News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 23 Jan· 45 articles
-
Swipe, Plug-in, Pwned: Researchers Find New Ways to Hack Vehicles
Security researchers demonstrated the latest vehicle exploits at Pwn2Own Automotive World 2026 in Tokyo, where NFC allowed a researcher from the Synacktiv team to take over an Autel MaxiCharger AC Elite Home 40A by triggering a buffer overflow. The event…
Dark Reading -
From runtime risk to real‑time defense: Securing AI agents
AI agents, whether built in Copilot Studio or on other platforms, can access data and perform privileged actions based solely on natural language input, which shifts the threat landscape from build-time to runtime. Microsoft Defender researchers describe a…
Microsoft -
Exploited Zero-Day Flaw in Cisco UC Could Affect Millions
Exploited zero-day CVE-2026-20045, a remote code execution flaw in Cisco’s Unified Communications products, has been exploited in the wild, Cisco disclosed and patched the vulnerability for UCM and related offerings. Cisco said UCM has 30 million users,…
-
Europe's GCVE Raises Concerns Over Fragmentation in Vulnerability Databases
Europe’s GCVE is being launched amid ongoing uncertainty about the future of the MITRE-run CVE program, with experts forecasting fragmentation in how organisations track and manage vulnerabilities. The EU-backed Global CVE Allocation System aims to be a…
Dark Reading -
Fortinet Multiple Products4 articles this day · SecurityOnline first
Fortinet warns of active FortiCloud SSO bypass affecting updated devices · Fortinet Confirms FortiCloud SSO Exploitation Against Patched Devices
-
Fortinet warns of active FortiCloud SSO bypass affecting updated devices
Fortinet has confirmed that attacks are bypassing FortiCloud SSO on devices that are fully patched, with threat actors automating firewall changes, adding users, enabling VPNs and exfiltrating configurations in campaigns that mirror earlier late-2025…
-
Fortinet Confirms FortiCloud SSO Exploitation Against Patched Devices
Fortinet on Thursday confirmed that recent attacks are bypassing FortiCloud single sign-on (SSO) login authentication on devices fully patched against recent vulnerabilities. Leveraging automation, hackers are making configuration changes to FortiGate…
-
Fortinet Confirms Active FortiCloud SSO Bypass on Fully Patched FortiGate Firewalls
Fortinet has officially confirmed that it is working to fully plug a FortiCloud SSO authentication bypass vulnerability after reports of renewed exploitation on fully patched FortiGate firewalls. In a Thursday post, Fortinet Chief Information Security…
-
“New” Path of Attack: Fully Upgraded Fortinet Devices Hit by SSO Exploits
Fortinet is investigating a new wave of attacks on FortiGate devices that have already been patched against known vulnerabilities, with threat actors apparently exploiting a “new attack path” that defeats current defences. The exploits target CVE-2025-59718…
-
-
Healthy Security Cultures Thrive on Risk Reporting
Healthy security cultures are shifting from fear of risk to celebration of identifying and learning from it, with organisations encouraged to raise their hands and speak up without blame. The piece argues that a living risk management programme, driven by…
Dark Reading -
Spammers abuse Zendesk to flood inboxes with legitimate-looking emails, but why?
