News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Mon 12 Jan· 50 articles
-
BreachForums Breached, Exposing 324K Cybercriminals
BreachForums has been breached again, exposing the real identities of hundreds of thousands of cybercriminals who believed they operated anonymously. On 9 January, an individual using the moniker “James” published a database containing detailed information…
Dark Reading -
U.S. CISA adds a flaw in Gogs to its Known Exploited Vulnerabilities catalog
According to CISA, the U.S. Cybersecurity and Infrastructure Security Agency, a Gogs path traversal vulnerability has been added to the Known Exploited Vulnerabilities catalog, tracked as CVE-2025-8110 with a CVSS score of 8.7. The flaw arises from improper…
Security Affairs -
GoBruteforcer Botnet Targets 50K-plus Linux Servers
Researchers describe a souped‑up GoBruteforcer botnet that preys on Linux servers with weak credentials, including attacking services such as FTP, MySQL, Postgre, and phpMyAdmin. On Jan 7, Check Point Research detailed the modular botnet, whose compromised…
Dark Reading -
Received an Instagram password reset email? Here’s what you need to know
Last week, unsolicited emails from Instagram about a password reset were reported by many users, while a cybercriminal offering data on about 17 million Instagram accounts appeared on a Dark Web forum. The 17 million records reportedly include usernames,…
Malwarebytes -
Navigating Privacy and Cybersecurity Laws in 2026 Will Prove Difficult
Navigating privacy and cybersecurity laws in 2026 will prove difficult for enterprises, with compliance challenges expected to persist even as new regulations emerge. According to McDermott, Will and Schulte’s David Saunders, the fast pace of change in the…
Dark Reading -
FBI Flags Quishing Attacks From North Korean APT
A state-sponsored North Korean threat group linked to Kimsuky has adopted a QR code-based quishing technique in spear-phishing campaigns aimed at US and foreign government agencies, NGOs and academic institutions, according to an FBI flash alert. The alert…
Dark Reading -
Hexnode Moves into Endpoint Security With Hexnode XDR
Hexnode has marked its entry into endpoint security with the launch of Hexnode XDR, a move announced in a press release on 6 January 2026. According to Hexnode, the enterprise software division of Mitsogo, XDR provides enterprise-grade detection and response…
Dark Reading -
Meta fixes Instagram password reset flaw, denies data breach
Meta confirmed a password reset flaw that allowed third parties to trigger reset emails, while denying any breach of its systems; according to Instagram, there was no system breach and users’ accounts remain secure, with a note to ignore the emails if…
Security Affairs -
n8n Supply Chain Attack Abuses Community Nodes to Steal OAuth Tokens
Threat actors uploaded eight npm packages that posed as n8n integrations to siphon developers’ OAuth credentials, with one package mimicking a Google Ads integration and prompting users to link their advertising account. According to Endor Labs, the campaign…
The Hacker News -
Dutch court sentences hacker who used port systems to smuggle cocaine to 7 years
A Dutch appeals court sentenced a 44-year-old man to seven years in prison for hacking a major port company in Belgium to help smuggle cocaine into the Netherlands. According to The Amsterdam Court of Appeal, the man played a central technical role in a…
DataBreaches -
Two Separate Campaigns Target Exposed LLM Services
Attackers focused on exposed large language model (LLM) services across two campaigns that, together, generated 91,403 attack sessions spotted by GreyNoise between October 2025 and January 2026. According to GreyNoise, the first campaign likely involved…
Dark Reading -
Cyber Insights 2026: What CISOs Can Expect in 2026 and Beyond
SecurityWeek’s Cyber Insights 2026 argues that the CISO role is expanding rapidly, with leaders needing to bridge security investment to business outcomes as boardroom concerns grow, and many organisations considering a split or addition of specialised roles…
SecurityWeek -
Instagram Fixes Password Reset Vulnerability Amid User Data Leak
Instagram fixed a password reset vulnerability that allowed third parties to send reset emails to users, Meta confirmed, amid claims of a wider user-data leak. The vulnerability, which Meta said was resolved, involved external parties being able to request…
SecurityWeek -
Regulators around the world are scrutinizing Grok over sexual deepfakes
