News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 13 so far |
Tue 13 Oct· 85 articles
-
Cyberattack Disrupts Refrigeration at Hundreds of French Supermarkets
A cyberattack disrupted refrigeration across hundreds of French supermarkets, forcing the destruction of refrigerated and frozen goods after attackers interfered with the systems that manage cooling. The incident occurred overnight from 11 to 12 October 2026…
Malwarebytes -
XWorm RAT Adds Browser Hijacking, Live Audio and GPS Surveillance
SecurityWeek reports that the XWorm remote access trojan (RAT) has been expanded into a full surveillance platform, with the developer community adding new plugins to broaden its capabilities. The threat, first seen in 2022, now supports 46 plugins (up from…
SecurityWeek -
LG Smart TV Flaw Chain Lets Network Attackers Gain Root Access
LG has disclosed three webOS vulnerabilities in its smart TVs that can be chained from a local network to give an attacker root access on certain devices, without requiring a PIN or any owner interaction. The chain was demonstrated on two models, the…
The Hacker News -
AI Speeds Up Cyberattacks, Making Zero Trust and Recovery More Urgent
In SecurityWeek’s interview with IBM UK’s Steve Wallin, the impact of AI on cyberattacks is framed as a speed and scale problem rather than a new technique. Phishing remains the leading attack vector, accounting for 17% of breaches and averaging $5.29 per…
SecurityWeek -
Fake Ledger Wallets Stole Recovery Phrases in $86 Million Scam
A SecurityWeek report details a supply-chain compromise affecting Ledger signers sold via Southeast Asia’s CryptoBilis reseller. The investigation indicates an unauthorised hardware implant was added to the devices, designed to intercept user data during…
SecurityWeek -
Bitdefender Adds AI Risk Visibility to Windows Endpoint Security
Bitdefender GravityZone AI Visibility and Control (AIVC) is described as a discovery and risk layer that answers key questions about AI on protected Windows endpoints: which AI software is present, who is running it, and how risky each tool is. The article…
The Hacker News -
Tampered Ledger wallets sold in Europe amid $92m crypto losses
Investigators have uncovered a supply‑chain compromise affecting Ledger hardware wallets sold in Europe, following earlier findings in Malaysia. A distributor for Ledger allegedly tampered with devices at the point of distribution, embedding an extra circuit…
SecurityOnline -
GitLab2 articles this day · The Hacker News first
GitLab rushes to patch critical flaw enabling unauthenticated server takeover · GitLab Patches Critical Flaw That Could Let Attackers Run Server Code
-
GitLab rushes to patch critical flaw enabling unauthenticated server takeover
GitLab has issued an urgent patch for CVE-2026-97229, a critical unauthenticated remote code execution flaw in the CI/CD Regular Expression Compiler. Classified with a CVSS v3.1 score of 10.0, the issue arises from an integer overflow when processing a…
-
GitLab Patches Critical Flaw That Could Let Attackers Run Server Code
GitLab has issued patches for a critical vulnerability, CVE-2026-97229, that could let an unauthenticated attacker run arbitrary server code. GitLab described the flaw as an integer overflow arising from insufficient regular expression validation in a CI/CD…
-
-
UK to Use Frontier AI to Find Flaws Before Hackers Do
The British government has unveiled a broad set of AI security initiatives aimed at strengthening protection against emerging threats. Speaking at Imperial College London on 12 October, AI minister Kanishka Narayan outlined plans to employ frontier models to…
Infosecurity -
Ahold Delhaize Takes Systems Offline After Cyber Incident
Ahold Delhaize reports it responded to a cyber incident by taking some systems offline to contain the issue, while emphasising that stores remained open and its ability to serve customers was not affected. The Belgian-Drench multinational said it was…
SecurityWeek -
Anthropic Cuts Claude Reasoning Data Leaks by Up to 99% to Block AI Distillation
Anthropic says it has strengthened Claude AI’s defenses against model distillation, a technique in which attackers harvest transcripts and reasoning logs to train smaller, inferior models. The firm reports that their new safeguards have dramatically cut the…
SecurityOnline -
Bitwarden Moves App Store Builds to a Proprietary Licence, Keeping GPL Code Public
Bitwarden has announced that from its forthcoming release, applications distributed through major app stores, notably the Apple App Store and Google Play Store, will be built under a commercial, proprietary license rather than the current dual-license setup.…
