News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 22 Jan· 63 articles
-
Overrun with AI slop, cURL scraps bug bounties to ensure "intact mental health"
The cURL project, one of the Internet’s most popular networking tools, is scrapping its vulnerability reward programme after being flooded with low-quality reports, much of it AI-generated slop. Daniel Stenberg, the founder and lead developer, said on…
-
Hacker who stole 120,000 bitcoins wants a second chance—and a security job
Hacker Ilya Lichtenstein, who was at the centre of a massive 2016 crypto heist worth billions at the time, has said he is out of prison and has changed his ways, according to his LinkedIn post. In 2023, Lichtenstein and his wife Heather Morgan pleaded guilty…
Ars Technica -
Risky Chinese Electric Buses Spark Aussie Gov't Review
Australia is reviewing the security of Chinese-made electric buses after researchers flagged cyber risks and the possibility of a kill switch. Since 2023, the country has about 133 electric city buses and 12 electric charter or coach buses, all manufactured…
Dark Reading -
Fortinet Multiple Products3 articles this day · Security Affairs first
Fortinet Firewalls Hit With Malicious Configuration Changes · New Wave of Attacks Targeting FortiGate Firewalls
-
Fortinet Firewalls Hit With Malicious Configuration Changes
Fortinet firewalls have been hit by malicious configuration changes after attackers gained access through single sign-on (SSO) logins, with Arctic Wolf Labs reporting activity beginning on Jan 15 that included creating generic accounts, granting VPN access,…
-
New Wave of Attacks Targeting FortiGate Firewalls
SecurityWeek reports a new wave of attacks targeting FortiGate firewalls, with threat actors performing malicious SSO logins to create new accounts, change VPN configurations, and exfiltrate device data, according to Arctic Wolf. The activity mirrors a…
-
Arctic Wolf detects surge in automated Fortinet FortiGate firewall configuration attacks
Arctic Wolf warned of a new wave of automated attacks making unauthorized firewall configuration changes on Fortinet FortiGate devices, with researchers reporting a cluster observed since 15 January 2026. Attackers reportedly created generic accounts for…
-
-
Machine learning–powered Android Trojans bypass script-based Ad Click detection
Researchers at Dr[.]Web have uncovered a new Android click-fraud trojan family that uses TensorFlow[.]js ML to visually detect and tap ads, bypassing traditional script-based methods. Distributed via Xiaomi’s GetApps, the malware operates in a hidden phantom…
Security Affairs -
From a Whisper to a Scream: Europe Frets About Overreliance on US Tech
From a Whisper to a Scream: Europe Frets About Overreliance on US Tech argues that concern over depending on US cybersecurity and tech firms has moved from a quiet murmur to a louder public discourse across Europe, with attention turning to Greenland and…
Dark Reading -
Halo Security Achieves SOC 2 Type II Compliance, Demonstrating Sustained Security Excellence Over Time
Halo Security has announced that it has achieved SOC 2 Type II compliance following a multi-month audit by Insight Assurance, demonstrating that its security controls operate effectively and consistently over time. The declaration, published in Miami on 22…
SecurityOnline -
New Osiris Ransomware Emerges as New Strain Using POORTRY Driver in BYOVD Attack
Cybersecurity researchers have disclosed details of a new ransomware family called Osiris that targeted a major food service franchisee operator in Southeast Asia in November 2025. The attack leveraged a malicious driver called POORTRY as part of a bring…
The Hacker News -
Microsoft Security success stories: Why integrated security is the foundation of AI transformation
Microsoft Security’s January 2026 post spotlights three global customers—Ford, Icertis, and TriNet—who showcase a platform-first approach that embeds security across identity, data, devices, and cloud infrastructure rather than relying on fragmented tools.…
Microsoft -
The Upside Down is Real: What Stranger Things Teaches Us About Modern Cybersecurity
The Upside Down is Real: What Stranger Things Teaches Us About Modern Cybersecurity, published on 22 January 2026, draws concrete parallels between the fictional world and real-world cyber threats, noting that the danger lies in unseen portals across…
SecurityWeek -
Critical GNU InetUtils telnetd Flaw Lets Attackers Bypass Login and Gain Root Access
