News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 12 Feb· 53 articles
-
Ivanti Endpoint Manager Mobile (EPMM)2 articles this day · The Hacker News first
Ivanti EPMM Zero-Day Bugs Spark Exploit Frenzy — Again · 83% of Ivanti EPMM Exploits Linked to Single IP on Bulletproof Hosting Infrastructure
-
Ivanti EPMM Zero-Day Bugs Spark Exploit Frenzy — Again
Ivanti disclosed two critical vulnerabilities in its Endpoint Manager Mobile (EPMM) solution on 29 January, both enabling remote code execution and scoring 9.8 on the CVSS scale as CVE-2026-1281 and CVE-2026-1340. In a security advisory, the company admitted…
-
83% of Ivanti EPMM Exploits Linked to Single IP on Bulletproof Hosting Infrastructure
According to GreyNoise, a large portion of exploitation attempts against Ivanti Endpoint Manager Mobile (EPMM) were traced to a single bulletproof hosting IP address operated by PROSPERO, with 417 exploitation sessions from 8 unique source IP addresses…
-
-
Booz Allen Announces General Availability of Vellox Reverser to Automate Malware Defense
Booz Allen Hamilton today announced the general availability of Vellox Reverser, an AI-powered malware reverse engineering and threat intelligence product designed to accelerate cyber defence. The release notes that the product, built with a resilient…
Dark Reading -
SpecterOps Launches BloodHound Scentry to Accelerate the Practice of Identity Attack Path Management
According to Dark Reading, SpecterOps has launched BloodHound Scentry, a service designed to accelerate identity Attack Path Management (APM) for organisations, combining BloodHound Enterprise with SpecterOps’ tradecraft experts for tailored attack path…
Dark Reading -
Gone With the Shame: One in Two Americans Are Reluctant to Talk About Romance Scam Incidents
Gone With the Shame: One in Two Americans Are Reluctant to Talk About Romance Scam Incidents reports that 12 February 2026 marks the publicising of a survey revealing that one in two Americans are reluctant to discuss romance scam incidents. The press…
Dark Reading -
Those 'Summarize With AI' Buttons May Lying to You
Those 'Summarize With AI' buttons may be exploited to seed persistent mischief, with Microsoft uncovering AI recommendation poisoning across 31 different companies in 60 days, spanning 14 industries. The tactic relies on hidden instructions embedded in…
Dark Reading -
Copilot Studio agent security: Top 10 risks you can detect and prevent
According to Microsoft Defender Security Research Team, organisations adopting Copilot Studio agents are seeing threat actors exploit misconfigured AI workflows, with mis-sharing, unsafe orchestration, and weak authentication creating new identity and…
Microsoft -
Odido confirms massive breach; 6.2 Million customers impacted
Odido has confirmed a massive breach affecting 6.2 million customer accounts, with attackers able to access names, addresses, phone numbers, email addresses, bank account details, dates of birth, and passport or ID numbers. The company said passwords, call…
Security Affairs -
It’s 2026, but hospitals still haven’t prevented snooping in celebrities’ records
It’s 2026, but a Michigan hospital is again under the spotlight for snooping in a celebrity’s records, after Josh Clarke of Josh and Jase spoke publicly about a privacy breach in which staff allegedly entered his room while he was treated, asking for…
DataBreaches -
ApolloMD reveals that 626,540 patients were affected by May, 2025 cyberattack
ApolloMD disclosed that 626,540 patients were affected by a breach in May 2025, with the incident beginning on May 22, 2025 and occurring that day and the following day. According to ApolloMD, the Qilin ransomware gang was the first to reveal the attack on…
DataBreaches -
ApolloMD data breach impacts 626,540 people
ApolloMD disclosed a data breach that exposed the personal information of more than 626,000 individuals linked to affiliated physicians and practices, following a cyberattack in May 2025. The exposed data varied by person and included names, dates of birth,…
Security Affairs -
Kettering Adventist Health now notifying patients affected by May 2025 ransomware attack
On 20 May 2025, CNN reported that a ransomware attack caused a system-wide technology outage at Kettering Adventist Health in Ohio. Disclosures by Kettering Health said the attack was carried out by the ransomware gang InterLock, which threatened to destroy…
DataBreaches -
Google Reports State-Backed Hackers Using Gemini AI for Recon and Attack Support
On 12 February 2026, Google reported that the North Korea‑linked threat actor UNC2970 used its Gemini generative AI model to conduct reconnaissance on targets, with campaigns described as weaponising the tool to accelerate multiple phases of the cyber attack…
