News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Wed 14 Jan· 63 articles
-
A single click mounted a covert, multistage attack against Copilot
A security flaw in Microsoft's Copilot allowed a single-click, multistage attack that exfiltrated sensitive data from a user’s Copilot chat history, even after the chat window was closed. According to Varonis, hackers used a malicious prompt delivered via a…
Ars Technica -
Retail, Services Industries Under Fire in Oceania
Last year in Australia, New Zealand, and the South Pacific, Main Street industries such as retail and construction faced more cyberattacks than critical sectors, with Cyble tracking 92 sales of compromised access affecting Aussie and Kiwi organisations in…
Dark Reading -
US gov’t: House sysadmin stole 200 phones, caught by House IT desk
According to the government’s version of events, 43-year-old Christopher Southerland was working in 2023 as a sysadmin for the House Committee on Transportation and Infrastructure and had authority to order cell phones for around 80 staffers. In the early…
Ars Technica -
CERT-UA reports PLUGGYAPE cyberattacks on defense forces
CERT-UA reported that PLUGGYAPE malware was used in attacks against Ukraine’s defence forces, with medium confidence attribution to the Russia-linked Void Blizzard group. The infection chain begins with social engineering, as attackers contact targets…
Security AffairsVoid Blizzard -
Microsoft Disrupts Cybercrime Service RedVDS
Microsoft Disrupts Cybercrime Service RedVDS, detailing how RedVDS operated as a cybercrime-as-a-service marketplace that enabled mass phishing and hosted the infrastructure for fraud, including business email compromise schemes. According to Microsoft, the…
Dark Reading -
Researchers Null-Route Over 550 Kimwolf and Aisuru Botnet Command Servers
According to The Black Lotus Labs team at Lumen Technologies, AISURU and its Android counterpart Kimwolf have become among the largest botnets, capable of directing enslaved devices to participate in DDoS attacks and relay malicious traffic for residential…
The Hacker News -
Secure Your Spot at RSAC 2026 Conference
RSAC 2026 Conference in San Francisco is scheduled from 23 to 26 March 2026, inviting thousands of peers to discover new strategies, explore bold technologies, and connect with others facing similar challenges. The Dark Reading article notes the event run…
Dark Reading -
Aikido Security Raises $60 Million at $1 Billion Valuation
According to SecurityWeek, Aikido Security, a Belgium-based startup that helps developers create secure applications, has raised $60 million in a Series B at a $1 billion valuation, bringing its total funding to more than $84 million. The round was led by…
SecurityWeek -
React2Shell Reflections: Cloud Insights, Finance Sector Impacts, and Threat Insights
The blog notes that CVE 2025-55812, known as React2Shell, was disclosed in January 2026, with the vulnerability discovered on 3 December 2025 and a patch released the same day; within 30 hours of the patch, a public proof-of-concept emerged, leaving many…
darktrace.com -
Investor Lawsuit Over CrowdStrike Outage Dismissed
According to SecurityWeek, a federal judge in Austin, Texas, has dismissed a major securities class action against CrowdStrike over the July 2024 outage caused by a software update, ruling that the plaintiffs failed to prove an intent to defraud investors.…
SecurityWeek -
Microsoft named a Leader in IDC MarketScape for Unified AI Governance Platforms
Microsoft has been named a Leader in the 2025-2026 IDC MarketScape for Worldwide Unified AI Governance Platforms, a recognition the company says reflects its commitment to making AI safe, responsible, and enterprise-ready. According to IDC MarketScape, the…
Microsoft -
'VoidLink' Malware Poses Advanced Threat to Linux Systems
VoidLink is described by Check Point researchers as a modular, cloud-first malware framework targeting Linux environments to gain stealthy, long-term access to cloud and container deployments. Researchers say the framework, built with a kernel-mode…
Dark Reading -
Phishing scammers are posting fake “account restricted” comments on LinkedIn
Phishing scammers are posting fake “account restricted” comments on LinkedIn, claiming that a user has engaged in activities that are not in compliance and that their account is temporarily restricted until an appeal is submitted through a link in the…
Malwarebytes -
Fortinet fixed two critical flaws in FortiFone and FortiSIEM
