News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 22 so far |
Thu 8 Oct· 75 articles
-
Japan’s Data Leaks Surge as Hackers Exploit Apps and Metabase
Attackers in Japan have been chaining personal data leaks by abusing mobile-app APIs and exploiting known flaws in business systems, according to a 8 October 2026 alert from JPCERT/CC. The incidents, described as limited and fragmentary by the CERT, span…
-
Cisco Patches 35 Flaws, Including Critical NX-OS Bugs Enabling Root Access
Cisco has released patches for 35 vulnerabilities across its product lines, with more than a dozen rated critical. The update covers Meraki, License On-Prem, NX-OS, Application Policy Infrastructure Controller (APIC) and Finesse, among others. The most…
-
UAC-00992 articles this day · Infosecurity first
Russia Linked to ASHVEIN Malware Targeting Ukrainian Government Staff · Russia Aligned UAC-0099 Refines MATCHBOIL Malware to Target Ukraine
2 outlets-
Russia Linked to ASHVEIN Malware Targeting Ukrainian Government Staff
UAC-0099, a Russia-aligned threat actor, has been linked to a .NET infostealer and remote access trojan named ASHVEIN (internal name TelemetryBrowser). TrendAI attributes current activity to Ukrainian government personnel, part of the Earth Sirrush cluster.…
The Hacker News -
Russia Aligned UAC-0099 Refines MATCHBOIL Malware to Target Ukraine
A Russia-aligned cyber espionage group known as UAC-0099 has been steadily evolving its MATCHBOIL downloader over a two-year period, according to ESET research published on 8 October 2026. The analysis covers MATCHBOIL samples observed between April 2024 and…
Infosecurity
-
-
IBM Patches 23 DataPower Gateway Flaws, Including Four Critical Bugs
IBM has released patches for 23 DataPower Gateway vulnerabilities across two IBM security bulletins, including four rated as Critical. The flaws span remote code execution, out-of-bounds writes and a cross-site scripting issue in the Web UI. The most severe…
-
Security Awareness Training Falls Short as Social Engineering Evolves
Security awareness training isn’t dead, but its value is debated. The piece surveys empirical hints that training’s benefits may be limited as successful attacks continue to rise, and notes a spectrum of opinions on whether awareness programmes help. The…
SecurityWeek -
DNS hijacks of three country domains enabled unauthorised HTTPS certificates
Attacker activity targeted three country-code top-level domain registries, hijacking the namespaces for .gh (Ghana), .sl (Sierra Leone) and .as (American Samoa). By altering authoritative DNS records, the attackers created conditions whereby HTTPS…
Infosecurity -
AI Pentesting Tool ARTEX Used to Steal Data from South Korean Firms
Cybersecurity researchers have disclosed a targeted campaign against South Korean financial organisations that leveraged an AI pentesting tool called ARTEX to facilitate data theft. The activity, observed from late September to early October 2026, involved…
The Hacker News -
Atlassian Bamboo Data Center2 articles this day · Infosecurity first
Attackers Target Atlassian Flaw Hours After PoC Details Emerge · Hackers Exploit Critical Atlassian Flaw to Steal Sensitive Files
-
Attackers Target Atlassian Flaw Hours After PoC Details Emerge
Threat actors began targeting CVE-2026-21589, a critical pre-authentication vulnerability in Atlassian’s self-hosted Data Center products, within hours of its PoC details going public. Atlassian disclosed the flaw on 5 October, rating it 9.3 on the CVSS…
-
Hackers Exploit Critical Atlassian Flaw to Steal Sensitive Files
A critical vulnerability in Atlassian Data Center products, tracked as CVE-2026-21589, is reportedly being exploited in the wild. Atlassian’s advisory describes it as an arbitrary file access flaw with a CVSS score of 9.3, affecting eight Data Center…
-
-
Ransomware recovery boss accused of hiding payments and overcharging clients
Zohar Pinhasi, the Florida-based owner of ransomware remediation company MonsterCloud, has been charged by federal prosecutors with wire fraud and conspiracy. The indictment alleges that, behind clients’ backs, Pinhasi paid attackers’ decryption ransoms…
Security Affairs -
ASOS Confirms Customer Data Breach After Employee Impersonation Attack
ASOS has confirmed a data breach affecting customer personal data, disclosed in an email to customers on 8 October 2026. The retailer said the attacker gained access by impersonating a trusted contact to obtain login credentials for an employee account,…
Infosecurity -
Cloudflare Redesigns Radar to Make Global Internet Trends Easier to Explore
Radar, Cloudflare’s real‑time view of global Internet trends, has been redesigned to balance technical depth with usability and to broaden its audience beyond expert users. The update responds to feedback that the previous landing page, which used a dense…
