News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 30 Jan· 49 articles
-
Privileged File System Vulnerability Present in a SCADA System
The Unit 42 report identifies a privileged file system operations vulnerability in Iconics Suite, tracked as CVE-2025-0921, with a Medium CVSS score of 6.5, which could allow attackers to elevate privileges and corrupt critical binaries on a SCADA system. It…
-
Torq Moves SOCs Beyond SOAR With AI-Powered Hyper Automation
Torq, the Israeli-born startup behind the AI-native Torq HyperSOC platform, is moving security operations centres beyond traditional SOAR with what it calls AI-powered hyper automation. Investors poured 140 million into its Series D, lifting the company’s…
Dark Reading -
2026: The Year Agentic AI Becomes the Attack-Surface Poster Child
According to Dark Reading, agentic AI is widely considered the next major target for cybercrime, with nearly half (48%) of respondents expecting it to be the top attack vector by the end of 2026. The piece highlights that organisations are adopting agentic…
Dark Reading -
Out-of-the-Box Expectations for 2026 Reveal a Grab-Bag of Risk
Out-of-the-Box Expectations for 2026 reveals a grab-bag of risk covering everything from garage APTs and AI-augmented threat tools to data sovereignty and post-quantum cryptography. The piece notes that small, resource-constrained groups and nations will…
Dark Reading -
Tenable Tackles AI Governance, Shadow AI Risks, Data Exposure
Tenable has unveiled Tenable One AI Exposure, an add-on designed to detect, map and govern the use of agentic and generative AI across cloud, SaaS and on‑premises infrastructure, in response to rising AI governance concerns and shadow AI risks. The tool is…
Dark Reading -
Case study: Securing AI application supply chains
The case study explains how the rapid adoption of AI applications creates an expanded attack surface, not just at prompts but across the AI supply chain, including frameworks, SDKs and orchestration layers. It highlights the LangChain Core vulnerability…
-
In Other News: Paid for Being Jailed, Google’s $68M Settlement, CISA Chief’s ChatGPT Leak
SecurityWeek notes that Google has reached a $68 million settlement to resolve a privacy dispute over the unauthorised collection of voice data through its assistant technology. The case contends that users were recorded without explicit consent, including…
SecurityWeek -
Web portal leaves kids' chats with AI toy open to anyone with Gmail account
According to WIRED, Bondu’s web-based portal intended for parents to monitor conversations left transcripts from virtually every chat the toy had with its young users accessible to anyone who logged in with a Google account. Researchers Thacker and Margolis…
Ars Technica -
Google’s AI advantage: why crawler separation is the only path to a fair Internet
The UK’s Competition and Markets Authority opened a consultation on conduct requirements for Google, inviting comments before any final measures are imposed to address publishers’ lack of choice and transparency in how Google uses content for its generative…
Cloudflare -
OpenClaw AI Runs Wild in Business Environments
OpenClaw, the open-source AI agent previously known as MoltBot and ClawdBot, has become the fastest-growing project on GitHub, with its adoption surging roughly 14-fold in the past week and more than 113,000 stars, up from about 7,800 on 24 January. The…
Dark Reading -
Investigation into data breach involving Blue Cross Blue Shield members could head to court
According to DataBreaches[.]Net, a Montana state investigation into a breach affecting Blue Cross Blue Shield of Montana members could move to court after BCBSMT filed suit in Helena arguing that the state auditor lacks authority to pursue the probe. The…
DataBreaches -
Aisy Launches Out of Stealth to Transform Vulnerability Management
Aisy has emerged from stealth with $2.3 million seed funding from Osney Capital, Flying Fish Ventures, and 6 Degrees Capital together with additional angel investors. The firm provides an AI-assisted platform designed to help security teams manage,…
SecurityWeek -
SK Telecom rejects consumer agency’s compensation settlement over personal data leak