Spammers are abusing Zendesk to flood inboxes with emails that look legitimate, sent from the Zendesk instances of well-known companies such as Discord, Riot Games and Dropbox. Zendesk is a customer service platform that handles tickets, live chat and…
Malwarebytes -
Synacor Zimbra Collaboration Suite (ZCS)2 articles this day · SecurityWeek first
CISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities · Organizations Warned of Exploited Zimbra Collaboration Vulnerability
-
CISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities
CISA has added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, with evidence of active exploitation in the wild cited by the agency. The four flaws are CVE-2025-68645 (CVSS 8.8), a PHP remote file inclusion vulnerability in Synacor…
-
Organizations Warned of Exploited Zimbra Collaboration Vulnerability
The SecurityWeek report notes that CISA has added CVE-2025-68645, a local file inclusion flaw in Zimbra Collaboration Suite, to its Known Exploited Vulnerabilities (KEV) catalog. According to CISA, patch releases for this defect were issued on 6 November…
-
-
Route leak incident on January 22, 2026
On 22 January 2026, an automated routing policy configuration error caused some Border Gateway Protocol (BGP) prefixes to be leaked unintentionally from Cloudflare’s Miami data centre. The route leak lasted 25 minutes, creating congestion and elevated loss…
Cloudflare -
In Other News: €1.2B GDPR Fines, Net-NTLMv1 Rainbow Tables, Rockwell Security Notice
According to SecurityWeek News, European authorities issued around €1.2 billion in GDPR fines in 2025, with Ireland leading enforcement and a record aggregate penalty figure since 2018. Mandiant has publicly released a dataset of Net-NTLMv1 rainbow tables to…
SecurityWeek -
Microsoft Gave FBI Keys To Unlock Encrypted Data, Exposing Major Privacy Concern
According to Forbes, Thomas Brewster reports that early last year the FBI served Microsoft with a search warrant, asking it to provide recovery keys to unlock encrypted data on three laptops. The Guam-based investigators believed the devices held evidence…
DataBreaches -
ShinyHunters group opens new dark web leak site, claims responsibility for OKTA vishing campaign
ShinyHunters has opened a new dark web leak site and claims responsibility for an OKTA vishing campaign. According to LinkedIn, AlonGal of Hudson Rock reported that ShinyHunters said they are behind the Okta vishing campaign and published alleged data from…
DataBreaches -
Phishers Abuse SharePoint in New Campaign Targeting Energy Sector
Phishers are abusing SharePoint for payload delivery in a new phishing campaign aimed at energy organisations, according to Microsoft. The multi‑stage operation begins with adversary‑in‑the‑middle phishing, where an email from a compromised trusted account…
SecurityWeek -
INC ransomware opsec fail allowed data recovery for 12 US orgs
An operational security failure by the INC ransomware group allowed researchers to recover data that the INC ransomware gang stole from a dozen U.S. organisations. A deep forensic examination of the artifacts left behind uncovered tooling that had not been…
DataBreaches -
NL: Police warned about security hole used by Russian hackers in major theft of police data
NL Times reports that the Dutch police were aware of gaps in their cybersecurity before a Russian cyber group stole a large amount of police data in September 2024, according to research by Follow the Money. The hackers gained access through an employee’s…
DataBreaches -
Cyber Insights 2026: Regulations and the Tangled Mess of Compliance Requirements
Cyber Insights 2026 portrays a regulatory landscape where politics and business collide, creating a Gordian Mess of overlapping and sometimes conflicting requirements across jurisdictions. The piece notes that over 160 privacy laws exist globally, with 18 US…
SecurityWeek -
Under Armour Looking Into Data Breach Affecting Customers’ Email Addresses
Under Armour is investigating a data breach believed to have occurred late last year that purloined customers’ email addresses and other personal information, though there are no signs that passwords or financial data were stolen. The incident is reported to…
SecurityWeek -
U.S. CISA adds Prettier eslint-config-prettier, Vite Vitejs, Versa Concerto SD-WAN orchestration platform, and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalog
According to Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four flaws to its Known Exploited Vulnerabilities (KEV)…
-
Infotainment, EV Charger Exploits Earn Hackers $1M at Pwn2Own Automotive 2026
White hat hackers earned a total of $1,047,000 for 76 vulnerabilities at Pwn2Own Automotive 2026, the three-day automotive hacking event organised by Trend Micro’s Zero Day Initiative in Japan, according to Zero Day Initiative (ZDI). The Fuzzware[.]io team…
SecurityWeek -
TikTok Forms U.S. Joint Venture to Continue Operations Under 2025 Executive Order
TikTok announced that it has formed a U.S. joint venture, named TikTok USDS Joint Venture LLC, to allow the app to continue operating in the United States. The venture will see ByteDance selling the majority of its stake to a group of predominantly American…
