News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Mon 2 Feb· 53 articles
-
Attackers Harvest Dropbox Logins Via Fake PDF Lures
Attackers are carrying out a multistage, credential-hocusing phishing campaign that targets corporate inboxes by asking employees to view a fake “request orders” PDF, which then redirects to a convincing Dropbox login page. The PDF itself contains no…
Dark Reading -
County Pays $600K to Wrongfully Jailed Pen Testers
Seven years after their arrest, two white‑hat penetration testers have received a $600,000 settlement in Dallas County, Iowa. Gary De Mercurio and Justin Wynn were arrested in 2019 after testing the alarm system at a Dallas County courthouse as part of a…
Dark Reading -
MoltBot Skills exploited to distribute 400+ malware packages in days
Researchers uncovered a large malware campaign abusing AI skills for Claude Code and Moltbot users, with over 400 malicious skills published on ClawHub and GitHub between late January and early February 2026, masquerading as crypto trading tools. OpenClaw,…
Security Affairs -
Infostealers without borders: macOS, Python stealers, and platform abuse
Infostealer threats are expanding beyond Windows to target macOS, with cross‑platform languages like Python being leveraged and trusted platforms and utilities abused to deliver credential‑stealing malware at scale, according to Microsoft Defender Security…
Microsoft -
Panera Bread breach affected 5.1 Million accounts, HIBP Confirms
On 2 February 2026, Panera Bread’s data breach was linked to 5.1 million accounts, according to Have I Been Pwned. Have I Been Pwned followed claims by the ShinyHunters gang that data from more than 14 million Panera Bread accounts had been stolen, after…
Security Affairs -
Notepad++ updater was compromised for 6 months in supply-chain attack
Notepad++’s update infrastructure was compromised for six months, allowing attackers to intercept and redirect update traffic to deliver backdoored versions to selected targets, according to the developer post and subsequent advisories. The incident began…
Ars Technica -
Chinese Hackers Hijack Notepad++ Updates for 6 Months
A notepad-plus-plus supply chain breach saw a state-sponsored threat actor hijack the Notepad++ updates for about six months, from June to December 2025. The intrusion stemmed from an infrastructure-level compromise at Notepad++’s hosting provider, enabling…
Dark Reading -
How Manifest v3 forced us to rethink Browser Guard, and why that’s a good thing
Manfest v3 forced Malwarebytes to rethink Browser Guard, shifting from live, deeply custom logic to a system built around Declarative Net Request rules. The article explains that Manifest v3 limits how extensions can run complex logic, meaning Browser Guard…
Malwarebytes -
Researchers Find 341 Malicious ClawHub Skills Stealing Data from OpenClaw Users
A security audit of 2,857 skills on ClawHub has found 341 malicious skills across multiple campaigns, according to new findings from Koi Security. The researchers, working with an OpenClaw bot named Alex, said 335 of the malicious skills use fake…
The Hacker News -
OpenClaw Bug Enables One-Click Remote Code Execution via Malicious Link
A high-severity security flaw in OpenClaw (formerly Clawdbot and Moltbot) could allow remote code execution through a crafted malicious link, with the issue tracked as CVE-2026-25253 (CVSS 8.8). The vulnerability has been fixed in version 2026.1.29, released…
-
Please Don’t Feed the Scattered Lapsus Shiny Hunters
Published on 2 February 2026, Krebs on Security reports that the data ransom gang calling itself Scattered Lapsus Shiny Hunters (SLSH) extorts victims through harassment, threats and even swatting, while notifying journalists and regulators about intrusions.…
Krebs on Security -
ShinyHunters Expands Scope of SaaS Extortion Attacks
ShinyHunters has expanded its extortion campaigns to encompass a wider array of software-as-a-service environments, employing voice phishing and credential harvesting to breach organisations. Following its Salesforce-targeted attacks last year, the group’s…
Dark Reading -
Microsoft Begins NTLM Phase-Out With Three-Stage Plan to Move Windows to Kerberos
Microsoft has announced a three-phase plan to phase out New Technology LAN Manager (NTLM) and move Windows environments toward Kerberos-based authentication. Phase 1 is already available and focuses on enhanced NTLM auditing to build visibility and control…
The Hacker News -
Ransomware attack compromised 377,000 people’s Social Security and driver’s license numbers from Texas gas station and convenience store chain
