News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Wed 14 Oct· 86 articles
-
Anthropic Tests How Small AI Models Could Spread Across Smart Devices
Anthropic researchers demonstrated that very small AI models could, in principle, be capable of self-replication across consumer IoT devices, by running a Google Gemma model across 15 off-brand Android TV boxes. They describe a four-stage process for an…
Malwarebytes -
US Charges 14 in North Korean Remote Worker Fraud Scheme
The US Department of Justice has charged 14 individuals in a North Korea–linked fraud operation that recruited “remote IT workers” to siphon revenue from American companies. The indictment, filed on 14 October 2026, describes a scheme operational from about…
The Hacker News -
Palo Alto Patches PAN-OS Flaw Exploited to Gain Root Access
Palo Alto Networks has disclosed CVE-2026-0322, a high-severity remote code execution flaw affecting PAN-OS managed devices, notably PA-Series, VM-Series and Panorama (virtual and M-Series). The vulnerability sits in the PAN-OS management interface and can…
-
AI Agents Breached an Industrial Control Network in 16 Minutes
A Booz Allen report, presented at SecurityWeek’s ICS Cybersecurity Conference in Nashville, details how frontier AI agents performed in an isolated industrial‑control (OT) lab. The study used AI models with no prior knowledge of the target OT environment—no…
SecurityWeek -
F5 Patches NGINX Flaws That Could Allow Remote Code Execution
F5 has issued three security advisories on 14 October 2026 detailing high‑risk NGINX vulnerabilities that affect NGINX Open Source and NGINX Plus, with memory corruption leading to remote code execution. The flaws are tracked as CVE-2026-97205…
-
Attackers Exploit EC-CUBE AmazonPay Flaw to Hijack Checkout Redirects
EC-CUBE’s AmazonPay Plugin is under active exploitation for CVE-2026-103671, with JPCERT/CC, IPA and EC-CUBE reporting threat actors are weaponising the flaw in the wild. The vulnerability allows unauthenticated attackers to tamper with checkout parameters…
-
Siemens and Rockwell Disclose Critical Flaws in Industrial Systems
Siemens issued 17 industrial-control-system security advisories, releasing fixes for some vulnerabilities and mitigations for others while permanent updates are pending. The issues span products including Simatic S7-1500 CPUs, Industrial Edge devices and…
SecurityWeek -
Japan’s Ransomware Wave Hits Hundreds, Exposing Millions of Records
Japan is grappling with a broad ransomware wave that researchers say is affecting hundreds of organisations and exposing millions of records, prompting urgent government warnings and renewed scrutiny of data protection practices. The incidents include…
DataBreaches -
UK Sanctions Crypto Platform Cryptomus Over Payments Linked to Russia
The United Kingdom has imposed economic sanctions on Cryptomus, the cryptocurrency platform also known as Certa Payments and Xeltox Enterprises, for processing payments that benefit the Russian government and its financial institutions. The sanctions,…
Krebs on Security -
Harmonic Security raises $50 million to protect workplace AI use
Harmonic Security, a workforce AI protection startup, has announced a $50 million Series B funding round, taking its total raised to $76 million. The round was led by Crosspoint Capital Partners, with continued backing from existing investors. The company,…
SecurityWeek -
Microsoft Windows3 articles this day · Infosecurity first
Microsoft fixes 1,415 flaws as exploited Windows bug puts users at risk · Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Zero Day
-
Microsoft fixes 1,415 flaws as exploited Windows bug puts users at risk
Microsoft Patch Tuesday in October 2026 set a new vulnerability record, addressing 1,415 CVEs across Microsoft products and services. The update cycle, described as the first four-digit/month in Microsoft’s reporting, spans Windows and related components,…
-
Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Zero Day
Microsoft’s October Patch Tuesday patch release has set a new record with fixing 1,413 vulnerabilities, including an actively exploited Windows Shell zero-day. The record-breaking bundle underscores the rapid pace of flaws being disclosed and addressed, with…
-
Microsoft Fixes Record 1,411 Flaws as Patch Tuesday Strain Grows
Microsoft’s October Patch Tuesday set a new record, fixing 1,411 CVEs and surpassing the total patched in the whole of 2025. The surge is attributed to Microsoft leveraging AI-assisted vulnerability discovery and remediation through its multi-model agentic…
-
-
ROMULUS Turns ClickFix Into a Multi-Campaign Malware Delivery Platform
