News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Tue 20 Oct· 86 articles
-
Japan’s October Breach Wave Exposes Millions of Customer Records
SOCRadar documents a dense wave of Japanese breach disclosures that began in late September and surged through October 2026. The firm’s Dark Web News logged 134 Japan-related items in the first half of October, more than all of September (129) and at roughly…
-
WhatsApp Help Pages Hid Chatbot Instructions to Discourage GDPR Complaints
WhatsApp’s help pages reportedly contained hidden instructions embedded in the page HTML that directed its support chatbot not to advise users to contact data protection authorities or regulators, particularly for users who could not delete their accounts.…
The Hacker News -
AI Workflows Can Outrun Security as Untracked Tools Spread at Work
The Hacker News piece examines how AI-assisted workflows and other “wild code” can spread inside organisations, creating new dependencies before security teams even realise they exist. It describes how a sales‑team workflow that uses credentials to access…
The Hacker News -
Go Blocks Eight eMudhra Certificate Keys in Emergency Update
Go has issued an emergency update for Go 1.27.3 and Go 1.26.10, released on 20 October 2026, that blocks eight intermediate certificate authority keys from a single unnamed CA whose operation the Go team says raises “specific security concerns”. The new…
The Hacker News -
Microsoft Adds Controls to Curb Risky AI Agents in the Workplace
Microsoft has announced new controls to monitor and restrict potentially rogue AI agents operating in enterprise environments, urging organisations to treat these agents as insiders rather than trusted software. The update builds on Project Perception,…
SecurityWeek -
AI-Driven Ransomware Campaign Targeted 62 Organisations
SOCRadar Threat Research Unit (STRU) has disclosed an AI-driven intrusion ecosystem operated by affiliates of INC Ransomware and The Gentlemen Ransomware. A publicly accessible command-and-control server exposed the operators’ AI session databases, their…
-
APT28 Breaches NATO Naval Shipbuilder and Steals Credentials in Week-Long Intrusion
The Hacker News reports that the Russia-linked APT28 group, also known as BlueDelta, Fancy Bear or Forest Blizzard, has been attributed by Symantec Threat Hunter Team (Swallowtail) with breaching multiple NATO-related targets, including a naval shipbuilder…
-
ConnectWise Suspends Cloud Backup After Hackers Access App Identities
ConnectWise has disclosed remediation steps following a security incident that granted unauthorized access to Cloud Backup application identities. The company stated that it disabled affected application connections and suspended Cloud Backup, with…
The Hacker News -
AfD Mail Breach Exposes 421,000 Emails in Unverified Online Archive
AfD Email Breach Exposes 421,000 Messages in Anonymous Online Archive reports that Germany’s Alternative für Deutschland (AfD) confirmed on 19 October 2026 that its hosting provider was hacked in September and mailboxes were copied. An online index published…
Security Affairs -
Siemens Software Center2 articles this day · The Hacker News first
Attackers exploit Siemens Software Center flaw to spread malware via ClickFix · Siemens Patches Software Center Flaw Exploited in ClickFix Attacks
-
Attackers exploit Siemens Software Center flaw to spread malware via ClickFix
Siemens has warned customers that attackers are actively exploiting a dynamic link library (DLL) side-loading flaw in its Software Center to distribute malware. The activity is linked to the Romulus multi-platform ClickFix campaign, a server hosting panel…
-
Siemens Patches Software Center Flaw Exploited in ClickFix Attacks
Siemens has disclosed and patched a DLL sideloading flaw in its Software Center that has been actively exploited in ClickFix campaigns. Tracked as CVE-2026-110936 (CVSS v4 score: 8.4), the vulnerability arises because the affected application loads DLLs from…
-
-
Nikkei discloses breach exposing 1.83 million records after credential theft
Nikkei, the Japanese media group behind publications such as The Nikkei and Financial Times, disclosed a fresh data breach affecting about 1.83 million records. The incident involved a cloud service used for system development. Hackers gained access on the…
SecurityWeek -
Meta fixes Ray Ban glasses bug that recorded conversations unprompted
Meta says it has fixed an issue in Ray‑Ban Meta smart glasses that caused unprompted audio recording, with users reporting conversations being captured and transcribed without them saving the data or using the wake phrase “Hey Meta.” The reports appeared on…
