News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Fri 2 Jan· 26 articles
-
Two U.S. cybersecurity professionals plead guilty in BlackCat/Alphv ransomware case
Two U.S. cybersecurity professionals, Ryan Goldberg and Kevin Martin, pleaded guilty to charges tied to their roles in BlackCat/Alphv ransomware attacks that occurred in 2023. Court records show they and a co-conspirator deployed ALPHV BlackCat against U.S.…
Security Affairs -
NZ: ManageMyHealth data breach: More than 108k users potentially affected
NZ Healthtech portal ManageMyHealth has been hit by a data breach with more than 108,000 users potentially affected. According to 1News, the breach impacted between 6% and 7% of the roughly 1.8 million registered users, equating to between 108,000 and…
DataBreaches -
Healthcare Firm Handing $2,000,000+ To Customers After Data Breach Exposes ‘Highly Confidential’ Information of 512,000 People
A US healthcare firm has agreed to pay out 2.2 million dollars to settle a class action linked to a data breach at Consulting Radiologists Ltd in February 2024, which was later added to LockBit’s leak site in April 2024, according to the settlement…
DataBreaches -
NIST Publishes Preliminary Draft of Cybersecurity Framework Profile for Artificial Intelligence for Public Comment
NIST published a preliminary draft of the Cybersecurity Framework Profile for Artificial Intelligence for public comment on 16 December 2025. The draft profile overlays three AI Focus Areas—Secure, Detect, Thwart—onto the CSF 2.0 outcomes (Functions,…
DataBreaches -
European Space Agency confirms breach of “external servers”
On 2 January 2026, the European Space Agency confirmed that attackers recently breached servers outside its corporate network, which contained what it described as “unclassified” information on collaborative engineering activities. Founded 50 years ago and…
DataBreaches -
Covenant Health data breach after ransomware attack impacted over 478,000 people
Covenant Health, a Massachusetts-based healthcare provider, suffered a ransomware attack in May 2025 that disrupted systems across its hospitals, clinics and practices, including St. Joseph’s in New Hampshire and two Maine hospitals. The incident, which…
Security Affairs -
The Kimwolf Botnet is Stalking Your Local Network
The Kimwolf botnet, which KrebsOnSecurity reported on January 2, 2026, has infected more than 2 million devices globally, with two-thirds of infections on Android TV boxes that lack security or authentication. The spread relies on turning end users’…
Krebs on Security -
Cybersecurity Predictions for 2026: Navigating the Future of Digital Threats
Cybersecurity experts predict that 2026 will be defined by AI-driven threats and a shift from prevention to resilience, with agentic AI and autonomous systems becoming primary targets and identity-based approaches replacing traditional network boundaries as…
Dark Reading -
CTO New Year Resolutions for a More Secure 2026
According to Dark Reading, CTOs in 2026 are prioritising five core resolutions to boost security as they navigate AI, supply chains and post-quantum realities. The editorial highlights operationalising AI governance as a key step, defining what “secure to…
Dark Reading -
Transparent Tribe Launches New RAT Attacks Against Indian Government and Academia
The threat actor known as Transparent Tribe (also called APT36) has been attributed with a fresh set of attacks targeting Indian government, academic, and strategic entities using a remote access Trojan (RAT) to maintain persistent control over compromised…
The Hacker NewsOperation C-Major -
Phishing campaign abuses Google Cloud Application to impersonate legitimate Google emails
Researchers uncovered a phishing campaign that abuses Google Cloud Application Integration to send emails impersonating legitimate Google messages, with the activity described by Check Point as a multi-stage effort designed to evade detection. The campaign…
Security Affairs -
Two US Cybersecurity Pros Plead Guilty Over Ransomware Attacks
Two US cybersecurity professionals have pleaded guilty to charges linked to BlackCat/Alphv ransomware attacks, according to the Justice Department. Kevin Martin from Texas and Ryan Goldberg from Georgia, who worked as ransomware negotiators at DigitalMint…
SecurityWeek -
The ROI Problem in Attack Surface Management
Attack Surface Management tools promise reduced risk, but the article argues that the ROI question is often left unanswered as asset counts rise without clear evidence of risk reduction. According to The Hacker News, the gap lies in measuring inputs such as…