Regulators around the world are scrutinising Grok over sexual deepfakes, as Grok’s failure to block sexualised images of minors has turned an isolated lapse into a global regulatory stress test for xAI’s ambitions. Last week the site noted Grok’s apology…
Malwarebytes -
AuraInspector: Auditing Salesforce Aura for Data Exposure
Written by: Amine Ismail, Anirudha Kanodia Introduction Mandiant is releasing AuraInspector, a new open-source tool designed to help defenders identify and audit access control misconfigurations within the Salesforce Aura framework. Salesforce Experience…
Google CloudOriginal report -
⚡ Weekly Recap: AI Automation Exploits, Telecom Espionage, Prompt Poaching & More
This week’s recap highlights how small oversights can trigger large-scale cyber incidents, with high-profile flaws and misconfigurations driving widespread impact. A maximum-severity flaw in the n8n workflow automation platform, tracked as CVE-2026-21858,…
The Hacker News -
Another plastic surgery practice fell prey to a cyberattack with extortion attempt
The article reports that a fourth plastic surgery practice was struck by a cyberattack last year, with the same threat actors who previously hit other clinics. Dozens of patients at Dr. Richard Swift’s Upper East Side office had hacked nude images and…
DataBreaches -
Second NZ health provider, Canopy Health, reveals cyberattack
According to RNZ, Canopy Health, the largest private medical oncology provider in New Zealand, disclosed that on 18 July 2025 an unknown person “temporarily obtained unauthorised access” to a part of its systems used by the administration team. The company…
DataBreaches -
CrazyHunter ransomware escalates with advanced intrusion tactics, six Taiwan healthcare victims confirmed
CrazyHunter ransomware is described as a serious and escalating threat by Trellix, with six confirmed victims among healthcare organisations in Taiwan. Trellix has tracked the malware since its first appearance, noting rapid technical evolution and…
DataBreaches -
United Kingdom Under DDoS Siege: Weekly DDoS Threat Intelligence Analysis
Between 5 and 11 January 2026, the United Kingdom faced a concentrated DDoS campaign led by the pro-Russian threat actor NoName057(16) and their DDoSia project, according to SOCRadar. The seven-day operation produced 1,812 recorded attack entries across 86…
SOCRadar -
Celebrating reviews and recognitions for Malwarebytes in 2025
According to AVLab Cybersecurity Foundation, Malwarebytes earned another Advanced In-The-Wild badge in 2025 after testing 244 real-world malware samples across 14 cybersecurity products, with Malwarebytes Premium Security detecting every sample and averaging…
Malwarebytes -
APT282 articles this day · Security Affairs first
Russia’s APT28 Targeting Energy Research, Defense Collaboration Entities · Credential-harvesting attacks by APT28 hit Turkish, European, and Central Asian organizations
2 outlets-
Russia’s APT28 Targeting Energy Research, Defense Collaboration Entities
According to Recorded Future, Russia’s state-sponsored group APT28 has been targeting organisations connected with energy research, defence collaboration entities, and government communications. APT28, also known as BlueDelta, Fancy Bear, Forest Blizzard,…
SecurityWeek -
Credential-harvesting attacks by APT28 hit Turkish, European, and Central Asian organizations
According to a report by Recorded Future’s Insikt Group, the Russia-linked APT28 carried out credential-harvesting campaigns between February and September 2025, targeting Turkish energy and nuclear agency staff, European think tank personnel, and…
Security Affairs
-
-
Europol and Spanish Police arrest 34 in crackdown on Black Axe criminal network
Europol and Spanish Police have arrested 34 suspects in Spain in a crackdown on the Black Axe criminal network, with most arrests taking place in Seville and others in Madrid, Málaga and Barcelona. According to Europol, the operation was a joint effort by…
Security Affairs -
LLMs in Attacker Crosshairs, Warns Threat Intel Firm
Threat intel firm GreyNoise reports that threat actors have been probing misconfigured proxy servers that could provide access to LLM APIs. Between October 2025 and January 2026, GreyNoise’s honeypots captured over 91,000 attack sessions, including assaults…
SecurityWeek -
GoBruteforcer Botnet Targets Crypto Project Databases by Exploiting Weak Credentials
GoBruteforcer, also known as GoBrut, has been observed targeting databases of cryptocurrency and blockchain projects to recruit infected hosts into a botnet that can brute-force user passwords for FTP, MySQL, PostgreSQL and phpMyAdmin on Linux servers.…