The Hacker News -
Your complete guide to Microsoft experiences at RSAC™ 2026 Conference
RSAC 2026 will run from 22 to 26 March in San Francisco, with Microsoft detailing experiences from Pre‑Day to the main event. Microsoft Pre‑Day kicks things off on Sunday 22 March at the Palace Hotel, featuring a keynote from Vasu Jakkal, CVP of Microsoft…
Microsoft -
Lazarus Campaign Plants Malicious Packages in npm and PyPI Ecosystems
Cybersecurity researchers have linked a new wave of malicious packages in the npm and Python Package Index (PyPI) repositories to a fake recruitment-themed campaign attributed to the North Korea‑linked Lazarus Group. The operation, codenamed graphalgo, began…
The Hacker News -
How to Eliminate the Technical Debt of Insecure AI-Assisted Software Development
AI should be treated as a collaborator to be closely monitored, not an autonomous entity to be unleashed, the piece argues, warning that without guardrails the resulting technical debt will grow. It cites that one in five organisations have suffered a…
SecurityWeek -
LummaStealer activity spikes post-law enforcement disruption
LummaStealer activity has surged again, with Bitdefender reporting a rebound in the MaaS infostealer after disruptions in 2025. The malware, active since 2022, uses affiliates, social engineering, fake cracked software and fake CAPTCHA “ClickFix” lures, with…
Security Affairs -
Outlook add-in goes rogue and steals 4,000 credentials and payment data
Researchers found a malicious Microsoft Outlook add-in, AgreeTo, that stole 4,000 sets of credentials along with credit card numbers and banking security answers. The attack occurred after an abandoned open‑source meeting scheduler tool left a Vercel URL in…
Malwarebytes -
Introducing Markdown for Agents
Cloudflare has introduced Markdown for Agents, a feature that lets AI systems request and receive pages in markdown instead of HTML, with real-time conversion at the source for enabled zones. The mechanism works by clients sending an Accept header with…
Cloudflare -
Comcast agrees to $117.5M data breach class action settlement
Comcast agrees to a $117.5 million data breach class action settlement, stemming from the Citrix Bleed data breach it suffered in 2023 and related to claims that it failed to protect customers’ information. According to the court filing, U.S. District Judge…
DataBreaches -
Child exploitation, grooming, and social media addiction claims put Meta on trial
Meta is facing two trials over child safety allegations in California and New Mexico, with the proceedings described as landmark since they are the first to reach a jury. The New Mexico case, filed by Attorney General Raúl Torrez in December 2023, centres on…
Malwarebytes -
ApolloMD Data Breach Impacts 626,000 Individuals
ApolloMD says a May 2025 cyberattack exposed the personal and health information of patients across affiliated physicians and practices, with the incident unfolding between 22 May and 23 May. The breach affected 626,000-plus individuals, with files…
SecurityWeek -
International AI Safety Report 2026: Key Facts Leaders Should Know
On 12 February 2026, SOCRadar published a blog summary of the International AI Safety Report 2026: Key Facts Leaders Should Know, noting it was developed with guidance from more than 100 independent experts. According to International AI Safety Report 2026,…
SOCRadar -
ThreatsDay Bulletin: AI Prompt RCE, Claude 0-Click, RenEngine Loader, Auto 0-Days & 25+ Stories
ThreatsDay Bulletin this week continues to show threat actors leaning on familiar, trusted tools rather than chasing flashy new exploits, with a pattern of quiet, persistent intrusions designed to stay embedded and extract value. The issue highlights a…
The Hacker News -
Apple Multiple Products4 articles this day · The Hacker News first
Apple patches zero-day flaw that could let attackers take control of devices · Apple fixed first actively exploited zero-day in 2026
-
Apple patches zero-day flaw that could let attackers take control of devices
Apple has released security updates for iPhones, iPads, Macs, Apple Watches, Apple TVs, and Safari, fixing, in particular, a zero-day flaw that is actively exploited in targeted attacks, according to Apple. The zero-day vulnerability tracked as…
-
Apple fixed first actively exploited zero-day in 2026
Apple fixed the first actively exploited zero-day in 2026, addressing a memory corruption flaw in Apple’s Dynamic Link Editor (dyld) that could allow attackers to run arbitrary code. The zero-day, tracked as CVE-2026-20700, prompted updates for iOS, iPadOS,…
-
Apple Patches iOS Zero-Day Exploited in ‘Extremely Sophisticated Attack’
