News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 19 Feb· 36 articles
-
Meriden, Connecticut shuts down city internet after disruption attempt
Meriden, Connecticut shut down city internet services and public Wi‑Fi after officials reported an attempted disruption, limiting some municipal operations while police investigate, according to Dysruption Hub. The city said emergency services were not…
DataBreaches -
VShell and SparkRAT Observed in Exploitation of BeyondTrust Critical Vulnerability (CVE-2026-1731)
VShell and SparkRAT have been observed exploiting BeyondTrust CVE-2026-1731, a pre-authentication remote code execution flaw in the thin-scc-wrapper component of unpatched BeyondTrust remote support software. On 6 February 2026 BeyondTrust issued a security…
-
Supply Chain Attack Secretly Installs OpenClaw for Cline Users
The supply chain attack saw a poisoned version of Cline’s npm package, version 2.3.0, downloaded more than 4,000 times before it was removed. For about eight hours, users who installed the package received OpenClaw, a tool that isn’t traditional malware but…
Dark Reading -
Starkiller Phishing-as-a-Service Bypasses MFA
Starkiller, a phishing-as-a-service tool described this week by researchers at Abnormal AI, is marketed as enterprise‑grade phishing infrastructure for campaigns that bypass modern security systems, and it even allows users to log in with two-factor…
Dark Reading -
Abu Dhabi Finance Week Data Leak Exposes 700 Passports
Organisers of Abu Dhabi Finance Week exposed passport details and other identity data for about 700 attendees, including former British Prime Minister David Cameron and former White House communications director Anthony Scaramucci. An independent security…
Dark Reading -
Privacy breaches following the Lapu Lapu Day Festival
According to Office of the Information and Privacy Commissioner for British Columbia, between 30 April 2025 and 20 June 2025 the OIPC received breach notifications from Vancouver Coastal Health Authority, Fraser Health Authority, Providence Health Care, and…
DataBreaches -
Germany’s national rail operator Deutsche Bahn hit by a DDoS attack
Germany’s national rail operator Deutsche Bahn was hit by a large-scale DDoS attack that disrupted information and booking systems for several hours, according to SecurityAffairs. The attack began on 17 February and extended into 18 February, shutting down…
Security Affairs -
PromptSpy Android Malware Abuses Gemini AI to Automate Recent-Apps Persistence
Cybersecurity researchers have identified PromptSpy, an Android malware dubbed by ESET, as the first to abuse Google's Gemini AI within its execution flow to achieve persistence. The malware can capture lockscreen data, block uninstallation, collect device…
The Hacker News -
INTERPOL Operation Red Card 2.0 Arrests 651 in African Cybercrime Crackdown
According to INTERPOL, Operation Red Card 2.0 arrested 651 individuals and recovered more than $4.3 million in a multinational African crackdown on online scams. The eight‑week operation ran from 8 December 2025 to 30 January 2026 and targeted high‑yield…
The Hacker News -
Microsoft Patches CVE-2026-26119 Privilege Escalation in Windows Admin Center
Microsoft has disclosed a now-patched high-severity flaw in Windows Admin Center, tracked as CVE-2026-26119, which Microsoft said could allow an authorised attacker to escalate privileges over a network. The vulnerability, with a CVSS of 8.8, stems from…
-
New e-book: Establishing a proactive defense with Microsoft Security Exposure Management
New e-book: Establishing a proactive defense with Microsoft Security Exposure Management explains that effective exposure management starts with illuminating and hardening risks across the entire attack surface. The guide outlines five levels of exposure…
Microsoft -
Running OpenClaw safely: identity, isolation, and runtime risk
Self-hosted agent runtimes like OpenClaw are appearing rapidly in enterprise pilots, but they bring a blunt reality: OpenClaw includes limited built‑in security controls and can ingest untrusted text, download and execute skills from external sources, and…
Microsoft -
University of Mississippi Medical Center closes all clinics in wake of cyberattack
University of Mississippi Medical Center said a cybersecurity attack knocked multiple IT systems offline and prompted the Jackson-based system to close clinics and cancel outpatient care. According to WLBT, staff described an early-morning cyberattack that…
DataBreaches -
Connected and Compromised: When IoT Devices Turn Into Threats
The Dark Reading piece warns that the number of IoT devices in homes and workplaces is ballooning even as security awareness lags behind, exposing networks to credential theft and unauthorised access. Epifani’s research, focusing on devices such as Amazon…
Dark Reading -
U.S. CISA adds Dell RecoverPoint and GitLab flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two flaws to its Known Exploited Vulnerabilities catalog, one in GitLab Server-Side Request Forgery (SSRF) tracked as CVE-2021-22175 and one in Dell RecoverPoint for Virtual Machines…
-
French Government Says 1.2 Million Bank Accounts Exposed in Breach
According to France’s Ministry of Economy, a breach discovered on 19 February 2026 disclosed information on 1.2 million bank accounts after unauthorized access to the national bank account registry FICOBA. Investigators found that a threat actor stole…
SecurityWeek -
AI-generated passwords are a security risk
AI-generated passwords are a security risk, according to the article, because using AI to create passwords is likely to hand them to criminals who can then run dictionary attacks. Irregular tested ChatGPT, Claude and Gemini and found the passwords they…
Malwarebytes -
ThreatsDay Bulletin: OpenSSL RCE, Foxit 0-Days, Copilot Leak, AI Password Flaws & 20+ Stories
ThreatsDay Bulletin highlights OpenSSL patches for a stack buffer overflow that can enable remote code execution via CMS data, tracked as CVE-2025-15467, and notes another high-severity vulnerability, CVE-2025-11187, involving a stack-based overflow from…