SecurityOnline -
Ubuntu 27.04 Gets a Dinosaur Codename and April 2027 Release Date
Ubuntu 27.04 is slated as the non‑LTS successor to the 26.10 release, with Canonical outlining a mid‑2027 release cadence. The official schedule places the feature freeze for 27.04 on 25 February 2027, followed by a beta on 1 April, a release candidate on 15…
SecurityOnline -
G2A Marketplace Sees Antivirus Orders Rise 35% as Security Worries Grow
G2A[.]COM, a digital marketplace used by more than 35 million customers across 180 countries, has reported a 35% year-on-year rise in orders for antivirus and other security software. The data, released during Cybersecurity Awareness Month, shows that…
SecurityOnline -
One in Five UK Security Chiefs Avoid Patch Tuesday Overload
One in five UK CISOs, CSOs and heads of IT security surveyed by Socura say they have called in sick or deliberately booked holiday to dodge Patch Tuesday, the monthly security updates from Microsoft, Adobe and others. The poll of 500 senior security leaders…
Infosecurity -
Hackers Hijack Danfoss Controllers, Spoiling Food in French Supermarkets
Attackers gained remote control of Danfoss refrigeration controllers at hundreds of French supermarkets on the night of 11 October 2026, warming fridges and freezers to as high as 50°C and forcing stores to discard affected goods. The intrusion targeted…
-
MarkLogic flaws let low privilege accounts seize server admin control
Progress Software’s MarkLogic Server has 31 newly disclosed vulnerabilities, with five rated critical. The flaws could let an account that already has only management privileges escalate to full administrative control of the server, including creating…
-
Hackers Turn European Supermarket Fridges Up to 50°C
A large cyberattack has targeted refrigeration controllers across hundreds of European supermarkets, causing many fridges and freezers to defrost overnight. The incident affected major chains including Auchan, Carrefour, E[.]Leclerc, Intermarché, and…
SecurityWeek -
Fake Web3 accelerator’s npm packages backdoor Windows and Macs
Elastic Security Labs has traced two malicious npm packages to a counterfeit Web3 accelerator branded as “Apex.” The packages, named @apexacc/cli and @apexacc/audit, were pitched as free AI credits, a coding assistant, and security audits for crypto…
SecurityOnline -
Cyberattack Turns Up Refrigeration in Hundreds of French Supermarkets
Overnight from Sunday to Monday, a large cyberattack disrupted refrigeration systems across hundreds of French supermarkets, with Danfoss’s cooling controls remote‑manipulated to raise temperatures to 50°C. BFMTV reported that the attack caused fresh and…
Security Affairs -
Scammers Use Your Name to Lure You Into Text Conversations
Text scammers are honing a simple opener that relies on personal data exposed in breaches: a message that starts with the recipient’s name followed by a question mark. Malwarebytes reports that the tactic is deliberately minimal—no suspicious links, no…
Malwarebytes -
AI Driven Attack Turned an Exposed Tomcat Endpoint Into a Server Takeover
ReliaQuest Threat Spotlight has documented an AI-driven attack that turned a single exposed endpoint into a full server takeover in under 24 hours. The intrusion entered through an Apache Tomcat server running a Spring Batch application that accepted job…
SecurityOnline -
Kimsuky Uses Reply Bait to Target Ukrainian Diplomats and Experts
Genuinely, North Korea-linked actor Kimsuky has been observed conducting a reply‑baiting spear‑phishing campaign aimed at Ukrainian diplomacy, security professionals and international policy experts, under the umbrella of Operation GitPower. Beginning in…
SecurityOnlineKimsuky -
Preloaded Android malware turns budget phones into proxy bots
Bitdefender has traced a supply-chain–level campaign in which low-cost Android handsets, built on MediaTek platforms, come preinstalled with malware that can covertly install or uninstall apps, harvest device and app data, and load remote payloads. The…
The Hacker News -
Windows 11 23H2 Enterprise Security Updates End on 10 November 2026
Microsoft has confirmed that Windows 11 version 23H2 Enterprise, Education and IoT Enterprise will reach end of support on 10 November 2026. After this date, Microsoft will stop delivering monthly security updates for these editions, meaning organisations…
SecurityOnline -
Firefox 158 Enables JPEG XL by Default, Boosting Image Format Adoption
