News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Thu 15 Jan· 56 articles
-
Unnamed officials tell NYT “precise” cyber-op took out Venezuela’s power grid
Unnamed officials told The New York Times that a “precise” cyber operation plunged parts of Venezuela into darkness in the period surrounding the capture of Nicolás Maduro. The NYT reported that the cyber-op turned off electricity for most residents in…
Ars Technica -
Predator Spyware Sample Indicates 'Vendor-Controlled' C2
Researchers detailed how Intellexa, the owner of Predator, uses an elaborate set of anti-analysis features that produce data about failed deployments to strengthen its spyware and inform future attacks, according to Jamf. The analysis also shows Predator’s…
Dark Reading -
A ransomware attack disrupted operations at South Korean conglomerate Kyowon
A ransomware attack disrupted operations at South Korean conglomerate Kyowon, with the company saying most of its core subsidiaries were affected and extortion attempts followed the infection. Kyowon detected abnormal activity on Saturday, January 10,…
Security Affairs -
AWS CodeBuild Misconfiguration Exposed GitHub Repos to Potential Supply Chain Attacks
A critical misconfiguration in AWS CodeBuild could have allowed attackers to take over GitHub repositories used by AWS, including the AWS JavaScript SDK, exposing the potential for supply chain attacks, according to Wiz. The vulnerability, codenamed…
The Hacker News -
Winter Olympics Could Share Podium With Cyberattackers
Winter Olympics Could Share Podium With Cyberattackers outlines that the Milano Cortina Games, beginning on 6 February 2026, will attract not only athletes but cybercriminals and state-sponsored spies. According to Unit 42’s threat assessment, attacker…
Dark Reading -
Forget Predictions: True 2026 Cybersecurity Priorities From Leaders
Security leaders brands are looking beyond hype to 2026, emphasising resilience in the supply chain, governance and the efficiency of security teams, according to SecurityWeek. They name regulatory drivers such as the EU Digital Operational Resilience Act…
SecurityWeek -
New StackWarp Attack Threatens Confidential VMs on AMD Processors
SecurityWeek reports a new hardware vulnerability, named StackWarp, that affects AMD Zen 1 through Zen 5 processors and can enable remote code execution inside confidential VMs. The researchers describe StackWarp as a software-based architectural attack that…
SecurityWeek -
Researchers reveal “WhisperPair” attack to eavesdrop on Google Fast Pair headphones
Security researchers from KU Leuven in Belgium have disclosed a vulnerability they call WhisperPair that can allow attackers to hijack Fast Pair-enabled devices to spy on the owner, including microphone access and location tracking. The flaw affects more…
Ars Technica -
Website that leaked thousands of ICE agents’ personal information is down after DDoS attack
A website dedicated to leaking personal information about Immigration and Customs Enforcement officers and Border Patrol agents was reportedly subject to a cyberattack that its founder believes may have originated in Russia. Dominick Skinner told The Daily…
DataBreaches -
Vibe Coding Tested: AI Agents Nail SQLi but Fail Miserably on Security Controls
Vibe coding, the use of AI to generate computer code, is gaining popularity but remains imperfect, as SecurityWeek reports. In tests conducted by Tenzai, five major AI coding agents—Anysphere Cursor, Claude Code, OpenAI Codex, Replit, and Cognition…
SecurityWeek -
BreachLock Expands Adversarial Exposure Validation (AEV) to Web Applications
According to CyberNewsWire, BreachLock has expanded its Adversarial Exposure Validation (AEV) to include autonomous red teaming at the application layer, building on its initial network-layer capabilities introduced in early 2025. The AI-powered autonomous…
SecurityOnline -
Critical WordPress Modular DS Plugin Flaw Actively Exploited to Gain Admin Access
A maximum-severity flaw in the WordPress Modular DS plugin, tracked as CVE-2026-23550 with a CVSS of 10.0, has been exploited in the wild, according to Patchstack. The vulnerability causes unauthenticated privilege escalation on all versions up to and…
The Hacker News -
Vulnerabilities Surge, But Messy Reporting Blurs Picture
Vulnerabilities surged again in 2025, with 48,177 CVEs assigned, data analysed from the National Vulnerability Database shows, making it the ninth consecutive year of record vulnerability reporting according to Robert Lemos. MITRE is no longer the top…
Dark Reading -
Central Maine Healthcare data breach impacted over 145,000 patients