A ransomware attack in September compromised the Social Security numbers and driver’s licence details of 377,082 people linked to Gulshan Management Services, Inc., which is connected to Gulshan Enterprises and operates around 150 Handi Plus and Handi Stop…
DataBreaches -
ShinyHunters-Branded Extortion Activity Expands, Escalates
ShinyHunters-branded extortion activity is expanding and escalating, with attackers relying on social engineering to compromise cloud environments, according to SecurityWeek. Mandiant cautions that campaigns use evolved vishing and victim-branded credential…
SecurityWeek -
Hackers exploit unsecured MongoDB instances to wipe data and demand ransom
According to Flare, over 1,400 exposed MongoDB servers have been hijacked and wiped, with ransom notes left behind in the majority of cases. The report notes that 1,416 of 3,100 publicly visible servers were compromised, typically demanding around 500 USD in…
Security Affairs -
Open VSX Publisher Account Hijacked in Fresh GlassWorm Attack
On January 30, a threat actor published malicious versions of four established VS Code extensions with over 22,000 combined downloads, marking another GlassWorm campaign on the Open VSX marketplace, according to Socket notes. The extensions contained code…
SecurityWeek -
Default ICS Credentials Exploited in Destructive Attack on Polish Energy Facilities
According to CERT Polska, Poland’s CERT, the attack on the country’s energy facilities began as early as March 2025, with reconnaissance, unauthorised data access and credential-harvesting detected through July, and disruptive actions on December 29. The…
-
Scam-checking just got easier: Malwarebytes is now in ChatGPT
Scam-checking just got easier: Malwarebytes is now inside ChatGPT, making threat intelligence available directly where many users ask questions about suspicious content. The article, published on 2 February 2026, describes Malwarebytes as the first…
Malwarebytes -
IA: Dallas County to pay $600,000 to security testers arrested in 2019
Dallas County is paying $600,000 to two security testers who were arrested in 2019 while testing courthouse security for Iowa’s Judicial Branch, their lawyer says, after they sued following the incident. Gary DeMercurio and Justin Wynn were arrested on 11…
DataBreaches -
Under Pressure: Exploring the effect of legal and criminal threats on security researchers and journalists
A DataBreaches[.]net survey of security researchers and journalists in the cybersecurity space found that three-quarters of respondents reported receiving one or more threats linked to their work, with one-quarter saying they never faced threats. Overall,…
DataBreaches -
Threats: Results of a pilot survey on threats, and a new category on DataBreaches.net
According to Zack Whittaker (of TechCrunch and this week in security fame), security researchers and journalists have faced a range of threats that warranted a productive data-gathering approach. DataBreaches[.]net launched a pilot survey to raise awareness…
DataBreaches -
Cyber Insights 2026: Malware and Cyberattacks in the Age of AI
SecurityWeek’s Cyber Insights 2026 survey foresees AI-driven acceleration of malware, ransomware, and identity-led intrusions, with agentic AI capable of autonomously planning and executing attack lifecycles. The piece highlights how attackers will automate…
SecurityWeek -
⚡ Weekly Recap: Proxy Botnet, Office Zero-Day, MongoDB Ransoms, AI Hijacks & New Threats
This recap features significant cybersecurity updates from the week of February 2, 2026. Key topics include: 1. Detection of a new Proxy botnet exploiting zero-day vulnerabilities in Office products, highlighting ongoing security threats. 2. The rise of…
The Hacker News -
Over 1,400 MongoDB Databases Ransacked by Threat Actor
According to Flare, over 1,400 unprotected MongoDB databases have been ransacked, with 1,416 of 3,100 exposed instances compromised and their contents replaced by ransom notes. The compromised servers account for 45.6% of the exposed databases, while the…
SecurityWeek -
Securing the Mid-Market Across the Complete Threat Lifecycle
For mid-market organisations, security must span the complete threat lifecycle, combining prevention, protection, detection and response to curb risk without escalating cost or complexity. The piece argues that many tools become fragmented point solutions,…
The Hacker News -
Microsoft Moves Closer to Disabling NTLM
Microsoft Moves Closer to Disabling NTLM reports that the next major Windows Server and Windows releases will have the deprecated NTLM authentication protocol disabled by default, in a three‑phase process that aims to remove NTLM from Windows altogether. The…
