News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 11 Feb· 67 articles
-
Nation-State Actors Exploit Notepad++ Supply Chain
Between June and December 2025, the official hosting infrastructure for Notepad++ was compromised by a state-sponsored threat group known as Lotus Blossom, according to Unit 42. The attackers redirected update traffic to attacker-controlled servers, enabling…
unit42.paloaltonetworks.com -
Once-hobbled Lumma Stealer is back with lures that are hard to resist
Lumma Stealer has returned at scale after a 2025 law-enforcement takedown disrupted thousands of its command-and-control domains, according to Bitdefender. The malware, which infected nearly 395,000 Windows computers over a two-month span before the May 2025…
Ars Technica -
North Korea's UNC1069 Hammers Crypto Firms With AI
A financially motivated North Korean threat actor is aiming at cryptocurrency firms with novel deepfake-powered social engineering strategies. According to Mandiant's blog post, Google Cloud's Mandiant this week published research concerning a threat actor…
Dark Reading -
Nevada Unveils New Statewide Data Classification Policy Months After Cyberattack
According to Associated Press, Nevada’s IT agency has rolled out a new statewide data classification policy months after a cyberattack that disrupted state services. The policy, announced by the Governor’s Technology Office, introduces four data categories:…
SecurityWeek -
Volvo Group hit in massive Conduent data breach
according to Security Affairs, a Conduent data breach has affected Volvo Group, with the breach exposing data of nearly 17,000 Volvo Group North America employees and the total impact now quoted as 25 million people. The report notes that SecurityWeek says…
Security Affairs -
First Malicious Outlook Add-In Found Stealing 4,000+ Microsoft Credentials
Cybersecurity researchers have flagged the first known malicious Microsoft Outlook add-in detected in the wild, dubbed AgreeToSteal by Koi Security, which leveraged a now-abandoned legitimate add-in domain to host a fake Microsoft login page and steal over…
The Hacker News -
The strategic SIEM buyer’s guide: Choosing an AI-ready platform for the agentic era
According to The strategic SIEM buyer’s guide: Choosing an AI-ready platform for the agentic era, legacy SIEM and fragmented toolchains can no longer keep pace with the scale, speed, and complexity of modern cyberthreats. Organisations are urged to simplify…
Microsoft -
Kimwolf Botnet Swamps Anonymity Network I2P
Kimwolf, a massive IoT botnet, has been disrupting The Invisible Internet Project (I2P), a decentralised network intended to anonymise online communications. On 3 February, I2P users reported tens of thousands of routers overwhelmed the network as many new,…
Krebs on Security -
Webinar Today: Identity Under Attack – Strengthen Your Identity Defenses
According to SecurityWeek News, the Webinar Today: Identity Under Attack – Strengthen Your Identity Defenses emphasises identity-first security as essential for protecting sensitive data, regulatory compliance, and organisational reputation. The live session…
SecurityWeek -
Reynolds ransomware uses BYOVD to disable security before encryption
Researchers have identified Reynolds ransomware, which uses the Bring Your Own Vulnerable Driver (BYOVD) technique to disable security tools before encryption. The campaign embeds a vulnerable NsecSoft driver inside its payload, dropping the NSecKrnl driver…
-
APT36 and SideCopy Launch Cross-Platform RAT Campaigns Against Indian Entities
The Hacker News reports that Indian defence sector and government-aligned organisations have been targeted by cross-platform campaigns using remote access trojans to steal data and maintain long-term access across Windows and Linux. The campaigns deploy…
The Hacker News -
GitGuardian Raises $50 Million for Secrets and Non-Human Identity Security
GitGuardian has raised $50 million in a Series C round to accelerate non-human identity governance and AI agent security, according to SecurityWeek News. The funding was led by Insight Partners with participation from Quadrille Capital, Balderton, BPI,…
SecurityWeek -
The game is over: when “free” comes at too high a price. What we know about RenEngine
In February 2026, researchers from Howler Cell announced a mass campaign distributing pirated games infected with a previously unknown malware family delivered via a loader called RenEngine, which is detected by Kaspersky solutions as…
securelist.com -
LummaStealer Is Getting a Second Life Alongside CastleLoader