A critical vulnerability in the GNU InetUtils telnet daemon (telnetd) has been disclosed, tracked as CVE-2026-24061, affecting all versions from 1.9.3 up to 2.7. The flaw enables remote authentication bypass by exploiting a crafted USER environment value of…
-
Latin American Orgs Lack Confidence in Cyber Defenses, Skills
Latin American organisations remain the least confident about their countries’ ability to defend critical infrastructure from cyberattacks, with only 13% expressing confidence and 49% not confident, according to the World Economic Forum’s Global…
Dark Reading -
Critical SmarterMail vulnerability under attack, no CVE yet
A newly disclosed flaw in SmarterTools SmarterMail, tracked as WT-2026-0001, is under active attack just days after its patch, with no CVE assigned yet, according to the report. SmarterMail’s authentication bypass lets attackers reset the administrator…
Security Affairs -
Old Attack, New Speed: Researchers Optimize Page Cache Exploits
A team of researchers from the Graz University of Technology in Austria has revived Linux page cache attacks, showing they are faster and more practical than previously thought. The paper details attack techniques that target Linux kernels from 2003 to…
-
Webinar Today: Rethinking Email Security for Mid-Sized Organizations
A Public SecurityWeek summary notes a live webinar on Rethinking Email Security for Mid-Sized Organizations, hosted by SecurityWeek in partnership with Abnormal AI. The event is scheduled for 22 January 2026 at 1PM ET, and attendees will explore how modern…
SecurityWeek -
Kazakhstan Considers Criminal Liability for Mass Leaks of Personal Data
Kazakhstan is considering tightening legal responsibility for violations related to personal data protection, proposing criminal liability for mass leaks of citizens’ personal data and a significant rise in administrative fines for failing to meet…
DataBreaches -
ThreatsDay Bulletin: Pixel Zero-Click, Redis RCE, China C2s, RAT Ads, Crypto Scams & 15+ Stories
ThreatsDay Bulletin notes that this week’s threats largely exploited familiar systems rather than novel tricks, with attackers aiming for scale, patience and misused trust. In a highlight for zero-click security, Google Project Zero detailed a Pixel 9…
-
Europe’s GDPR cops dished out €1.2B in fines last year as data breaches piled up
According to the latest GDPR Fines and Data Breach Survey published by DLA Piper, GDPR fines pushed past the £1 billion (€1.2 billion) mark in 2025 as Europe’s regulators were deluged with more than 400 data breach notifications a day. The survey puts total…
DataBreaches -
DPRK Actors Deploy VS Code Tunnels for Remote Hacking
A spear-phishing campaign attributed to North Korean actors is abusing a legitimate feature of Microsoft Visual Studio Code to gain full remote control of targeted systems, according to Darktrace. The South Korean targets receive government-themed emails…
Dark Reading -
KONNI Adopts AI to Generate PowerShell Backdoors
According to Check Point Research, a phishing campaign linked to a North Korea–aligned threat actor known as KONNI is being observed targeting software developers and engineering teams, with activity extending across the APAC region including Japan,…
Check Point -
Fake LastPass maintenance emails target users
According to The LastPass Threat Intelligence, Mitigation, and Escalation (TIME) team, there is an active phishing campaign in which fake “maintenance” emails pressure users to back up their vaults within 24 hours, with the aim of harvesting credentials. The…
Malwarebytes -
Zendesk ticket systems hijacked in massive global spam wave
Zendesk ticket systems have been hijacked in a massive global spam wave, with victims reporting hundreds of emails and alarming subject lines. The wave began on 18 January, and the story was published on 22 January 2026. The emails are generated by support…
DataBreaches -
Dark Web Profile: Anubis Ransomware
Anubis (Sphinx) ransomware is a relatively new Ransomware-as-a-Service operation that first appeared in late 2024 on Russian-language cybercrime forums, and it features a dual execution model that combines standard file encryption with an optional…
SOCRadar -
AiStrike Raises $7 Million in Seed Funding
According to SecurityWeek, AiStrike raised $7 million in a seed funding round led by Blumberg Capital, with Runtime Ventures, Oregon Venture Fund and angel investors also supporting the investment. The US-based startup offers Agentic Cyber…
SecurityWeek -
Under Armour ransomware breach: data of 72 million customers appears on the dark web