Cloudflare -
Preinstalled Android malware turns low-cost phones into ad fraud proxies
Bitdefender researchers say a malware campaign they call Midnight Mimosa is preinstalled in the firmware of some low-cost, multi-brand Android devices built on MediaTek platforms. The malicious system app is present before a phone is first switched on, is…
bitdefender.com -
HAFNIUM2 articles this day · Security Affairs first
US Offers $10 Million Reward for Suspect in Microsoft Exchange Attacks · US Offers $10 Million Reward for Alleged HAFNIUM Campaign Director
2 outlets-
US Offers $10 Million Reward for Suspect in Microsoft Exchange Attacks
The United States has announced a reward of up to $10 million for information leading to the capture of Zhang Yu, a Chinese national accused of involvement in the Hafnium cyber campaign against Microsoft Exchange servers. Zhang is charged alongside Xu Zewei,…
SecurityWeek -
US Offers $10 Million Reward for Alleged HAFNIUM Campaign Director
The U.S. State Department has announced a reward of up to $10 million for information leading to the arrest of Zhang Yu, a director at Shanghai Firetech Information Science and Technology. He is accused of playing a central role in the HAFNIUM campaign, the…
Security Affairs
-
-
SonicWall and Splunk Patch Flaws That Could Enable Attacks
SonicWall and Splunk have issued patches for a set of critical- and high-severity vulnerabilities across their products, including flaws that could allow pre-emptive unauthenticated access, arbitrary code execution, or privilege escalation. The most severe…
-
Senate Bill Could Hold AI Agent Operators and Developers Liable for Hacking
The article reports that a new bipartisan Senate proposal, the AI Agent Accountability Act, could place liability for AI-driven hacking incidents on both operators and developers of AI agents. Senators Josh Hawley and Chris Murphy outline that operators…
DataBreaches -
Amazon’s About You profile reveals startling inferences behind shopping recommendations
Amazon’s About You page offers a window into what Amazon believes it knows about a shopper, and the article notes that users can see and edit some of those inferences rather than all of them being hidden behind opaque personalization. The page, introduced in…
Malwarebytes -
Coupang Sues to Overturn $462 Million Fine for 33 Million Customer Data Leak
Coupang, South Korea’s largest online retailer, has filed two separate lawsuits at the Seoul Administrative Court to nullify a 620 billion won (£?approx $462 million) fine imposed over a data leak that affected more than 33 million customers. The action…
DataBreaches -
Kelly Jackson Higgins to Leave Dark Reading After Two Decades
Kelly Jackson Higgins, Editor-in-Chief of Dark Reading, has announced she will depart the title after two decades with the publication. In a post dated 8 October 2026, she explains that, following Dark Reading’s 20th anniversary celebrations and her five…
Dark Reading -
Allies Warn China Linked Firm Helped Hack Networks Worldwide
The UK’s National Cyber Security Centre (NCSC), working with partners from Australia, Canada, Japan, New Zealand, Spain and the United States, has issued an advisory about malicious cyber activity enabled by China-linked company Integrity Technology Group…
ncsc.gov.ukFlax Typhoon -
Insignary’s new scanner uncovers hidden code and AI dependencies
Insignary has announced the general availability of Clarity AIR, a new source-code scanning product designed to expose what actually runs in software, beyond what developers declare. The tool works at the snippet and source-code level, comparing code against…
SecurityOnline -
Rein Security raises $25 million to guard AI agents at runtime
Rein Security has raised $25 million in a Series A funding round, taking the total raised by the company to $35 million. The round was co-led by Glilot Capital and Sienna Venture Capital, with additional support from Corner Ventures, Atlacle and RNP Capital…
SecurityWeek -
Meta’s Muse AI builds personal dossiers on users and their contacts
Meta’s Muse AI agent is under renewed scrutiny after TIME magazine detailed its data handling, revealing that Muse maintains constantly updated dossiers on users and their connections. The service, launched last month, acts as a multi-task digital…
Malwarebytes -
AI Powered Attackers Breach South Korean Banks Using ARTEX Tool
A suspected China-based threat actor used AI-assisted tooling in a campaign that successfully exfiltrated data from South Korean financial organisations, researchers at CrowdStrike disclosed. The attacker leveraged ARTEX, a new open-source pentesting agent,…
