News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Tue 13 Jan· 60 articles
-
CVE-2026-22718: EOL Spring CLI Tool for VS Code Found Vulnerable to Command Injection
Developers using the Spring CLI VSCode Extension have been urged to remove it after a vulnerability, CVE-2026-22718, was found in the now-defunct extension that could allow an attacker to execute arbitrary commands on a user’s machine. The flaw is rated with…
SecurityOnline -
AZ Monica hospital in Belgium shuts down servers after cyberattack
AZ Monica hospital in Belgium shut down its servers after a cyberattack, forcing the network to cancel procedures and transfer seven critical patients with Red Cross support, while urgent care continues. The hospital said it disconnected its systems at 6:32…
Security Affairs -
CISO Succession Crisis Highlights How Turnover Amplifies Security Risks
When cybersecurity leadership turns over too quickly, risk does not reset; it compounds, a dynamic highlighted by discussions with Nicole Jiang of Fable Security. The piece notes that average CISO tenure now hovers between 18 and 26 months, with an industry…
Dark Reading -
Never-before-seen Linux malware is “far more advanced than typical”
Researchers have uncovered a never-before-seen Linux malware framework, dubbed VoidLink, that infects machines with a broad and advanced array of modules—more than 30 currently available to tailor capabilities for each infected host. The two-stage loader and…
Ars Technica -
NY: Southold Laserfiche access remains suspended after cyberattack
Access to Southold’s Laserfiche online record-keeping system remains suspended with no timeline for restoration, more than six weeks after a cyberattack forced the town offline. The town is finalising about $500,000 in security upgrades funded through a Town…
DataBreaches -
'Most Severe AI Vulnerability to Date' Hits ServiceNow
According to AppOmni, ServiceNow tacked agentic AI onto a largely unguarded legacy chatbot, exposing customers’ data and connected systems and enabling an attacker with limited information to gain admin-level access. The researcher, Aaron Costello, who is…
Dark Reading -
Tennessee man to plead guilty to hacking US Supreme Court filing system
A DataBreaches[.]Net report dated 13 January 2026 says a resident of Springfield, Tennessee, is expected to plead guilty to hacking the US Supreme Court’s electronic filing system dozens of times over several months. Prosecutors say that between August and…
DataBreaches -
University of Hawaii Cancer Center: Hackers Stole Research Files, Encrypted Data
The University of Hawaii Cancer Center, the only National Cancer Institute-designated centre in the state, reportedly faced a ransomware incident in August 2025 in which hackers stole research files and encrypted data. Cancer patients who took part in…
DataBreaches -
Microsoft Starts 2026 With a Bang: A Freshly Exploited Zero-Day
Security teams are facing a busier January Patch Tuesday, with Microsoft’s update addressing 112 CVEs—roughly double December’s tally. The patch bundle includes a freshly exploited zero-day in Desktop Window Manager, CVE-2026-20805, with a CVSS of 5.5, which…
Dark Reading -
CrowdStrike to Acquire Browser Security Firm Seraphic for $420 Million
CrowdStrike has announced plans to acquire browser security startup Seraphic Security for roughly $420 million, with the deal expected to close in the first quarter of CrowdStrike’s fiscal year 2027 and funded mainly in cash, though a portion will be paid in…
SecurityWeek -
Threat Brief: MongoDB Vulnerability (CVE-2025-14847)
MongoDB’s MongoBleed vulnerability (CVE-2025-14847) is a critical, unauthenticated memory-disclosure flaw in how the server handles zlib-compressed wire-protocol messages, enabled by default, meaning an attacker only needs network access to the default…
unit42.paloaltonetworks.com -
Adobe Patches Critical Apache Tika Bug in ColdFusion
Adobe has released patches for 25 vulnerabilities across 11 products, including a critical Apache Tika flaw in ColdFusion. The issue, tracked as CVE-2025-66516 with a CVSS score of 10/10, is an XML External Entity injection that could be exploited via XFA…
SecurityWeek -
Microsoft Patches Exploited Windows Zero-Day, 111 Other Vulnerabilities
Microsoft’s January 2026 Patch Tuesday fixes address 112 vulnerabilities, including a zero-day that has been actively exploited in attacks, tracked as CVE-2026-20805 in the Desktop Windows Manager component of Windows. According to SecurityWeek, the…