Mozilla Firefox 158.0 is officially available, featuring default JPEG XL image format support, CSS enhancements, and advanced WebDriver automation capabilities. Related Posts: Intel Implements Significant Price Increases on PC Processors Yandex Cloud Drone…
SecurityOnline -
Hackers Trigger Defrost in French Supermarkets, Spoiling Food and Sparking Fires
A massive French supermarket cyberattack targeted Danfoss refrigeration systems, causing catastrophic food spoilage and fires across 400 retail locations. Related Posts: Suspected TraderTraitor Hackers Use Trojanized Terraform Provider to Deliver FLATROOF…
SecurityOnline -
Intel reportedly raises premium processor prices by up to 20%
Recent reports from the Taiwan supply chain indicate major Intel and AMD PC processor price hikes, with high-end CPUs seeing up to a 20% increase. Related Posts: Firefox 158.0 Released: Default JPEG XL Support Yandex Cloud Drone Strike Causes Widespread…
SecurityOnline -
SAP Patches Critical Cloud SDK Flaw That Could Expose Credentials
SAP Security Patch Day October 2026 fixes four critical vulnerabilities, including a CVSS 10.0 Cloud SDK flaw and 9.9 bugs in Visual Composer and S/4HANA. Related Posts: IBM Patches Three Critical Flaws in IBM i, Db2 Mirror and Maximo AI Service Discourse…
-
Ukrainian Strike on Yandex Data Centre Disrupts Services Across Russia
The article reports that Ukrainian forces struck the Yandex Cloud data centre in Vladimir, Russia, causing widespread service outages across a range of Yandex offerings. The Vladimir facility, described as a critical hub for Yandex services and for many…
SecurityOnline -
Qualcomm brings edge AI to home broadband with Wi-Fi 8 gateway
Qualcomm has unveiled a new wave of AI-native broadband technologies designed to push beyond traditional router functionality, with a strong emphasis on edge intelligence. At the centre of the company’s presentation is the Qualcomm AI Wi‑Fi 8 gateway,…
SecurityOnline -
ChatGPT’s new macOS Meetings tool records calls without a visible bot
OpenAI has unveiled a new “Meetings” plugin integrated into the ChatGPT macOS desktop app, currently in beta and initially accessible only to Pro and Business subscribers, with Enterprise users trialling via a restricted alpha programme. The feature is…
SecurityOnline -
GitLab CI/CD flaw could let unauthenticated attackers execute code on servers
SANS ISC’s latest Stormcast highlights several notable security items. First, GitLab is dealing with an integer overflow in its CI/CD regular expression compiler that could allow unauthenticated users to execute arbitrary code on the GitLab server. The issue…
SANS ISC -
IBM Patches Critical Maximo AI Flaw Allowing Unauthenticated Remote Code Execution
IBM has issued patches for three critical vulnerabilities across IBM i, Db2 Mirror for i and Maximo AI Service, with CVSS scores up to 9.9. The flaws allow remote code execution or data access and affect Maximo AI Service (versions 9.1.0 and 9.2.0), IBM i…
-
Discourse flaws let attackers target visitors and read server files
Two vulnerabilities in the Discourse forum platform have been disclosed, one enabling unauthenticated attackers to push malicious JavaScript to every anonymous visitor, and the other allowing a low-privilege user to read server files. The flaws, tracked as…
Mon 12 Oct· 56 articles
-
Hackers Exploit Critical SonicWall SMA 1000 Flaw in the Wild
Threat actors are actively exploiting a maximum-severity vulnerability in SonicWall SMA 1000 appliances, specifically CVE-2026-102255, a server-side request forgery (SSRF) flaw in the WorkPlace interface used for remote access. SonicWall describes the issue…
-
Canadian Ransomware Negotiator Arrested in FBI ShinyHunters Crackdown
A Canadian ransomware negotiator, identified as Edward Dubrovsky (with variations Dubrovski/Dobrovsky in sources), has been arrested in Pennsylvania as part of the FBI’s ShinyHunters crackdown. Court documents filed in the Eastern District of Pennsylvania…
Security AffairsShinyHunters -
Ghostscript flaw could let crafted PDFs trigger remote code execution
Artifex Software released Ghostscript 10.08.0 on 8 September 2026 to fix a critical heap buffer overflow in the JPEG 2000 image decoder used when Ghostscript processes PDFs and PostScript. The vulnerability, tracked as CVE-2026-39919, can enable…
-
DDoS attack knocks Canonical websites and security services offline for four hours
Canonical suffered its second DDoS attack in 2026, disrupting public websites for over four hours. The incident, disclosed on 8 October via the Ubuntu Discourse forum, affected Canonical’s main portals—ubuntu[.]com, canonical[.]com, the Ubuntu blog, the…
Security Affairs