SK Telecom rejected a settlement proposal from a government-affiliated consumer agency to pay 100,000 won ($69.40) per person to 58 petitioners over a personal data breach, claiming the total cost could reach 2.3 trillion won (approximately $1.6 billion…
DataBreaches -
175,000 Exposed Ollama Hosts Could Enable LLM Abuse
According to SentinelOne, AI infrastructure spanning 175,000 exposed Ollama hosts was identified, operating without the usual guardrails and monitoring. Over 293 days of research, the firms logged 7.23 million observations across 130 countries and 4,032…
SecurityWeek -
Match, Hinge, OkCupid, and Panera Bread breached by ransomware group
The ShinyHunters ransomware group has claimed the theft of data affecting 10 million records from the Match Group and 14 million records from Panera Bread, although Match Group says it is investigating a cyber incident and Panera confirms an incident and has…
Malwarebytes -
Building vertical microfrontends on Cloudflare’s platform
Cloudflare has introduced a new Worker template for Vertical Microfrontends (VMFE), enabling teams to map multiple independent Cloudflare Workers to a single domain and ship marketing, docs, and dashboards as one cohesive application. Vertical microfrontends…
Cloudflare -
Guidance from the Frontlines: Proactive Defense Against ShinyHunters-Branded Data Theft Targeting SaaS
Introduction Mandiant is tracking a significant expansion and escalation in the operations of threat clusters associated with ShinyHunters-branded extortion. As detailed in our companion report, 'Vishing for Access: Tracking the Expansion of…
Google CloudOriginal report -
Vishing for Access: Tracking the Expansion of ShinyHunters-Branded SaaS Data Theft
Introduction Mandiant has identified an expansion in threat activity that uses tactics, techniques, and procedures (TTPs) consistent with prior ShinyHunters-branded extortion operations. These operations primarily leverage sophisticated voice phishing…
Google CloudOriginal report -
Researchers Uncover Chrome Extensions Abusing Affiliate Links and Stealing ChatGPT Access
Cybersecurity researchers have uncovered a cluster of malicious Google Chrome extensions designed to hijack affiliate links, siphon data and capture OpenAI ChatGPT authentication tokens. At the centre is Amazon Ads Blocker (ID:…
The Hacker News -
1/30/26, 1:27 PM
Darktrace reports on ClearFake, a campaign that combines fake CAPTCHAs with blockchain-driven payload retrieval and which was detected on a single endpoint over a day in November 2025, involving the legitimate MSHTA utility and repeated mshta[.]exe activity.…
darktrace.com -
White House Scraps ‘Burdensome’ Software Security Rules
The White House has announced that software security guidance issued during the Biden administration has been rescinded due to “unproven and burdensome” requirements that prioritised administrative compliance over meaningful security investments. According…
SecurityWeek -
China-Linked UAT-8099 Targets IIS Servers in Asia with BadIIS SEO Malware
According to Cisco Talos, a China-linked threat actor known as UAT-8099 conducted a campaign against vulnerable IIS servers in Asia from late 2025 into early 2026, with a distinct concentration in Thailand and Vietnam. The group uses web shells and…
The Hacker News -
SmarterTools SmarterMail2 articles this day · The Hacker News first
SmarterTools patches critical SmarterMail flaw allowing code execution · SmarterMail Fixes Critical Unauthenticated RCE Flaw with CVSS 9.3 Score
-
SmarterTools patches critical SmarterMail flaw allowing code execution
SmarterTools has fixed two security bugs in its SmarterMail email software, including a critical vulnerability tracked as CVE-2026-24423 with a CVSS of 9.3 that could let attackers execute arbitrary code on affected systems. According to SmarterTools,…
-
SmarterMail Fixes Critical Unauthenticated RCE Flaw with CVSS 9.3 Score
SmarterTools has fixed two security flaws in SmarterMail, including a critical unauthenticated remote code execution vulnerability tracked as CVE-2026-24423 with a CVSS score of 9.3, according to CVE[.]org. The description notes that SmarterMail versions…
-
-
TikTok’s privacy update mentions immigration status. Here’s why.
