News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 17 so far |
Fri 9 Oct· 70 articles
-
ShinyHunters2 articles this day · Dark Reading first
FBI Arrests Suspected ShinyHunters Co-Conspirator in Pennsylvania · Pentagon Data Breach Exposes Records of 3.1 Million People
2 outlets-
FBI Arrests Suspected ShinyHunters Co-Conspirator in Pennsylvania
The FBI has arrested another suspected co-conspirator of the ShinyHunters group, with FBI Director Kash Patel confirming the arrest on 9 October 2026. The suspect is described by outlets as a Canadian citizen who was taken into custody in Pennsylvania. The…
The Hacker News -
Pentagon Data Breach Exposes Records of 3.1 Million People
ShinyHunters once again grabbed headlines after the group claimed to have breached the FBI, alleging data on nearly every FBI employee and applicant from a third-party jobs portal it said it compromised. The claim has been disputed, with authorities and…
Dark Reading
-
-
P7 DarkSword iOS Exploit Adds Stealthier Keychain and Crypto Theft
Researchers have disclosed a new variant of the DarkSword iOS exploit kit, named P7 DarkSword. Billed as a lighter-on-device variant, it patches tighter on-device stealth by removing debug logs, and it now also exfiltrates keychain data and crypto-wallet…
-
Ricardo Swiss breach exposes personal details of 890,000 accounts
A data breach on the Ricardo Swiss platform exposed the personal details of around 890,000 user accounts. Hackers were able to access names, postal addresses and telephone numbers, with business users’ company names also revealed. Ricardo has stated that…
SecurityOnline -
Hackers Target Executives’ Families to Bypass Corporate Defences
Executives’ families are increasingly deemed a soft underbelly for corporate security, with attackers pivoting from the office to the home through social engineering and device compromises. The piece cites March 2026 findings from Google Cloud’s Office of…
Dark Reading -
Nginx UI Flaw Lets Authenticated Attackers Take Over Servers
A critical remote code execution flaw has been disclosed in the Nginx UI project (CVE-2026-107806), with a working proof-of-concept exploit published. The vulnerability enables authenticated attackers to execute arbitrary code on affected servers,…
-
Apache Camel Karavan flaws could let attackers hijack Kubernetes deployments
Two high‑severity vulnerabilities in Apache Camel Karavan have been disclosed, exposing open‑source cloud integration environments to potential remote code execution and malicious Kubernetes resource injection. The flaws are tracked as CVE‑2026‑103413 and…
SecurityOnlineApache Software Foundation -
CISA Urges Patching of Critical Flaws in Energy Sector Software
Six critical flaws across Grid Protection Alliance’s openPDC and openHistorian threaten energy-sector critical infrastructure. The vendor lists six CVEs affecting these products, with the most severe having a CVSSv3 score of 9.8. OpenPDC versions before…
-
Wikimedia Links AI Agents to Data Probes and API Traffic Surge
Wikimedia Foundation has disclosed that rogue AI agents were active on its platforms, including Wikipedia and related open-knowledge sites, after an investigation triggered by recent reports of agent-driven activity. In a blog post dated 5 October, Chief…
InfosecurityOpenAI -
GhostAction Campaign Hijacks Maintainers to Steal Secrets From 345 Repositories
GhostAction Returns documents a fresh wave of GitHub Actions credential theft in which attackers compromise open-source maintainers to push a malicious security-audit[.]yml workflow that exfiltrates secrets from the target repository and its history. In the…
StepSecurity -
Anthropic Launches Free Scanner to Find Flaws in Open Source Code
Anthropic has launched OSS Scanner, a free vulnerability scanner for open-source code aimed at helping maintainers identify and fix flaws before attackers exploit them. The project grew from lessons learned while testing Claude against real-world targets…
Security Affairs -
Researchers question whether the Luna Moth leak really came from Silent Ransom Group
A public breach analysis centred on a bespoke “Luna Moth Files” site has raised questions about whether Silent Ransom Group (SRG) was actually involved in a leak or if the material is fabrication. DataBreaches[.]net notes that, while initial analyses…
DataBreachesLuna Moth -
Apple’s 14GB AI Models Spark Calls for a macOS Opt Out
Apple is facing growing pushback as it ramps up the integration of its Apple Intelligence into macOS 27 Golden Gate. The piece frames the move as a deliberate deepening of AI features within the operating system, but it notes a strong market reaction from…