SecurityWeek -
Threat actor claims the theft of full customer data from Spanish energy firm Endesa
Endesa disclosed a data breach that exposed full customer data, including contact details, national ID numbers, and payment information, after attackers accessed and may have exfiltrated data related to energy contracts, though passwords were not reportedly…
Security Affairs -
Why Runtime Is Where Cloud Security Really Counts
Published on 13 January 2026, the piece argues that cloud security must move from prevention alone to a runtime-first approach, because attacks unfold at runtime across ever-changing workloads and identities. It outlines four defining capabilities of…
darktrace.com -
Shadow#Reactor Uses Text Files to Deliver Remcos RAT
Shadow#Reactor is a multistage Windows malware campaign that uses text-only files to deliver the Remcos remote access Trojan, a technique described by researchers as a living-off-the-land style approach. According to Securonix, attackers gain initial access…
Dark Reading -
Long-Running Web Skimming Campaign Steals Credit Cards From Online Checkout Pages
Cybersecurity researchers have uncovered a major web skimming campaign that has been active since January 2022, targeting major payment networks including American Express, Diners Club, Discover, JCB Co., Mastercard and UnionPay. The campaign uses highly…
The Hacker News -
Malicious Chrome Extension Steals MEXC API Keys by Masquerading as Trading Tool
A malicious Google Chrome extension called MEXC API Automator (ID: pppdfgkfdemgfknfnhpkibbkabhghhfh) has been revealed as a credential-stealing tool for MEXC API keys, with the extension having 29 downloads and still available on the Chrome Web Store as of…
The Hacker News -
GoBruteforcer Botnet Targeting Crypto, Blockchain Projects
GoBruteforcer, a Go-written botnet, is targeting cryptocurrency and blockchain projects in a financially motivated campaign, according to Check Point. The operation recruits Linux servers into a scanning and password brute-forcing network that focuses on…
SecurityWeek -
After Goldman, JPMorgan Discloses Law Firm Data Breach
JPMorgan Chase has informed some investors about a data breach linked to an outside law firm incident, the same event that Goldman Sachs disclosed in December 2025. According to Goldman Sachs' notification to impacted investors, Fried Frank told the company…
SecurityWeek -
Cyber Insights 2026: External Attack Surface Management
Cyber Insights 2026: External Attack Surface Management argues that AI will both help and hinder defenders, assisting in identifying external assets while enabling attackers to locate weak points, making the battle between attackers and defenders larger and…
SecurityWeek -
How Microsoft builds privacy and security to work hand-in-hand
Microsoft says privacy and security are two sides of the same coin, delivered together at scale through a philosophy of protecting data without needing to access it. According to The 2025 Axios Harris Poll 100 reputation rankings, Microsoft is ranked among…
Microsoft -
Data broker fined after selling Alzheimer’s patient info and millions of sensitive profiles
California’s privacy regulator fined a Texas data broker, Datamasters (doing business as Datamasters), $45,000 and banned it from selling Californians’ personal information after it sold Alzheimer’s patient data, according to the California Privacy…
Malwarebytes -
Antwerp’s AZ Monica hospital hit by cyber attack
Antwerp’s AZ Monica hospital was hit by a cyber attack on Tuesday, hospital officials confirmed. The attack affected computer systems at both campuses, in Deurne and Antwerp (Harmonie), and the problem was discovered around 6.30 am when staff noticed a…
DataBreaches -
Dutch court convicts hacker who exploited port networks for drug trafficking
Dutch appeals court jailed a 44-year-old hacker for seven years for hacking port systems to help smuggle cocaine through European logistics hubs into the Netherlands, reducing the sentence from 10 years after a lengthy appeal process lasting more than 21…
Security Affairs -
Introducing StepSecurity Developer MDM: Protecting Developer Machines from Supply Chain Attacks
Modern supply chain attacks are increasingly targeting developer machines and AI coding agents, which hold credentials such as GitHub tokens, npm publishing credentials, SSH keys, and other secrets that can access production infrastructure.