TikTok’s privacy update has drawn attention for including language about citizenship or immigration status, which the firm says is part of describing “sensitive personal information” that may be disclosed through user content, surveys or AI interactions. The…
Malwarebytes -
Badges, Bytes and Blackmail
According to Orange Cyberdefense, the analysis introduces a dataset of 418 publicly announced law enforcement actions conducted between 2021 and mid-2025, drawn from official announcements and media reports and manually enriched with contextual details where…
The Hacker News -
Hugging Face Abused to Deploy Android RAT
Hugging Face’s platform was abused to deliver an Android remote access trojan, as reported by Bitdefender. The campaign began with users prompted to install a security app called TrustBastion, which acted as a dropper and then fetched an update while showing…
SecurityWeek -
Ivanti Endpoint Manager Mobile (EPMM)4 articles this day · The Hacker News first
U.S. CISA adds a flaw in Ivanti EPMM to its Known Exploited Vulnerabilities catalog · Ivanti Patches Exploited EPMM Zero-Days
-
U.S. CISA adds a flaw in Ivanti EPMM to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added Ivanti EPMM to its Known Exploited Vulnerabilities catalog after it was found to contain CVE-2026-1281, a code injection flaw affecting Ivanti Endpoint Manager Mobile. The advisory…
-
Ivanti Patches Exploited EPMM Zero-Days
Ivanti has issued emergency patches for two critical-severity EPMM vulnerabilities, tracked as CVE-2026-1281 and CVE-2026-1340, which are described as code injection flaws that unauthenticated attackers could exploit to achieve remote code execution.…
-
CVE-2026-1281 & CVE-2026-1340: Ivanti EPMM Zero-Day Vulnerabilities Enable Unauthenticated RCE
Ivanti has released emergency security updates after disclosing two critical vulnerabilities, CVE-2026-1281 and CVE-2026-1340, in Ivanti Endpoint Manager Mobile (EPMM) that have been actively exploited as zero-day attacks, with both flaws allowing…
-
Two Ivanti EPMM Zero-Day RCE Flaws Actively Exploited, Security Updates Released
Ivanti has rolled out security updates for Ivanti Endpoint Manager Mobile (EPMM) to fix two zero-day RCE flaws that have been exploited in the wild, with one of the vulnerabilities added to the CISA Known Exploited Vulnerabilities catalog. The two critical…
-
-
ICS Devices Bricked in Russia-Linked Cyberattack on Polish Power Grid
According to Dragos’s technical analysis, Sandworm/Electrum hackers targeted communication infrastructure and remote terminal units across roughly 30 sites, with some devices irreparably damaged. ESET last week attributed the attack to Sandworm, a Russian…
SecurityWeek -
Empire Market co-founder faces 10 years to life after guilty plea
Raheim Hamilton, co-founder of Empire Market, pleaded guilty in federal court in Illinois to a drug conspiracy charge and faces a mandatory 10 years to life in prison. According to the indictment, the dark web marketplace handled more than four million…
Security Affairs -
Ex-Google Engineer Convicted for Stealing 2,000 AI Trade Secrets for China Startup
A former Google engineer, Linwei Ding (aka Leon Ding), has been convicted in the United States on seven counts of economic espionage and seven counts of theft of trade secrets for taking over 2,000 documents containing Google’s AI trade secrets. According to…
The Hacker News -
SolarWinds Web Help Desk Update Addresses High-Risk RCE & Auth Bypass Bugs
SOCRadar reports that SolarWinds has released an urgent security update for Web Help Desk after disclosing six vulnerabilities, four of which are rated critical. The flaws affect Web Help Desk versions 12.8.8 Hotfix 1 and earlier, and include CVE-2025-40551,…
-
Trump sues IRS and the Treasury for $10 Billion Because His Tax Returns Were Leaked
Trump is suing the IRS and the Treasury for $10 billion over what the article describes as leaked tax returns, amid claims that the breach involved insider wrongdoing. The piece notes that about 400,000 wealthy Americans had their files accessed and that the…
DataBreaches -
-
“Update” to Nightmare: eScan Antivirus Hacked to Distribute Malware
Security researchers from Morphisec revealed a major supply chain compromise affecting MicroWorld Technologies’ eScan antivirus, with attackers hijacking the update infrastructure on 20 January 2026 to push a trojanised patch directly to customers. Instead…
SecurityOnline -
Chinese APTs Hacking Asian Orgs With High-End Malware
Chinese APTs are operating across Asia with the PeckBirdy C2 framework, deploying it on Chinese gambling sites to deliver modular backdoors such as Holodonut and MKDoor and to load additional PeckBirdy scripts for reverse shells and Chrome browser exploits…
-
Smart Buildings at Risk: Critical Johnson Controls Flaw (CVSS 10) Allows Remote SQL Injection
The article reports a maximum-severity vulnerability in Johnson Controls’ Metasys building automation system, tracked as CVE-2025-26385, with a CVSS score of 10. According to the Cybersecurity and Infrastructure Security Agency (CISA), the flaw could allow…