-
Nearly 1 Million User Records Compromised in Figure Data Breach
Nearly 1 million user records have been compromised in a data breach at blockchain-powered lender Figure Technology Solutions, with the company confirming to TechCrunch that attackers accessed a limited number of files after an employee fell victim to a…
SecurityWeek -
Leaked Data Raises Questions About Hackers’ Claims and Moldova’s Prior Denial
Leaked data on a dark website, allegedly from a Moldovan portal, does not support the hackers’ claims about how they obtained it and raises questions about Moldova’s May 2025 denial that its network had been compromised. According to Moldova Live, the…
DataBreaches -
Data Protection Failures on Moldovan Portals Leave Citizens at Risk
DataBreaches reports that Moldova’s job applicant portal Cariere.gov[.]md left personal information exposed for years, with 7,758 folders containing names, addresses, phone numbers, citizenship status, government IDs, CVs and other data, plus nearly 19,000…
DataBreaches -
Venice Security Emerges From Stealth With $33M Funding for Privileged Access Management
Venice Security has emerged from stealth with 33 million dollars in funding for its adaptive enterprise privileged access management platform, formerly operating as Valkyrie with bases in Tel Aviv and New York. The round includes 25 million dollars in a…
SecurityWeek -
Ivanti Exploitation Surges as Zero-Day Attacks Traced Back to July 2025
Security researchers have observed exploitation of two patched Ivanti endpoint vulnerabilities, tracked as CVE-2026-1281 and CVE-2026-1340, being used to download malware including web shells, cryptocurrency miners, and a persistent backdoor. According to…
-
From Exposure to Exploitation: How AI Collapses Your Response Window
According to The Hacker News, AI-powered adversarial systems can locate over-permissioned cloud workloads within minutes, map identity relationships, and move toward execution before security teams finish their morning coffee. AI compresses reconnaissance,…
The Hacker News -
CISA alerts to critical auth bypass CVE-2026-1670 in Honeywell CCTVs
According to CISA, Honeywell CCTVs are affected by a critical authentication bypass flaw, CVE-2026-1670, with a CVSS score of 9.8, which could allow an unauthenticated attacker to change the recovery email and take over accounts or access live camera feeds.…
-
Intimate products producer Tenga spilled customer data
Tenga, a Japanese manufacturer of adult products, confirmed that a phishing attack targeted one of its employees, leading to unauthorized access to a professional email account and potentially exposing the account’s inbox contents. The company said that a…
Malwarebytes -
Severe VS Code Extension CVEs Expose Developers to RCE and File Exfiltration
A coordinated disclosure has highlighted four popular Visual Studio Code extensions—Live Server, Code Runner, Markdown Preview Enhanced, and Microsoft Live Preview—as affected by CVEs, including CVE-2025-65715, CVE-2025-65716 and CVE-2025-65717, with no…
-
Meta patents AI that could keep you posting from beyond the grave
Meta has been granted US patent 12513102B2 on 30 December 2025, described as “Simulation of a user of a social networking system using a language model,” which trains an AI on a user’s posts, comments, chats, voice messages and likes, then deploys a bot to…
Malwarebytes -
Arkanix Stealer: a C++ & Python infostealer
Arkanix Stealer is described as a C++ and Python infostealer that operated under a malware‑as‑a‑service model, providing affiliates with a control panel for configurable payloads and statistics, and a ChromElevator post‑exploitation tool delivered by the…
securelist.com -
OpenClaw Security Issues Continue as SecureClaw Open Source Tool Debuts
OpenClaw continues to reveal security failings even as its creator moves toward a new OpenAI-backed foundation, with OpenClaw’s February 14, 2026 announcement that Peter Steinberger has joined OpenAI marking the latest transition. According to SecurityWeek,…
-
Fake IPTV Apps Spread Massiv Android Malware Targeting Mobile Banking Users
Cybersecurity researchers have disclosed Massiv, a new Android banking Trojan described by ThreatFabric, designed to enable remote takeover of infected devices and fraud from victims’ banking accounts. The malware masquerades as IPTV apps to lure users and…
The Hacker News -
Irish regulator probes X after Grok allegedly generated sexual images of children
Ireland’s Data Protection Commission has opened an inquiry into X Internet Unlimited Company over Grok’s AI image generator, focusing on reports that the tool created large volumes of non-consensual and sexualised images, including content involving…
Security Affairs -
German Rail Giant Deutsche Bahn Hit by Large-Scale DDoS Attack
The German rail operator Deutsche Bahn was hit by a large-scale distributed denial-of-service attack that disrupted information and booking systems and lasted for several hours. Regular status updates show the attack began on 17 February and continued into…
SecurityWeek -
Intellexa’s Predator spyware infected Angolan journalist’s device, Amnesty reports
According to Amnesty International, Intellexa’s Predator spyware infected the iPhone of Teixeira Cândido, an Angolan journalist and press freedom advocate, after he opened a malicious link sent via WhatsApp in May 2024. The investigation found that Predator…
Security Affairs -
CRESCENTHARVEST Campaign Targets Iran Protest Supporters With RAT Malware
Cybersecurity researchers have disclosed details of a campaign dubbed CRESCENTHARVEST, likely targeting supporters of Iran’s protests to conduct information theft and long‑term espionage. The Acronis Threat Research Unit said they observed the activity after…
The Hacker News -
More Than 40% of South Africans Were Scammed in 2025
More Than 40% of South Africans Were Scammed in 2025 reports on a widespread exposure to scams across the country, based on data from the Global Anti-Scam Alliance (GASA). In the 12 months up to early 2025, 77% of South African respondents fell victim to a…
Dark Reading