StepSecurity -
Attackers Abuse Python, Cloudflare to Deliver AsyncRAT
Attackers are abusing Python and Cloudflare to deliver AsyncRAT via a phishing campaign that hides malicious activity behind trusted infrastructure. Discovered by researchers at Trend Micro, the campaign uses Cloudflare’s free-tier services and TryCloudflare…
Dark Reading -
Broadcom Wi-Fi Chipset Flaw Allows Hackers to Disrupt Networks
According to SecurityWeek, a vulnerability found by researchers at Black Duck affects Broadcom Wi‑Fi chipsets and was first identified in Asus routers, with the issue extending to all devices using the affected chipset. The flaw can be exploited by an…
SecurityWeek -
[Webinar] Securing Agentic AI: From MCPs and Tool Access to Shadow API Key Sprawl
According to The Hacker News, a forthcoming webinar on securing agentic AI examines how MCPs—Machine Control Protocols—sit behind agentic AI workflows, governing what an AI agent can run, which tools it can call, which APIs it can access and what…
The Hacker News -
Why iPhone users should update and restart their devices now
According to Apple, attackers are already exploiting two WebKit zero‑day vulnerabilities in the wild, prompting a push for iPhone 11 and newer users to move to iOS 26+ where fixes and new memory protections reside. The flaws were patched on 12 December 2025…
Malwarebytes -
Armenia probes alleged sale of 8 million government records on hacker forum
Hackers are offering for sale what they claim is a large trove of Armenian government-related data, prompting officials in Yerevan to open an investigation into a potential breach, reported on 13 January 2026. The dataset, advertised on an underground forum…
DataBreaches -
Massive cyberattack on Polish power system in December failed, minister says
According to Reuters, Poland’s power system faced its largest cyberattack in years in the last week of December, with the attack aiming to disrupt the communication between renewable installations and the power distribution operators, Milosz Motyka told…
DataBreaches -
SAP’s January 2026 Security Updates Patch Critical Vulnerabilities
SAP’s January 2026 Security Updates patch 17 notes, four of which address critical-severity vulnerabilities, SecurityWeek reports. The first advisory resolves CVE-2026-0501 (CVSS 9.9), a SQL injection bug in S/4HANA tied to the ABAP Database Connectivity…
SecurityWeek -
Signal creator Moxie Marlinspike wants to do for AI what he did for messaging
Confer, the open source AI assistant unveiled by Signal creator Moxie Marlinspike, aims to do for AI what Signal did for messaging by making user data unreadable to the platform operator, hackers, law enforcement, or any other party other than account…
Ars Technica -
New Advanced Linux VoidLink Malware Targets Cloud and container Environments
Cybersecurity researchers have disclosed VoidLink, a previously undocumented Linux malware framework aimed at long-term, stealthy access to cloud environments. First discovered in December 2025, VoidLink is described by Check Point Research as a…
The Hacker News -
What Should We Learn From How Attackers Leveraged AI in 2025?
What Should We Learn From How Attackers Leveraged AI in 2025? argues that the most effective attacks still rely on the same fundamentals as years past, but attackers now execute them with greater efficiency thanks to AI. The piece highlights the continued…
The Hacker News -
Dutch Port Hacker Sentenced to Prison
A Dutch national has been sentenced to seven years in prison for conspiring to deploy remote access malware on a logistics firm’s systems to access port infrastructure in the Netherlands and Belgium, the SecurityWeek report states. The 44-year-old, who was…
SecurityWeek -
ServiceNow Patches Critical AI Platform Flaw Allowing Unauthenticated User Impersonation
ServiceNow has disclosed details of a now-patched critical security flaw in its ServiceNow AI Platform that could enable an unauthenticated user to impersonate another user and perform the impersonated user’s operations. The vulnerability, tracked as…
The Hacker News -
Remote Code Execution With Modern AI/ML Formats and Libraries
We identified remote code execution vulnerabilities in three open-source AI/ML Python libraries published by Apple, Salesforce and NVIDIA on their GitHub repositories. The affected libraries are NeMo, Uni2TS and ml-flextok, with Uni2TS used by Salesforce…
unit42.paloaltonetworks.com -
Spanish Energy Company Endesa Hacked
Spanish energy company Endesa has notified customers that their information was compromised in a data breach, with unauthorized access to its commercial platform affecting customers of its gas distributor Energia XXI. Endesa, majority-owned by Enel Group,…
SecurityWeek
