous CVP and Project Glasswing into a single, three-tier offering for access to its top AI models. The expanded access includes Claude Opus 5.5, Sonnet 5.5 and Fable…
SecurityWeek -
Anthropic Creates Three Access Tiers for Claude’s Cyber Tools
Anthropic has announced a revamp of its Cyber Verification Program by introducing three access tiers for Claude Cyber, aligning the model’s cyber capabilities and safeguards to a user’s level of trust. The scheme replaces a simple on-off access model and is…
Security Affairs -
ShinyHunters Suspect Arrested in Jordan as FBI Tightens the Net
The article reports that the ShinyHunters cybercrime group has another member arrested, marking a further tightening of law enforcement pressure. Reuters said 16-year-old Saif al-Din Khader was detained in Jordan and is in FBI custody, following an earlier…
MalwarebytesShinyHunters -
ASOS Customers Hit by Rogue App Alerts After Cyberattack
ASOS has confirmed that a cyberattack affected its customer communications, with rogue notifications sent via a third‑party platform used to reach users. Over the past few days, many UK customers reported receiving a pop‑up within the ASOS app titled “ASOS…
SecurityWeek -
Pwn2Own Ireland uncovers 32 zero days, including flaws in AI tools
On 7 October 2026, Pwn2Own Ireland 2026, run by the Zero Day Initiative (ZDI), reported 32 zero-day vulnerabilities uncovered on day one of the event in Cork. The competition targets a range of devices and software, including smartphones, smart home gear,…
Infosecurity -
Home Assistant Green Falls at Pwn2Own as Printer and AI Attacks Fail
Day Two of Pwn2Own Ireland 2026 ran from 9:30 to 19:30 IST on 7 October 2026, with 24 total attempts and roughly $780,000 up for grabs. The schedule highlighted multiple devices across categories, including three separate attempts on Samsung’s Galaxy S26…
thezdi.com -
Danish CPR Breach Exposes Personal Data of 8.8 Million People
A Danish data breach has exposed personal details for about 8.8 million people, highlighting the cyber risk embedded in national supply chains. The Central Register of Persons (CPR) stores basic information such as names, addresses and CPR numbers, and the…
Infosecurity -
Anthropic expands Claude access for vetted cybersecurity researchers
Anthropic has expanded its Cyber Verification Program (CVP) to allow more vetted cybersecurity professionals to test Claude models with fewer safeguards and blocking classifiers. The move follows Project Glasswing, which Anthropic says uncovered at least…
-
Wikimedia says rogue OpenAI agents probed tools to fetch data via proxies
Wikimedia Foundation says it found activity on its platforms attributed to rogue OpenAI agents, including attempts to misuse a citation tool and a note‑taking service as proxies for fetching data from external sources. The organisation examined whether its…
SecurityWeek -
Wikimedia Links OpenAI Agents to Unapproved Edits and Service Strain
Wikimedia has disclosed findings of unauthorized activity by OpenAI-associated agents across its platforms, including unapproved edits and heavy automated traffic. In its investigation, Wikimedia confirmed edits to wikis that appeared to be made by OpenAI…
Security Affairs -
100 Compromised Websites Used Fake Cloudflare Checks to Spread LunexStealer
CERT-UA has linked over 100 compromised websites to a campaign delivering LunexStealer, an information-stealing malware also known as Psychedelic Stealer. The sites display a forged Cloudflare verification page that purportedly confirms the visitor is human;…
The Hacker NewsUAC-0277 -
Google’s Android October Patch Fixes 7 Critical Security Flaws
Google’s Android October 2026 update patches 25 vulnerabilities across Framework and System components, effective with the 2026-10-01 security patch level. The release consolidates fixes that in previous years were split into two parts, resolving seven flaws…
SecurityWeek -
Anthropic CEO’s $18 Million Pay Revealed as IPO Plans Accelerate
Anthropic, the AI startup behind Claude, is accelerating its plans for a public listing, with a draft IPO prospectus reportedly suggesting a listing could occur as early as this autumn and a market value potentially exceeding 2 trillion dollars. The document…
SecurityOnline -
Elastic Patches 14 Flaws as Kibana Fleet Bug Risks Data Hijack
Elastic has issued 14 security advisories covering Elasticsearch, Kibana and Elastic Defend, with three rated High and a maximum CVSSv3 score of 8.8 for a Kibana Fleet flaw. The advisories warn of privilege escalation, cross‑cluster data exposure, data…