Malwarebytes -
Brazilian Man Sells Belongings to Meet an AI-Generated Farmwoman
A Brazilian bricklayer, Edimar Rocha Martins, travelled around 2,000 kilometres by bus from Imperatriz to Belo Horizonte after becoming convinced by an online persona named “Fazendeira,” an AI-generated woman who promised to fund his trip and invite him to…
Malwarebytes -
GNOME OS Preview Lets Users Test GNOME 51.1 on PC or VM
GNOME OS Preview brings the GNOME 51.1 desktop to a public testing image, offering a complete GNOME experience in a single bootable system. Unlike traditional Linux deployments that rely on a distribution’s package manager, GNOME OS updates are applied…
SecurityOnline -
Paradigm Healthcare Breach Exposes Data of 970,000 Medi-Cal Members
Paradigm Healthcare Services has disclosed a data breach affecting more than 970,000 Medi-Cal members, California’s Medicaid programme. The San Francisco-based company, which processes billing for Medi-Cal under a data use agreement with the California…
SecurityWeek -
Windows Server 2025 Can Now Automatically Fix Critical Boot Failures
Microsoft has announced that Windows Server 2025 now includes Quick Machine Recovery (QMR), a feature that first appeared on Windows 11. Introduced after a major outage earlier in 2025, QMR activates when a server experiences a severe fault: WinRE (Windows…
SecurityOnline -
Google Now Links Android Phone Numbers to Every Signed In Account
Google has announced that Android phone number verification is now on by default. The change means that when a user sets up an Android device, Google verifies one or more phone numbers on the device and links those numbers to every Google account signed in…
SecurityOnline -
Hackers Poison Five OVHcloud CLI Releases to Steal Stored Secrets
An attacker compromised a contributor’s GitHub account and replaced the download archives for five OVHcloud CLI releases. The swap occurred on Monday, 19 October 2026, between 12:47 and 14:21 UTC, and targeted users on macOS, Linux x86_64 or arm64, and…
The Hacker News -
Ransomware gangs bypass MFA through PAN OS VPN flaw CVE-2026-0257
Ransomware groups are abusing CVE-2026-0257, a GlobalProtect authentication bypass in PAN-OS, to gain VPN access without valid credentials and to bypass MFA safeguards. The exposed flaw lets attackers skip login checks on vulnerable GlobalProtect portals and…
-
TP-Link shifts router assembly to Mississippi amid US import ban
TP-Link has announced a shift in its router manufacturing strategy in response to US regulatory actions. Following the FCC’s designation of foreign-manufactured consumer routers as national security risks and the subsequent ban on importing newly…
SecurityOnline -
Microsoft Treats AI Agents as Insider Threats in New Security Framework
Microsoft has laid out a security framework that treats AI agents as insider threats, arguing that safe operation requires ongoing containment and real-time governance rather than trusting them at onboarding. In a detailed blog post, Microsoft describes AI…
Security Affairs -
OVHcloud CLI Supply Chain Attack Replaced Releases to Steal Secrets
An OVHcloud supply-chain incident involved an attacker swapping release binaries for the OVHcloud CLI on GitHub with a modified build that exfiltrates secrets from disk. The attack surfaced when a customer’s pipeline failed a SHA-256 checksum check,…
SecurityOnline -
Ahold Delhaize Cyberattack Takes Shopping Sites and Apps Offline
Ahold Delhaize disclosed on 19 October 2026 that a cyberattack forced the group to take most of its brand websites and mobile apps offline across Europe and the United States. The disruption affected a broad range of online shopping channels, with physical…
SecurityOnline -
Windows 11 speeds up Edge launches with a new background process feature
Microsoft is testing a new accelerated app launch feature in Windows 11 preview builds, initially limited to the Microsoft Edge browser. The aim is to make Edge start faster when a user launches it, with potential for other developers to apply for access.…
SecurityOnline -
Japanese Software Firm Sourcenext Resets Passwords After Breach Exposes 22.5 Million Records
Sourcenext, a prominent Japanese software distributor, has disclosed a data breach in which an internal member information query API was abused by unauthorised actors. The incident is believed to have compromised up to 22,519,960 customer records, including…
SecurityOnline -
Linux Kernel Maintainers Drop AI Tag After It Failed to Show Usage