The Hacker News -
Phishing Attack Uses Stolen Credentials to Install LogMeIn RMM for Persistent Access
Cybersecurity researchers have disclosed a dual-vector phishing campaign that uses stolen credentials to deploy legitimate Remote Monitoring and Management (RMM) software for persistent remote access, instead of relying on customised malware. The attackers…
The Hacker News -
Fresh SmarterMail Flaw Exploited for Admin Access
Threat actors began exploiting an authentication bypass vulnerability in SmarterTools SmarterMail, tracked as CVE-2026-23760 (CVSS 9.3), roughly two days after patches were released. The flaw affects the password reset API and enables attackers to reset an…
-
CISA Adds 4 Critical Flaws to “Must-Patch” List as Exploits Surge
According to CISA, the Known Exploited Vulnerabilities (KEV) Catalog has been updated with four dangerous new entries, signalling active weaponisation of flaws in widely used developer tools and enterprise platforms. Topping the list is Versa Concerto…
-
2 Venezuelans Convicted in US for Using Malware to Hack ATMs
According to the US Department of Justice, two Venezuelan nationals have been convicted in the United States for ATM jackpotting, with the case announced this week. Luz Granados, 34, and Johan Gonzalez-Jimenez, 40, conducted ATM jackpotting by removing the…
SecurityWeek -
The Hacker’s Dream: NexPhone Debuts with Triple-OS Boot and 2036 Support
On 23 January 2026, Nex Computer announced that the NexPhone will debut in the third quarter of the year, offering triple-OS support with Android, Linux, and Windows 11. The device relies on Qualcomm’s Dragonwing QCM6490 platform, chosen for its longevity…
SecurityOnline -
Microsoft Flags Multi-Stage AitM Phishing and BEC Attacks Targeting Energy Firms
Microsoft has warned of a multi-stage AitM phishing and business email compromise campaign targeting organisations in the energy sector. According to Microsoft Defender Security Research Team, the operation abused SharePoint file-sharing services to deliver…
The Hacker News -
Investigation underway after 72M Under Armour records surface online
Under Armour is investigating a data breach after 72 million customer records were posted online, with claims linked to the Everest ransomware group. The Everest gang allegedly extorted and exfiltrated about 343GB of data in November 2025, and the matter was…
Security Affairs -
Wildcard Hijack: TrustAsia Revokes 143 Certificates After LiteSSL Vulnerability
LiteSSL, a complimentary wildcard certificate authority under the aegis of TrustAsia, was found to harbour a critical vulnerability related to domain validation that allowed unauthorized parties to hijack the issuance process. TrustAsia subsequently revoked…
SecurityOnline -
Outlook in Crisis: How to Fix the January 2026 Update Freezing Your Inbox
The January 2026 update has been found to severely impair the Outlook Classic desktop client, with POP3 configurations and PST data management prone to persistent latency or total freezing, hindering productivity. In some cases, similar unresponsiveness…
SecurityOnline -
YouTube’s 2026 Plan to Automate Shorts
YouTube’s 2026 plan to automate Shorts centres on expanding AI-assisted creation, including the ability for creators to generate AI-generated versions of themselves to produce Shorts content. According to Mohan, the aim is to empower creators to synthesise…
SecurityOnline -
Amazon’s Medical Move: New “Health AI” Assistant Turns Data into Doctor Visits
Amazon has begun infusing its artificial intelligence capabilities into healthcare through Health AI, an agentic, round-the-clock assistant folded into the One Medical app following Amazon’s 2023 acquisition of the provider. According to Amazon’s…
SecurityOnline -
Search Gets Personal: Google Integrates Gmail and Photos into AI Mode
Google has announced the integration of “Personal Intelligence” into its Search AI Mode, enabling the AI to interpret a user’s Gmail and Google Photos content to deliver bespoke responses grounded in personal history. According to Google, the system can, for…
SecurityOnline -
Public Yet Private? Critical Appsmith Flaw Exposes Unpublished Actions (CVSS 9.4)
A critical flaw in Appsmith, tracked as CVE-2026-24042 with a CVSS score of 9.4, has been disclosed, potentially exposing unpublished logic and sensitive development data. The vulnerability centres on a viewMode confusion error, where publicly accessible…
-
Public PoC Exploit Released for Critical Android Flaw Grants Apps Permissions Without You Knowing
SecurityOnline -
Sabotage & Exploited in the Wild: Critical Backdoor Found in LA-Studio Element Kit
On 23 January 2026, a critical WordPress backdoor was disclosed in the LA-Studio Element Kit for Elementor, a plugin active on over 20,000 websites. The flaw, tracked as CVE-2026-0920, carries a maximum CVSS score of 9.8 and allows unauthenticated attackers…
-
Energy Sector Under Siege: AiTM Phishing Turns Insiders Into Threats
A sophisticated cyber campaign is rippling through the energy sector, blending AiTM phishing with Business Email Compromise to compromise organisations from the inside. According to Microsoft Defender Researchers, the operation combines…
SecurityOnline