According to Apple, the company has rolled out fixes for a zero-day vulnerability in iOS that has been exploited in the wild. Tracked as CVE-2026-20700, the memory corruption flaw could enable arbitrary code execution and affects the dyld system component…
-
Apple Fixes Exploited Zero-Day Affecting iOS, macOS, and Apple Devices
Apple has issued updates across iOS, iPadOS, macOS Tahoe, tvOS, watchOS and visionOS to fix a zero‑day vulnerability that it says has been exploited in sophisticated attacks. The flaw, tracked as CVE-2026-20700, is a memory corruption issue in dyld, and…
-
-
Microsoft to Enable ‘Windows Baseline Security’ With New Runtime Integrity Safeguards
Microsoft is rolling out Windows Baseline Security Mode, with runtime integrity safeguards enabled by default to ensure that only properly signed applications, drivers, and services can run. For cases where exceptions are needed, users and administrators…
SecurityWeek -
Hacktivists, State Actors, Cybercriminals Target Global Defense Industry, Google Warns
Hacktivists, state-sponsored actors, and profit-driven cybercrime groups have been identified as targeting the global defence industrial base, according to a Google Threat Intelligence Group (GTIG) analysis published on 12 February 2026. The report describes…
SecurityWeek -
Dark Web Profile: The Gentlemen Ransomware
According to SOCRadar, The Gentlemen Ransomware first appeared in 2025 and was clearly observed in active campaigns from August 2025, with indications some development activity may date back to July 2025. The group operates a double-extortion model,…
SOCRadar -
The CTEM Divide: Why 84% of Security Programs Are Falling Behind
A new 2026 market intelligence study of 128 enterprise security decision-makers highlights a CTEM divide, with 84% of organisations not implementing CTEM and therefore falling behind, while 16% have implemented it. The research shows that those using CTEM…
The Hacker News -
The Silent Assistant: Why Apple Just Pulled the Plug on Siri’s “Cerebral Transplant” for iOS 26.4
Apple appears to have pulled back on the planned March release of Siri’s “cerebral transplant” for iOS 26.4, with insiders attributing the delay to unforeseen software impediments uncovered during rigorous testing. The piece notes that the highly anticipated…
SecurityOnline -
Nucleus Raises $20 Million for Exposure Management
Nucleus Security has announced raising $20 million in a Series C funding round led by Delta-v Capital. The Sarasota, Florida-based vulnerability and exposure management company says the fresh investment will help it scale operations and deepen intelligence…
SecurityWeek -
Senegalese Data Breaches Expose Lack of 'Security Maturity'
A new ransomware group calling itself The Green Blood Group breached two servers at Senegal’s Directorate of File Automation, exposing biometric data, immigration records and other personal information for the country’s nearly 20 million residents. The…
Dark Reading -
From Search to Sale: How Google’s “Agent Commerce” Turns Gemini into Your Personal Buyer
February 12, 2026 saw Google push ahead with its so‑called Agent Commerce, a vision in which AI agents execute transactions on users’ behalf. Central to this is the Universal Commerce Protocol (UCP), an open standard designed to let AI interface with major…
SecurityOnline -
No Ads, No Paywall: Anthropic’s Bold “Sonnet 4.5” Gambit to Dethrone ChatGPT
Anthropic has expanded the Claude Free tier, allowing non-paying users to access features previously gated behind a paywall, including “File Creation,” “Connectors,” and “Skills.” The update comes as the firm aims to attract users disenchanted by…
SecurityOnline -
GTIG warns AI is aiding state actors and fuelling model theft
The Google Threat Intelligence Group (GTIG) has reported an increase in the use of artificial intelligence (AI) by threat actors to enhance the attack lifecycle, particularly in reconnaissance, social engineering, and malware development. Key findings…
Google Cloud -
Criminals are using AI website builders to clone major brands
Criminals are using AI website builders to clone major brands, creating near‑perfect lookalikes in minutes by simply obtaining a domain name and employing AI to copy layouts, colours and branding. According to Malwarebytes, the incident with…
Malwarebytes -
Multiple Endpoint Manager bugs patched by Ivanti, including remote auth bypass
Ivanti has patched more than a dozen Endpoint Manager flaws, including a high-severity auth bypass that could let attackers steal credentials remotely, tracked as CVE-2026-1603 with a CVSS score of 8.6. According to Ivanti, an authentication bypass in…