The Hacker News -
RondoDox Botnet Exploiting React2Shell Vulnerability
According to CloudSEK, the RondoDox botnet has been weaponising the React2Shell vulnerability to target Next[.]js servers, with the flaw tracked as CVE-2025-55182. Public disclosure of React2Shell was on 3 December 2025, and exploitation began within days of…
SecurityWeek -
VVS Discord Stealer Using Pyarmor for Obfuscation and Detection Evasion
Palo Alto Networks’ Unit 42 analyze the VVS Discord Stealer, a Python-based malware that targets Discord users by exfiltrating credentials and tokens stored in Discord accounts, and was marketed for sale on Telegram as early as April 2025. The sample is…
unit42.paloaltonetworks.com -
Covenant Health Data Breach Impacts 478,000 Individuals
Covenant Health, an Andover, Massachusetts-based provider, disclosed that a data breach discovered in May 2025 affected more than 478,000 individuals, with the updated figure later stated as 478,188. The incident involved the Qilin ransomware group, which…
SecurityWeek -
IBM warns of critical API Connect bug enabling remote access
IBM disclosed a critical API Connect flaw (CVE-2025-13915, CVSS 9.8) that allows remote access via an authentication bypass. API Connect is IBM’s API management platform used to create, secure, manage, publish and monitor APIs across environments. The…
Security Affairs -
How AI made scams more convincing in 2025
In 2025, advancements in AI significantly enhanced the effectiveness of scams. Cybercriminals utilized AI for voice cloning, enabling them to impersonate not just relatives but also senior officials. They employed AI agents to gather personal data for…
Malwarebytes -
Adobe ColdFusion Servers Targeted in Coordinated Campaign
According to GreyNoise, thousands of requests targeted roughly a dozen vulnerabilities in Adobe ColdFusion during the Christmas 2025 holiday in a single, coordinated intrusion effort. The campaign saw about 6,000 requests aimed at ColdFusion vulnerabilities…
SecurityWeek -
Cybercriminals Abuse Google Cloud Email Feature in Multi-Stage Phishing Campaign
Cybercriminals have exploited Google Cloud’s Application Integration feature to run a multi-stage phishing campaign, with attackers impersonating legitimate Google‑generated messages by distributing emails via the Send Email task. According to Check Point,…
The Hacker News -
The End of Throttling? Samsung’s Radical “Side-by-Side” Plan to Save Exynos
Samsung is reportedly pursuing a radical shift in its Exynos design by moving to a side-by-side packaging arrangement that places the processor and memory adjacent on the substrate rather than stacked. The aim is to tackle heat and throttling by allowing…
SecurityOnline -
The Vision Stalls: Why Apple is Quietly Pulling the Plug on Vision Pro Production
2 January 2026: Apple has significantly scaled back Vision Pro production targets and trimmed its marketing budget, according to Bloomberg journalist Mark Gurman. Supply-chain sources say the company has instructed its assembly partner Luxshare to sharply…
SecurityOnline -
The $3 Trillion Tidal Wave: SpaceX, OpenAI, and Anthropic Gear Up for 2026 IPOs
On 2 January 2026, the Daily CyberSecurity site reports that SpaceX, OpenAI, and Anthropic are gearing up for 2026 IPOs with potential combined valuations exceeding $3 trillion, a figure that could rival the Aramco listing, according to Fox Business. The…
SecurityOnline -
Critical Wget2 Flaws Expose Users to Arbitrary File Overwrites and Memory Crashes
Two newly identified vulnerabilities in GNU Wget2 could allow remote attackers to overwrite sensitive files or crash systems, simply by enticing a user to download a malicious file. Tracked as CVE-2025-69194 and CVE-2025-69195, the flaws target core file…
SecurityOnline -
CVE-2025-68926: Critical Hardcoded Credential Flaw Exposes RustFS Storage Clusters
CVE-2025-68926, described as a critical hardcoded credential flaw, exposes RustFS storage clusters by embedding a static authentication token directly into the code. The vulnerability carries a near-max CVSS score of 9.8, highlighting its severity and ease…
SecurityOnline -
New “Eternl Desktop” Phishing Lure Drops LogMeIn to Hijack Cardano Wallets
A new phishing campaign dubbed by security researchers as a wolf in sheep’s clothing targets Cardano users with a professionally branded “Eternl Desktop” lure. The campaign begins with a convincing email titled “Eternl Desktop Is Live – Secure Execution for…
SecurityOnline