The Hacker News -
EU Sets February Deadline for Verdict on Google’s $32B Wiz Acquisition
The European Union is conducting a Phase I antitrust review into Google’s $32 billion Wiz acquisition and has set an initial decision deadline of February 10, 2026. According to SecurityWeek, the EU Commission will decide whether to clear the deal…
SecurityWeek -
Alleged n8n Exploit, iOS Full-Chain Sale, and Instagram Data
SOCRadar’s Dark Web Team identified several new underground posts this week, including a broad hacking-service listing, an alleged exploit sale targeting n8n, a resurfaced dataset claimed to involve Instagram users, and a full-chain exploit for Apple iOS…
SOCRadar -
Anthropic Launches Claude AI for Healthcare with Secure Health Record Access
Anthropic has launched Claude AI for Healthcare, a new Claude platform feature set that lets U.S. subscribers of Claude Pro and Max opt to give Claude secure access to their lab results and health records by connecting to HealthEx and Function, with Apple…
The Hacker News -
The Hype Hangover: Dell Admits Consumers Aren’t Buying the “AI PC” Narrative
Dell has admitted that for the vast majority of consumers, artificial intelligence remains insufficient to drive purchases, despite ongoing efforts to embed Neural Processing Units and on-device inferencing. Reports suggest a disconnect between the…
SecurityOnline -
Torq Raises $140 Million at $1.2 Billion Valuation
Torq, the Agentic AI security operations company, has raised $140 million in a Series D round, lifting its valuation to $1.2 billion and bringing total funding to $332 million. The investment round was led by Merlin Ventures, with participation from prior…
SecurityWeek -
A week in security (January 5 – January 11)
According to Malwarebytes Labs, the week of January 5 to January 11 was recapped in a post dated January 12, 2026, highlighting a mix of investigations and warnings. The round-up includes pcTattletale founder pleads guilty in a US stalkerware case, a piece…
Malwarebytes -
Researchers Uncover Service Providers Fueling Industrial-Scale Pig Butchering Fraud
Cybersecurity researchers have highlighted two service providers that supply online criminal networks with the tools and infrastructure needed to fuel the pig butchering-as-a-service (PBaaS) economy, with activity dating back at least to 2016. The analysis…
The Hacker News -
Enshittification is ruining everything online (Lock and Code S07E01)
The Malwarebytes piece published on 11 January 2026 explores the concept of enshittification as a business strategy that degrades online services for short-term gain. It cites digital rights activist and author Cory Doctorow, quoting him as describing how…
Malwarebytes -
The 2nm Reunion: Qualcomm Confirms Samsung Foundry Talks at CES 2026
During CES 2026, Qualcomm CEO Cristiano Amon formally confirmed that the company is in talks with Samsung regarding a strategic foundry alliance for its 2nm process. This marks Qualcomm’s first public indication of a potential return to Samsung’s…
SecurityOnline -
The Glass Box: Musk Pledges Full X Algorithm & Ad Transparency in 7 Days
Elon Musk has pledged to open-source X’s nascent algorithm within seven days, extending the transparency beyond how feeds are curated to the decision logic behind advertisement recommendations. According to Musk’s pronouncements on X, the disclosure will…
SecurityOnline -
The Solonik Leak: 17.5 Million Instagram Profiles Exposed on Dark Web
According to Malwarebytes, the Solonik leak has compromised approximately 17.5 million Instagram users, with the database now offered for sale on illicit marketplaces and being actively traded on subterranean forums. The dataset reportedly contains…
SecurityOnline -
WAFs Wide Open: Critical OWASP CRS Flaw Bypasses Filters
SecurityOnline -
Critical React Router Flaws: CVE-2025-61686 Exposes Server Files
Developers relying on the popular React Router library are being urged to patch their applications immediately following the disclosure of multiple high-severity vulnerabilities, led by CVE-2025-61686 which carries a CVSS score of 9.1. The flaw resides in the…
SecurityOnline -
Hackers Accessed University of Hawaii Cancer Center Patient Data; They Weren’t Immediately Notified
Hackers accessed the University of Hawaii Cancer Center’s patient data, with Social Security numbers and other personal information from study participants exposed during the August breach. Four months later, UH had yet to notify those affected that their…
SecurityWeek