Under Armour’s ransomware breach has escalated, with the Everest Group leak site indicating that data from the incident is now circulating online. The data set is said to contain 191,577,365 records, including 72,727,245 unique email addresses, and is…
Malwarebytes -
Claroty Raises $150 Million in Series F Funding
Claroty has announced a $150 million Series F funding round, taking total funding to roughly $900 million and, according to Calcalist, boosting its valuation to an estimated $3 billion. The round was led by Golub Growth, with existing investors confirming up…
SecurityWeek -
Filling the Most Common Gaps in Google Workspace Security
Google Workspace security can be strong but relies on configurations that many teams overlook, with native tooling showing limits as organisations scale. The piece stresses that securing the cloud office hinges on identifying leverage points that raise…
The Hacker News -
Furl Raises $10 Million for Autonomous Vulnerability Remediation
Furl has announced a seed funding round of $10 million to accelerate the broader availability of its autonomous vulnerability remediation platform. The round was led by Ten Eleven Ventures, with additional support from Open Opportunity Fund and angel…
SecurityWeek -
The Next Frontier of Runtime Assembly Attacks: Leveraging LLMs to Generate Phishing JavaScript in Real Time
According to Unit 42, the article describes a novel AI-augmented attack where a seemingly benign webpage uses client-side calls to trusted LLM services to generate malicious JavaScript in real time, turning a safe-looking page into a personalised phishing…
unit42.paloaltonetworks.com -
“Enjoy Your Admin Access”: Critical SmarterMail RCE Exploited in the Wild
SecurityOnline[.]info reports that just weeks after a major SmarterMail vulnerability, researchers disclosed WT-2026-0001, an authentication bypass that lets unauthenticated attackers hijack administrative accounts and achieve full Remote Code Execution.…
SecurityOnline -
Malicious PyPI Package Impersonates SymPy, Deploys XMRig Miner on Linux Hosts
A new malicious package on the Python Package Index (PyPI) impersonates the symbolic maths library SymPy to deliver cryptomining payloads on Linux hosts, researchers have found. The package, sympy-dev, mirrors SymPy and has been downloaded over 1,100 times…
The Hacker News -
SmarterMail Auth Bypass Exploited in the Wild Two Days After Patch Release
Two days after SmarterTools released Build 9511 on 15 January 2026, the SmarterMail authentication bypass began being exploited in the wild, according to watchTowr Labs, which tracks the flaw as WT-2026-0001. The vulnerability is an authentication bypass…
The Hacker News -
-
Atlassian, GitLab, Zoom Release Security Patches
Atlassian, GitLab, and Zoom have released security patches addressing more than two dozen vulnerabilities across their products, with updates covering Atlassian’s Bamboo, Bitbucket, Confluence, Crowd, and Jira. The SecurityWeek report notes 32 patches for…
-
Cisco Unified Communications Manager2 articles this day · Security Affairs first
Hackers Targeting Cisco Unified CM Zero-Day · U.S. CISA adds a flaw in Cisco Unified Communications products to its Known Exploited Vulnerabilities catalog
-
Hackers Targeting Cisco Unified CM Zero-Day
Cisco has released patches for CVE-2026-20045, a critical vulnerability affecting several unified communications products including Cisco Unified Communications Manager and its SME, Unified CM IM & Presence Service, Unity Connection, and Webex Calling…
-
U.S. CISA adds a flaw in Cisco Unified Communications products to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Cisco Unified Communications vulnerability, tracked as CVE-2026-20045 with a CVSS score of 8.2, to its Known Exploited Vulnerabilities catalog. Cisco patched a critical zero‑day…
-
-
Oracle January 2026 CPU Delivers 337 Security Patches Including CVE-2025-66516 & CVE-2026-21962
Oracle’s January 2026 CPU delivers 337 security patches across more than 30 product families, with around 230 unique CVEs addressed by the patches. The update includes two vulnerabilities with maximum severity, both remotely exploitable without…
-
Beyond the Screen: Apple’s 2027 Plan to Kill Siri and Launch an AI Pin
According to The Information, Apple is poised to debut a wearable intelligence device, described as a circular, flattened disc resembling a thicker AirTag, as early as 2027, with the long‑maligned Siri undergoing a transformation under the codename “Campos”…
SecurityOnline