SecurityOnline -
Four More US States Sue TP-Link Over Router Security Claims
Four more U.S. states sued router maker TP-Link Systems on October 6, bringing the total to five, with Texas filing a suit in February. Florida, Iowa, Montana and Nebraska allege the California company misled buyers about how secure its routers are and how…
-
ICANN’s Proposed .lan Domain Raises Risks for Home Networks
ICANN has published its updated list of generic top‑level domain (gTLD) applications, with the .lan proposal drawing notable concern from the networking community. The application, filed by Identity Digital (also known as Coffee Danger), seeks to add a .lan…
SecurityOnline -
AI Agents Could Become the Next Target for Business Email Compromise
The piece warns that as AI agents are granted authority to act within core business systems, attackers could target those agents in a way that mirrors traditional business email compromise (BEC). In a BEC-like danger, an attacker might prompt a third‑party…
Dark Reading -
Cloudflare Adds CPU and Memory Profiling to Workers and Durable Objects
Cloudflare has introduced on-demand CPU and memory profiling for its Workers and Durable Objects, enabling developers to generate interactive flamegraphs to see exactly where code is consuming resources. The feature is accessible from the Workers…
Cloudflare -
AnyDesk Linux Flaw Lets Attackers Gain Root Before Connections Are Accepted
Security researchers have published a fully working exploit for a pre-authentication remote code execution flaw in AnyDesk on Linux, enabling root access before a connection is accepted. The exploit, named AnyPwn, targets a heap buffer overflow in AnyDesk’s…
-
Cloudflare Joins Forces With Deno to Bring Workers to Your Own Infrastructure
The Deno team is joining Cloudflare, with a plan to merge workerd and celld and enable the Deno runtime to be self-hosted at scale. The goal is to simplify running Cloudflare’s Workers and Durable Objects on users’ own infrastructure, by providing a…
Cloudflare -
Anthropic launches free AI scanner to uncover open source flaws
Anthropic has unveiled OSS Scanner, a free opt-in vulnerability scanner for open-source projects, designed to help secure the ecosystem using artificial intelligence. The service is billed as fully model-generated, with outputs not requiring human review or…
The Hacker News -
AhsayCBS2 articles this day · SecurityWeek first
Hackers Exploit AhsayCBS Flaws to Deploy Hidden Crypto Miners · Hackers Exploit AhsayCBS Flaws to Deploy Webshells and Crypto Miners
-
Hackers Exploit AhsayCBS Flaws to Deploy Hidden Crypto Miners
Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. Details of the flaws are below - CVE-2026-105133 (CVSS v4…
-
Hackers Exploit AhsayCBS Flaws to Deploy Webshells and Crypto Miners
SecurityWeek reports that two unpatched flaws in AhsayCBS, CVE-2026-105133 and CVE-2026-105134, are being exploited in the wild to achieve unauthenticated remote code execution. The defects allow an attacker to manipulate arguments in certain functions to…
-
-
CISA Adds Five Flaws to KEV After Flax Typhoon Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog after reports that a China-linked actor group, Flax Typhoon, abused them in targeted intrusions. The flaws…
-
Ransomware Recovery Firm Accused of Overcharging Clients by Millions
The article reports on allegations surrounding MonsterCloud, a ransomware incident response firm led by Zohar Pinhasi, who has been charged by the United States Attorney’s Office for the Eastern District of New York with wire fraud and conspiracy to commit…
SecurityOnline -
Poem Guided Botnet Hijacks AI Services to Mine Cryptocurrency
SecurityWeek reports a string of cyber security items in this week’s “In Other News.” Notable among them are AI-enabled attacks against Korea’s banking sector, a poem-guided botnet operation, and long prison terms for high‑profile cybercrime figures. In…
-
Ransomware attacks hit record high as groups turn to triple extortion
Ransomware activity hit an all‑time high in the third quarter of 2026, with Comparitech documenting 2,627 claimed attacks between July and September. The figure marks a 27% rise on Q2 2026 and a 61% increase year over year. The analysis notes pronounced…
InfosecurityEverest -
Hackers Hijack Three Country Domains to Obtain Rogue HTTPS Certificates
Hackers hijacked three country-code top-level domains—.gh (Ghana), .sl (Sierra Leone), and .as (American Samoa)—to obtain unauthorized HTTPS certificates covering a number of Google domains and other organisations’ domains. Google disclosed that the…