SecurityWeek -
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 82
According to Security Affairs, the Malware Newsletter Round 82 presents a curated collection of recent malware research and related industry insights, highlighting notable trends across the international threat landscape. The issue showcases items such as…
Security Affairs -
Nation-state hack exploited hosting infrastructure to hijack Notepad++ updates
Notepad++’s updater was hijacked by nation-state attackers who compromised the hosting provider’s infrastructure to redirect update traffic to attacker-controlled servers, rather than exploiting flaws in the Notepad++ code itself. The campaign began in June…
Security Affairs -
Japan, Britain to Boost Cybersecurity and Critical Minerals Cooperation as China’s Influence Grows
Japan and Britain agreed on Saturday to accelerate cooperation on cybersecurity and the supply of critical minerals as China’s influence grows in the region. British Prime Minister Keir Starmer said his Tokyo visit comes as geopolitical, economic and…
SecurityWeek -
How fake party invitations are being used to install remote access tools
Fake party invitations are being used to coax victims into installing a remote access tool. Victims receive an informal invitation email, often from a hacked friend, prompting them to view an invitation page that redirects to download…
Malwarebytes -
Security Affairs newsletter Round 561 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 561 by Pierluigi Paganini – INTERNATIONAL EDITION was published on 2 February 2026 and presents a curated selection of security stories from Security Affairs. The international edition features items such as DOJ releases…
-
Notepad++ Supply Chain Hack Conducted by China via Hosting Provider
SecurityWeek reports that a Notepad++ supply chain incident was conducted by a China-linked threat actor via a hosting provider, targeting only certain Notepad++ customers. The attack appears to have begun in June 2025, with the hosting server compromised…
SecurityWeek -
Notepad++ Official Update Mechanism Hijacked to Deliver Malware to Select Users
The Notepad++ project says state-sponsored attackers hijacked the update mechanism to redirect update traffic to malicious servers, affecting select users. According to Notepad++ maintainer Don Ho, the attack involved an infrastructure‑level compromise that…
The Hacker News -
One Click to “God Mode”: The Critical OpenClaw Flaw That Handed Attackers Your Master Keys
On 2 February 2026, security site coverage highlights OpenClaw (formerly Moltbot and ClawdBot), an open‑source AI utility whose rising popularity has exposed a high‑severity flaw that could let an attacker exfiltrate a target’s OpenClaw instance token and…
SecurityOnline -
Cracks in the $100 Billion Alliance: Why Jensen Huang is Putting NVIDIA’s OpenAI Mega-Deal on Ice
According to The Wall Street Journal, NVIDIA’s $100 billion OpenAI deal has been placed on ice as Jensen Huang privately questions its viability and the partners recalibrate the alliance. The original Memorandum of Understanding, signed at NVIDIA’s Santa…
SecurityOnline -
The Fragmentation Trap: Why Android 16 is Struggling to Overtake Its Own Ancestors
Google has unveiled updated Android version distribution metrics, showing that as of December 1, 2025, the adoption rate of Android 16 stands at 7.5% among global active devices. Although these statistics were disseminated in late January 2026, the sampling…
SecurityOnline -
The Flip Side of Innovation: Apple Labs Are Already Prototyping a “Square” Clamshell iPhone
Apple is reportedly weighing a secondary foldable iPhone in a vertical clamshell form factor, aiming to compete with the Galaxy Z Flip and similar devices from other manufacturers. According to Bloomberg’s Mark Gurman, the project is currently “under…
SecurityOnline -
The “Illogical” Threat: Why Jensen Huang is Betting $45 Billion That ASICs Can’t Catch NVIDIA
NVIDIA chief executive Jensen Huang says ASICs cannot catch GPUs, arguing that attempting to chase AI advances with rigid silicon is illogical. In a Taipei interview, he dismissed the notion that ASICs could supplant GPUs as a fundamental threat, while…
SecurityOnline -
Linear Freedom: Apple Overhauls the Mac Store to Unleash Bespoke M5 AI Powerhouses
Apple is shaking up its Mac Store by moving away from fixed configurations to a bespoke, linear purchasing flow that mirrors the iPhone model: buyers first pick screen dimensions and finishes, then processor tiers before selecting memory and storage. The…
SecurityOnline