Infosecurity -
Pwn2Own’s Third Day Puts Pixel 10 in the Crosshairs for $1.33M
Pwn2Own Ireland 2026’s third day had 17 attempts scheduled, with about $1.33 million in prize money at stake, according to the Zero Day Initiative (ZDI). The Google Pixel 10 was the main attraction, with three teams due to attempt exploits against it. The…
thezdi.com -
Wazza Phishing Kit Hides Adobe Lures Behind a Multi-Stage Trap
ANY[.]RUN has tracked a new phishing kit named Wazza that targets banking, manufacturing, and government organisations across the US, Europe and Australia. Unlike traditional credential theft kits, Wazza employs a multi-stage routing chain to decide which…
The Hacker News -
Four US States Sue TP-Link Over Security Claims and Router Flaws
Four US states have filed lawsuits against TP-Link Systems, alleging the router maker misled consumers about product security and China ties. Florida, Iowa, Montana, and Nebraska each filed complaints on 6 October 2026, drawing on state consumer protection…
-
Claude AI Chat Prompts Florida Arrest After Shooting Threats
In Lee County, Florida, thirty-year-old Carli Michelle Heller was arrested in late September on charges of making written or electronic threats to conduct a mass shooting or act of terrorism, under Florida Statute 836.10. The arrest followed an incident in…
SecurityOnline -
16 Malicious Firefox Extensions Masqueraded as Crypto Wallets to Steal Keys
Cybersecurity researchers have uncovered a cluster of 16 malicious Mozilla Firefox extensions that impersonate Rabby Wallet and OKX Wallet interfaces to steal users’ recovery phrases and private keys. The extensions’ code interposes during wallet import…
The Hacker News -
Europol and US watchdog warn agencies to prepare for quantum threats
Europol and the US Government Accountability Office have issued alerts this week highlighting the growing urgency of post-quantum cryptography (PQC) and the risks posed by quantum computers to current cryptographic protections. The US GAO published a…
Infosecurity -
MonsterCloud Chief Accused of Hiding Ransom Payments from Clients
Zohar Pinhasi, the head of MonsterCloud, appeared in a New York court facing wire fraud charges related to a ransomware remediation scheme. The indictment alleges that Pinhasi claimed MonsterCloud could decrypt ransomware and recover encrypted data without…
SecurityWeek -
Chrome 155 Enables JPEG XL by Default Across Major Platforms
Google has released Chrome 155 with native JPEG XL (JXL) decoding enabled by default, removing the need for extensions or experimental flags to view JXL images and animations. The change follows a period in which Google reintroduced JXL support and a…
SecurityOnline -
OpenAI and Meta Lead Surge in Bids for AI Domain Names
ICANN has revealed a substantial surge in applications for new generic top‑level domains (gTLDs), receiving 1,615 domain applications from 481 different applicants in this round. The spike is largely driven by teams centred on artificial intelligence, with…
SecurityOnline -
FortiBleed attacks persist as hackers abuse stolen Fortinet credentials
US authorities warn that the FortiBleed campaign against Fortinet FortiGate firewalls and SSL VPN gateways remains active, with widespread credential abuse enabling unauthorised access. An FBI and US Secret Service notice on 6 October cites SOCRadar data…
Infosecurity -
OpenAI Claims AI Solved 372 Maths Problems, but Proofs Await Review
OpenAI has released a torrent of mathematics papers via GitHub, claiming that its unreleased Pioneer Model has produced novel solutions or major breakthroughs for 372 mathematical problems across 722 manuscripts. The company characterises this as “solving…
SecurityOnline -
Oracle Health Breach May Have Exposed Data of 20 Million People
The SecurityWeek report centres on a data breach hitting Oracle Health’s Cerner legacy systems. The Texas attorney general’s office, via Bloomberg, says personal and medical data of nearly 20 million people was compromised in an incident that began in 2025.…
SecurityWeek -
Google Drive and Docs Add Native Markdown Editing and Previews
Google has announced native Markdown support across Google Drive and Google Docs, allowing users to preview, edit, and collaborate on Markdown (.md) files without first converting them to Google’s formats. The feature is rolling out gradually and is now…
SecurityOnline -
FortiBleed Attackers Lock Organisations Out of Fortinet Devices
Attackers behind the FortiBleed campaign are compromising Fortinet devices to lock organisations out of their own systems. The operation, which targets internet‑exposed FortiGate firewalls and SSL VPN appliances, began in June and relies on a mix of using…
SecurityWeek