According to Central Maine Healthcare’s notice of data security incident, a cyberattack exposed the personal, medical and insurance data of about 145,000 patients. The organisation detected unusual activity on 1 June 2025 and said an unauthorized party…
Security Affairs -
Researchers Reveal Reprompt Attack Allowing Single-Click Data Exfiltration From Microsoft Copilot
Cybersecurity researchers have unveiled a new attack dubbed Reprompt that could allow data exfiltration from AI chatbots like Microsoft Copilot with a single click, bypassing enterprise security controls. According to Varonis security researcher Dolev Taler,…
The Hacker News -
HHS OCR comments on its 2026 priorities
According to HHS OCR, the agency continues to enforce its civil rights, conscience, and health information privacy and security authorities, while investigations into complaints, compliance reviews, and breaches of unsecured protected health information…
DataBreaches -
AppGuard Critiques AI Hyped Defenses; Expands its Insider Release for its Next-Generation Platform
According to CyberNewsWire, AppGuard has critiqued AI-hyped defenses while expanding its Insider Release for a reengineered next-generation endpoint protection platform, following the release of a Top 10 Cybersecurity Innovators profile that highlights…
SecurityOnline -
Closing the Door on Net-NTLMv1: Releasing Rainbow Tables to Accelerate Protocol Deprecation
Written by: Nic Losby Introduction Mandiant is publicly releasing a comprehensive dataset of Net-NTLMv1 rainbow tables to underscore the urgency of migrating away from this outdated protocol. Despite Net-NTLMv1 being deprecated and known to be insecure for…
Google CloudOriginal report -
Human Native is joining Cloudflare
Today, 15 January 2026, Cloudflare announced that it has acquired Human Native, a UK-based AI data marketplace that specialises in turning multimedia content into searchable and useful data. The Human Native team has spent the past few years helping AI…
Cloudflare -
ThreatsDay Bulletin: AI Voice Cloning Exploit, Wi-Fi Kill Switch, PLC Vulns, and 14 More Stories
ThreatsDay Bulletin for 15 January 2026 surveys a week of fast-moving cyber threats, from AI-driven abuses to OT and software flaws, with a mix of high-severity CVEs and novel attack techniques. The bulletin highlights an AI voice cloning threat topic…
The Hacker News -
Depthfirst Raises $40 Million for Vulnerability Management
Depthfirst has raised $40 million in a Series A funding round led by Accel, with Alt Capital, BoxGroup, Liquid 2 Ventures, Mantis VC, SV Angel, and multiple angel investors also participating. The San Francisco-based software security startup, founded in…
SecurityWeek -
“Reprompt” attack lets attackers steal data from Microsoft Copilot
Researchers have disclosed a method dubbed Reprompt that can steal data from Microsoft Copilot by abusing how Copilot handles URL parameters, hijacking a user’s existing Copilot Personal session. The attack hides a malicious prompt in the q parameter of a…
Malwarebytes -
isVerified Emerges From Stealth With Voice Deepfake Detection Apps
isVerified, an Israeli startup, emerged from stealth on 15 January 2026 with mobile apps for Android and iOS designed to protect enterprise communications against voice deepfake attacks. The company, spun out of cybercrime intelligence firm Hudson Rock, aims…
SecurityWeek -
JPMorgan Claims Ex-Advisor In Fla. Stole Trade Secrets To Poach Clients For LPL
JPMorgan is seeking a temporary restraining order and injunctive relief in federal court against a former advisor, alleging he stole confidential information to solicit the firm’s clients to join him at his new affiliate, LPL Financial. According to the…
DataBreaches -
Aembit Announces Agenda and Speaker Lineup for NHIcon 2026 on Agentic AI Security
According to CyberNewsWire, Aembit today announced the agenda and speaker lineup for NHIcon 2026: The Rise of Agentic AI Security, a virtual conference scheduled for 27 January. The event will feature keynote addresses from Phil Venables, Misam Abbas, and…
SecurityOnline -
New ‘Reprompt’ Attack Silently Siphons Microsoft Copilot Data
According to Varonis, security researchers have uncovered a new attack named Reprompt that silently siphons data from Microsoft Copilot via a single malicious link. The technique bypasses Copilot’s data leak protections and enables persistent session…
SecurityWeek -
Model Security Is the Wrong Frame – The Real Risk Is Workflow Security
