News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 20 Jan· 50 articles
-
PDFSIDER Malware – Exploitation of DLL Side-Loading for AV and EDR Evasion
PDFSIDER is a newly identified malware variant described by Security Affairs as exploiting DLL side-loading to bypass AV and EDR protections, with Resecurity noting the activity during an investigation of a Fortune 100 energy company’s network intrusion…
Security Affairs -
'CrashFix' Scam Crashes Browsers, Delivers Malware
A new variant of the ClickFix-inspired scam, dubbed CrashFix, uses a NexShield malicious browser extension to crash the victim’s browser and then present a fraudulent repair message. According to Huntress Labs, the campaign targets both home users and…
Dark Reading -
Airlock Digital Announces Independent TEI Study Quantifying Measurable ROI & Security Impact
Airlock Digital announced the release of The Total Economic Impact (TEI) of Airlock Digital, an independent study commissioned by Airlock Digital and conducted by Forrester Consulting, in Atlanta, GA, United States, on 20 January 2026. The study reports a…
SecurityOnline -
Mass Spam Attacks Leverage Zendesk Instances
Mass Spam Attacks Leverage Zendesk Instances reports that multiple users have been receiving large volumes of spam emails purporting to come from Zendesk domains, exploiting real companies’ Zendesk instances. One user on X posted that they received 800…
Dark Reading -
EU Plans Phase Out of High Risk Telecom Suppliers, in Proposals Seen as Targeting China
According to Associated Press, the European Union said on Tuesday it plans to phase out gear from “high risk” suppliers in critical infrastructure such as high-speed telecom networks, a move seen as targeting Chinese companies including Huawei and ZTE. Under…
SecurityWeek -
Access broker caught: Jordanian pleads guilty to hacking 50 companies
A Jordanian man, Feras Khalil Ahmad Albashiti, known online as “r1z,” pleaded guilty in a US court to acting as an access broker, selling unauthorized access to the networks of at least 50 companies, according to DoJ. He admitted fraud-related charges tied…
Security Affairs -
North Korea-Linked Hackers Target Developers via Malicious VS Code Projects
The North Korean threat actors associated with the Contagious Interview campaign have been observed using malicious Microsoft Visual Studio Code projects as lures to deliver a backdoor on compromised endpoints. The latest finding, first disclosed by December…
The Hacker News -
Vulnerabilities Threaten to Break Chainlit AI Framework
Vulnerabilities Threaten to Break Chainlit AI Framework reports two high‑severity flaws in the Chainlit open‑source framework for creating conversational chatbots, with the team at Zafran Security noting the risks extend to cloud environments. The first…
Dark Reading -
DNS OverDoS: Are Private Endpoints Too Private?
Palo Alto Networks’ Unit 42 researchers found a DoS risk in Azure Private Link where forcing DNS resolution through a Private DNS zone can deny access to storage resources even when public endpoints remain available. The executive summary notes that more…
unit42.paloaltonetworks.com -
Four priorities for AI-powered identity and network access security in 2026
According to Microsoft Security Blog, four priorities for AI-powered identity and network access security in 2026 are: implement fast, adaptive, and relentless AI-powered protection; manage, govern, and protect AI and agents; extend Zero Trust principles…
Microsoft -
Google Gemini Flaw Turns Calendar Invites Into Attack Vector
Google Gemini Flaw Turns Calendar Invites Into Attack Vector is an indirect prompt injection vulnerability that allows attackers to weaponise calendar invites to bypass privacy controls and access private data, according to Miggo. The flaw arises from…
Dark Reading -
Microsoft & Anthropic MCP Servers At Risk of RCE, Cloud Takeovers
Researchers warn that the popular model context protocol (MCP) servers are riddled with security holes, with SSRF risks highlighted for Microsoft’s MarkItDown MCP server and a chain of exploits reported to weaponise Anthropic’s MCP components. On 20 January…
Dark Reading -
StepSecurity Now Supports Dark Mode
StepSecurity has introduced dark mode to provide a more comfortable security investigation experience, aimed at reducing eye strain and helping users stay focused during long CI/CD analysis sessions. The feature has been one of the most requested by the…
StepSecurity -
Sprocket Security Appoints Eric Sheridan as Chief Technology Officer