Bitdefender researchers report a resurgence of LummaStealer, a widely used info-stealing malware that had previously faced significant disruption from law enforcement in 2025. This revival is attributed to its adaptive capabilities, relying on social…
bitdefender.com -
Top Cyber Industry Defenses Spike CO2 Emissions
Top Cyber Industry Defenses Spike CO2 Emissions, with the study identifying two cybersecurity areas as responsible for about 45% of the sector’s climate impact. The No. 1 environmentally harmful category is resilience, meaning backup servers and systems,…
Dark Reading -
Conduent Breach Hits Volvo Group: Nearly 17,000 Employees’ Data Exposed
The Conduent data breach affects at least 25 million individuals, up from 10 million estimated a few months ago. Conduent detected an intrusion on its network on 13 January 2025, and investigators found the hackers had access since 21 October 2024, with…
SecurityWeek -
January 2026: Instagram, BreachForums, SoundCloud Leaks, Trust Wallet Backdoor
January 2026 disclosures touched consumer platforms, enterprise identity workflows, and the cybercrime ecosystem, with reports ranging from data exfiltration to supply chain incidents. According to SOCRadar, BreachForums’ database dump exposed 323,986 users,…
SOCRadar -
Zast.AI Raises $6 Million for AI-Powered Code Security
Zast[.]AI has raised $6 million in an early-stage funding round, bringing its total raised to nearly $10 million. The pre-Series A round was led by Hillhouse Capital, according to SecurityWeek. Founded in 2024 and based in Seattle, Zast[.]AI relies on AI…
SecurityWeek -
Over 60 Software Vendors Issue Security Fixes Across OS, Cloud, and Network Platforms
Patch Tuesday saw a wave of security fixes across OS, cloud and software as vendors rush to close gaps in widely used products. Microsoft issued fixes for 59 flaws, including six actively exploited zero-days in various Windows components that could bypass…
-
Security in the Dark: Recognizing the Signs of Hidden Information
SecurityWeek’s piece, “Security in the Dark: Recognizing the Signs of Hidden Information,” argues that security failures can arise from withheld data as much as from external threats. According to SecurityWeek, sound security decisions depend on accurate and…
SecurityWeek -
Microsoft Windows2 articles this day · Malwarebytes first
February 2026 Patch Tuesday: Six Active Zero-Days & 53 Other Flaws Addressed · February 2026 Patch Tuesday includes six actively exploited zero-days
-
February 2026 Patch Tuesday: Six Active Zero-Days & 53 Other Flaws Addressed
Microsoft’s February 2026 Patch Tuesday addressed 59 vulnerabilities across Windows and multiple Microsoft products, including six actively exploited zero-day vulnerabilities, three of which were publicly disclosed before patches. The six zero-days include…
-
February 2026 Patch Tuesday includes six actively exploited zero-days
February 2026 Patch Tuesday patches 59 Microsoft CVEs, with six of them described as actively exploited zero-days. The six zero-days span Windows Shell, MSHTML, Microsoft Word, Desktop Window Manager, Windows Remote Access Connection Manager, and Windows…
-
-
GitGuardian Raises $50M Series C to Address Non-Human Identities Crisis and AI Agent Security Gap
GitGuardian has raised $50 million in a Series C funding round led by Insight Partners, with Quadrille Capital and existing investors Balderton, BPI, Eurazeo, Fly Ventures and Sapphire Ventures also participating, according to the press release. The round…
SecurityOnline -
The Strategic Case for MSSP Partnership
Security tools are widely deployed and well documented, but attackers study how they work and use bypass techniques, meaning tools themselves can become active targets. The article argues that a mature security stack requires continuous human oversight, as…
SOCRadar -
Microsoft to Refresh Windows Secure Boot Certificates in June 2026
Microsoft is set to refresh Windows Secure Boot certificates with new ones rolling out from June 2026 as the current certificates reach end of life. Since Secure Boot relies on firmware-stored certificates, the old certificates will be retired and replaced…
SecurityWeek -
Hacker Conversations: Professional Hacker Douglas Day
Douglas Day is profiled as a full-time professional hacker who also serves on the Hacker Advisory Board at HackerOne, with more than 95% of his income coming from bug bounty hacking and the remainder from occasional contracted pen testing and red teaming.…
SecurityWeek -
Cybersecurity Information Sharing Act of 2015 Reauthorized Through September 2026
The Cybersecurity Information Sharing Act of 2015 (CISA 2015) has been reauthorized through 30 September 2026 as part of a funding bill enacted on 3 February 2026. The act’s information‑sharing provisions, which had been scheduled to sunset on 30 January…