According to The Hacker News, security focus is shifting from protecting AI models to safeguarding the workflows that surround them as AI copilots become embedded in daily work. The piece notes two Chrome extensions posing as AI helpers were caught stealing…
The Hacker News -
Palo Alto Networks addressed a GlobalProtect flaw, PoC exists
Palo Alto Networks has addressed a high-severity vulnerability in GlobalProtect, tracked as CVE-2026-0227, with a proof-of-concept exploit existing. The flaw affects GlobalProtect Gateway and Portal and can cause a denial-of-service by an unauthenticated…
Security Affairs -
Trio of Critical Bugs Spotted in Delta Industrial PLCs
Researchers have identified one high- and three critical-severity vulnerabilities in Delta Electronics’ DVP-12SE11T PLC, a device popular at industrial sites across Asia, including water treatment and food and beverage processing. In August 2025, OPSWAT Unit…
Dark Reading -
4 Outdated Habits Destroying Your SOC's MTTR in 2026
The Hacker News examines four outdated SOC habits that hamper MTTR in 2026, emphasising how manual vouching for samples and siloed tools slow investigations as threat volumes grow. It highlights that modern SOCs are adopting automation and real-time dynamic…
The Hacker News -
Central Maine Healthcare Data Breach Impacts 145,000 Individuals
According to SecurityWeek, Central Maine Healthcare is notifying over 145,000 patients that their personal, treatment, and health insurance information was compromised in a data breach. The incident was discovered on 1 June 2025 after detecting unusual…
SecurityWeek -
Microsoft Legal Action Disrupts RedVDS Cybercrime Infrastructure Used for Online Fraud
On 15 January 2026, Microsoft said it had taken a coordinated legal action in the United States and the United Kingdom to disrupt RedVDS, a cybercrime subscription service that allegedly generated millions in fraud losses, and to take its malicious…
The Hacker News -
VoidLink Linux Malware Framework Targets Cloud Environments
VoidLink is a newly identified Linux malware framework with a highly modular design built for long-term access to cloud and container environments, according to Check Point. The cloud-first implant targets major platforms such as AWS, GCP, Azure, Alibaba,…
SecurityWeek -
Exploited in the Wild: Critical Modular DS Flaw CVE-2026-23550 (CVSS 10) Allows Instant Admin Takeover
According to Patchstack, a critical privilege escalation vulnerability tracked as CVE-2026-23550 (CVSS 10) has been exploited in the wild in the Modular DS WordPress plugin, exposing more than 40,000 websites to unauthorised administrative takeover. The flaw…
SecurityOnline -
Lumen disrupts AISURU and Kimwolf botnet by blocking over 550 C2 servers
Lumen’s Black Lotus Labs disrupted over 550 command-and-control servers tied to the AISURU and Kimwolf botnets, which have been used for DDoS attacks and proxy abuse. AISURU operates as a DDoS-for-hire service, with attacks reported to exceed 1.5 Tb/sec and…
Security Affairs -
ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Aveva, Phoenix Contact
Siemens, Schneider Electric, Aveva and Phoenix Contact issued around a dozen Patch Tuesday advisories detailing vulnerabilities in their ICS/OT products, SecurityWeek reports. Siemens released five new advisories, including two describing the same critical…
SecurityWeek -
The Invisible Bottleneck: AI Hunger for “Glass Cloth” Threatens iPhone 18
According to Nikkei Asia, Apple and Qualcomm are grappling with a supply crisis over “glass cloth” used as a core insulating layer in chip substrates, a shortage that could affect the iPhone 18. The material, specifically high-end T-glass, is largely…
SecurityOnline -
The Orbital Lifeline: Starlink Battles Military-Grade Jamming in Iran
The Orbital Lifeline: Starlink Battles Military-Grade Jamming in Iran, published on 15 January 2026, reports that Iran has effectively severed most of its connections to the global internet, with only a negligible minority of government agencies retaining…
SecurityOnline -
The June Deadline: Microsoft Issues Urgent Secure Boot Certificate Updates
The June Deadline: Microsoft is issuing revitalised UEFI Secure Boot certificates to eligible Windows 11 devices (versions 24H2 and 25H2) this month, replacing the existing certificates that are set to expire in June 2026, according to the article. Secure…
SecurityOnline -
Traveler Information Stolen in Eurail Data Breach
Traveler information held by Eurail has been exposed in a data breach, with personal, order and reservation details disclosed for customers with Eurail passes and those who booked seats. The incident affected all customers issued a Eurail pass and those who…
SecurityWeek