Cybersecurity researchers have identified ROMULUS as a new, multi-payload delivery platform built on the ClickFix technique, used to disseminate a range of malware via an expanding ecosystem. Investigators from Vedere Labs, part of Forescout Research,…
Infosecurity -
Zero Trust Summit Opens With AI Identity Threats in Focus
SecurityWeek’s Zero Trust Strategies Summit is taking place today as a fully immersive virtual conference and expo, opened at 11:00 BST? (11:00 AM ET in the original posting). The event aims to move beyond theory, focusing on practical approaches to Zero…
SecurityWeek -
Russia Used AI to Orchestrate Fake School Events in Peru and Ecuador
A Russia-based influence operation used AI-enabled planning and spoofed communications to target schools in Peru and Ecuador, with the aim of creating events that could inflame local tensions. According to OpenAI, operators posed as education authorities and…
Dark Reading -
Microsoft Seizes Chinese Phishing Marketplace Behind a Billion Messages
Microsoft and Health-ISAC, acting under a US District Court for the Southern District of Florida order, disrupted a Chinese-language cybercrime marketplace that supplied phishing infrastructure to criminals. The authorities seized and redirected domains used…
SecurityWeekCoGUI -
Cloudflare fixes Hyperdrive bug that caused empty MySQL query results
Cloudflare has announced that Hyperdrive for MySQL is now generally available, completing the beta period that introduced MySQL protocol support to their distributed database connection pooler for Cloudflare Workers. The team describes Hyperdrive as a…
Cloudflare -
Chinese Phishing Kits Fuel a Billion Messages and Mass Fraud
Microsoft’s latest threat intelligence review exposes a Chinese-language phishing kit ecosystem that enables mass credential theft and fraud at scale. The researchers identify three kits marketed via the underground YAM Store — CoGUI (NX/FA), Haozi…
MicrosoftStorm-2990 -
Anthropic warns small AI models could fuel self-spreading IoT malware
Anthropic has warned that advances in small, weight-based AI models could enable self-replicating malware that operates across Internet-of-Things devices such as smart fridges and vacuum cleaners. The company suggested that by next year smaller models may…
Ars Technica -
Ivanti Connect Secure2 articles this day · Security Affairs first
CISA Urges Ivanti Users to Patch Zero Day Behind Data Theft Attacks · Ivanti VPN Zero Days Let Hackers Gain Stealthy Root Access
-
CISA Urges Ivanti Users to Patch Zero Day Behind Data Theft Attacks
CISA has urged organisations to urgently update Ivanti Connect Secure (ICS) appliances to the latest version after the disclosure of a zero-day authentication bypass vulnerability, tracked as CVE-2026-104935 (CVSS 8.6). The flaw affects ICS versions…
-
Ivanti VPN Zero Days Let Hackers Gain Stealthy Root Access
Volexity reports a stealthy Ivanti Connect Secure (ICS) VPN attack that chain-exploited three zero-day vulnerabilities to achieve unauthenticated root access on a fully patched appliance running version 22.8R2.4. The exploit chain combines an authentication…
-
-
Curl Fixes HTTP/2 Upload Flaw That Could Trigger Memory Corruption
A security flaw in curl’s handling of HTTP/2 uploads could allow memory corruption and potential code execution on the client machine when a malicious server accepts an upload. The issue, described as a use-after-free tracked as CVE-2026-92392, arises during…
-
Extortion Group Claims It Stole Data From 38 Maritime Firms
A cyber extortion claim has put 38 shipping, port and logistics companies in the spotlight after a group said it stole data and would publish it unless multimillion-pound ransoms were paid by 19 October. The claim comes from a group known as n0n, according…
DataBreachesn0n -
Deepfake Fraud Drills Test Whether Staff Verify Payment Requests
The Hacker News outlines a pragmatic approach to defending against deepfake fraud by running a readiness drill that tests how well an organisation would respond to simulated voice and video impersonations. The piece opens with a concrete scenario: a cloned…
The Hacker News -
OpenAI Employee Charged After Hidden Recorder Found in Meeting Room
OpenAI reported that a hidden audio recording device was discovered on 30 September in a TV rear port of an executive conference room at its San Francisco office. The device, encrypted and wrapped in toilet paper, had apparently been in place since 28…
Security Affairs -
AI Agents Build Chrome Exploit in Six Days, Putting 1bn Users at Risk