SecurityWeek -
SailPoint warns human-speed security cannot keep pace with AI agents
The Hacker News report covers a SailPoint study on a growing security paradox as enterprises rush to deploy autonomous AI agents. The Horizons of Identity Security report argues that security architectures remain designed for human workloads, creating an “AI…
The Hacker News -
Ransomware Outage at SoftBank Cloud Unit Disrupts 1,200 Partners
A ransomware incident has disrupted IDC Frontier Inc., a SoftBank cloud-services subsidiary, with outages reported on 7 October affecting 495 corporate and local government customers. IDC Frontier stated it is still assessing the extent of the damage and…
DataBreaches -
ASOS Breach Exposed Customer Details and Shopping Search Histories
ASOS has disclosed that the data breach affecting its systems involved attackers gaining access after tricking an employee into handing over login credentials. While the retailer originally said payment card details and customer passwords were not accessed,…
Malwarebytes -
SonicWall SMA1000 Flaw Exploited to Bypass Authentication
Threat actors are actively exploiting a critical flaw in SonicWall SMA1000 appliances, with exploitation observed in the wild. The vulnerability, CVE-2026-102255, affects the SMA1000 line’s WorkPlace portal via an unintended access path in the Extraweb…
-
US Seizes Chinese Hacking Tools Used to Target Critical Infrastructure
The Justice Department and the FBI announced court‑authorised seizures of two hacking tools, Microscan and FishHub, which were built and operated by Integrity Technology Group, a Beijing‑based firm with government contracts. The tools were designed to scan…
Security Affairs -
Citrix Patches Critical NetScaler Flaw Enabling Remote Code Execution
Citrix has released security updates for CVE-2026-107406, a critical memory overflow flaw affecting NetScaler ADC and NetScaler Gateway that could enable remote code execution or denial-of-service under certain configurations. The vulnerability is triggered…
-
Allies expose how Chinese firm Integrity Tech enabled global cyber espionage attacks
A joint warning from the US, UK and allied countries outlines the tactics, techniques and procedures attributed to a sanctioned Chinese organisation known as Integrity Technology Group. The advisory connects Integrity Tech to Beijing-linked cyber operations…
InfosecurityIntegrity Technology Group -
Preinstalled Android Malware Hijacks Budget Phones for Ad Fraud and Botnets
Midnight Mimosa is a supply-chain style Android malware campaign that preinstalls itself in the firmware of low-cost devices built on MediaTek platforms. Discovered and analysed by Bitdefender, the malware sits as a persistent system app that cannot be…
SecurityWeek -
OpenAI Turns ChatGPT Into an Interactive App Builder with GPT-6
OpenAI has signalled a major shift with the rollout of GPT-6, which the company says is now broadly available across all ChatGPT account tiers. The standout feature is Intelligent UI, which allows ChatGPT to go beyond plain text and generate interactive…
SecurityOnline -
GoBalance Flaw Lets Attackers Hijack Dark Web Sites’ .onion Addresses
A security flaw in GoBalance, a Go-based version of Onionbalance used by many dark‑web sites to stay reachable during attacks, could let attackers hijack a site’s .onion address. The flaw arises during the signing of the descriptor that binds a public onion…
The Hacker News -
Ransomware attack cripples SoftBank’s IDCF cloud services in Japan
A ransomware attack on SoftBank’s IDCF Cloud platform, which operates under the SoftBank Group umbrella, struck on 7 October 2026 and culminated in widespread service outages in East Japan Region 1. IDCF later confirmed that four critical partitions were…
SecurityOnline -
ISACA Plans 2027 AI Governance Certification Amid Training Gap
ISACA is accelerating governance work around AI by planning to launch an AI governance certification in early 2027, in beta now. The new credential sits within a family of AI-focused qualifications designed to help professionals manage AI securely and…
Infosecurity -
Anthropic launches AI vulnerability scans for open-source projects
Anthropic has unveiled OSS Scanner, a service aimed at providing eligible open-source projects with complimentary and regular vulnerability scanning. The programme, which uses Anthropic’s Claude Mythos models to review codebases for security flaws, sends a…
SecurityOnline