The Linux Kernel Maintainers have voted to retire the Assisted-by tag for patches. At the Linux Kernel Maintainers Summit on 8 October, attendees agreed to drop the tag, and a revert patch landed in the documentation development branch on 14 October.…
SecurityOnline -
A Warehouse WMS Breach Could Disrupt Every Stage of Order Fulfilment
A Kaspersky study titled The journey of a paper unicorn: adventures inside a modern warehouse traces a modern warehouse through eight stages—from unloading to shipment—and shows how a cyberincident can cascade through both IT and OT layers to disrupt every…
-
Windows 11 Update Breaks Xbox Live Sign In, but a Workaround Works
Following the Windows 11 cumulative update KB5127648, many players began experiencing persistent Xbox Live authentication failures. The issue causes games that rely on Xbox Live login to fail to sign players in, with notable impact on popular casual titles…
SecurityOnline -
Spyware Used Targeted Ads to Infect Al Jazeera Devices Without Clicks
Citizen Lab has exposed a new AdFection spyware delivery chain that uses targeted advertising to plant information-stealing code on devices without any user interaction. The researchers describe how attackers leverage the real-time bidding (RTB) ecosystem to…
SecurityOnlineCaramel Tsunami -
Former OpenAI Engineer Accused of Spying on Executives for Saudi Arabia
A US court has ordered the detention of Abdulrahman Alfozan, a Saudi national and former OpenAI engineer, amid allegations he planted a covert audio recorder in the back of a television in OpenAI’s San Francisco executive conference room to capture sensitive…
The Hacker News -
EU Reviews Google’s Search and Play Store Changes After €890m Fine
The European Commission is continuing dialogue with Google as it assesses the company’s compliance with the Digital Markets Act (DMA) following its July ruling and a combined 890 million euro penalty. The Commission is reviewing Google’s recent changes to…
SecurityOnline -
ChatGPT Can Now Read Open Tabs and Automate Tasks Across Sites
OpenAI has announced a major update to its ChatGPT Chrome extension, introducing browser context awareness that lets ChatGPT see and analyse the tabs a user has open. The enhancement, available on Chrome and other Chromium-based browsers, pairs with…
SecurityOnline -
OpenCode Breach Exposes AI Provider Keys in Distillation Attack
OpenCode has disclosed a security breach tied to a large-scale AI distillation attack that affected 1.4 per cent of OpenCode Console users. The company announced the incident on 17 October 2026 and said its investigation is ongoing. The breach centres on…
SecurityOnline -
Apple Bans Nudify Apps and Closes a Loophole for Deepfake Abuse
Apple has tightened its App Store rules to target the misuse of synthetic media, announcing an immediate ban on nudify-style apps that generate non-consensual intimate imagery. The company’s updated developer guidelines bar tools that synthesize sexually…
SecurityOnline -
ROMULUS ClickFix Platform Uses Fake ChatGPT Pages to Spread Malware
Cybersecurity researchers have detailed a new ClickFix-style delivery platform named ROMULUS, used to distribute malware such as Legion Loader. Forescout Research – Vedere Labs describe ROMULUS as a modular malware delivery service that lures users to bogus…
The Hacker News -
Ubuntu 26.10 adds local voice transcription and TPM encryption upgrades
Canonical’s Ubuntu 26.10 release, published on 20 October 2026, is an interim, non-LTS distribution offering nine months of active support through July 2027. Aimed at desktop enthusiasts, it foregrounds speedier UI responsiveness and newer features, while…
SecurityOnline -
Expired Windows Boot Certificate Could Block Future Secure Boot Protections
The Windows Production PCA 2011 certificate has officially expired on 19 October 2026. This certificate long served to authenticate the integrity of the Windows Boot Manager during initial system startup. Microsoft states that devices still relying on the…
SecurityOnline -
Windows 11 update promises up to 20% faster performance on 8GB PCs
Microsoft is rolling out a substantial Windows 11 performance update aimed at improving responsiveness on devices with modest memory, such as 8GB RAM laptops. The company says a redesigned low-level memory scheduler and related optimisations can deliver up…
SecurityOnline -
OpenAI Confirms It Is Building a Humanoid Robot, With a Demo Possible in 2027
OpenAI chief executive Sam Altman has publicly confirmed that the company is developing its own humanoid robot, a move that has long circulated in industry chatter. Speaking on the Sources podcast, Altman reiterated that OpenAI intends to pursue a robot in a…
SecurityOnline