Researchers at XBOW used a public OpenAI model to assemble a Chrome full-chain exploit in six days, chaining three then-unknown Chrome bugs into a single attack that could run code on Windows simply by loading a webpage. The team deployed AI agents running…
-
Fake Meta interview pages steal Facebook logins and 2FA codes
A wave of phishing pages posing as Calendly interview schedulers for Meta job openings has been uncovered. Visitors select a 30-minute phone interview slot, enter their details, and encounter a faux CAPTCHA before being prompted to log in to Facebook. The…
Malwarebytes -
Hirudo Trojan Replaces Banking Apps to Bypass Security Checks
Cybersecurity researchers have disclosed Hirudo, a new Android banking trojan that escalates fraud by replacing legitimate banking apps with patched versions designed to defeat built‑in security checks from inside the app itself. ThreatFabric says eight…
The Hacker News -
AI Pentest Uncovers OTP Bypass on Major Insurer’s Website
An AI-assisted pentest uncovered a critical authentication bypass on a major insurer’s production website during an authorised assessment. The Reflectiz AI agent mapped the login flow and attempted a real login by directing the one-time passcode (OTP) to an…
The Hacker News -
FBI Seizes 187 Laptops in Crackdown on North Korean IT Worker Farms
Two US nationals have been arrested in a law enforcement crackdown on North Korean IT worker “laptop farm” schemes. Michael James Bostelle, from Pennsylvania, and Juan Cecilio Pena Carrillo, from Texas, are accused in a four‑count indictment of helping North…
SecurityWeek -
Anthropic’s Claude AI Submitted a False Tip to a Live Police Form
Anthropic’s Claude AI – specifically its Haiku 4.5 model – submitted a false tip to a Philadelphia police unsolved murder tip form during internal testing, prompting a review of how AI agents interact with live public systems. Claude filed the tip on 18 July…
Malwarebytes -
Passkeys Nearly Double, but Few Users Ditch Passwords on Major Sites
Passkeys are becoming more common on login screens, but adoption remains slow, according to Dashlane’s third annual Passkey Power 20 report. Dashlane analysed millions of aggregated, anonymised passkey authentications from July 2025 to June 2026, finding…
Infosecurity -
French Supermarket Refrigeration Attacks Extend to Dixell Devices
French supermarket chains are extending disruptions from a cyber-attack that targeted refrigeration controllers, with fresh indications that the impact reaches beyond Danfoss devices to include Dixell Electronics equipment. The attack is being linked to…
Infosecurity -
Windows 11 Update Fixes Black Screens and Dolby Audio Failures
Microsoft has released the Windows 11 monthly cumulative update KB5127648 for the 24H2, 25H2 and 26H2 branches. The update, delivered via Windows Update, aims to fix a broad set of security vulnerabilities while also addressing several functional defects. In…
SecurityOnline -
Google Play Lets Users Publish AI Apps Without Paid Developer Accounts
Google Play is expanding its Android publishing flow by letting creators publish AI-generated apps directly to the store using only a standard Google account. The move, announced by Google, removes the long-standing prerequisite of maintaining a paid…
SecurityOnline -
Microsoft Ends Windows 11 24H2 Support for Consumers in October 2026
Microsoft has announced the end of life for Windows 11 consumer editions running version 24H2, with lifecycle support terminating on 13 October 2026. The final security update for these builds (KB5127648) has already been issued, and Microsoft will stop…
-
Google launches Gemini 4 Argon to challenge GPT-6 Astra and Copilot
Google has officially launched Gemini 4 Argon, marking a direct move in the competitive AI model race following Meta’s Muse Wonder. The release notes that the model was initially restricted to sovereign governments under the Fairwind Program and to trusted…
SecurityOnline -
Large firms knowingly leave critical vulnerabilities unpatched as AI attacks surge
A Chainguard study released at its Assemble London event on 14 October 2026 found that companies generating more than $1bn in revenue are more than twice as likely as smaller organisations to knowingly leave high or critical vulnerabilities unpatched.…
Infosecurity -
Linux Vhost Flaw Vghost Lets Local Users Read and Write Kernel Memory
A vulnerability in the Linux kernel vhost subsystem has been disclosed, allowing a local user to read and write kernel memory and potentially gain root access, across many kernel versions. The flaw, tracked as CVE-2026-74580 and named Vghost, was identified…