DataBreaches -
Ivanti Patches Endpoint Manager Vulnerabilities Disclosed in October 2025
Ivanti has issued patches for more than a dozen Endpoint Manager (EPM) vulnerabilities, including issues first disclosed in October 2025. The company’s advisory notes a high-severity authentication-bypass flaw, tracked as CVE-2026-1603, which could lead to…
-
Exposed Training Open the Door for Crypto-Mining in Fortune 500 Cloud Environments
According to Pentera Labs, intentionally vulnerable training applications are widely used for security education and demonstrations, but the problem lies in how they are deployed in real cloud environments. The research found that training and demo apps are…
The Hacker News -
Microsoft Patches 59 Vulnerabilities Including Six Actively Exploited Zero-Days
Microsoft released security updates addressing 59 flaws across its software, including six actively exploited zero‑days, five critical, 52 important, and two moderate in severity. Among the patched flaws, five are privilege escalation, followed by 12 remote…
The Hacker News -
Malwarebytes earns PCMag Best Tech Brand spot, scores 100% with MRG Effitas
Malwarebytes has been named one of PCMag’s Best Tech Brands for 2026, coming in at number 12 and boasting the highest Net Promoter Score of any brand on the list. The company also secured a 100% score on the first-ever MRG Effitas consumer security product…
Malwarebytes -
Spam and phishing in 2025
Spam and phishing in 2025 shows a sustained global burden, with 99% of all emails worldwide and 43.27% of all emails in the Russian web segment classified as spam, and 554,002,207 attempts to follow fraudulent links blocked by Kaspersky, alongside…
securelist.com -
SSHStalker Botnet Uses IRC C2 to Control Linux Systems via Legacy Kernel Exploits
Cybersecurity researchers have disclosed a new botnet operation named SSHStalker that uses the Internet Relay Chat C2 for command-and-control to manage Linux systems, blending IRC-driven control with a mass-compromise workflow. The toolset includes log…
The Hacker News -
SSHStalker botnet targets Linux servers with legacy exploits and SSH scanning
A new Linux botnet, SSHStalker, has infected about 7,000 systems using old 2009-era exploits, IRC bots, and mass-scanning malware. Flare researchers uncovered the operation via SSH honeypots over two months in early 2026, and investigators confirmed it as a…
Security Affairs -
Chipmaker Patch Tuesday: Over 80 Vulnerabilities Addressed by Intel and AMD
SecurityWeek currently serves up an Error 404 for the requested page, indicating that the page does not exist or has moved. The page content in question seems to be a generic SecurityWeek site skeleton rather than a specific article, with navigation and…
SecurityWeek -
Fortinet Patches High-Severity Vulnerabilities
Fortinet on Tuesday published eight advisories detailing security defects addressed across FortiAuthenticator, FortiClient for Windows, FortiGate, FortiOS and FortiSandbox, including two high-severity issues. The most severe is CVE-2025-52436, an XSS bug in…
-
The 7-Zip Trap: How a 25-Year-Old Domain Was Weaponized to Turn Your PC into a Proxy Bot
Security researchers have traced a campaign that weaponised the domain 7zip[.]com, which was registered as early as 1999, to push poisoned software and turn infected PCs into residential proxy nodes. The phishing site mimics the official interface to lure…
SecurityOnline -
The 15-Year Deadline: Microsoft Launches Massive “Secure Boot” Certificate Rotation Ahead of June 2026
According to a support advisory, Microsoft has begun a massive rotation of UEFI Secure Boot certificates ahead of their expiry in June 2026, a 15-year tenure dating back to the Windows 8 era in 2011. In the run-up to the deadline, the company has started…
SecurityOnline -
Silicon for a Century: Alphabet’s $32 Billion Debt Blitz Signals the Greatest Infrastructure Race in History
Alphabet has launched an expansive debt issuance drive to bridge a projected $185 billion CapEx gap for 2026, with aggregate fundraising reaching $32 billion according to CNBC. The plan includes diversifying beyond USD-denominated bonds into the European…
SecurityOnline -
Google-Intel Security Audit Reveals Severe TDX Vulnerability Allowing Full Compromise
According to Google, a joint security review by Google and Intel of Trust Domain Extensions (TDX) uncovered five vulnerabilities and 35 bugs in Intel’s TDX 1.5 code, leading to a published advisory and a technical 85-page report. Intel has patched the…