Sprocket Security has appointed Eric Sheridan as Chief Technology Officer, signalling a focus on accelerating innovation and advancing its proactive cybersecurity platform. The announcement, issued from Madison, United States, on 20 January 2026, describes…
SecurityOnline -
Critical TP-Link VIGI camera flaw allowed remote takeover of surveillance systems
TP-Link fixed a high-severity vulnerability, tracked as CVE-2026-0629, that affected over 32 VIGI C and VIGI InSight camera models and exposed more than 2,500 internet-exposed devices as of October 2025. The flaw allows attackers on a local network to bypass…
Security Affairs -
Fake extension crashes browsers to trick users into infecting themselves
According to Malwarebytes, researchers have uncovered a new variant of the ClickFix‑style trick called CrashFix, masquerading in the Chrome Web Store as “NexShield – Advanced Web Protection.” The extension phones home to nexsnield[.]com and uses Chrome’s…
Malwarebytes -
SK Telecom files lawsuit to revoke record 135 bln-won fine over data breach
SK Telecom Co., South Korea’s largest mobile carrier, has filed a lawsuit to overturn a record 135 billion-won fine (US$91 million) handed down by the Personal Information Protection Commission over a data breach that affected its entire 23 million-user…
DataBreaches -
How crypto criminals stole $700 million from people – often using age-old tricks
Crypto criminals are reported to have used aged tricks to siphon funds, with a BBC‑reported case highlighting how stolen databases were leveraged to target high spenders. According to BBC, a hacker bought spreadsheets for $300,000 (£224,000) to identify the…
DataBreaches -
UK: Secret gagging order should not have been used to cover up Afghan data breach, Sir Ben Wallace says
Sir Ben Wallace has said he would not have backed the use of a secret gagging order to cover-up the Afghan data breach, which he described as catastrophic and potentially putting thousands of Afghans who helped UK forces at risk from the Taliban. He told MPs…
DataBreaches -
Chainlit Vulnerabilities May Leak Sensitive Information
Two high-severity vulnerabilities in Chainlit can be exploited without user interaction to leak sensitive information, according to Zafran. Chainlit versions prior to 2.9.4 are affected by CVE-2026-22218 and CVE-2026-22219, which allow threat actors to read…
SecurityWeek -
Three Flaws in Anthropic MCP Git Server Enable File Access and Code Execution
Three security flaws have been disclosed in mcp-server-git, the Anthropic-maintained Git Model Context Protocol server, potentially letting attackers read or delete arbitrary files and even execute code under certain conditions. The flaws comprise…
The Hacker News -
Hackers Use LinkedIn Messages to Spread RAT Malware Through DLL Sideloading
A new phishing campaign uses LinkedIn private messages to approach high‑value individuals, persuading them to download a malicious WinRAR self‑extracting archive that delivers weaponised files via DLL sideloading. The archive unpacks four components,…
The Hacker News -
2025: Double the breaches, but less patient data compromised
In 2025 the frequency of healthcare data breaches more than doubled, yet the number of patient records exposed significantly decreased. The briefing suggests this indicates a shift in the data breach landscape, driven largely by ransomware, identity…
DataBreaches -
UK: North West Ambulance Service’s increased breach reports may reflect better reporting
According to Warrington Worldwide, newly released figures from Data Breach Claims UK show growing concerns about data security in ambulance services, with North West Ambulance Service NHS Trust recording almost 400 data breach incidents over the past three…
DataBreaches -
Dark Web Profile: APT28
APT28, also known as Fancy Bear and Sofacy, is a long-tracked state-linked intrusion set widely attributed to Russia’s GRU and linked to Unit 26165. Public attributions through 2024 and 2025 have kept the group in focus, with campaigns spanning Europe, North…
SOCRadar -
APT-Grade PDFSider Malware Used by Ransomware Groups
SecurityWeek reports that PDFSider, a newly identified malware family, is being used by multiple ransomware groups to provide cyberespionage and remote code execution capabilities via DLL sideloading. The malware is delivered to victims in a ZIP archive…
SecurityWeek -
The Hidden Risk of Orphan Accounts
Orphan accounts—dormant user, service, and bot identities across applications and cloud consoles—pose a hidden risk as organisations grow and shed staff, contractors, and systems. The article explains that traditional IAM and IGA systems focus on human users…