Fortinet has released patches for six vulnerabilities, including two critical flaws in FortiFone and FortiSIEM that could be exploited without authentication to leak configuration data or execute code. The first flaw, CVE-2025-64155, carries a CVSS of 9.4…
Security Affairs -
AI Agents Are Becoming Privilege Escalation Paths
AI agents are moving beyond experiments to become core components of daily workflows across security, IT, and operations, enabling multi-system orchestration from HR provisioning to change management and customer support. These organizational agents are…
The Hacker News -
Inside RedVDS: How a single virtual desktop provider fueled worldwide cybercriminal operations
Over the past year, Microsoft Threat Intelligence has traced RedVDS, a virtual dedicated server provider used by multiple financially motivated threat actors to carry out business email compromise, mass phishing, account takeover and financial fraud, with…
Microsoft -
RedVDS Cybercrime Service Disrupted by Microsoft and Law Enforcement
Microsoft announced on Wednesday that it has teamed up with law enforcement to target RedVDS, a cybercrime service that has facilitated a wide range of malicious activities. Launched in 2019, RedVDS is a virtual dedicated server service that enables threat…
SecurityWeek -
Sicarii Ransomware: Truth vs Myth
Sicarii is a newly observed RaaS operation that surfaced in late 2025 and has only published 1 claimed victim. The group explicitly brands itself as Israeli/Jewish, using Hebrew language, historical symbols, and extremist references not usually seen in…
Check Point -
Hackers Exploit c-ares DLL Side-Loading to Bypass Security and Deploy Malware
Security experts have disclosed an active malware campaign that exploits a DLL side-loading vulnerability in a legitimate binary linked to the open‑source c-ares library to bypass security controls and deploy a range of trojans and stealers. Attackers…
The Hacker News -
2026 Study from Panorays: 85% of CISOs Can’t See Third-Party Threats Amid Increasing Supply Chain Attacks
Panorays has released the 2026 edition of its annual CISO Survey for Third-Party Cyber Risk Management, based on responses from 200 CISOs of US-based companies. The findings highlight that 15% of CISOs say they have full visibility into their software supply…
SecurityOnline -
Predator Spyware Turns Failed Attacks Into Intelligence for Future Exploits
Predator spyware is described as more sophisticated and dangerous than previously realised, with new research showing it functions as a self-diagnostic tool that learns from failed attacks to improve future versions. It was originally developed by Cytrox,…
SecurityWeek -
Data protection agency tells Coupang to stop publishing unconfirmed information about data breach
According to Korea JoongAng Daily, Korea’s data protection watchdog, the Personal Information Protection Commission (PIPC), told Coupang to stop publishing its own findings about a data breach that compromised millions of users’ personal information, warning…
DataBreaches -
Eurail passengers taken for a ride as data breach spills passports, bank details
Eurail has confirmed that customer information was stolen in a data breach, with the incident affecting those who received a pass through the DiscoverEU programme and, to some extent, other customers who purchased passes directly from Eurail/Interrail. The…
DataBreaches -
Victorian Department of Education says hackers stole students’ data
The Victorian Department of Education has told parents that attackers accessed a database containing the personal information and email addresses of current and former students, prompting password resets. According to Sergiu Gatlan, an unauthorized third…
DataBreaches -
Novee Emerges From Stealth With $51.5 Million in Funding
Novee, an offensive security startup, today emerged from stealth with $51.5 million in funding raised over three rounds, including a May 2025 seed of $8.5 million, a September 2025 Series A of $33 million, and a December 2025 venture debt round of $10…
SecurityWeek -
SpyCloud Launches Supply Chain Solution to Combat Rising Third-Party Identity Threats
SpyCloud has unveiled its Supply Chain Threat Protection solution, designed to extend identity threat protection across the extended workforce and vendor ecosystems. The roll-out, announced on 14 January 2026, promises real-time visibility into vendor…
SecurityOnline -
Online shoppers at risk as Magecart skimming hits major payment networks
Online shoppers are being warned that Magecart skimming campaigns have extended to a broad set of major payment networks, with researchers noting at least six providers targeted: American Express, Diners Club, Discover, JCB Co., Ltd., Mastercard, and…
MalwarebytesMageCart -
GitGuardian Closes 2025 with Strong Enterprise Momentum, Protecting Millions of Developers Worldwide
GitGuardian, the secrets security platform, announced continued momentum in 2025 with accelerated adoption across the Fortune 500 and 60% of new customers signing multi-year commitments, according to CyberNewsWire. The company said 70% of its revenue comes…
SecurityOnline -
Fortinet Fixes Critical FortiSIEM Flaw Allowing Unauthenticated Remote Code Execution
Fortinet has released updates to fix a critical FortiSIEM flaw that could let an unauthenticated attacker achieve code execution on affected instances, tracked as CVE-2025-64155 and rated 9.4 out of 10 on the CVSS scale. According to Fortinet, the issue…
The Hacker News -
WitnessAI Raises $58 Million for AI Security Platform
WitnessAI has announced a $58 million strategic funding round, taking its total raised to over $85 million. The investment was led by Sound Ventures, with additional support from Fin Capital, Forgepoint Capital Partners, Qualcomm Ventures and Samsung…
SecurityWeek -
U.S. CISA adds a flaw in Microsoft Windows to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency has added a Microsoft Windows vulnerability, tracked as CVE-2026-20805, to its Known Exploited Vulnerabilities (KEV) catalog, with a CVSS score noted as 8.7 in the KEV entry. The flaw is described as…
Security Affairs -
How real software downloads can hide remote backdoors
A Malwarebytes investigation shows how legitimate-looking software download sites can conceal remote backdoors. The campaign used a fake domain, rustdesk[.]work, impersonating the legitimate RustDesk project hosted at rustdesk[.]com, with a near-perfect…
Malwarebytes -
New Research: 64% of 3rd-Party Applications Access Sensitive Data Without Justification
According to Reflectiz, analysis of 4,700 leading websites over 12 months ending in November 2025 found that 64% of third-party applications now access sensitive data without business justification, up from 51% in 2024. The research highlights a governance…
The Hacker News -
Robo-Advisor Betterment Discloses Data Breach
A threat actor breached Betterment’s systems through social engineering, with third-party software platforms used for marketing and operations implicated, and the incident was not the result of Betterment infrastructure hacking, according to Betterment. The…
SecurityWeek -
Exploit Code Published: Critical FortiSIEM Flaw Grants Unauthenticated Root Access
Exploit code has been published for a critical FortiSIEM flaw that can grant unauthenticated root access. The report, dated 14 January 2026, points to CVE-2025-64155 and highlights that a proof-of-concept exploit is available. Fortinet’s FortiSIEM product is…
SecurityOnline -
Fortinet Patches Critical Vulnerabilities in FortiFone, FortiSIEM
SecurityWeek reports that Fortinet has issued patches for six vulnerabilities across its products, including two critical-severity flaws in FortiFone and FortiSIEM. The most severe, CVE-2025-64155 (CVSS 9.4), is an OS command injection in FortiSIEM that…
SecurityWeek -
Chrome 144, Firefox 147 Patch High-Severity Vulnerabilities
Chrome 144 and Firefox 147 patches have been released, addressing a total of 26 security defects, including several high-severity flaws. Chrome 144, rolled out to the stable channel, fixes 10 security defects and three high-severity bugs, two of which affect…
SecurityWeek -
Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively Exploited
Microsoft released its first security update for 2026, addressing 114 Windows flaws in January Patch Tuesday, with one vulnerability actively exploited in the wild. Of the flaws, eight are rated Critical and 106 Important, with 58 classified as privilege…
The Hacker News -
Details Exposed: High-Severity Aruba VIA Root Flaw Publicly Disclosed
According to Daily CyberSecurity, a high-severity Aruba VIA root flaw has been publicly disclosed, with details surrounding the vulnerability appearing in a post dated 14 January 2026. The article highlights that access to the vulnerability report requires…
SecurityOnline -
Microsoft Patch Tuesday security updates for January 2026 fixed actively exploited zero-day
Microsoft Patch Tuesday for January 2026 fixes 112 CVEs across Windows, Office, Azure, Edge, SharePoint, SQL Server, SMB and Windows management services, with the total rising to 114 vulnerabilities when third‑party Chromium fixes are included. Eight flaws…
Security Affairs