The Hacker News -
Evelyn Stealer Malware Abuses VS Code Extensions to Steal Developer Credentials and Crypto
Cybersecurity researchers have detailed Evelyn Stealer, a new information stealer that targets software developers by weaponising the Visual Studio Code extension ecosystem to exfiltrate credentials and cryptocurrency data, according to Trend Micro. The…
The Hacker News -
Google will pay $8.25m to settle child data-tracking allegations
Google has agreed to pay 8.25 million dollars to settle class-action allegations that it collected children’s data through apps designated under its Designed for Families programme and used it for targeted advertising via AdMob. The settlement, announced in…
Malwarebytes -
Cloudflare Fixes ACME Validation Bug Allowing WAF Bypass to Origin Servers
Cloudflare has fixed an ACME validation flaw that could bypass security controls and reach origin servers via the ACME HTTP-01 path. The vulnerability was discovered and reported by FearsOff in October 2025, and Cloudflare addressed it on 27 October 2025,…
The Hacker News -
Weaponized Invite Enabled Calendar Data Theft via Google Gemini
A vulnerability in Google’s AI assistant Gemini allowed attackers to leak a victim’s private meetings via Google Calendar events, according to SecurityWeek’s report. The attack involved creating a malicious calendar event and sending an invite to the…
SecurityWeek -
Why Secrets in JavaScript Bundles are Still Being Missed
Leaked API keys are no longer unusual, and breaches often follow, but sensitive tokens are still being exposed in front-end code, a problem that Intruder’s research team explored by scanning approximately 5 million applications. Their findings revealed more…
The Hacker News -
Telegram-based illicit billionaire marketplace Tudou Guarantee stopped transactions
Major Telegram-based illicit marketplace Tudou Guarantee appears to be shutting down its operations, according to Elliptic. Blockchain cybersecurity firm Elliptic reports that Tudou Guarantee, a major Telegram-based illicit marketplace in Southeast Asia, has…
Security Affairs -
One Identity Unveils Major Upgrade to Identity Manager, Strengthening Enterprise Identity Security
One Identity has unveiled a major upgrade to Identity Manager, with One Identity Manager 10.0 boosting risk-based governance, identity threat detection and response (ITDR) and AI-assisted insight to help organisations anticipate, contain and manage…
SecurityOnline -
VoidLink: Evidence That the Era of Advanced AI-Generated Malware Has Begun
According to Check Point Research, a new era of AI-generated malware has begun, with VoidLink cited as the first evidently documented case of an advanced framework authored almost entirely by artificial intelligence and likely directed by a single…
Check Point -
NCSC Warns of Russian Hacktivists Targeting UK
The UK’s National Cyber Security Centre has issued a warning about persistent activity by Russian-aligned hacktivist groups, with a focus on disrupting operations, taking websites offline and disabling services both in the UK and globally. At the centre of…
SecurityOnline -
UK NCSC warns of Russia-linked hacktivists DDoS attacks
The UK government warns that Russia-linked hacktivists are continuing DDoS attacks against critical infrastructure and local government systems. The alert, published by the National Cyber Security Centre (NCSC) – a part of GCHQ – says the attacks come from…
Security Affairs -
Tudou Guarantee Marketplace Halts Telegram Transactions After Processing Over $12 Billion
Tudou Guarantee Marketplace, a Telegram-based guarantee marketplace, appears to be winding down its operations after a period of rapid growth, according to Elliptic. The blockchain intelligence firm said Tudou Guarantee effectively ceased transactions…
The Hacker News -
The Gemini Surge: How Google’s AI “Halo Effect” is Reshaping the Cloud Wars
According to The Information, corporate sales of Google’s Gemini AI models have experienced a meteoric ascent over the past year, and this trajectory has helped drive revenue growth for Google Cloud’s core server infrastructure. As Gemini’s reasoning…
SecurityOnline -
“Nomad Leopard” Spotted in the Wild: Cyber Espionage Campaign Targets Afghan Government
A new cyber espionage campaign called Nomad Leopard has been uncovered targeting Afghanistan’s administration, with researchers describing the threat as regionally focused and of low-to-moderate sophistication. According to SEQRITE Labs APT Team, the group…
SecurityOnline
